@@ -15,53 +15,53 @@ |
||
| 15 | 15 | |
| 16 | 16 | interface IOAuthProtocolHelper |
| 17 | 17 | { |
| 18 | - /** |
|
| 19 | - * @return stdClass |
|
| 20 | - * |
|
| 21 | - * @throws Exception |
|
| 22 | - * @throws CurlException |
|
| 23 | - */ |
|
| 24 | - public function getRequestToken(); |
|
| 18 | + /** |
|
| 19 | + * @return stdClass |
|
| 20 | + * |
|
| 21 | + * @throws Exception |
|
| 22 | + * @throws CurlException |
|
| 23 | + */ |
|
| 24 | + public function getRequestToken(); |
|
| 25 | 25 | |
| 26 | - /** |
|
| 27 | - * @param string $requestToken |
|
| 28 | - * |
|
| 29 | - * @return string |
|
| 30 | - */ |
|
| 31 | - public function getAuthoriseUrl($requestToken); |
|
| 26 | + /** |
|
| 27 | + * @param string $requestToken |
|
| 28 | + * |
|
| 29 | + * @return string |
|
| 30 | + */ |
|
| 31 | + public function getAuthoriseUrl($requestToken); |
|
| 32 | 32 | |
| 33 | - /** |
|
| 34 | - * @param string $oauthRequestToken |
|
| 35 | - * @param string $oauthRequestSecret |
|
| 36 | - * @param string $oauthVerifier |
|
| 37 | - * |
|
| 38 | - * @return stdClass |
|
| 39 | - * @throws CurlException |
|
| 40 | - * @throws Exception |
|
| 41 | - */ |
|
| 42 | - public function callbackCompleted($oauthRequestToken, $oauthRequestSecret, $oauthVerifier); |
|
| 33 | + /** |
|
| 34 | + * @param string $oauthRequestToken |
|
| 35 | + * @param string $oauthRequestSecret |
|
| 36 | + * @param string $oauthVerifier |
|
| 37 | + * |
|
| 38 | + * @return stdClass |
|
| 39 | + * @throws CurlException |
|
| 40 | + * @throws Exception |
|
| 41 | + */ |
|
| 42 | + public function callbackCompleted($oauthRequestToken, $oauthRequestSecret, $oauthVerifier); |
|
| 43 | 43 | |
| 44 | - /** |
|
| 45 | - * @param string $oauthAccessToken |
|
| 46 | - * @param string $oauthAccessSecret |
|
| 47 | - * |
|
| 48 | - * @return stdClass |
|
| 49 | - * @throws CurlException |
|
| 50 | - * @throws Exception |
|
| 51 | - * @throws \MediaWiki\OAuthClient\Exception |
|
| 52 | - */ |
|
| 53 | - public function getIdentityTicket($oauthAccessToken, $oauthAccessSecret); |
|
| 44 | + /** |
|
| 45 | + * @param string $oauthAccessToken |
|
| 46 | + * @param string $oauthAccessSecret |
|
| 47 | + * |
|
| 48 | + * @return stdClass |
|
| 49 | + * @throws CurlException |
|
| 50 | + * @throws Exception |
|
| 51 | + * @throws \MediaWiki\OAuthClient\Exception |
|
| 52 | + */ |
|
| 53 | + public function getIdentityTicket($oauthAccessToken, $oauthAccessSecret); |
|
| 54 | 54 | |
| 55 | - /** |
|
| 56 | - * @param array $apiParams array of parameters to send to the API |
|
| 57 | - * @param string $accessToken user's access token |
|
| 58 | - * @param string $accessSecret user's secret |
|
| 59 | - * @param string $method HTTP method |
|
| 60 | - * |
|
| 61 | - * @return stdClass |
|
| 62 | - * @throws ApplicationLogicException |
|
| 63 | - * @throws CurlException |
|
| 64 | - * @throws Exception |
|
| 65 | - */ |
|
| 66 | - public function apiCall($apiParams, $accessToken, $accessSecret, $method = 'GET'); |
|
| 55 | + /** |
|
| 56 | + * @param array $apiParams array of parameters to send to the API |
|
| 57 | + * @param string $accessToken user's access token |
|
| 58 | + * @param string $accessSecret user's secret |
|
| 59 | + * @param string $method HTTP method |
|
| 60 | + * |
|
| 61 | + * @return stdClass |
|
| 62 | + * @throws ApplicationLogicException |
|
| 63 | + * @throws CurlException |
|
| 64 | + * @throws Exception |
|
| 65 | + */ |
|
| 66 | + public function apiCall($apiParams, $accessToken, $accessSecret, $method = 'GET'); |
|
| 67 | 67 | } |
| 68 | 68 | \ No newline at end of file |
@@ -22,156 +22,156 @@ |
||
| 22 | 22 | */ |
| 23 | 23 | class XffTrustProvider implements IXffTrustProvider |
| 24 | 24 | { |
| 25 | - /** |
|
| 26 | - * Array of IP addresses which are TRUSTED proxies |
|
| 27 | - * @var string[] |
|
| 28 | - */ |
|
| 29 | - private $trustedCache; |
|
| 30 | - /** |
|
| 31 | - * Array of IP addresses which are UNTRUSTED proxies |
|
| 32 | - * @var string[] |
|
| 33 | - */ |
|
| 34 | - private $untrustedCache = array(); |
|
| 35 | - /** @var PDOStatement */ |
|
| 36 | - private $trustedQuery; |
|
| 37 | - /** |
|
| 38 | - * @var PdoDatabase |
|
| 39 | - */ |
|
| 40 | - private $database; |
|
| 41 | - |
|
| 42 | - /** |
|
| 43 | - * Creates a new instance of the trust provider |
|
| 44 | - * |
|
| 45 | - * @param string[] $squidIpList List of IP addresses to pre-approve |
|
| 46 | - * @param PdoDatabase $database |
|
| 47 | - */ |
|
| 48 | - public function __construct($squidIpList, PdoDatabase $database) |
|
| 49 | - { |
|
| 50 | - $this->trustedCache = $squidIpList; |
|
| 51 | - $this->database = $database; |
|
| 52 | - } |
|
| 53 | - |
|
| 54 | - /** |
|
| 55 | - * Returns a value if the IP address is a trusted proxy |
|
| 56 | - * |
|
| 57 | - * @param string $ip |
|
| 58 | - * |
|
| 59 | - * @return bool |
|
| 60 | - */ |
|
| 61 | - public function isTrusted($ip) |
|
| 62 | - { |
|
| 63 | - if (in_array($ip, $this->trustedCache)) { |
|
| 64 | - return true; |
|
| 65 | - } |
|
| 66 | - |
|
| 67 | - if (in_array($ip, $this->untrustedCache)) { |
|
| 68 | - return false; |
|
| 69 | - } |
|
| 70 | - |
|
| 71 | - if ($this->trustedQuery === null) { |
|
| 72 | - $query = "SELECT COUNT(id) FROM xfftrustcache WHERE ip = :ip;"; |
|
| 73 | - $this->trustedQuery = $this->database->prepare($query); |
|
| 74 | - } |
|
| 75 | - |
|
| 76 | - $this->trustedQuery->execute(array(":ip" => $ip)); |
|
| 77 | - $result = $this->trustedQuery->fetchColumn(); |
|
| 78 | - $this->trustedQuery->closeCursor(); |
|
| 79 | - |
|
| 80 | - if ($result == 0) { |
|
| 81 | - $this->untrustedCache[] = $ip; |
|
| 82 | - |
|
| 83 | - return false; |
|
| 84 | - } |
|
| 85 | - |
|
| 86 | - if ($result >= 1) { |
|
| 87 | - $this->trustedCache[] = $ip; |
|
| 88 | - |
|
| 89 | - return true; |
|
| 90 | - } |
|
| 91 | - |
|
| 92 | - // something weird has happened if we've got here. |
|
| 93 | - // default to untrusted. |
|
| 94 | - return false; |
|
| 95 | - } |
|
| 96 | - |
|
| 97 | - /** |
|
| 98 | - * Gets the last trusted IP in the proxy chain. |
|
| 99 | - * |
|
| 100 | - * @param string $ip The IP address from REMOTE_ADDR |
|
| 101 | - * @param string $proxyIp The contents of the XFF header. |
|
| 102 | - * |
|
| 103 | - * @return string Trusted source IP address |
|
| 104 | - */ |
|
| 105 | - public function getTrustedClientIp($ip, $proxyIp) |
|
| 106 | - { |
|
| 107 | - $clientIpAddress = $ip; |
|
| 108 | - if ($proxyIp) { |
|
| 109 | - $ipList = explode(",", $proxyIp); |
|
| 110 | - $ipList[] = $clientIpAddress; |
|
| 111 | - $ipList = array_reverse($ipList); |
|
| 112 | - |
|
| 113 | - foreach ($ipList as $ipNumber => $ipAddress) { |
|
| 114 | - if ($this->isTrusted(trim($ipAddress)) && $ipNumber < (count($ipList) - 1)) { |
|
| 115 | - continue; |
|
| 116 | - } |
|
| 117 | - |
|
| 118 | - $clientIpAddress = $ipAddress; |
|
| 119 | - break; |
|
| 120 | - } |
|
| 121 | - } |
|
| 122 | - |
|
| 123 | - return trim($clientIpAddress); |
|
| 124 | - } |
|
| 125 | - |
|
| 126 | - /** |
|
| 127 | - * Takes an array( "low" => "high" ) values, and returns true if $needle is in at least one of them. |
|
| 128 | - * |
|
| 129 | - * @param array $haystack |
|
| 130 | - * @param string $ip |
|
| 131 | - * |
|
| 132 | - * @return bool |
|
| 133 | - */ |
|
| 134 | - public function ipInRange($haystack, $ip) |
|
| 135 | - { |
|
| 136 | - $needle = ip2long($ip); |
|
| 137 | - |
|
| 138 | - foreach ($haystack as $low => $high) { |
|
| 139 | - if (ip2long($low) <= $needle && ip2long($high) >= $needle) { |
|
| 140 | - return true; |
|
| 141 | - } |
|
| 142 | - } |
|
| 143 | - |
|
| 144 | - return false; |
|
| 145 | - } |
|
| 146 | - |
|
| 147 | - /** |
|
| 148 | - * Explodes a CIDR range into an array of addresses |
|
| 149 | - * |
|
| 150 | - * @param string $range A CIDR-format range |
|
| 151 | - * |
|
| 152 | - * @return array An array containing every IP address in the range |
|
| 153 | - */ |
|
| 154 | - public function explodeCidr($range) |
|
| 155 | - { |
|
| 156 | - $cidrData = explode('/', $range); |
|
| 157 | - |
|
| 158 | - if (!isset($cidrData[1])) { |
|
| 159 | - return array($range); |
|
| 160 | - } |
|
| 161 | - |
|
| 162 | - $blow = ( |
|
| 163 | - str_pad(decbin(ip2long($cidrData[0])), 32, "0", STR_PAD_LEFT) & |
|
| 164 | - str_pad(str_pad("", $cidrData[1], "1"), 32, "0") |
|
| 165 | - ); |
|
| 166 | - $bhigh = ($blow | str_pad(str_pad("", $cidrData[1], "0"), 32, "1")); |
|
| 167 | - |
|
| 168 | - $list = array(); |
|
| 169 | - |
|
| 170 | - $bindecBHigh = bindec($bhigh); |
|
| 171 | - for ($x = bindec($blow); $x <= $bindecBHigh; $x++) { |
|
| 172 | - $list[] = long2ip($x); |
|
| 173 | - } |
|
| 174 | - |
|
| 175 | - return $list; |
|
| 176 | - } |
|
| 25 | + /** |
|
| 26 | + * Array of IP addresses which are TRUSTED proxies |
|
| 27 | + * @var string[] |
|
| 28 | + */ |
|
| 29 | + private $trustedCache; |
|
| 30 | + /** |
|
| 31 | + * Array of IP addresses which are UNTRUSTED proxies |
|
| 32 | + * @var string[] |
|
| 33 | + */ |
|
| 34 | + private $untrustedCache = array(); |
|
| 35 | + /** @var PDOStatement */ |
|
| 36 | + private $trustedQuery; |
|
| 37 | + /** |
|
| 38 | + * @var PdoDatabase |
|
| 39 | + */ |
|
| 40 | + private $database; |
|
| 41 | + |
|
| 42 | + /** |
|
| 43 | + * Creates a new instance of the trust provider |
|
| 44 | + * |
|
| 45 | + * @param string[] $squidIpList List of IP addresses to pre-approve |
|
| 46 | + * @param PdoDatabase $database |
|
| 47 | + */ |
|
| 48 | + public function __construct($squidIpList, PdoDatabase $database) |
|
| 49 | + { |
|
| 50 | + $this->trustedCache = $squidIpList; |
|
| 51 | + $this->database = $database; |
|
| 52 | + } |
|
| 53 | + |
|
| 54 | + /** |
|
| 55 | + * Returns a value if the IP address is a trusted proxy |
|
| 56 | + * |
|
| 57 | + * @param string $ip |
|
| 58 | + * |
|
| 59 | + * @return bool |
|
| 60 | + */ |
|
| 61 | + public function isTrusted($ip) |
|
| 62 | + { |
|
| 63 | + if (in_array($ip, $this->trustedCache)) { |
|
| 64 | + return true; |
|
| 65 | + } |
|
| 66 | + |
|
| 67 | + if (in_array($ip, $this->untrustedCache)) { |
|
| 68 | + return false; |
|
| 69 | + } |
|
| 70 | + |
|
| 71 | + if ($this->trustedQuery === null) { |
|
| 72 | + $query = "SELECT COUNT(id) FROM xfftrustcache WHERE ip = :ip;"; |
|
| 73 | + $this->trustedQuery = $this->database->prepare($query); |
|
| 74 | + } |
|
| 75 | + |
|
| 76 | + $this->trustedQuery->execute(array(":ip" => $ip)); |
|
| 77 | + $result = $this->trustedQuery->fetchColumn(); |
|
| 78 | + $this->trustedQuery->closeCursor(); |
|
| 79 | + |
|
| 80 | + if ($result == 0) { |
|
| 81 | + $this->untrustedCache[] = $ip; |
|
| 82 | + |
|
| 83 | + return false; |
|
| 84 | + } |
|
| 85 | + |
|
| 86 | + if ($result >= 1) { |
|
| 87 | + $this->trustedCache[] = $ip; |
|
| 88 | + |
|
| 89 | + return true; |
|
| 90 | + } |
|
| 91 | + |
|
| 92 | + // something weird has happened if we've got here. |
|
| 93 | + // default to untrusted. |
|
| 94 | + return false; |
|
| 95 | + } |
|
| 96 | + |
|
| 97 | + /** |
|
| 98 | + * Gets the last trusted IP in the proxy chain. |
|
| 99 | + * |
|
| 100 | + * @param string $ip The IP address from REMOTE_ADDR |
|
| 101 | + * @param string $proxyIp The contents of the XFF header. |
|
| 102 | + * |
|
| 103 | + * @return string Trusted source IP address |
|
| 104 | + */ |
|
| 105 | + public function getTrustedClientIp($ip, $proxyIp) |
|
| 106 | + { |
|
| 107 | + $clientIpAddress = $ip; |
|
| 108 | + if ($proxyIp) { |
|
| 109 | + $ipList = explode(",", $proxyIp); |
|
| 110 | + $ipList[] = $clientIpAddress; |
|
| 111 | + $ipList = array_reverse($ipList); |
|
| 112 | + |
|
| 113 | + foreach ($ipList as $ipNumber => $ipAddress) { |
|
| 114 | + if ($this->isTrusted(trim($ipAddress)) && $ipNumber < (count($ipList) - 1)) { |
|
| 115 | + continue; |
|
| 116 | + } |
|
| 117 | + |
|
| 118 | + $clientIpAddress = $ipAddress; |
|
| 119 | + break; |
|
| 120 | + } |
|
| 121 | + } |
|
| 122 | + |
|
| 123 | + return trim($clientIpAddress); |
|
| 124 | + } |
|
| 125 | + |
|
| 126 | + /** |
|
| 127 | + * Takes an array( "low" => "high" ) values, and returns true if $needle is in at least one of them. |
|
| 128 | + * |
|
| 129 | + * @param array $haystack |
|
| 130 | + * @param string $ip |
|
| 131 | + * |
|
| 132 | + * @return bool |
|
| 133 | + */ |
|
| 134 | + public function ipInRange($haystack, $ip) |
|
| 135 | + { |
|
| 136 | + $needle = ip2long($ip); |
|
| 137 | + |
|
| 138 | + foreach ($haystack as $low => $high) { |
|
| 139 | + if (ip2long($low) <= $needle && ip2long($high) >= $needle) { |
|
| 140 | + return true; |
|
| 141 | + } |
|
| 142 | + } |
|
| 143 | + |
|
| 144 | + return false; |
|
| 145 | + } |
|
| 146 | + |
|
| 147 | + /** |
|
| 148 | + * Explodes a CIDR range into an array of addresses |
|
| 149 | + * |
|
| 150 | + * @param string $range A CIDR-format range |
|
| 151 | + * |
|
| 152 | + * @return array An array containing every IP address in the range |
|
| 153 | + */ |
|
| 154 | + public function explodeCidr($range) |
|
| 155 | + { |
|
| 156 | + $cidrData = explode('/', $range); |
|
| 157 | + |
|
| 158 | + if (!isset($cidrData[1])) { |
|
| 159 | + return array($range); |
|
| 160 | + } |
|
| 161 | + |
|
| 162 | + $blow = ( |
|
| 163 | + str_pad(decbin(ip2long($cidrData[0])), 32, "0", STR_PAD_LEFT) & |
|
| 164 | + str_pad(str_pad("", $cidrData[1], "1"), 32, "0") |
|
| 165 | + ); |
|
| 166 | + $bhigh = ($blow | str_pad(str_pad("", $cidrData[1], "0"), 32, "1")); |
|
| 167 | + |
|
| 168 | + $list = array(); |
|
| 169 | + |
|
| 170 | + $bindecBHigh = bindec($bhigh); |
|
| 171 | + for ($x = bindec($blow); $x <= $bindecBHigh; $x++) { |
|
| 172 | + $list[] = long2ip($x); |
|
| 173 | + } |
|
| 174 | + |
|
| 175 | + return $list; |
|
| 176 | + } |
|
| 177 | 177 | } |
@@ -16,78 +16,78 @@ |
||
| 16 | 16 | */ |
| 17 | 17 | function smarty_modifier_timespan($input) |
| 18 | 18 | { |
| 19 | - $remaining = abs(floor($input)); |
|
| 19 | + $remaining = abs(floor($input)); |
|
| 20 | 20 | |
| 21 | - $seconds = $remaining % 60; |
|
| 22 | - $remaining = $remaining - $seconds; |
|
| 21 | + $seconds = $remaining % 60; |
|
| 22 | + $remaining = $remaining - $seconds; |
|
| 23 | 23 | |
| 24 | - $minutes = $remaining % (60 * 60); |
|
| 25 | - $remaining = $remaining - $minutes; |
|
| 26 | - $minutes /= 60; |
|
| 24 | + $minutes = $remaining % (60 * 60); |
|
| 25 | + $remaining = $remaining - $minutes; |
|
| 26 | + $minutes /= 60; |
|
| 27 | 27 | |
| 28 | - $hours = $remaining % (60 * 60 * 24); |
|
| 29 | - $remaining = $remaining - $hours; |
|
| 30 | - $hours /= (60 * 60); |
|
| 28 | + $hours = $remaining % (60 * 60 * 24); |
|
| 29 | + $remaining = $remaining - $hours; |
|
| 30 | + $hours /= (60 * 60); |
|
| 31 | 31 | |
| 32 | - $days = $remaining % (60 * 60 * 24 * 7); |
|
| 33 | - $weeks = $remaining - $days; |
|
| 34 | - $days /= (60 * 60 * 24); |
|
| 35 | - $weeks /= (60 * 60 * 24 * 7); |
|
| 32 | + $days = $remaining % (60 * 60 * 24 * 7); |
|
| 33 | + $weeks = $remaining - $days; |
|
| 34 | + $days /= (60 * 60 * 24); |
|
| 35 | + $weeks /= (60 * 60 * 24 * 7); |
|
| 36 | 36 | |
| 37 | - $stringval = ''; |
|
| 38 | - $trip = false; |
|
| 37 | + $stringval = ''; |
|
| 38 | + $trip = false; |
|
| 39 | 39 | |
| 40 | - if ($weeks > 0) { |
|
| 41 | - $stringval .= "${weeks}w "; |
|
| 42 | - } |
|
| 40 | + if ($weeks > 0) { |
|
| 41 | + $stringval .= "${weeks}w "; |
|
| 42 | + } |
|
| 43 | 43 | |
| 44 | - if ($days > 0) { |
|
| 45 | - if ($stringval !== '') { |
|
| 46 | - $trip = true; |
|
| 47 | - } |
|
| 44 | + if ($days > 0) { |
|
| 45 | + if ($stringval !== '') { |
|
| 46 | + $trip = true; |
|
| 47 | + } |
|
| 48 | 48 | |
| 49 | - $stringval .= "${days}d "; |
|
| 49 | + $stringval .= "${days}d "; |
|
| 50 | 50 | |
| 51 | - if ($trip) { |
|
| 52 | - return trim($stringval); |
|
| 53 | - } |
|
| 54 | - } |
|
| 51 | + if ($trip) { |
|
| 52 | + return trim($stringval); |
|
| 53 | + } |
|
| 54 | + } |
|
| 55 | 55 | |
| 56 | - if ($hours > 0) { |
|
| 57 | - if ($stringval !== '') { |
|
| 58 | - $trip = true; |
|
| 59 | - } |
|
| 56 | + if ($hours > 0) { |
|
| 57 | + if ($stringval !== '') { |
|
| 58 | + $trip = true; |
|
| 59 | + } |
|
| 60 | 60 | |
| 61 | - $stringval .= "${hours}h "; |
|
| 61 | + $stringval .= "${hours}h "; |
|
| 62 | 62 | |
| 63 | - if ($trip) { |
|
| 64 | - return trim($stringval); |
|
| 65 | - } |
|
| 66 | - } |
|
| 63 | + if ($trip) { |
|
| 64 | + return trim($stringval); |
|
| 65 | + } |
|
| 66 | + } |
|
| 67 | 67 | |
| 68 | - if ($minutes > 0) { |
|
| 69 | - if ($stringval !== '') { |
|
| 70 | - $trip = true; |
|
| 71 | - } |
|
| 68 | + if ($minutes > 0) { |
|
| 69 | + if ($stringval !== '') { |
|
| 70 | + $trip = true; |
|
| 71 | + } |
|
| 72 | 72 | |
| 73 | - $stringval .= "${minutes}m "; |
|
| 73 | + $stringval .= "${minutes}m "; |
|
| 74 | 74 | |
| 75 | - if ($trip) { |
|
| 76 | - return trim($stringval); |
|
| 77 | - } |
|
| 78 | - } |
|
| 75 | + if ($trip) { |
|
| 76 | + return trim($stringval); |
|
| 77 | + } |
|
| 78 | + } |
|
| 79 | 79 | |
| 80 | - if ($seconds > 0) { |
|
| 81 | - if ($stringval !== '') { |
|
| 82 | - $trip = true; |
|
| 83 | - } |
|
| 80 | + if ($seconds > 0) { |
|
| 81 | + if ($stringval !== '') { |
|
| 82 | + $trip = true; |
|
| 83 | + } |
|
| 84 | 84 | |
| 85 | - $stringval .= "${seconds}s "; |
|
| 85 | + $stringval .= "${seconds}s "; |
|
| 86 | 86 | |
| 87 | - if ($trip) { |
|
| 88 | - return trim($stringval); |
|
| 89 | - } |
|
| 90 | - } |
|
| 87 | + if ($trip) { |
|
| 88 | + return trim($stringval); |
|
| 89 | + } |
|
| 90 | + } |
|
| 91 | 91 | |
| 92 | - return trim($stringval); |
|
| 92 | + return trim($stringval); |
|
| 93 | 93 | } |
| 94 | 94 | \ No newline at end of file |
@@ -12,102 +12,102 @@ |
||
| 12 | 12 | |
| 13 | 13 | class ValidationError |
| 14 | 14 | { |
| 15 | - const NAME_EMPTY = "name_empty"; |
|
| 16 | - const NAME_TOO_LONG = "name_too_long"; |
|
| 17 | - const NAME_EXISTS = "name_exists"; |
|
| 18 | - const NAME_EXISTS_SUL = "name_exists_sul"; |
|
| 19 | - const NAME_NUMONLY = "name_numonly"; |
|
| 20 | - const NAME_INVALIDCHAR = "name_invalidchar"; |
|
| 21 | - const NAME_SANITISED = "name_sanitised"; |
|
| 22 | - const NAME_IP = "name_ip"; |
|
| 23 | - const EMAIL_EMPTY = "email_empty"; |
|
| 24 | - const EMAIL_WIKIMEDIA = "email_wikimedia"; |
|
| 25 | - const EMAIL_INVALID = "email_invalid"; |
|
| 26 | - const EMAIL_MISMATCH = "email_mismatch"; |
|
| 27 | - const OPEN_REQUEST_NAME = "open_request_name"; |
|
| 28 | - const BANNED = "banned"; |
|
| 29 | - const BANNED_TOR = "banned_tor"; |
|
| 30 | - /** |
|
| 31 | - * @var array Error text for the above |
|
| 32 | - */ |
|
| 33 | - private static $errorText = array( |
|
| 34 | - self::NAME_EMPTY => 'You\'ve not chosen a username!', |
|
| 35 | - self::NAME_TOO_LONG => 'Your chosen username is too long. Please choose a shorter one.', |
|
| 36 | - self::NAME_EXISTS => 'I\'m sorry, but the username you selected is already taken. Please try another. ' |
|
| 37 | - . 'Please note that Wikipedia automatically capitalizes the first letter of any user name, therefore ' |
|
| 38 | - . '[[User:example]] would become [[User:Example]].', |
|
| 39 | - self::NAME_EXISTS_SUL => 'I\'m sorry, but the username you selected is already taken. Please try another. ' |
|
| 40 | - . 'Please note that Wikipedia automatically capitalizes the first letter of any user name, therefore ' |
|
| 41 | - . '[[User:example]] would become [[User:Example]].', |
|
| 42 | - self::NAME_NUMONLY => 'The username you chose is invalid: it consists entirely of numbers. Please retry ' |
|
| 43 | - . 'with a valid username.', |
|
| 44 | - self::NAME_INVALIDCHAR => 'There appears to be an invalid character in your username. Please note that the ' |
|
| 45 | - . 'following characters are not allowed: <code># @ / < > [ ] | { }</code>', |
|
| 46 | - self::NAME_SANITISED => 'Your requested username has been automatically adjusted due to technical ' |
|
| 47 | - . 'restrictions. Underscores have been replaced with spaces, and the first character has been capitalised.', |
|
| 48 | - self::NAME_IP => 'The username you chose is invalid: it cannot be an IP address', |
|
| 49 | - self::EMAIL_EMPTY => 'You need to supply an email address.', |
|
| 50 | - self::EMAIL_WIKIMEDIA => 'Please provide your email address here.', |
|
| 51 | - self::EMAIL_INVALID => 'Invalid E-mail address supplied. Please check you entered it correctly.', |
|
| 52 | - self::EMAIL_MISMATCH => 'The email addresses you entered do not match. Please try again.', |
|
| 53 | - self::OPEN_REQUEST_NAME => 'There is already an open request with this name in this system.', |
|
| 54 | - self::BANNED => 'Sorry, you are currently banned from requesting accounts using this tool.', |
|
| 55 | - self::BANNED_TOR => 'Tor exit nodes are currently banned from using this tool due to excessive abuse. ' |
|
| 56 | - . 'Please note that Tor is also currently banned from editing Wikipedia.', |
|
| 57 | - ); |
|
| 58 | - /** |
|
| 59 | - * Summary of $errorCode |
|
| 60 | - * @var string |
|
| 61 | - */ |
|
| 62 | - private $errorCode; |
|
| 63 | - /** |
|
| 64 | - * Summary of $isError |
|
| 65 | - * @var bool |
|
| 66 | - */ |
|
| 67 | - private $isError; |
|
| 15 | + const NAME_EMPTY = "name_empty"; |
|
| 16 | + const NAME_TOO_LONG = "name_too_long"; |
|
| 17 | + const NAME_EXISTS = "name_exists"; |
|
| 18 | + const NAME_EXISTS_SUL = "name_exists_sul"; |
|
| 19 | + const NAME_NUMONLY = "name_numonly"; |
|
| 20 | + const NAME_INVALIDCHAR = "name_invalidchar"; |
|
| 21 | + const NAME_SANITISED = "name_sanitised"; |
|
| 22 | + const NAME_IP = "name_ip"; |
|
| 23 | + const EMAIL_EMPTY = "email_empty"; |
|
| 24 | + const EMAIL_WIKIMEDIA = "email_wikimedia"; |
|
| 25 | + const EMAIL_INVALID = "email_invalid"; |
|
| 26 | + const EMAIL_MISMATCH = "email_mismatch"; |
|
| 27 | + const OPEN_REQUEST_NAME = "open_request_name"; |
|
| 28 | + const BANNED = "banned"; |
|
| 29 | + const BANNED_TOR = "banned_tor"; |
|
| 30 | + /** |
|
| 31 | + * @var array Error text for the above |
|
| 32 | + */ |
|
| 33 | + private static $errorText = array( |
|
| 34 | + self::NAME_EMPTY => 'You\'ve not chosen a username!', |
|
| 35 | + self::NAME_TOO_LONG => 'Your chosen username is too long. Please choose a shorter one.', |
|
| 36 | + self::NAME_EXISTS => 'I\'m sorry, but the username you selected is already taken. Please try another. ' |
|
| 37 | + . 'Please note that Wikipedia automatically capitalizes the first letter of any user name, therefore ' |
|
| 38 | + . '[[User:example]] would become [[User:Example]].', |
|
| 39 | + self::NAME_EXISTS_SUL => 'I\'m sorry, but the username you selected is already taken. Please try another. ' |
|
| 40 | + . 'Please note that Wikipedia automatically capitalizes the first letter of any user name, therefore ' |
|
| 41 | + . '[[User:example]] would become [[User:Example]].', |
|
| 42 | + self::NAME_NUMONLY => 'The username you chose is invalid: it consists entirely of numbers. Please retry ' |
|
| 43 | + . 'with a valid username.', |
|
| 44 | + self::NAME_INVALIDCHAR => 'There appears to be an invalid character in your username. Please note that the ' |
|
| 45 | + . 'following characters are not allowed: <code># @ / < > [ ] | { }</code>', |
|
| 46 | + self::NAME_SANITISED => 'Your requested username has been automatically adjusted due to technical ' |
|
| 47 | + . 'restrictions. Underscores have been replaced with spaces, and the first character has been capitalised.', |
|
| 48 | + self::NAME_IP => 'The username you chose is invalid: it cannot be an IP address', |
|
| 49 | + self::EMAIL_EMPTY => 'You need to supply an email address.', |
|
| 50 | + self::EMAIL_WIKIMEDIA => 'Please provide your email address here.', |
|
| 51 | + self::EMAIL_INVALID => 'Invalid E-mail address supplied. Please check you entered it correctly.', |
|
| 52 | + self::EMAIL_MISMATCH => 'The email addresses you entered do not match. Please try again.', |
|
| 53 | + self::OPEN_REQUEST_NAME => 'There is already an open request with this name in this system.', |
|
| 54 | + self::BANNED => 'Sorry, you are currently banned from requesting accounts using this tool.', |
|
| 55 | + self::BANNED_TOR => 'Tor exit nodes are currently banned from using this tool due to excessive abuse. ' |
|
| 56 | + . 'Please note that Tor is also currently banned from editing Wikipedia.', |
|
| 57 | + ); |
|
| 58 | + /** |
|
| 59 | + * Summary of $errorCode |
|
| 60 | + * @var string |
|
| 61 | + */ |
|
| 62 | + private $errorCode; |
|
| 63 | + /** |
|
| 64 | + * Summary of $isError |
|
| 65 | + * @var bool |
|
| 66 | + */ |
|
| 67 | + private $isError; |
|
| 68 | 68 | |
| 69 | - /** |
|
| 70 | - * Summary of __construct |
|
| 71 | - * |
|
| 72 | - * @param string $errorCode |
|
| 73 | - * @param bool $isError |
|
| 74 | - */ |
|
| 75 | - public function __construct($errorCode, $isError = true) |
|
| 76 | - { |
|
| 77 | - $this->errorCode = $errorCode; |
|
| 78 | - $this->isError = $isError; |
|
| 79 | - } |
|
| 69 | + /** |
|
| 70 | + * Summary of __construct |
|
| 71 | + * |
|
| 72 | + * @param string $errorCode |
|
| 73 | + * @param bool $isError |
|
| 74 | + */ |
|
| 75 | + public function __construct($errorCode, $isError = true) |
|
| 76 | + { |
|
| 77 | + $this->errorCode = $errorCode; |
|
| 78 | + $this->isError = $isError; |
|
| 79 | + } |
|
| 80 | 80 | |
| 81 | - /** |
|
| 82 | - * Summary of getErrorCode |
|
| 83 | - * @return string |
|
| 84 | - */ |
|
| 85 | - public function getErrorCode() |
|
| 86 | - { |
|
| 87 | - return $this->errorCode; |
|
| 88 | - } |
|
| 81 | + /** |
|
| 82 | + * Summary of getErrorCode |
|
| 83 | + * @return string |
|
| 84 | + */ |
|
| 85 | + public function getErrorCode() |
|
| 86 | + { |
|
| 87 | + return $this->errorCode; |
|
| 88 | + } |
|
| 89 | 89 | |
| 90 | - /** |
|
| 91 | - * @return string |
|
| 92 | - * @throws Exception |
|
| 93 | - */ |
|
| 94 | - public function getErrorMessage() |
|
| 95 | - { |
|
| 96 | - $text = self::$errorText[$this->errorCode]; |
|
| 90 | + /** |
|
| 91 | + * @return string |
|
| 92 | + * @throws Exception |
|
| 93 | + */ |
|
| 94 | + public function getErrorMessage() |
|
| 95 | + { |
|
| 96 | + $text = self::$errorText[$this->errorCode]; |
|
| 97 | 97 | |
| 98 | - if ($text == null) { |
|
| 99 | - throw new Exception('Unknown validation error'); |
|
| 100 | - } |
|
| 98 | + if ($text == null) { |
|
| 99 | + throw new Exception('Unknown validation error'); |
|
| 100 | + } |
|
| 101 | 101 | |
| 102 | - return $text; |
|
| 103 | - } |
|
| 102 | + return $text; |
|
| 103 | + } |
|
| 104 | 104 | |
| 105 | - /** |
|
| 106 | - * Summary of isError |
|
| 107 | - * @return bool |
|
| 108 | - */ |
|
| 109 | - public function isError() |
|
| 110 | - { |
|
| 111 | - return $this->isError; |
|
| 112 | - } |
|
| 105 | + /** |
|
| 106 | + * Summary of isError |
|
| 107 | + * @return bool |
|
| 108 | + */ |
|
| 109 | + public function isError() |
|
| 110 | + { |
|
| 111 | + return $this->isError; |
|
| 112 | + } |
|
| 113 | 113 | } |
@@ -31,429 +31,429 @@ |
||
| 31 | 31 | */ |
| 32 | 32 | class RequestValidationHelper |
| 33 | 33 | { |
| 34 | - /** @var IBanHelper */ |
|
| 35 | - private $banHelper; |
|
| 36 | - /** @var PdoDatabase */ |
|
| 37 | - private $database; |
|
| 38 | - /** @var IAntiSpoofProvider */ |
|
| 39 | - private $antiSpoofProvider; |
|
| 40 | - /** @var IXffTrustProvider */ |
|
| 41 | - private $xffTrustProvider; |
|
| 42 | - /** @var HttpHelper */ |
|
| 43 | - private $httpHelper; |
|
| 44 | - /** |
|
| 45 | - * @var string |
|
| 46 | - */ |
|
| 47 | - private $mediawikiApiEndpoint; |
|
| 48 | - private $titleBlacklistEnabled; |
|
| 49 | - /** |
|
| 50 | - * @var TorExitProvider |
|
| 51 | - */ |
|
| 52 | - private $torExitProvider; |
|
| 53 | - /** |
|
| 54 | - * @var SiteConfiguration |
|
| 55 | - */ |
|
| 56 | - private $siteConfiguration; |
|
| 57 | - |
|
| 58 | - private $validationRemoteTimeout = 5000; |
|
| 59 | - |
|
| 60 | - /** |
|
| 61 | - * Summary of __construct |
|
| 62 | - * |
|
| 63 | - * @param IBanHelper $banHelper |
|
| 64 | - * @param PdoDatabase $database |
|
| 65 | - * @param IAntiSpoofProvider $antiSpoofProvider |
|
| 66 | - * @param IXffTrustProvider $xffTrustProvider |
|
| 67 | - * @param HttpHelper $httpHelper |
|
| 68 | - * @param TorExitProvider $torExitProvider |
|
| 69 | - * @param SiteConfiguration $siteConfiguration |
|
| 70 | - */ |
|
| 71 | - public function __construct( |
|
| 72 | - IBanHelper $banHelper, |
|
| 73 | - PdoDatabase $database, |
|
| 74 | - IAntiSpoofProvider $antiSpoofProvider, |
|
| 75 | - IXffTrustProvider $xffTrustProvider, |
|
| 76 | - HttpHelper $httpHelper, |
|
| 77 | - TorExitProvider $torExitProvider, |
|
| 78 | - SiteConfiguration $siteConfiguration |
|
| 79 | - ) { |
|
| 80 | - $this->banHelper = $banHelper; |
|
| 81 | - $this->database = $database; |
|
| 82 | - $this->antiSpoofProvider = $antiSpoofProvider; |
|
| 83 | - $this->xffTrustProvider = $xffTrustProvider; |
|
| 84 | - $this->httpHelper = $httpHelper; |
|
| 85 | - |
|
| 86 | - // FIXME: domains! |
|
| 87 | - /** @var Domain $domain */ |
|
| 88 | - $domain = Domain::getById(1, $database); |
|
| 89 | - |
|
| 90 | - $this->mediawikiApiEndpoint = $domain->getWikiApiPath(); |
|
| 91 | - $this->titleBlacklistEnabled = $siteConfiguration->getTitleBlacklistEnabled(); |
|
| 92 | - $this->torExitProvider = $torExitProvider; |
|
| 93 | - $this->siteConfiguration = $siteConfiguration; |
|
| 94 | - } |
|
| 95 | - |
|
| 96 | - /** |
|
| 97 | - * Summary of validateName |
|
| 98 | - * |
|
| 99 | - * @param Request $request |
|
| 100 | - * |
|
| 101 | - * @return ValidationError[] |
|
| 102 | - */ |
|
| 103 | - public function validateName(Request $request) |
|
| 104 | - { |
|
| 105 | - $errorList = array(); |
|
| 106 | - |
|
| 107 | - // ERRORS |
|
| 108 | - // name is empty |
|
| 109 | - if (trim($request->getName()) == "") { |
|
| 110 | - $errorList[ValidationError::NAME_EMPTY] = new ValidationError(ValidationError::NAME_EMPTY); |
|
| 111 | - } |
|
| 112 | - |
|
| 113 | - // name is too long |
|
| 114 | - if (mb_strlen(trim($request->getName())) > 500) { |
|
| 115 | - $errorList[ValidationError::NAME_EMPTY] = new ValidationError(ValidationError::NAME_TOO_LONG); |
|
| 116 | - } |
|
| 117 | - |
|
| 118 | - // username already exists |
|
| 119 | - if ($this->userExists($request)) { |
|
| 120 | - $errorList[ValidationError::NAME_EXISTS] = new ValidationError(ValidationError::NAME_EXISTS); |
|
| 121 | - } |
|
| 122 | - |
|
| 123 | - // username part of SUL account |
|
| 124 | - if ($this->userSulExists($request)) { |
|
| 125 | - // using same error slot as name exists - it's the same sort of error, and we probably only want to show one. |
|
| 126 | - $errorList[ValidationError::NAME_EXISTS] = new ValidationError(ValidationError::NAME_EXISTS_SUL); |
|
| 127 | - } |
|
| 128 | - |
|
| 129 | - // username is numbers |
|
| 130 | - if (preg_match("/^[0-9]+$/", $request->getName()) === 1) { |
|
| 131 | - $errorList[ValidationError::NAME_NUMONLY] = new ValidationError(ValidationError::NAME_NUMONLY); |
|
| 132 | - } |
|
| 133 | - |
|
| 134 | - // username can't contain #@/<>[]|{} |
|
| 135 | - if (preg_match("/[" . preg_quote("#@/<>[]|{}", "/") . "]/", $request->getName()) === 1) { |
|
| 136 | - $errorList[ValidationError::NAME_INVALIDCHAR] = new ValidationError(ValidationError::NAME_INVALIDCHAR); |
|
| 137 | - } |
|
| 138 | - |
|
| 139 | - // username is an IP |
|
| 140 | - if (filter_var($request->getName(), FILTER_VALIDATE_IP)) { |
|
| 141 | - $errorList[ValidationError::NAME_IP] = new ValidationError(ValidationError::NAME_IP); |
|
| 142 | - } |
|
| 143 | - |
|
| 144 | - // existing non-closed request for this name |
|
| 145 | - if ($this->nameRequestExists($request)) { |
|
| 146 | - $errorList[ValidationError::OPEN_REQUEST_NAME] = new ValidationError(ValidationError::OPEN_REQUEST_NAME); |
|
| 147 | - } |
|
| 148 | - |
|
| 149 | - return $errorList; |
|
| 150 | - } |
|
| 151 | - |
|
| 152 | - /** |
|
| 153 | - * Summary of validateEmail |
|
| 154 | - * |
|
| 155 | - * @param Request $request |
|
| 156 | - * @param string $emailConfirmation |
|
| 157 | - * |
|
| 158 | - * @return ValidationError[] |
|
| 159 | - */ |
|
| 160 | - public function validateEmail(Request $request, $emailConfirmation) |
|
| 161 | - { |
|
| 162 | - $errorList = array(); |
|
| 163 | - |
|
| 164 | - // ERRORS |
|
| 165 | - |
|
| 166 | - // email addresses must match |
|
| 167 | - if ($request->getEmail() != $emailConfirmation) { |
|
| 168 | - $errorList[ValidationError::EMAIL_MISMATCH] = new ValidationError(ValidationError::EMAIL_MISMATCH); |
|
| 169 | - } |
|
| 170 | - |
|
| 171 | - // email address must be validly formed |
|
| 172 | - if (trim($request->getEmail()) == "") { |
|
| 173 | - $errorList[ValidationError::EMAIL_EMPTY] = new ValidationError(ValidationError::EMAIL_EMPTY); |
|
| 174 | - } |
|
| 175 | - |
|
| 176 | - // email address must be validly formed |
|
| 177 | - if (!filter_var($request->getEmail(), FILTER_VALIDATE_EMAIL)) { |
|
| 178 | - if (trim($request->getEmail()) != "") { |
|
| 179 | - $errorList[ValidationError::EMAIL_INVALID] = new ValidationError(ValidationError::EMAIL_INVALID); |
|
| 180 | - } |
|
| 181 | - } |
|
| 182 | - |
|
| 183 | - // email address can't be wikimedia/wikipedia .com/org |
|
| 184 | - if (preg_match('/.*@.*wiki(m.dia|p.dia)\.(org|com)/i', $request->getEmail()) === 1) { |
|
| 185 | - $errorList[ValidationError::EMAIL_WIKIMEDIA] = new ValidationError(ValidationError::EMAIL_WIKIMEDIA); |
|
| 186 | - } |
|
| 187 | - |
|
| 188 | - return $errorList; |
|
| 189 | - } |
|
| 190 | - |
|
| 191 | - /** |
|
| 192 | - * Summary of validateOther |
|
| 193 | - * |
|
| 194 | - * @param Request $request |
|
| 195 | - * |
|
| 196 | - * @return ValidationError[] |
|
| 197 | - */ |
|
| 198 | - public function validateOther(Request $request) |
|
| 199 | - { |
|
| 200 | - $errorList = array(); |
|
| 201 | - |
|
| 202 | - $trustedIp = $this->xffTrustProvider->getTrustedClientIp($request->getIp(), |
|
| 203 | - $request->getForwardedIp()); |
|
| 204 | - |
|
| 205 | - // ERRORS |
|
| 206 | - |
|
| 207 | - // TOR nodes |
|
| 208 | - if ($this->torExitProvider->isTorExit($trustedIp)) { |
|
| 209 | - $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED_TOR); |
|
| 210 | - } |
|
| 211 | - |
|
| 212 | - // Bans |
|
| 213 | - if ($this->banHelper->isBlockBanned($request)) { |
|
| 214 | - $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED); |
|
| 215 | - } |
|
| 216 | - |
|
| 217 | - return $errorList; |
|
| 218 | - } |
|
| 219 | - |
|
| 220 | - public function postSaveValidations(Request $request) |
|
| 221 | - { |
|
| 222 | - // Antispoof check |
|
| 223 | - $this->checkAntiSpoof($request); |
|
| 224 | - |
|
| 225 | - // Blacklist check |
|
| 226 | - $this->checkTitleBlacklist($request); |
|
| 227 | - |
|
| 228 | - // Add comment for form override |
|
| 229 | - $this->formOverride($request); |
|
| 230 | - |
|
| 231 | - $bans = $this->banHelper->getBans($request); |
|
| 232 | - |
|
| 233 | - foreach ($bans as $ban) { |
|
| 234 | - if ($ban->getAction() == Ban::ACTION_DROP) { |
|
| 235 | - $request->setStatus(RequestStatus::CLOSED); |
|
| 236 | - $request->save(); |
|
| 237 | - |
|
| 238 | - Logger::closeRequest($request->getDatabase(), $request, 0, null); |
|
| 239 | - |
|
| 240 | - $comment = new Comment(); |
|
| 241 | - $comment->setDatabase($this->database); |
|
| 242 | - $comment->setRequest($request->getId()); |
|
| 243 | - $comment->setVisibility('user'); |
|
| 244 | - $comment->setUser(null); |
|
| 245 | - |
|
| 246 | - $comment->setComment('Request dropped automatically due to matching rule.'); |
|
| 247 | - $comment->save(); |
|
| 248 | - } |
|
| 249 | - |
|
| 250 | - if ($ban->getAction() == Ban::ACTION_DEFER) { |
|
| 251 | - /** @var RequestQueue|false $targetQueue */ |
|
| 252 | - $targetQueue = RequestQueue::getById($ban->getTargetQueue(), $this->database); |
|
| 253 | - |
|
| 254 | - if ($targetQueue === false ) { |
|
| 255 | - $comment = new Comment(); |
|
| 256 | - $comment->setDatabase($this->database); |
|
| 257 | - $comment->setRequest($request->getId()); |
|
| 258 | - $comment->setVisibility('user'); |
|
| 259 | - $comment->setUser(null); |
|
| 260 | - |
|
| 261 | - $comment->setComment("This request would have been deferred automatically due to a matching rule, but the queue to defer to could not be found."); |
|
| 262 | - $comment->save(); |
|
| 263 | - } |
|
| 264 | - else { |
|
| 265 | - $this->deferRequest($request, $targetQueue, 'Request deferred automatically due to matching rule.'); |
|
| 266 | - } |
|
| 267 | - } |
|
| 268 | - } |
|
| 269 | - } |
|
| 270 | - |
|
| 271 | - private function checkAntiSpoof(Request $request) |
|
| 272 | - { |
|
| 273 | - try { |
|
| 274 | - if (count($this->antiSpoofProvider->getSpoofs($request->getName())) > 0) { |
|
| 275 | - // If there were spoofs an Admin should handle the request. |
|
| 276 | - // FIXME: domains! |
|
| 277 | - $defaultQueue = RequestQueue::getDefaultQueue($this->database, 1, RequestQueue::DEFAULT_ANTISPOOF); |
|
| 278 | - $this->deferRequest($request, $defaultQueue, |
|
| 279 | - 'Request automatically deferred due to AntiSpoof hit'); |
|
| 280 | - } |
|
| 281 | - } |
|
| 282 | - catch (Exception $ex) { |
|
| 283 | - $skippable = [ |
|
| 284 | - 'Contains unassigned character', |
|
| 285 | - 'Contains incompatible mixed scripts', |
|
| 286 | - 'Does not contain any letters', |
|
| 287 | - 'Usernames must contain one or more characters', |
|
| 288 | - 'Usernames cannot contain characters from different writing systems', |
|
| 289 | - 'Usernames cannot contain the character' |
|
| 290 | - ]; |
|
| 291 | - |
|
| 292 | - $skip = false; |
|
| 293 | - |
|
| 294 | - foreach ($skippable as $s) { |
|
| 295 | - if (strpos($ex->getMessage(), 'Encountered error while getting result: ' . $s) !== false) { |
|
| 296 | - $skip = true; |
|
| 297 | - break; |
|
| 298 | - } |
|
| 299 | - } |
|
| 300 | - |
|
| 301 | - // Only log to disk if this *isn't* a "skippable" error. |
|
| 302 | - if (!$skip) { |
|
| 303 | - ExceptionHandler::logExceptionToDisk($ex, $this->siteConfiguration); |
|
| 304 | - } |
|
| 305 | - } |
|
| 306 | - } |
|
| 307 | - |
|
| 308 | - private function checkTitleBlacklist(Request $request) |
|
| 309 | - { |
|
| 310 | - if ($this->titleBlacklistEnabled == 1) { |
|
| 311 | - try { |
|
| 312 | - $apiResult = $this->httpHelper->get( |
|
| 313 | - $this->mediawikiApiEndpoint, |
|
| 314 | - array( |
|
| 315 | - 'action' => 'titleblacklist', |
|
| 316 | - 'tbtitle' => $request->getName(), |
|
| 317 | - 'tbaction' => 'new-account', |
|
| 318 | - 'tbnooverride' => true, |
|
| 319 | - 'format' => 'php', |
|
| 320 | - ), |
|
| 321 | - [], |
|
| 322 | - $this->validationRemoteTimeout |
|
| 323 | - ); |
|
| 324 | - |
|
| 325 | - $data = unserialize($apiResult); |
|
| 326 | - |
|
| 327 | - $requestIsOk = $data['titleblacklist']['result'] == "ok"; |
|
| 328 | - } |
|
| 329 | - catch (CurlException $ex) { |
|
| 330 | - ExceptionHandler::logExceptionToDisk($ex, $this->siteConfiguration); |
|
| 331 | - |
|
| 332 | - // Don't kill the request, just assume it's fine. Humans can deal with it later. |
|
| 333 | - return; |
|
| 334 | - } |
|
| 335 | - |
|
| 336 | - if (!$requestIsOk) { |
|
| 337 | - // FIXME: domains! |
|
| 338 | - $defaultQueue = RequestQueue::getDefaultQueue($this->database, 1, RequestQueue::DEFAULT_TITLEBLACKLIST); |
|
| 339 | - |
|
| 340 | - $this->deferRequest($request, $defaultQueue, |
|
| 341 | - 'Request automatically deferred due to title blacklist hit'); |
|
| 342 | - } |
|
| 343 | - } |
|
| 344 | - } |
|
| 345 | - |
|
| 346 | - private function userExists(Request $request) |
|
| 347 | - { |
|
| 348 | - try { |
|
| 349 | - $userExists = $this->httpHelper->get( |
|
| 350 | - $this->mediawikiApiEndpoint, |
|
| 351 | - array( |
|
| 352 | - 'action' => 'query', |
|
| 353 | - 'list' => 'users', |
|
| 354 | - 'ususers' => $request->getName(), |
|
| 355 | - 'format' => 'php', |
|
| 356 | - ), |
|
| 357 | - [], |
|
| 358 | - $this->validationRemoteTimeout |
|
| 359 | - ); |
|
| 360 | - |
|
| 361 | - $ue = unserialize($userExists); |
|
| 362 | - if (!isset ($ue['query']['users']['0']['missing']) && isset ($ue['query']['users']['0']['userid'])) { |
|
| 363 | - return true; |
|
| 364 | - } |
|
| 365 | - } |
|
| 366 | - catch (CurlException $ex) { |
|
| 367 | - ExceptionHandler::logExceptionToDisk($ex, $this->siteConfiguration); |
|
| 368 | - |
|
| 369 | - // Don't kill the request, just assume it's fine. Humans can deal with it later. |
|
| 370 | - return false; |
|
| 371 | - } |
|
| 372 | - |
|
| 373 | - return false; |
|
| 374 | - } |
|
| 375 | - |
|
| 376 | - private function userSulExists(Request $request) |
|
| 377 | - { |
|
| 378 | - $requestName = $request->getName(); |
|
| 379 | - |
|
| 380 | - try { |
|
| 381 | - $userExists = $this->httpHelper->get( |
|
| 382 | - $this->mediawikiApiEndpoint, |
|
| 383 | - array( |
|
| 384 | - 'action' => 'query', |
|
| 385 | - 'meta' => 'globaluserinfo', |
|
| 386 | - 'guiuser' => $requestName, |
|
| 387 | - 'format' => 'php', |
|
| 388 | - ), |
|
| 389 | - [], |
|
| 390 | - $this->validationRemoteTimeout |
|
| 391 | - ); |
|
| 392 | - |
|
| 393 | - $ue = unserialize($userExists); |
|
| 394 | - if (isset ($ue['query']['globaluserinfo']['id'])) { |
|
| 395 | - return true; |
|
| 396 | - } |
|
| 397 | - } |
|
| 398 | - catch (CurlException $ex) { |
|
| 399 | - ExceptionHandler::logExceptionToDisk($ex, $this->siteConfiguration); |
|
| 400 | - |
|
| 401 | - // Don't kill the request, just assume it's fine. Humans can deal with it later. |
|
| 402 | - return false; |
|
| 403 | - } |
|
| 404 | - |
|
| 405 | - return false; |
|
| 406 | - } |
|
| 407 | - |
|
| 408 | - /** |
|
| 409 | - * Checks if a request with this name is currently open |
|
| 410 | - * |
|
| 411 | - * @param Request $request |
|
| 412 | - * |
|
| 413 | - * @return bool |
|
| 414 | - */ |
|
| 415 | - private function nameRequestExists(Request $request) |
|
| 416 | - { |
|
| 417 | - $query = "SELECT COUNT(id) FROM request WHERE status != 'Closed' AND name = :name;"; |
|
| 418 | - $statement = $this->database->prepare($query); |
|
| 419 | - $statement->execute(array(':name' => $request->getName())); |
|
| 420 | - |
|
| 421 | - if (!$statement) { |
|
| 422 | - return false; |
|
| 423 | - } |
|
| 424 | - |
|
| 425 | - return $statement->fetchColumn() > 0; |
|
| 426 | - } |
|
| 427 | - |
|
| 428 | - private function deferRequest(Request $request, RequestQueue $targetQueue, $deferComment): void |
|
| 429 | - { |
|
| 430 | - $request->setQueue($targetQueue->getId()); |
|
| 431 | - $request->save(); |
|
| 432 | - |
|
| 433 | - $logTarget = $targetQueue->getLogName(); |
|
| 434 | - |
|
| 435 | - Logger::deferRequest($this->database, $request, $logTarget); |
|
| 436 | - |
|
| 437 | - $comment = new Comment(); |
|
| 438 | - $comment->setDatabase($this->database); |
|
| 439 | - $comment->setRequest($request->getId()); |
|
| 440 | - $comment->setVisibility('user'); |
|
| 441 | - $comment->setUser(null); |
|
| 442 | - |
|
| 443 | - $comment->setComment($deferComment); |
|
| 444 | - $comment->save(); |
|
| 445 | - } |
|
| 446 | - |
|
| 447 | - private function formOverride(Request $request) |
|
| 448 | - { |
|
| 449 | - $form = $request->getOriginFormObject(); |
|
| 450 | - if($form === null || $form->getOverrideQueue() === null) { |
|
| 451 | - return; |
|
| 452 | - } |
|
| 453 | - |
|
| 454 | - /** @var RequestQueue $targetQueue */ |
|
| 455 | - $targetQueue = RequestQueue::getById($form->getOverrideQueue(), $request->getDatabase()); |
|
| 456 | - |
|
| 457 | - $this->deferRequest($request, $targetQueue, 'Request deferred automatically due to request submission through a request form with a default queue set.'); |
|
| 458 | - } |
|
| 34 | + /** @var IBanHelper */ |
|
| 35 | + private $banHelper; |
|
| 36 | + /** @var PdoDatabase */ |
|
| 37 | + private $database; |
|
| 38 | + /** @var IAntiSpoofProvider */ |
|
| 39 | + private $antiSpoofProvider; |
|
| 40 | + /** @var IXffTrustProvider */ |
|
| 41 | + private $xffTrustProvider; |
|
| 42 | + /** @var HttpHelper */ |
|
| 43 | + private $httpHelper; |
|
| 44 | + /** |
|
| 45 | + * @var string |
|
| 46 | + */ |
|
| 47 | + private $mediawikiApiEndpoint; |
|
| 48 | + private $titleBlacklistEnabled; |
|
| 49 | + /** |
|
| 50 | + * @var TorExitProvider |
|
| 51 | + */ |
|
| 52 | + private $torExitProvider; |
|
| 53 | + /** |
|
| 54 | + * @var SiteConfiguration |
|
| 55 | + */ |
|
| 56 | + private $siteConfiguration; |
|
| 57 | + |
|
| 58 | + private $validationRemoteTimeout = 5000; |
|
| 59 | + |
|
| 60 | + /** |
|
| 61 | + * Summary of __construct |
|
| 62 | + * |
|
| 63 | + * @param IBanHelper $banHelper |
|
| 64 | + * @param PdoDatabase $database |
|
| 65 | + * @param IAntiSpoofProvider $antiSpoofProvider |
|
| 66 | + * @param IXffTrustProvider $xffTrustProvider |
|
| 67 | + * @param HttpHelper $httpHelper |
|
| 68 | + * @param TorExitProvider $torExitProvider |
|
| 69 | + * @param SiteConfiguration $siteConfiguration |
|
| 70 | + */ |
|
| 71 | + public function __construct( |
|
| 72 | + IBanHelper $banHelper, |
|
| 73 | + PdoDatabase $database, |
|
| 74 | + IAntiSpoofProvider $antiSpoofProvider, |
|
| 75 | + IXffTrustProvider $xffTrustProvider, |
|
| 76 | + HttpHelper $httpHelper, |
|
| 77 | + TorExitProvider $torExitProvider, |
|
| 78 | + SiteConfiguration $siteConfiguration |
|
| 79 | + ) { |
|
| 80 | + $this->banHelper = $banHelper; |
|
| 81 | + $this->database = $database; |
|
| 82 | + $this->antiSpoofProvider = $antiSpoofProvider; |
|
| 83 | + $this->xffTrustProvider = $xffTrustProvider; |
|
| 84 | + $this->httpHelper = $httpHelper; |
|
| 85 | + |
|
| 86 | + // FIXME: domains! |
|
| 87 | + /** @var Domain $domain */ |
|
| 88 | + $domain = Domain::getById(1, $database); |
|
| 89 | + |
|
| 90 | + $this->mediawikiApiEndpoint = $domain->getWikiApiPath(); |
|
| 91 | + $this->titleBlacklistEnabled = $siteConfiguration->getTitleBlacklistEnabled(); |
|
| 92 | + $this->torExitProvider = $torExitProvider; |
|
| 93 | + $this->siteConfiguration = $siteConfiguration; |
|
| 94 | + } |
|
| 95 | + |
|
| 96 | + /** |
|
| 97 | + * Summary of validateName |
|
| 98 | + * |
|
| 99 | + * @param Request $request |
|
| 100 | + * |
|
| 101 | + * @return ValidationError[] |
|
| 102 | + */ |
|
| 103 | + public function validateName(Request $request) |
|
| 104 | + { |
|
| 105 | + $errorList = array(); |
|
| 106 | + |
|
| 107 | + // ERRORS |
|
| 108 | + // name is empty |
|
| 109 | + if (trim($request->getName()) == "") { |
|
| 110 | + $errorList[ValidationError::NAME_EMPTY] = new ValidationError(ValidationError::NAME_EMPTY); |
|
| 111 | + } |
|
| 112 | + |
|
| 113 | + // name is too long |
|
| 114 | + if (mb_strlen(trim($request->getName())) > 500) { |
|
| 115 | + $errorList[ValidationError::NAME_EMPTY] = new ValidationError(ValidationError::NAME_TOO_LONG); |
|
| 116 | + } |
|
| 117 | + |
|
| 118 | + // username already exists |
|
| 119 | + if ($this->userExists($request)) { |
|
| 120 | + $errorList[ValidationError::NAME_EXISTS] = new ValidationError(ValidationError::NAME_EXISTS); |
|
| 121 | + } |
|
| 122 | + |
|
| 123 | + // username part of SUL account |
|
| 124 | + if ($this->userSulExists($request)) { |
|
| 125 | + // using same error slot as name exists - it's the same sort of error, and we probably only want to show one. |
|
| 126 | + $errorList[ValidationError::NAME_EXISTS] = new ValidationError(ValidationError::NAME_EXISTS_SUL); |
|
| 127 | + } |
|
| 128 | + |
|
| 129 | + // username is numbers |
|
| 130 | + if (preg_match("/^[0-9]+$/", $request->getName()) === 1) { |
|
| 131 | + $errorList[ValidationError::NAME_NUMONLY] = new ValidationError(ValidationError::NAME_NUMONLY); |
|
| 132 | + } |
|
| 133 | + |
|
| 134 | + // username can't contain #@/<>[]|{} |
|
| 135 | + if (preg_match("/[" . preg_quote("#@/<>[]|{}", "/") . "]/", $request->getName()) === 1) { |
|
| 136 | + $errorList[ValidationError::NAME_INVALIDCHAR] = new ValidationError(ValidationError::NAME_INVALIDCHAR); |
|
| 137 | + } |
|
| 138 | + |
|
| 139 | + // username is an IP |
|
| 140 | + if (filter_var($request->getName(), FILTER_VALIDATE_IP)) { |
|
| 141 | + $errorList[ValidationError::NAME_IP] = new ValidationError(ValidationError::NAME_IP); |
|
| 142 | + } |
|
| 143 | + |
|
| 144 | + // existing non-closed request for this name |
|
| 145 | + if ($this->nameRequestExists($request)) { |
|
| 146 | + $errorList[ValidationError::OPEN_REQUEST_NAME] = new ValidationError(ValidationError::OPEN_REQUEST_NAME); |
|
| 147 | + } |
|
| 148 | + |
|
| 149 | + return $errorList; |
|
| 150 | + } |
|
| 151 | + |
|
| 152 | + /** |
|
| 153 | + * Summary of validateEmail |
|
| 154 | + * |
|
| 155 | + * @param Request $request |
|
| 156 | + * @param string $emailConfirmation |
|
| 157 | + * |
|
| 158 | + * @return ValidationError[] |
|
| 159 | + */ |
|
| 160 | + public function validateEmail(Request $request, $emailConfirmation) |
|
| 161 | + { |
|
| 162 | + $errorList = array(); |
|
| 163 | + |
|
| 164 | + // ERRORS |
|
| 165 | + |
|
| 166 | + // email addresses must match |
|
| 167 | + if ($request->getEmail() != $emailConfirmation) { |
|
| 168 | + $errorList[ValidationError::EMAIL_MISMATCH] = new ValidationError(ValidationError::EMAIL_MISMATCH); |
|
| 169 | + } |
|
| 170 | + |
|
| 171 | + // email address must be validly formed |
|
| 172 | + if (trim($request->getEmail()) == "") { |
|
| 173 | + $errorList[ValidationError::EMAIL_EMPTY] = new ValidationError(ValidationError::EMAIL_EMPTY); |
|
| 174 | + } |
|
| 175 | + |
|
| 176 | + // email address must be validly formed |
|
| 177 | + if (!filter_var($request->getEmail(), FILTER_VALIDATE_EMAIL)) { |
|
| 178 | + if (trim($request->getEmail()) != "") { |
|
| 179 | + $errorList[ValidationError::EMAIL_INVALID] = new ValidationError(ValidationError::EMAIL_INVALID); |
|
| 180 | + } |
|
| 181 | + } |
|
| 182 | + |
|
| 183 | + // email address can't be wikimedia/wikipedia .com/org |
|
| 184 | + if (preg_match('/.*@.*wiki(m.dia|p.dia)\.(org|com)/i', $request->getEmail()) === 1) { |
|
| 185 | + $errorList[ValidationError::EMAIL_WIKIMEDIA] = new ValidationError(ValidationError::EMAIL_WIKIMEDIA); |
|
| 186 | + } |
|
| 187 | + |
|
| 188 | + return $errorList; |
|
| 189 | + } |
|
| 190 | + |
|
| 191 | + /** |
|
| 192 | + * Summary of validateOther |
|
| 193 | + * |
|
| 194 | + * @param Request $request |
|
| 195 | + * |
|
| 196 | + * @return ValidationError[] |
|
| 197 | + */ |
|
| 198 | + public function validateOther(Request $request) |
|
| 199 | + { |
|
| 200 | + $errorList = array(); |
|
| 201 | + |
|
| 202 | + $trustedIp = $this->xffTrustProvider->getTrustedClientIp($request->getIp(), |
|
| 203 | + $request->getForwardedIp()); |
|
| 204 | + |
|
| 205 | + // ERRORS |
|
| 206 | + |
|
| 207 | + // TOR nodes |
|
| 208 | + if ($this->torExitProvider->isTorExit($trustedIp)) { |
|
| 209 | + $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED_TOR); |
|
| 210 | + } |
|
| 211 | + |
|
| 212 | + // Bans |
|
| 213 | + if ($this->banHelper->isBlockBanned($request)) { |
|
| 214 | + $errorList[ValidationError::BANNED] = new ValidationError(ValidationError::BANNED); |
|
| 215 | + } |
|
| 216 | + |
|
| 217 | + return $errorList; |
|
| 218 | + } |
|
| 219 | + |
|
| 220 | + public function postSaveValidations(Request $request) |
|
| 221 | + { |
|
| 222 | + // Antispoof check |
|
| 223 | + $this->checkAntiSpoof($request); |
|
| 224 | + |
|
| 225 | + // Blacklist check |
|
| 226 | + $this->checkTitleBlacklist($request); |
|
| 227 | + |
|
| 228 | + // Add comment for form override |
|
| 229 | + $this->formOverride($request); |
|
| 230 | + |
|
| 231 | + $bans = $this->banHelper->getBans($request); |
|
| 232 | + |
|
| 233 | + foreach ($bans as $ban) { |
|
| 234 | + if ($ban->getAction() == Ban::ACTION_DROP) { |
|
| 235 | + $request->setStatus(RequestStatus::CLOSED); |
|
| 236 | + $request->save(); |
|
| 237 | + |
|
| 238 | + Logger::closeRequest($request->getDatabase(), $request, 0, null); |
|
| 239 | + |
|
| 240 | + $comment = new Comment(); |
|
| 241 | + $comment->setDatabase($this->database); |
|
| 242 | + $comment->setRequest($request->getId()); |
|
| 243 | + $comment->setVisibility('user'); |
|
| 244 | + $comment->setUser(null); |
|
| 245 | + |
|
| 246 | + $comment->setComment('Request dropped automatically due to matching rule.'); |
|
| 247 | + $comment->save(); |
|
| 248 | + } |
|
| 249 | + |
|
| 250 | + if ($ban->getAction() == Ban::ACTION_DEFER) { |
|
| 251 | + /** @var RequestQueue|false $targetQueue */ |
|
| 252 | + $targetQueue = RequestQueue::getById($ban->getTargetQueue(), $this->database); |
|
| 253 | + |
|
| 254 | + if ($targetQueue === false ) { |
|
| 255 | + $comment = new Comment(); |
|
| 256 | + $comment->setDatabase($this->database); |
|
| 257 | + $comment->setRequest($request->getId()); |
|
| 258 | + $comment->setVisibility('user'); |
|
| 259 | + $comment->setUser(null); |
|
| 260 | + |
|
| 261 | + $comment->setComment("This request would have been deferred automatically due to a matching rule, but the queue to defer to could not be found."); |
|
| 262 | + $comment->save(); |
|
| 263 | + } |
|
| 264 | + else { |
|
| 265 | + $this->deferRequest($request, $targetQueue, 'Request deferred automatically due to matching rule.'); |
|
| 266 | + } |
|
| 267 | + } |
|
| 268 | + } |
|
| 269 | + } |
|
| 270 | + |
|
| 271 | + private function checkAntiSpoof(Request $request) |
|
| 272 | + { |
|
| 273 | + try { |
|
| 274 | + if (count($this->antiSpoofProvider->getSpoofs($request->getName())) > 0) { |
|
| 275 | + // If there were spoofs an Admin should handle the request. |
|
| 276 | + // FIXME: domains! |
|
| 277 | + $defaultQueue = RequestQueue::getDefaultQueue($this->database, 1, RequestQueue::DEFAULT_ANTISPOOF); |
|
| 278 | + $this->deferRequest($request, $defaultQueue, |
|
| 279 | + 'Request automatically deferred due to AntiSpoof hit'); |
|
| 280 | + } |
|
| 281 | + } |
|
| 282 | + catch (Exception $ex) { |
|
| 283 | + $skippable = [ |
|
| 284 | + 'Contains unassigned character', |
|
| 285 | + 'Contains incompatible mixed scripts', |
|
| 286 | + 'Does not contain any letters', |
|
| 287 | + 'Usernames must contain one or more characters', |
|
| 288 | + 'Usernames cannot contain characters from different writing systems', |
|
| 289 | + 'Usernames cannot contain the character' |
|
| 290 | + ]; |
|
| 291 | + |
|
| 292 | + $skip = false; |
|
| 293 | + |
|
| 294 | + foreach ($skippable as $s) { |
|
| 295 | + if (strpos($ex->getMessage(), 'Encountered error while getting result: ' . $s) !== false) { |
|
| 296 | + $skip = true; |
|
| 297 | + break; |
|
| 298 | + } |
|
| 299 | + } |
|
| 300 | + |
|
| 301 | + // Only log to disk if this *isn't* a "skippable" error. |
|
| 302 | + if (!$skip) { |
|
| 303 | + ExceptionHandler::logExceptionToDisk($ex, $this->siteConfiguration); |
|
| 304 | + } |
|
| 305 | + } |
|
| 306 | + } |
|
| 307 | + |
|
| 308 | + private function checkTitleBlacklist(Request $request) |
|
| 309 | + { |
|
| 310 | + if ($this->titleBlacklistEnabled == 1) { |
|
| 311 | + try { |
|
| 312 | + $apiResult = $this->httpHelper->get( |
|
| 313 | + $this->mediawikiApiEndpoint, |
|
| 314 | + array( |
|
| 315 | + 'action' => 'titleblacklist', |
|
| 316 | + 'tbtitle' => $request->getName(), |
|
| 317 | + 'tbaction' => 'new-account', |
|
| 318 | + 'tbnooverride' => true, |
|
| 319 | + 'format' => 'php', |
|
| 320 | + ), |
|
| 321 | + [], |
|
| 322 | + $this->validationRemoteTimeout |
|
| 323 | + ); |
|
| 324 | + |
|
| 325 | + $data = unserialize($apiResult); |
|
| 326 | + |
|
| 327 | + $requestIsOk = $data['titleblacklist']['result'] == "ok"; |
|
| 328 | + } |
|
| 329 | + catch (CurlException $ex) { |
|
| 330 | + ExceptionHandler::logExceptionToDisk($ex, $this->siteConfiguration); |
|
| 331 | + |
|
| 332 | + // Don't kill the request, just assume it's fine. Humans can deal with it later. |
|
| 333 | + return; |
|
| 334 | + } |
|
| 335 | + |
|
| 336 | + if (!$requestIsOk) { |
|
| 337 | + // FIXME: domains! |
|
| 338 | + $defaultQueue = RequestQueue::getDefaultQueue($this->database, 1, RequestQueue::DEFAULT_TITLEBLACKLIST); |
|
| 339 | + |
|
| 340 | + $this->deferRequest($request, $defaultQueue, |
|
| 341 | + 'Request automatically deferred due to title blacklist hit'); |
|
| 342 | + } |
|
| 343 | + } |
|
| 344 | + } |
|
| 345 | + |
|
| 346 | + private function userExists(Request $request) |
|
| 347 | + { |
|
| 348 | + try { |
|
| 349 | + $userExists = $this->httpHelper->get( |
|
| 350 | + $this->mediawikiApiEndpoint, |
|
| 351 | + array( |
|
| 352 | + 'action' => 'query', |
|
| 353 | + 'list' => 'users', |
|
| 354 | + 'ususers' => $request->getName(), |
|
| 355 | + 'format' => 'php', |
|
| 356 | + ), |
|
| 357 | + [], |
|
| 358 | + $this->validationRemoteTimeout |
|
| 359 | + ); |
|
| 360 | + |
|
| 361 | + $ue = unserialize($userExists); |
|
| 362 | + if (!isset ($ue['query']['users']['0']['missing']) && isset ($ue['query']['users']['0']['userid'])) { |
|
| 363 | + return true; |
|
| 364 | + } |
|
| 365 | + } |
|
| 366 | + catch (CurlException $ex) { |
|
| 367 | + ExceptionHandler::logExceptionToDisk($ex, $this->siteConfiguration); |
|
| 368 | + |
|
| 369 | + // Don't kill the request, just assume it's fine. Humans can deal with it later. |
|
| 370 | + return false; |
|
| 371 | + } |
|
| 372 | + |
|
| 373 | + return false; |
|
| 374 | + } |
|
| 375 | + |
|
| 376 | + private function userSulExists(Request $request) |
|
| 377 | + { |
|
| 378 | + $requestName = $request->getName(); |
|
| 379 | + |
|
| 380 | + try { |
|
| 381 | + $userExists = $this->httpHelper->get( |
|
| 382 | + $this->mediawikiApiEndpoint, |
|
| 383 | + array( |
|
| 384 | + 'action' => 'query', |
|
| 385 | + 'meta' => 'globaluserinfo', |
|
| 386 | + 'guiuser' => $requestName, |
|
| 387 | + 'format' => 'php', |
|
| 388 | + ), |
|
| 389 | + [], |
|
| 390 | + $this->validationRemoteTimeout |
|
| 391 | + ); |
|
| 392 | + |
|
| 393 | + $ue = unserialize($userExists); |
|
| 394 | + if (isset ($ue['query']['globaluserinfo']['id'])) { |
|
| 395 | + return true; |
|
| 396 | + } |
|
| 397 | + } |
|
| 398 | + catch (CurlException $ex) { |
|
| 399 | + ExceptionHandler::logExceptionToDisk($ex, $this->siteConfiguration); |
|
| 400 | + |
|
| 401 | + // Don't kill the request, just assume it's fine. Humans can deal with it later. |
|
| 402 | + return false; |
|
| 403 | + } |
|
| 404 | + |
|
| 405 | + return false; |
|
| 406 | + } |
|
| 407 | + |
|
| 408 | + /** |
|
| 409 | + * Checks if a request with this name is currently open |
|
| 410 | + * |
|
| 411 | + * @param Request $request |
|
| 412 | + * |
|
| 413 | + * @return bool |
|
| 414 | + */ |
|
| 415 | + private function nameRequestExists(Request $request) |
|
| 416 | + { |
|
| 417 | + $query = "SELECT COUNT(id) FROM request WHERE status != 'Closed' AND name = :name;"; |
|
| 418 | + $statement = $this->database->prepare($query); |
|
| 419 | + $statement->execute(array(':name' => $request->getName())); |
|
| 420 | + |
|
| 421 | + if (!$statement) { |
|
| 422 | + return false; |
|
| 423 | + } |
|
| 424 | + |
|
| 425 | + return $statement->fetchColumn() > 0; |
|
| 426 | + } |
|
| 427 | + |
|
| 428 | + private function deferRequest(Request $request, RequestQueue $targetQueue, $deferComment): void |
|
| 429 | + { |
|
| 430 | + $request->setQueue($targetQueue->getId()); |
|
| 431 | + $request->save(); |
|
| 432 | + |
|
| 433 | + $logTarget = $targetQueue->getLogName(); |
|
| 434 | + |
|
| 435 | + Logger::deferRequest($this->database, $request, $logTarget); |
|
| 436 | + |
|
| 437 | + $comment = new Comment(); |
|
| 438 | + $comment->setDatabase($this->database); |
|
| 439 | + $comment->setRequest($request->getId()); |
|
| 440 | + $comment->setVisibility('user'); |
|
| 441 | + $comment->setUser(null); |
|
| 442 | + |
|
| 443 | + $comment->setComment($deferComment); |
|
| 444 | + $comment->save(); |
|
| 445 | + } |
|
| 446 | + |
|
| 447 | + private function formOverride(Request $request) |
|
| 448 | + { |
|
| 449 | + $form = $request->getOriginFormObject(); |
|
| 450 | + if($form === null || $form->getOverrideQueue() === null) { |
|
| 451 | + return; |
|
| 452 | + } |
|
| 453 | + |
|
| 454 | + /** @var RequestQueue $targetQueue */ |
|
| 455 | + $targetQueue = RequestQueue::getById($form->getOverrideQueue(), $request->getDatabase()); |
|
| 456 | + |
|
| 457 | + $this->deferRequest($request, $targetQueue, 'Request deferred automatically due to request submission through a request form with a default queue set.'); |
|
| 458 | + } |
|
| 459 | 459 | } |
@@ -251,7 +251,7 @@ discard block |
||
| 251 | 251 | /** @var RequestQueue|false $targetQueue */ |
| 252 | 252 | $targetQueue = RequestQueue::getById($ban->getTargetQueue(), $this->database); |
| 253 | 253 | |
| 254 | - if ($targetQueue === false ) { |
|
| 254 | + if ($targetQueue === false) { |
|
| 255 | 255 | $comment = new Comment(); |
| 256 | 256 | $comment->setDatabase($this->database); |
| 257 | 257 | $comment->setRequest($request->getId()); |
@@ -447,7 +447,7 @@ discard block |
||
| 447 | 447 | private function formOverride(Request $request) |
| 448 | 448 | { |
| 449 | 449 | $form = $request->getOriginFormObject(); |
| 450 | - if($form === null || $form->getOverrideQueue() === null) { |
|
| 450 | + if ($form === null || $form->getOverrideQueue() === null) { |
|
| 451 | 451 | return; |
| 452 | 452 | } |
| 453 | 453 | |
@@ -260,8 +260,7 @@ |
||
| 260 | 260 | |
| 261 | 261 | $comment->setComment("This request would have been deferred automatically due to a matching rule, but the queue to defer to could not be found."); |
| 262 | 262 | $comment->save(); |
| 263 | - } |
|
| 264 | - else { |
|
| 263 | + } else { |
|
| 265 | 264 | $this->deferRequest($request, $targetQueue, 'Request deferred automatically due to matching rule.'); |
| 266 | 265 | } |
| 267 | 266 | } |
@@ -82,8 +82,7 @@ |
||
| 82 | 82 | |
| 83 | 83 | if ($siteConfiguration->getTitleBlacklistEnabled()) { |
| 84 | 84 | $page->setBlacklistHelper(new BlacklistHelper($page->getHttpHelper(), $database, $siteConfiguration)); |
| 85 | - } |
|
| 86 | - else { |
|
| 85 | + } else { |
|
| 87 | 86 | $page->setBlacklistHelper(new FakeBlacklistHelper()); |
| 88 | 87 | } |
| 89 | 88 | |
@@ -33,208 +33,208 @@ |
||
| 33 | 33 | */ |
| 34 | 34 | class WebStart extends ApplicationBase |
| 35 | 35 | { |
| 36 | - /** |
|
| 37 | - * @var IRequestRouter $requestRouter The request router to use. Note that different entry points have different |
|
| 38 | - * routers and hence different URL mappings |
|
| 39 | - */ |
|
| 40 | - private $requestRouter; |
|
| 41 | - /** |
|
| 42 | - * @var bool $isPublic Determines whether to use public interface objects or internal interface objects |
|
| 43 | - */ |
|
| 44 | - private bool $isPublic = false; |
|
| 45 | - |
|
| 46 | - /** |
|
| 47 | - * WebStart constructor. |
|
| 48 | - * |
|
| 49 | - * @param SiteConfiguration $configuration The site configuration |
|
| 50 | - * @param IRequestRouter $router The request router to use |
|
| 51 | - */ |
|
| 52 | - public function __construct(SiteConfiguration $configuration, IRequestRouter $router) |
|
| 53 | - { |
|
| 54 | - parent::__construct($configuration); |
|
| 55 | - |
|
| 56 | - $this->requestRouter = $router; |
|
| 57 | - } |
|
| 58 | - |
|
| 59 | - /** |
|
| 60 | - * @param ITask $page |
|
| 61 | - * @param SiteConfiguration $siteConfiguration |
|
| 62 | - * @param PdoDatabase $database |
|
| 63 | - * |
|
| 64 | - * @return void |
|
| 65 | - */ |
|
| 66 | - protected function setupHelpers( |
|
| 67 | - ITask $page, |
|
| 68 | - SiteConfiguration $siteConfiguration, |
|
| 69 | - PdoDatabase $database |
|
| 70 | - ) { |
|
| 71 | - parent::setupHelpers($page, $siteConfiguration, $database); |
|
| 72 | - |
|
| 73 | - if ($page instanceof PageBase) { |
|
| 74 | - $page->setTokenManager(new TokenManager()); |
|
| 75 | - $page->setCspManager(new ContentSecurityPolicyManager($siteConfiguration)); |
|
| 76 | - |
|
| 77 | - if ($page instanceof InternalPageBase) { |
|
| 78 | - $page->setTypeAheadHelper(new TypeAheadHelper()); |
|
| 79 | - |
|
| 80 | - $identificationVerifier = new IdentificationVerifier($page->getHttpHelper(), $siteConfiguration, $database); |
|
| 81 | - $page->setSecurityManager(new SecurityManager($identificationVerifier, new RoleConfiguration())); |
|
| 82 | - |
|
| 83 | - if ($siteConfiguration->getTitleBlacklistEnabled()) { |
|
| 84 | - $page->setBlacklistHelper(new BlacklistHelper($page->getHttpHelper(), $database, $siteConfiguration)); |
|
| 85 | - } |
|
| 86 | - else { |
|
| 87 | - $page->setBlacklistHelper(new FakeBlacklistHelper()); |
|
| 88 | - } |
|
| 89 | - |
|
| 90 | - $page->setDomainAccessManager(new DomainAccessManager($page->getSecurityManager())); |
|
| 91 | - } |
|
| 92 | - } |
|
| 93 | - } |
|
| 94 | - |
|
| 95 | - /** |
|
| 96 | - * Application entry point. |
|
| 97 | - * |
|
| 98 | - * Sets up the environment and runs the application, performing any global cleanup operations when done. |
|
| 99 | - */ |
|
| 100 | - public function run() |
|
| 101 | - { |
|
| 102 | - try { |
|
| 103 | - if ($this->setupEnvironment()) { |
|
| 104 | - $this->main(); |
|
| 105 | - } |
|
| 106 | - } |
|
| 107 | - catch (EnvironmentException $ex) { |
|
| 108 | - ob_end_clean(); |
|
| 109 | - print Offline::getOfflineMessage($this->isPublic(), $this->getConfiguration(), $ex->getMessage()); |
|
| 110 | - } |
|
| 111 | - /** @noinspection PhpRedundantCatchClauseInspection */ |
|
| 112 | - catch (ReadableException $ex) { |
|
| 113 | - ob_end_clean(); |
|
| 114 | - print $ex->getReadableError(); |
|
| 115 | - } |
|
| 116 | - finally { |
|
| 117 | - $this->cleanupEnvironment(); |
|
| 118 | - } |
|
| 119 | - } |
|
| 120 | - |
|
| 121 | - /** |
|
| 122 | - * Environment setup |
|
| 123 | - * |
|
| 124 | - * This method initialises the tool environment. If the tool cannot be initialised correctly, it will return false |
|
| 125 | - * and shut down prematurely. |
|
| 126 | - * |
|
| 127 | - * @return bool |
|
| 128 | - * @throws EnvironmentException |
|
| 129 | - */ |
|
| 130 | - protected function setupEnvironment() |
|
| 131 | - { |
|
| 132 | - // initialise global exception handler |
|
| 133 | - set_exception_handler(array(ExceptionHandler::class, 'exceptionHandler')); |
|
| 134 | - set_error_handler(array(ExceptionHandler::class, 'errorHandler'), E_RECOVERABLE_ERROR); |
|
| 135 | - |
|
| 136 | - // start output buffering if necessary |
|
| 137 | - if (ob_get_level() === 0) { |
|
| 138 | - ob_start(); |
|
| 139 | - } |
|
| 140 | - |
|
| 141 | - // initialise super-global providers |
|
| 142 | - WebRequest::setGlobalStateProvider(new GlobalStateProvider()); |
|
| 143 | - |
|
| 144 | - if (Offline::isOffline($this->getConfiguration())) { |
|
| 145 | - print Offline::getOfflineMessage($this->isPublic(), $this->getConfiguration()); |
|
| 146 | - ob_end_flush(); |
|
| 147 | - |
|
| 148 | - return false; |
|
| 149 | - } |
|
| 150 | - |
|
| 151 | - // Call parent setup |
|
| 152 | - if (!parent::setupEnvironment()) { |
|
| 153 | - return false; |
|
| 154 | - } |
|
| 155 | - |
|
| 156 | - // Start up sessions |
|
| 157 | - ini_set('session.cookie_path', $this->getConfiguration()->getCookiePath()); |
|
| 158 | - ini_set('session.name', $this->getConfiguration()->getCookieSessionName()); |
|
| 159 | - Session::start(); |
|
| 160 | - |
|
| 161 | - // Check the user is allowed to be logged in still. This must be before we call any user-loading functions and |
|
| 162 | - // get the current user cached. |
|
| 163 | - // I'm not sure if this function call being here is particularly a good thing, but it's part of starting up a |
|
| 164 | - // session I suppose. |
|
| 165 | - $this->checkForceLogout(); |
|
| 166 | - |
|
| 167 | - // environment initialised! |
|
| 168 | - return true; |
|
| 169 | - } |
|
| 170 | - |
|
| 171 | - /** |
|
| 172 | - * Main application logic |
|
| 173 | - */ |
|
| 174 | - protected function main() |
|
| 175 | - { |
|
| 176 | - // Get the right route for the request |
|
| 177 | - $page = $this->requestRouter->route(); |
|
| 178 | - |
|
| 179 | - $siteConfiguration = $this->getConfiguration(); |
|
| 180 | - $database = PdoDatabase::getDatabaseConnection($this->getConfiguration()); |
|
| 181 | - |
|
| 182 | - $this->setupHelpers($page, $siteConfiguration, $database); |
|
| 183 | - |
|
| 184 | - // run the route code for the request. |
|
| 185 | - $page->execute(); |
|
| 186 | - } |
|
| 187 | - |
|
| 188 | - /** |
|
| 189 | - * Any cleanup tasks should go here |
|
| 190 | - * |
|
| 191 | - * Note that we need to be very careful here, as exceptions may have been thrown and handled. |
|
| 192 | - * This should *only* be for cleaning up, no logic should go here. |
|
| 193 | - */ |
|
| 194 | - protected function cleanupEnvironment() |
|
| 195 | - { |
|
| 196 | - // Clean up anything we splurged after sending the page. |
|
| 197 | - if (ob_get_level() > 0) { |
|
| 198 | - for ($i = ob_get_level(); $i > 0; $i--) { |
|
| 199 | - ob_end_clean(); |
|
| 200 | - } |
|
| 201 | - } |
|
| 202 | - } |
|
| 203 | - |
|
| 204 | - private function checkForceLogout() |
|
| 205 | - { |
|
| 206 | - $database = PdoDatabase::getDatabaseConnection($this->getConfiguration()); |
|
| 207 | - |
|
| 208 | - $sessionUserId = WebRequest::getSessionUserId(); |
|
| 209 | - iF ($sessionUserId === null) { |
|
| 210 | - return; |
|
| 211 | - } |
|
| 212 | - |
|
| 213 | - // Note, User::getCurrent() caches it's result, which we *really* don't want to trigger. |
|
| 214 | - $currentUser = User::getById($sessionUserId, $database); |
|
| 215 | - |
|
| 216 | - if ($currentUser === false) { |
|
| 217 | - // Umm... this user has a session cookie with a userId set, but no user exists... |
|
| 218 | - Session::restart(); |
|
| 219 | - |
|
| 220 | - $currentUser = User::getCurrent($database); |
|
| 221 | - } |
|
| 222 | - |
|
| 223 | - if ($currentUser->getForceLogout()) { |
|
| 224 | - Session::restart(); |
|
| 225 | - |
|
| 226 | - $currentUser->setForceLogout(false); |
|
| 227 | - $currentUser->save(); |
|
| 228 | - } |
|
| 229 | - } |
|
| 230 | - |
|
| 231 | - public function isPublic(): bool |
|
| 232 | - { |
|
| 233 | - return $this->isPublic; |
|
| 234 | - } |
|
| 235 | - |
|
| 236 | - public function setPublic(bool $isPublic): void |
|
| 237 | - { |
|
| 238 | - $this->isPublic = $isPublic; |
|
| 239 | - } |
|
| 36 | + /** |
|
| 37 | + * @var IRequestRouter $requestRouter The request router to use. Note that different entry points have different |
|
| 38 | + * routers and hence different URL mappings |
|
| 39 | + */ |
|
| 40 | + private $requestRouter; |
|
| 41 | + /** |
|
| 42 | + * @var bool $isPublic Determines whether to use public interface objects or internal interface objects |
|
| 43 | + */ |
|
| 44 | + private bool $isPublic = false; |
|
| 45 | + |
|
| 46 | + /** |
|
| 47 | + * WebStart constructor. |
|
| 48 | + * |
|
| 49 | + * @param SiteConfiguration $configuration The site configuration |
|
| 50 | + * @param IRequestRouter $router The request router to use |
|
| 51 | + */ |
|
| 52 | + public function __construct(SiteConfiguration $configuration, IRequestRouter $router) |
|
| 53 | + { |
|
| 54 | + parent::__construct($configuration); |
|
| 55 | + |
|
| 56 | + $this->requestRouter = $router; |
|
| 57 | + } |
|
| 58 | + |
|
| 59 | + /** |
|
| 60 | + * @param ITask $page |
|
| 61 | + * @param SiteConfiguration $siteConfiguration |
|
| 62 | + * @param PdoDatabase $database |
|
| 63 | + * |
|
| 64 | + * @return void |
|
| 65 | + */ |
|
| 66 | + protected function setupHelpers( |
|
| 67 | + ITask $page, |
|
| 68 | + SiteConfiguration $siteConfiguration, |
|
| 69 | + PdoDatabase $database |
|
| 70 | + ) { |
|
| 71 | + parent::setupHelpers($page, $siteConfiguration, $database); |
|
| 72 | + |
|
| 73 | + if ($page instanceof PageBase) { |
|
| 74 | + $page->setTokenManager(new TokenManager()); |
|
| 75 | + $page->setCspManager(new ContentSecurityPolicyManager($siteConfiguration)); |
|
| 76 | + |
|
| 77 | + if ($page instanceof InternalPageBase) { |
|
| 78 | + $page->setTypeAheadHelper(new TypeAheadHelper()); |
|
| 79 | + |
|
| 80 | + $identificationVerifier = new IdentificationVerifier($page->getHttpHelper(), $siteConfiguration, $database); |
|
| 81 | + $page->setSecurityManager(new SecurityManager($identificationVerifier, new RoleConfiguration())); |
|
| 82 | + |
|
| 83 | + if ($siteConfiguration->getTitleBlacklistEnabled()) { |
|
| 84 | + $page->setBlacklistHelper(new BlacklistHelper($page->getHttpHelper(), $database, $siteConfiguration)); |
|
| 85 | + } |
|
| 86 | + else { |
|
| 87 | + $page->setBlacklistHelper(new FakeBlacklistHelper()); |
|
| 88 | + } |
|
| 89 | + |
|
| 90 | + $page->setDomainAccessManager(new DomainAccessManager($page->getSecurityManager())); |
|
| 91 | + } |
|
| 92 | + } |
|
| 93 | + } |
|
| 94 | + |
|
| 95 | + /** |
|
| 96 | + * Application entry point. |
|
| 97 | + * |
|
| 98 | + * Sets up the environment and runs the application, performing any global cleanup operations when done. |
|
| 99 | + */ |
|
| 100 | + public function run() |
|
| 101 | + { |
|
| 102 | + try { |
|
| 103 | + if ($this->setupEnvironment()) { |
|
| 104 | + $this->main(); |
|
| 105 | + } |
|
| 106 | + } |
|
| 107 | + catch (EnvironmentException $ex) { |
|
| 108 | + ob_end_clean(); |
|
| 109 | + print Offline::getOfflineMessage($this->isPublic(), $this->getConfiguration(), $ex->getMessage()); |
|
| 110 | + } |
|
| 111 | + /** @noinspection PhpRedundantCatchClauseInspection */ |
|
| 112 | + catch (ReadableException $ex) { |
|
| 113 | + ob_end_clean(); |
|
| 114 | + print $ex->getReadableError(); |
|
| 115 | + } |
|
| 116 | + finally { |
|
| 117 | + $this->cleanupEnvironment(); |
|
| 118 | + } |
|
| 119 | + } |
|
| 120 | + |
|
| 121 | + /** |
|
| 122 | + * Environment setup |
|
| 123 | + * |
|
| 124 | + * This method initialises the tool environment. If the tool cannot be initialised correctly, it will return false |
|
| 125 | + * and shut down prematurely. |
|
| 126 | + * |
|
| 127 | + * @return bool |
|
| 128 | + * @throws EnvironmentException |
|
| 129 | + */ |
|
| 130 | + protected function setupEnvironment() |
|
| 131 | + { |
|
| 132 | + // initialise global exception handler |
|
| 133 | + set_exception_handler(array(ExceptionHandler::class, 'exceptionHandler')); |
|
| 134 | + set_error_handler(array(ExceptionHandler::class, 'errorHandler'), E_RECOVERABLE_ERROR); |
|
| 135 | + |
|
| 136 | + // start output buffering if necessary |
|
| 137 | + if (ob_get_level() === 0) { |
|
| 138 | + ob_start(); |
|
| 139 | + } |
|
| 140 | + |
|
| 141 | + // initialise super-global providers |
|
| 142 | + WebRequest::setGlobalStateProvider(new GlobalStateProvider()); |
|
| 143 | + |
|
| 144 | + if (Offline::isOffline($this->getConfiguration())) { |
|
| 145 | + print Offline::getOfflineMessage($this->isPublic(), $this->getConfiguration()); |
|
| 146 | + ob_end_flush(); |
|
| 147 | + |
|
| 148 | + return false; |
|
| 149 | + } |
|
| 150 | + |
|
| 151 | + // Call parent setup |
|
| 152 | + if (!parent::setupEnvironment()) { |
|
| 153 | + return false; |
|
| 154 | + } |
|
| 155 | + |
|
| 156 | + // Start up sessions |
|
| 157 | + ini_set('session.cookie_path', $this->getConfiguration()->getCookiePath()); |
|
| 158 | + ini_set('session.name', $this->getConfiguration()->getCookieSessionName()); |
|
| 159 | + Session::start(); |
|
| 160 | + |
|
| 161 | + // Check the user is allowed to be logged in still. This must be before we call any user-loading functions and |
|
| 162 | + // get the current user cached. |
|
| 163 | + // I'm not sure if this function call being here is particularly a good thing, but it's part of starting up a |
|
| 164 | + // session I suppose. |
|
| 165 | + $this->checkForceLogout(); |
|
| 166 | + |
|
| 167 | + // environment initialised! |
|
| 168 | + return true; |
|
| 169 | + } |
|
| 170 | + |
|
| 171 | + /** |
|
| 172 | + * Main application logic |
|
| 173 | + */ |
|
| 174 | + protected function main() |
|
| 175 | + { |
|
| 176 | + // Get the right route for the request |
|
| 177 | + $page = $this->requestRouter->route(); |
|
| 178 | + |
|
| 179 | + $siteConfiguration = $this->getConfiguration(); |
|
| 180 | + $database = PdoDatabase::getDatabaseConnection($this->getConfiguration()); |
|
| 181 | + |
|
| 182 | + $this->setupHelpers($page, $siteConfiguration, $database); |
|
| 183 | + |
|
| 184 | + // run the route code for the request. |
|
| 185 | + $page->execute(); |
|
| 186 | + } |
|
| 187 | + |
|
| 188 | + /** |
|
| 189 | + * Any cleanup tasks should go here |
|
| 190 | + * |
|
| 191 | + * Note that we need to be very careful here, as exceptions may have been thrown and handled. |
|
| 192 | + * This should *only* be for cleaning up, no logic should go here. |
|
| 193 | + */ |
|
| 194 | + protected function cleanupEnvironment() |
|
| 195 | + { |
|
| 196 | + // Clean up anything we splurged after sending the page. |
|
| 197 | + if (ob_get_level() > 0) { |
|
| 198 | + for ($i = ob_get_level(); $i > 0; $i--) { |
|
| 199 | + ob_end_clean(); |
|
| 200 | + } |
|
| 201 | + } |
|
| 202 | + } |
|
| 203 | + |
|
| 204 | + private function checkForceLogout() |
|
| 205 | + { |
|
| 206 | + $database = PdoDatabase::getDatabaseConnection($this->getConfiguration()); |
|
| 207 | + |
|
| 208 | + $sessionUserId = WebRequest::getSessionUserId(); |
|
| 209 | + iF ($sessionUserId === null) { |
|
| 210 | + return; |
|
| 211 | + } |
|
| 212 | + |
|
| 213 | + // Note, User::getCurrent() caches it's result, which we *really* don't want to trigger. |
|
| 214 | + $currentUser = User::getById($sessionUserId, $database); |
|
| 215 | + |
|
| 216 | + if ($currentUser === false) { |
|
| 217 | + // Umm... this user has a session cookie with a userId set, but no user exists... |
|
| 218 | + Session::restart(); |
|
| 219 | + |
|
| 220 | + $currentUser = User::getCurrent($database); |
|
| 221 | + } |
|
| 222 | + |
|
| 223 | + if ($currentUser->getForceLogout()) { |
|
| 224 | + Session::restart(); |
|
| 225 | + |
|
| 226 | + $currentUser->setForceLogout(false); |
|
| 227 | + $currentUser->save(); |
|
| 228 | + } |
|
| 229 | + } |
|
| 230 | + |
|
| 231 | + public function isPublic(): bool |
|
| 232 | + { |
|
| 233 | + return $this->isPublic; |
|
| 234 | + } |
|
| 235 | + |
|
| 236 | + public function setPublic(bool $isPublic): void |
|
| 237 | + { |
|
| 238 | + $this->isPublic = $isPublic; |
|
| 239 | + } |
|
| 240 | 240 | } |
@@ -22,258 +22,258 @@ |
||
| 22 | 22 | |
| 23 | 23 | class PageWelcomeTemplateManagement extends InternalPageBase |
| 24 | 24 | { |
| 25 | - /** |
|
| 26 | - * Main function for this page, when no specific actions are called. |
|
| 27 | - * @return void |
|
| 28 | - */ |
|
| 29 | - protected function main() |
|
| 30 | - { |
|
| 31 | - $database = $this->getDatabase(); |
|
| 32 | - $templateList = WelcomeTemplate::getAll($database, 1); // FIXME: domains |
|
| 33 | - $preferenceManager = PreferenceManager::getForCurrent($database); |
|
| 25 | + /** |
|
| 26 | + * Main function for this page, when no specific actions are called. |
|
| 27 | + * @return void |
|
| 28 | + */ |
|
| 29 | + protected function main() |
|
| 30 | + { |
|
| 31 | + $database = $this->getDatabase(); |
|
| 32 | + $templateList = WelcomeTemplate::getAll($database, 1); // FIXME: domains |
|
| 33 | + $preferenceManager = PreferenceManager::getForCurrent($database); |
|
| 34 | 34 | |
| 35 | - $this->setHtmlTitle('Welcome Templates'); |
|
| 35 | + $this->setHtmlTitle('Welcome Templates'); |
|
| 36 | 36 | |
| 37 | - $this->assignCSRFToken(); |
|
| 37 | + $this->assignCSRFToken(); |
|
| 38 | 38 | |
| 39 | - $user = User::getCurrent($database); |
|
| 39 | + $user = User::getCurrent($database); |
|
| 40 | 40 | |
| 41 | - $currentTemplate = $preferenceManager->getPreference(PreferenceManager::PREF_WELCOMETEMPLATE); |
|
| 42 | - $this->assign('currentTemplate', $currentTemplate); |
|
| 41 | + $currentTemplate = $preferenceManager->getPreference(PreferenceManager::PREF_WELCOMETEMPLATE); |
|
| 42 | + $this->assign('currentTemplate', $currentTemplate); |
|
| 43 | 43 | |
| 44 | - $this->assign('canEdit', $this->barrierTest('edit', $user)); |
|
| 45 | - $this->assign('canAdd', $this->barrierTest('add', $user)); |
|
| 46 | - $this->assign('canSelect', $this->barrierTest('select', $user)); |
|
| 44 | + $this->assign('canEdit', $this->barrierTest('edit', $user)); |
|
| 45 | + $this->assign('canAdd', $this->barrierTest('add', $user)); |
|
| 46 | + $this->assign('canSelect', $this->barrierTest('select', $user)); |
|
| 47 | 47 | |
| 48 | - $this->assign('templateList', $templateList); |
|
| 49 | - $this->setTemplate('welcome-template/list.tpl'); |
|
| 50 | - } |
|
| 48 | + $this->assign('templateList', $templateList); |
|
| 49 | + $this->setTemplate('welcome-template/list.tpl'); |
|
| 50 | + } |
|
| 51 | 51 | |
| 52 | - /** |
|
| 53 | - * Handles the requests for selecting a template to use. |
|
| 54 | - * |
|
| 55 | - * @throws ApplicationLogicException |
|
| 56 | - */ |
|
| 57 | - protected function select() |
|
| 58 | - { |
|
| 59 | - // get rid of GETs |
|
| 60 | - if (!WebRequest::wasPosted()) { |
|
| 61 | - $this->redirect('welcomeTemplates'); |
|
| 62 | - } |
|
| 52 | + /** |
|
| 53 | + * Handles the requests for selecting a template to use. |
|
| 54 | + * |
|
| 55 | + * @throws ApplicationLogicException |
|
| 56 | + */ |
|
| 57 | + protected function select() |
|
| 58 | + { |
|
| 59 | + // get rid of GETs |
|
| 60 | + if (!WebRequest::wasPosted()) { |
|
| 61 | + $this->redirect('welcomeTemplates'); |
|
| 62 | + } |
|
| 63 | 63 | |
| 64 | - $this->validateCSRFToken(); |
|
| 64 | + $this->validateCSRFToken(); |
|
| 65 | 65 | |
| 66 | - $database = $this->getDatabase(); |
|
| 67 | - $user = User::getCurrent($database); |
|
| 68 | - $preferenceManager = PreferenceManager::getForCurrent($database); |
|
| 66 | + $database = $this->getDatabase(); |
|
| 67 | + $user = User::getCurrent($database); |
|
| 68 | + $preferenceManager = PreferenceManager::getForCurrent($database); |
|
| 69 | 69 | |
| 70 | - if (WebRequest::postBoolean('disable')) { |
|
| 71 | - $preferenceManager->setLocalPreference(PreferenceManager::PREF_WELCOMETEMPLATE, null); |
|
| 70 | + if (WebRequest::postBoolean('disable')) { |
|
| 71 | + $preferenceManager->setLocalPreference(PreferenceManager::PREF_WELCOMETEMPLATE, null); |
|
| 72 | 72 | |
| 73 | - SessionAlert::success('Disabled automatic user welcoming.'); |
|
| 74 | - $this->redirect('welcomeTemplates'); |
|
| 73 | + SessionAlert::success('Disabled automatic user welcoming.'); |
|
| 74 | + $this->redirect('welcomeTemplates'); |
|
| 75 | 75 | |
| 76 | - return; |
|
| 77 | - } |
|
| 76 | + return; |
|
| 77 | + } |
|
| 78 | 78 | |
| 79 | - $templateId = WebRequest::postInt('template'); |
|
| 80 | - /** @var false|WelcomeTemplate $template */ |
|
| 81 | - $template = WelcomeTemplate::getById($templateId, $database); |
|
| 79 | + $templateId = WebRequest::postInt('template'); |
|
| 80 | + /** @var false|WelcomeTemplate $template */ |
|
| 81 | + $template = WelcomeTemplate::getById($templateId, $database); |
|
| 82 | 82 | |
| 83 | - if ($template === false || $template->isDeleted()) { |
|
| 84 | - throw new ApplicationLogicException('Unknown template'); |
|
| 85 | - } |
|
| 83 | + if ($template === false || $template->isDeleted()) { |
|
| 84 | + throw new ApplicationLogicException('Unknown template'); |
|
| 85 | + } |
|
| 86 | 86 | |
| 87 | - $preferenceManager->setLocalPreference(PreferenceManager::PREF_WELCOMETEMPLATE, $template->getId()); |
|
| 87 | + $preferenceManager->setLocalPreference(PreferenceManager::PREF_WELCOMETEMPLATE, $template->getId()); |
|
| 88 | 88 | |
| 89 | - SessionAlert::success("Updated selected welcome template for automatic welcoming."); |
|
| 89 | + SessionAlert::success("Updated selected welcome template for automatic welcoming."); |
|
| 90 | 90 | |
| 91 | - $this->redirect('welcomeTemplates'); |
|
| 92 | - } |
|
| 91 | + $this->redirect('welcomeTemplates'); |
|
| 92 | + } |
|
| 93 | 93 | |
| 94 | - /** |
|
| 95 | - * Handles the requests for viewing a template. |
|
| 96 | - * |
|
| 97 | - * @throws ApplicationLogicException |
|
| 98 | - */ |
|
| 99 | - protected function view() |
|
| 100 | - { |
|
| 101 | - $this->setHtmlTitle('View Welcome Template'); |
|
| 94 | + /** |
|
| 95 | + * Handles the requests for viewing a template. |
|
| 96 | + * |
|
| 97 | + * @throws ApplicationLogicException |
|
| 98 | + */ |
|
| 99 | + protected function view() |
|
| 100 | + { |
|
| 101 | + $this->setHtmlTitle('View Welcome Template'); |
|
| 102 | 102 | |
| 103 | - $database = $this->getDatabase(); |
|
| 103 | + $database = $this->getDatabase(); |
|
| 104 | 104 | |
| 105 | - $templateId = WebRequest::getInt('template'); |
|
| 105 | + $templateId = WebRequest::getInt('template'); |
|
| 106 | 106 | |
| 107 | - /** @var false|WelcomeTemplate $template */ |
|
| 108 | - $template = WelcomeTemplate::getById($templateId, $database); |
|
| 107 | + /** @var false|WelcomeTemplate $template */ |
|
| 108 | + $template = WelcomeTemplate::getById($templateId, $database); |
|
| 109 | 109 | |
| 110 | - if ($template === false) { |
|
| 111 | - throw new ApplicationLogicException('Cannot find requested template'); |
|
| 112 | - } |
|
| 110 | + if ($template === false) { |
|
| 111 | + throw new ApplicationLogicException('Cannot find requested template'); |
|
| 112 | + } |
|
| 113 | 113 | |
| 114 | - $currentUser = User::getCurrent($database); |
|
| 114 | + $currentUser = User::getCurrent($database); |
|
| 115 | 115 | |
| 116 | - // This includes a section header, because we use the "new section" API call. |
|
| 117 | - $wikiText = "== " . $template->getSectionHeader() . "==\n" . $template->getBotCodeForWikiSave('Example User', $currentUser->getOnWikiName()); |
|
| 116 | + // This includes a section header, because we use the "new section" API call. |
|
| 117 | + $wikiText = "== " . $template->getSectionHeader() . "==\n" . $template->getBotCodeForWikiSave('Example User', $currentUser->getOnWikiName()); |
|
| 118 | 118 | |
| 119 | - $oauth = new OAuthUserHelper($currentUser, $database, $this->getOauthProtocolHelper(), |
|
| 120 | - $this->getSiteConfiguration()); |
|
| 121 | - $mediaWikiHelper = new MediaWikiHelper($oauth, $this->getSiteConfiguration()); |
|
| 119 | + $oauth = new OAuthUserHelper($currentUser, $database, $this->getOauthProtocolHelper(), |
|
| 120 | + $this->getSiteConfiguration()); |
|
| 121 | + $mediaWikiHelper = new MediaWikiHelper($oauth, $this->getSiteConfiguration()); |
|
| 122 | 122 | |
| 123 | - $templateHtml = $mediaWikiHelper->getHtmlForWikiText($wikiText); |
|
| 123 | + $templateHtml = $mediaWikiHelper->getHtmlForWikiText($wikiText); |
|
| 124 | 124 | |
| 125 | - // Add site to relevant links, since the MediaWiki parser returns, eg, `/wiki/Help:Introduction` |
|
| 126 | - // and we want to link to <https://en.wikipedia.org/wiki/Help:Introduction> rather than |
|
| 127 | - // <https://accounts.wmflabs.org/wiki/Help:Introduction> |
|
| 128 | - // The code currently assumes that the template was parsed for enwiki, and will need to be |
|
| 129 | - // updated once other wikis are supported. |
|
| 130 | - $templateHtml = preg_replace('/(<a href=")(\/wiki\/)/', '$1//en.wikipedia.org$2', $templateHtml); |
|
| 131 | - |
|
| 132 | - $this->assign('templateHtml', $templateHtml); |
|
| 133 | - $this->assign('template', $template); |
|
| 134 | - $this->setTemplate('welcome-template/view.tpl'); |
|
| 135 | - } |
|
| 136 | - |
|
| 137 | - /** |
|
| 138 | - * Handler for the add action to create a new welcome template |
|
| 139 | - * |
|
| 140 | - * @throws Exception |
|
| 141 | - */ |
|
| 142 | - protected function add() |
|
| 143 | - { |
|
| 144 | - $this->assign('createmode', true); |
|
| 125 | + // Add site to relevant links, since the MediaWiki parser returns, eg, `/wiki/Help:Introduction` |
|
| 126 | + // and we want to link to <https://en.wikipedia.org/wiki/Help:Introduction> rather than |
|
| 127 | + // <https://accounts.wmflabs.org/wiki/Help:Introduction> |
|
| 128 | + // The code currently assumes that the template was parsed for enwiki, and will need to be |
|
| 129 | + // updated once other wikis are supported. |
|
| 130 | + $templateHtml = preg_replace('/(<a href=")(\/wiki\/)/', '$1//en.wikipedia.org$2', $templateHtml); |
|
| 131 | + |
|
| 132 | + $this->assign('templateHtml', $templateHtml); |
|
| 133 | + $this->assign('template', $template); |
|
| 134 | + $this->setTemplate('welcome-template/view.tpl'); |
|
| 135 | + } |
|
| 136 | + |
|
| 137 | + /** |
|
| 138 | + * Handler for the add action to create a new welcome template |
|
| 139 | + * |
|
| 140 | + * @throws Exception |
|
| 141 | + */ |
|
| 142 | + protected function add() |
|
| 143 | + { |
|
| 144 | + $this->assign('createmode', true); |
|
| 145 | 145 | |
| 146 | - if (WebRequest::wasPosted()) { |
|
| 147 | - $this->validateCSRFToken(); |
|
| 148 | - $database = $this->getDatabase(); |
|
| 146 | + if (WebRequest::wasPosted()) { |
|
| 147 | + $this->validateCSRFToken(); |
|
| 148 | + $database = $this->getDatabase(); |
|
| 149 | 149 | |
| 150 | - $userCode = WebRequest::postString('usercode'); |
|
| 151 | - $botCode = WebRequest::postString('botcode'); |
|
| 150 | + $userCode = WebRequest::postString('usercode'); |
|
| 151 | + $botCode = WebRequest::postString('botcode'); |
|
| 152 | 152 | |
| 153 | - $this->validate($userCode, $botCode); |
|
| 153 | + $this->validate($userCode, $botCode); |
|
| 154 | 154 | |
| 155 | - $template = new WelcomeTemplate(); |
|
| 156 | - $template->setDatabase($database); |
|
| 157 | - $template->setUserCode($userCode); |
|
| 158 | - $template->setBotCode($botCode); |
|
| 159 | - $template->setDomain(1); // FIXME: domains! |
|
| 160 | - $template->save(); |
|
| 155 | + $template = new WelcomeTemplate(); |
|
| 156 | + $template->setDatabase($database); |
|
| 157 | + $template->setUserCode($userCode); |
|
| 158 | + $template->setBotCode($botCode); |
|
| 159 | + $template->setDomain(1); // FIXME: domains! |
|
| 160 | + $template->save(); |
|
| 161 | 161 | |
| 162 | - Logger::welcomeTemplateCreated($database, $template); |
|
| 162 | + Logger::welcomeTemplateCreated($database, $template); |
|
| 163 | 163 | |
| 164 | - $this->getNotificationHelper()->welcomeTemplateCreated($template); |
|
| 164 | + $this->getNotificationHelper()->welcomeTemplateCreated($template); |
|
| 165 | 165 | |
| 166 | - SessionAlert::success("Template successfully created."); |
|
| 166 | + SessionAlert::success("Template successfully created."); |
|
| 167 | 167 | |
| 168 | - $this->redirect('welcomeTemplates'); |
|
| 169 | - } |
|
| 170 | - else { |
|
| 171 | - $this->assignCSRFToken(); |
|
| 172 | - $this->assign('template', new WelcomeTemplate()); |
|
| 173 | - $this->setTemplate("welcome-template/edit.tpl"); |
|
| 174 | - } |
|
| 175 | - } |
|
| 168 | + $this->redirect('welcomeTemplates'); |
|
| 169 | + } |
|
| 170 | + else { |
|
| 171 | + $this->assignCSRFToken(); |
|
| 172 | + $this->assign('template', new WelcomeTemplate()); |
|
| 173 | + $this->setTemplate("welcome-template/edit.tpl"); |
|
| 174 | + } |
|
| 175 | + } |
|
| 176 | 176 | |
| 177 | - /** |
|
| 178 | - * Handler for editing templates |
|
| 179 | - */ |
|
| 180 | - protected function edit() |
|
| 181 | - { |
|
| 182 | - $database = $this->getDatabase(); |
|
| 177 | + /** |
|
| 178 | + * Handler for editing templates |
|
| 179 | + */ |
|
| 180 | + protected function edit() |
|
| 181 | + { |
|
| 182 | + $database = $this->getDatabase(); |
|
| 183 | 183 | |
| 184 | - $templateId = WebRequest::getInt('template'); |
|
| 184 | + $templateId = WebRequest::getInt('template'); |
|
| 185 | 185 | |
| 186 | - /** @var false|WelcomeTemplate $template */ |
|
| 187 | - $template = WelcomeTemplate::getById($templateId, $database); |
|
| 186 | + /** @var false|WelcomeTemplate $template */ |
|
| 187 | + $template = WelcomeTemplate::getById($templateId, $database); |
|
| 188 | 188 | |
| 189 | - if ($template === false) { |
|
| 190 | - throw new ApplicationLogicException('Cannot find requested template'); |
|
| 191 | - } |
|
| 189 | + if ($template === false) { |
|
| 190 | + throw new ApplicationLogicException('Cannot find requested template'); |
|
| 191 | + } |
|
| 192 | 192 | |
| 193 | - if ($template->isDeleted()) { |
|
| 194 | - throw new ApplicationLogicException('The specified template has been deleted'); |
|
| 195 | - } |
|
| 193 | + if ($template->isDeleted()) { |
|
| 194 | + throw new ApplicationLogicException('The specified template has been deleted'); |
|
| 195 | + } |
|
| 196 | 196 | |
| 197 | - $this->assign('createmode', false); |
|
| 197 | + $this->assign('createmode', false); |
|
| 198 | 198 | |
| 199 | - if (WebRequest::wasPosted()) { |
|
| 200 | - $this->validateCSRFToken(); |
|
| 199 | + if (WebRequest::wasPosted()) { |
|
| 200 | + $this->validateCSRFToken(); |
|
| 201 | 201 | |
| 202 | - $userCode = WebRequest::postString('usercode'); |
|
| 203 | - $botCode = WebRequest::postString('botcode'); |
|
| 202 | + $userCode = WebRequest::postString('usercode'); |
|
| 203 | + $botCode = WebRequest::postString('botcode'); |
|
| 204 | 204 | |
| 205 | - $this->validate($userCode, $botCode); |
|
| 205 | + $this->validate($userCode, $botCode); |
|
| 206 | 206 | |
| 207 | - $template->setUserCode($userCode); |
|
| 208 | - $template->setBotCode($botCode); |
|
| 209 | - $template->setUpdateVersion(WebRequest::postInt('updateversion')); |
|
| 210 | - $template->save(); |
|
| 207 | + $template->setUserCode($userCode); |
|
| 208 | + $template->setBotCode($botCode); |
|
| 209 | + $template->setUpdateVersion(WebRequest::postInt('updateversion')); |
|
| 210 | + $template->save(); |
|
| 211 | 211 | |
| 212 | - Logger::welcomeTemplateEdited($database, $template); |
|
| 212 | + Logger::welcomeTemplateEdited($database, $template); |
|
| 213 | 213 | |
| 214 | - SessionAlert::success("Template updated."); |
|
| 214 | + SessionAlert::success("Template updated."); |
|
| 215 | 215 | |
| 216 | - $this->getNotificationHelper()->welcomeTemplateEdited($template); |
|
| 216 | + $this->getNotificationHelper()->welcomeTemplateEdited($template); |
|
| 217 | 217 | |
| 218 | - $this->redirect('welcomeTemplates'); |
|
| 219 | - } |
|
| 220 | - else { |
|
| 221 | - $this->assignCSRFToken(); |
|
| 222 | - $this->assign('template', $template); |
|
| 223 | - $this->setTemplate('welcome-template/edit.tpl'); |
|
| 224 | - } |
|
| 225 | - } |
|
| 218 | + $this->redirect('welcomeTemplates'); |
|
| 219 | + } |
|
| 220 | + else { |
|
| 221 | + $this->assignCSRFToken(); |
|
| 222 | + $this->assign('template', $template); |
|
| 223 | + $this->setTemplate('welcome-template/edit.tpl'); |
|
| 224 | + } |
|
| 225 | + } |
|
| 226 | 226 | |
| 227 | - protected function delete() |
|
| 228 | - { |
|
| 229 | - if (!WebRequest::wasPosted()) { |
|
| 230 | - $this->redirect('welcomeTemplates'); |
|
| 231 | - return; |
|
| 232 | - } |
|
| 227 | + protected function delete() |
|
| 228 | + { |
|
| 229 | + if (!WebRequest::wasPosted()) { |
|
| 230 | + $this->redirect('welcomeTemplates'); |
|
| 231 | + return; |
|
| 232 | + } |
|
| 233 | 233 | |
| 234 | - $this->validateCSRFToken(); |
|
| 234 | + $this->validateCSRFToken(); |
|
| 235 | 235 | |
| 236 | - $database = $this->getDatabase(); |
|
| 236 | + $database = $this->getDatabase(); |
|
| 237 | 237 | |
| 238 | - $templateId = WebRequest::postInt('template'); |
|
| 239 | - $updateVersion = WebRequest::postInt('updateversion'); |
|
| 238 | + $templateId = WebRequest::postInt('template'); |
|
| 239 | + $updateVersion = WebRequest::postInt('updateversion'); |
|
| 240 | 240 | |
| 241 | - /** @var false|WelcomeTemplate $template */ |
|
| 242 | - $template = WelcomeTemplate::getById($templateId, $database); |
|
| 241 | + /** @var false|WelcomeTemplate $template */ |
|
| 242 | + $template = WelcomeTemplate::getById($templateId, $database); |
|
| 243 | 243 | |
| 244 | - if ($template === false || $template->isDeleted()) { |
|
| 245 | - throw new ApplicationLogicException('Cannot find requested template'); |
|
| 246 | - } |
|
| 244 | + if ($template === false || $template->isDeleted()) { |
|
| 245 | + throw new ApplicationLogicException('Cannot find requested template'); |
|
| 246 | + } |
|
| 247 | 247 | |
| 248 | - // set the update version to the version sent by the client (optimisticly lock from initial page load) |
|
| 249 | - $template->setUpdateVersion($updateVersion); |
|
| 248 | + // set the update version to the version sent by the client (optimisticly lock from initial page load) |
|
| 249 | + $template->setUpdateVersion($updateVersion); |
|
| 250 | 250 | |
| 251 | - $database |
|
| 252 | - ->prepare("UPDATE userpreference SET value = NULL, updateversion = updateversion + 1 WHERE preference = :pref and value = :id;") |
|
| 253 | - ->execute([ |
|
| 254 | - ':id' => $templateId, |
|
| 255 | - ':pref' => PreferenceManager::PREF_WELCOMETEMPLATE |
|
| 256 | - ]); |
|
| 251 | + $database |
|
| 252 | + ->prepare("UPDATE userpreference SET value = NULL, updateversion = updateversion + 1 WHERE preference = :pref and value = :id;") |
|
| 253 | + ->execute([ |
|
| 254 | + ':id' => $templateId, |
|
| 255 | + ':pref' => PreferenceManager::PREF_WELCOMETEMPLATE |
|
| 256 | + ]); |
|
| 257 | 257 | |
| 258 | - Logger::welcomeTemplateDeleted($database, $template); |
|
| 258 | + Logger::welcomeTemplateDeleted($database, $template); |
|
| 259 | 259 | |
| 260 | - $template->delete(); |
|
| 260 | + $template->delete(); |
|
| 261 | 261 | |
| 262 | - $this->redirect('welcomeTemplates'); |
|
| 262 | + $this->redirect('welcomeTemplates'); |
|
| 263 | 263 | |
| 264 | - SessionAlert::success( |
|
| 265 | - "Template deleted. Any users who were using this template have had automatic welcoming disabled."); |
|
| 266 | - $this->getNotificationHelper()->welcomeTemplateDeleted($templateId); |
|
| 267 | - } |
|
| 264 | + SessionAlert::success( |
|
| 265 | + "Template deleted. Any users who were using this template have had automatic welcoming disabled."); |
|
| 266 | + $this->getNotificationHelper()->welcomeTemplateDeleted($templateId); |
|
| 267 | + } |
|
| 268 | 268 | |
| 269 | - private function validate($userCode, $botCode) |
|
| 270 | - { |
|
| 271 | - if ($userCode === null) { |
|
| 272 | - throw new ApplicationLogicException('User code cannot be null'); |
|
| 273 | - } |
|
| 269 | + private function validate($userCode, $botCode) |
|
| 270 | + { |
|
| 271 | + if ($userCode === null) { |
|
| 272 | + throw new ApplicationLogicException('User code cannot be null'); |
|
| 273 | + } |
|
| 274 | 274 | |
| 275 | - if ($botCode === null) { |
|
| 276 | - throw new ApplicationLogicException('Bot code cannot be null'); |
|
| 277 | - } |
|
| 278 | - } |
|
| 275 | + if ($botCode === null) { |
|
| 276 | + throw new ApplicationLogicException('Bot code cannot be null'); |
|
| 277 | + } |
|
| 278 | + } |
|
| 279 | 279 | } |
@@ -166,8 +166,7 @@ discard block |
||
| 166 | 166 | SessionAlert::success("Template successfully created."); |
| 167 | 167 | |
| 168 | 168 | $this->redirect('welcomeTemplates'); |
| 169 | - } |
|
| 170 | - else { |
|
| 169 | + } else { |
|
| 171 | 170 | $this->assignCSRFToken(); |
| 172 | 171 | $this->assign('template', new WelcomeTemplate()); |
| 173 | 172 | $this->setTemplate("welcome-template/edit.tpl"); |
@@ -216,8 +215,7 @@ discard block |
||
| 216 | 215 | $this->getNotificationHelper()->welcomeTemplateEdited($template); |
| 217 | 216 | |
| 218 | 217 | $this->redirect('welcomeTemplates'); |
| 219 | - } |
|
| 220 | - else { |
|
| 218 | + } else { |
|
| 221 | 219 | $this->assignCSRFToken(); |
| 222 | 220 | $this->assign('template', $template); |
| 223 | 221 | $this->setTemplate('welcome-template/edit.tpl'); |
@@ -13,136 +13,136 @@ |
||
| 13 | 13 | |
| 14 | 14 | class PageXffDemo extends InternalPageBase |
| 15 | 15 | { |
| 16 | - use RequestData; |
|
| 17 | - |
|
| 18 | - /** |
|
| 19 | - * @inheritDoc |
|
| 20 | - */ |
|
| 21 | - protected function main() |
|
| 22 | - { |
|
| 23 | - $this->setTemplate('xffdemo.tpl'); |
|
| 24 | - |
|
| 25 | - // requestHasForwardedIp == false |
|
| 26 | - // requestProxyData |
|
| 27 | - // requestRealIp == proxy |
|
| 28 | - // requestForwardedIp == xff header |
|
| 29 | - // forwardedOrigin == top of the chain, assuming xff is trusted |
|
| 30 | - |
|
| 31 | - |
|
| 32 | - $this->assign('demo2', [ |
|
| 33 | - [ |
|
| 34 | - 'trust' => true, |
|
| 35 | - 'trustedlink' => true, |
|
| 36 | - 'ip' => '172.16.0.164', |
|
| 37 | - 'routable' => false, |
|
| 38 | - |
|
| 39 | - ], [ |
|
| 40 | - 'trust' => true, |
|
| 41 | - 'ip' => '198.51.100.123', |
|
| 42 | - 'routable' => true, |
|
| 43 | - 'rdns' => 'trustedproxy.example.com', |
|
| 44 | - |
|
| 45 | - ], [ |
|
| 46 | - 'trust' => true, |
|
| 47 | - 'ip' => '192.0.2.1', |
|
| 48 | - 'routable' => true, |
|
| 49 | - 'rdns' => 'client.users.example.org', |
|
| 50 | - 'location' => [ |
|
| 51 | - 'cityName' => 'San Francisco', |
|
| 52 | - 'regionName' => 'California', |
|
| 53 | - 'countryName' => 'United States' |
|
| 54 | - ], |
|
| 55 | - 'showlinks' => true |
|
| 56 | - ] |
|
| 57 | - ]); |
|
| 58 | - |
|
| 59 | - $this->assign('demo3', [ |
|
| 60 | - [ |
|
| 61 | - 'trust' => true, |
|
| 62 | - 'trustedlink' => true, |
|
| 63 | - 'ip' => '172.16.0.164', |
|
| 64 | - 'routable' => false, |
|
| 65 | - |
|
| 66 | - ], [ |
|
| 67 | - 'trust' => false, |
|
| 68 | - 'ip' => '198.51.100.234', |
|
| 69 | - 'routable' => true, |
|
| 70 | - 'rdns' => 'sketchyproxy.example.com', |
|
| 71 | - 'showlinks' => true |
|
| 72 | - |
|
| 73 | - ], [ |
|
| 74 | - 'trust' => false, |
|
| 75 | - 'ip' => '192.0.2.1', |
|
| 76 | - 'routable' => true, |
|
| 77 | - 'rdns' => 'client.users.example.org', |
|
| 78 | - 'location' => [ |
|
| 79 | - 'cityName' => 'San Francisco', |
|
| 80 | - 'regionName' => 'California', |
|
| 81 | - 'countryName' => 'United States' |
|
| 82 | - ], |
|
| 83 | - 'showlinks' => true |
|
| 84 | - ] |
|
| 85 | - ]); |
|
| 86 | - |
|
| 87 | - $this->assign('demo4', [ |
|
| 88 | - [ |
|
| 89 | - 'trust' => true, |
|
| 90 | - 'trustedlink' => true, |
|
| 91 | - 'ip' => '172.16.0.164', |
|
| 92 | - 'routable' => false, |
|
| 93 | - |
|
| 94 | - ], [ |
|
| 95 | - 'trust' => true, |
|
| 96 | - 'ip' => '198.51.100.123', |
|
| 97 | - 'routable' => true, |
|
| 98 | - 'rdns' => 'trustedproxy.example.com', |
|
| 99 | - ], [ |
|
| 100 | - 'trust' => false, |
|
| 101 | - 'ip' => '198.51.100.234', |
|
| 102 | - 'routable' => true, |
|
| 103 | - 'rdns' => 'sketchyproxy.example.com', |
|
| 104 | - 'showlinks' => true |
|
| 105 | - ], [ |
|
| 106 | - 'trust' => false, |
|
| 107 | - 'trustedlink' => true, |
|
| 108 | - 'ip' => '198.51.100.124', |
|
| 109 | - 'routable' => true, |
|
| 110 | - 'rdns' => 'trustedproxy2.example.com', |
|
| 111 | - 'showlinks' => true |
|
| 112 | - ], [ |
|
| 113 | - 'trust' => false, |
|
| 114 | - 'ip' => '192.0.2.1', |
|
| 115 | - 'routable' => true, |
|
| 116 | - 'rdns' => 'client.users.example.org', |
|
| 117 | - 'location' => [ |
|
| 118 | - 'cityName' => 'San Francisco', |
|
| 119 | - 'regionName' => 'California', |
|
| 120 | - 'countryName' => 'United States' |
|
| 121 | - ], |
|
| 122 | - 'showlinks' => true |
|
| 123 | - ] |
|
| 124 | - ]); |
|
| 125 | - |
|
| 126 | - $this->assign('demo1', [ |
|
| 127 | - [ |
|
| 128 | - 'trust' => true, |
|
| 129 | - 'trustedlink' => true, |
|
| 130 | - 'ip' => '172.16.0.164', |
|
| 131 | - 'routable' => false, |
|
| 132 | - |
|
| 133 | - ], [ |
|
| 134 | - 'trust' => true, |
|
| 135 | - 'trustedlink' => true, |
|
| 136 | - 'ip' => '192.0.2.1', |
|
| 137 | - 'routable' => true, |
|
| 138 | - 'rdns' => 'client.users.example.org', |
|
| 139 | - 'location' => [ |
|
| 140 | - 'cityName' => 'San Francisco', |
|
| 141 | - 'regionName' => 'California', |
|
| 142 | - 'countryName' => 'United States' |
|
| 143 | - ], |
|
| 144 | - 'showlinks' => true |
|
| 145 | - ] |
|
| 146 | - ]); |
|
| 147 | - } |
|
| 16 | + use RequestData; |
|
| 17 | + |
|
| 18 | + /** |
|
| 19 | + * @inheritDoc |
|
| 20 | + */ |
|
| 21 | + protected function main() |
|
| 22 | + { |
|
| 23 | + $this->setTemplate('xffdemo.tpl'); |
|
| 24 | + |
|
| 25 | + // requestHasForwardedIp == false |
|
| 26 | + // requestProxyData |
|
| 27 | + // requestRealIp == proxy |
|
| 28 | + // requestForwardedIp == xff header |
|
| 29 | + // forwardedOrigin == top of the chain, assuming xff is trusted |
|
| 30 | + |
|
| 31 | + |
|
| 32 | + $this->assign('demo2', [ |
|
| 33 | + [ |
|
| 34 | + 'trust' => true, |
|
| 35 | + 'trustedlink' => true, |
|
| 36 | + 'ip' => '172.16.0.164', |
|
| 37 | + 'routable' => false, |
|
| 38 | + |
|
| 39 | + ], [ |
|
| 40 | + 'trust' => true, |
|
| 41 | + 'ip' => '198.51.100.123', |
|
| 42 | + 'routable' => true, |
|
| 43 | + 'rdns' => 'trustedproxy.example.com', |
|
| 44 | + |
|
| 45 | + ], [ |
|
| 46 | + 'trust' => true, |
|
| 47 | + 'ip' => '192.0.2.1', |
|
| 48 | + 'routable' => true, |
|
| 49 | + 'rdns' => 'client.users.example.org', |
|
| 50 | + 'location' => [ |
|
| 51 | + 'cityName' => 'San Francisco', |
|
| 52 | + 'regionName' => 'California', |
|
| 53 | + 'countryName' => 'United States' |
|
| 54 | + ], |
|
| 55 | + 'showlinks' => true |
|
| 56 | + ] |
|
| 57 | + ]); |
|
| 58 | + |
|
| 59 | + $this->assign('demo3', [ |
|
| 60 | + [ |
|
| 61 | + 'trust' => true, |
|
| 62 | + 'trustedlink' => true, |
|
| 63 | + 'ip' => '172.16.0.164', |
|
| 64 | + 'routable' => false, |
|
| 65 | + |
|
| 66 | + ], [ |
|
| 67 | + 'trust' => false, |
|
| 68 | + 'ip' => '198.51.100.234', |
|
| 69 | + 'routable' => true, |
|
| 70 | + 'rdns' => 'sketchyproxy.example.com', |
|
| 71 | + 'showlinks' => true |
|
| 72 | + |
|
| 73 | + ], [ |
|
| 74 | + 'trust' => false, |
|
| 75 | + 'ip' => '192.0.2.1', |
|
| 76 | + 'routable' => true, |
|
| 77 | + 'rdns' => 'client.users.example.org', |
|
| 78 | + 'location' => [ |
|
| 79 | + 'cityName' => 'San Francisco', |
|
| 80 | + 'regionName' => 'California', |
|
| 81 | + 'countryName' => 'United States' |
|
| 82 | + ], |
|
| 83 | + 'showlinks' => true |
|
| 84 | + ] |
|
| 85 | + ]); |
|
| 86 | + |
|
| 87 | + $this->assign('demo4', [ |
|
| 88 | + [ |
|
| 89 | + 'trust' => true, |
|
| 90 | + 'trustedlink' => true, |
|
| 91 | + 'ip' => '172.16.0.164', |
|
| 92 | + 'routable' => false, |
|
| 93 | + |
|
| 94 | + ], [ |
|
| 95 | + 'trust' => true, |
|
| 96 | + 'ip' => '198.51.100.123', |
|
| 97 | + 'routable' => true, |
|
| 98 | + 'rdns' => 'trustedproxy.example.com', |
|
| 99 | + ], [ |
|
| 100 | + 'trust' => false, |
|
| 101 | + 'ip' => '198.51.100.234', |
|
| 102 | + 'routable' => true, |
|
| 103 | + 'rdns' => 'sketchyproxy.example.com', |
|
| 104 | + 'showlinks' => true |
|
| 105 | + ], [ |
|
| 106 | + 'trust' => false, |
|
| 107 | + 'trustedlink' => true, |
|
| 108 | + 'ip' => '198.51.100.124', |
|
| 109 | + 'routable' => true, |
|
| 110 | + 'rdns' => 'trustedproxy2.example.com', |
|
| 111 | + 'showlinks' => true |
|
| 112 | + ], [ |
|
| 113 | + 'trust' => false, |
|
| 114 | + 'ip' => '192.0.2.1', |
|
| 115 | + 'routable' => true, |
|
| 116 | + 'rdns' => 'client.users.example.org', |
|
| 117 | + 'location' => [ |
|
| 118 | + 'cityName' => 'San Francisco', |
|
| 119 | + 'regionName' => 'California', |
|
| 120 | + 'countryName' => 'United States' |
|
| 121 | + ], |
|
| 122 | + 'showlinks' => true |
|
| 123 | + ] |
|
| 124 | + ]); |
|
| 125 | + |
|
| 126 | + $this->assign('demo1', [ |
|
| 127 | + [ |
|
| 128 | + 'trust' => true, |
|
| 129 | + 'trustedlink' => true, |
|
| 130 | + 'ip' => '172.16.0.164', |
|
| 131 | + 'routable' => false, |
|
| 132 | + |
|
| 133 | + ], [ |
|
| 134 | + 'trust' => true, |
|
| 135 | + 'trustedlink' => true, |
|
| 136 | + 'ip' => '192.0.2.1', |
|
| 137 | + 'routable' => true, |
|
| 138 | + 'rdns' => 'client.users.example.org', |
|
| 139 | + 'location' => [ |
|
| 140 | + 'cityName' => 'San Francisco', |
|
| 141 | + 'regionName' => 'California', |
|
| 142 | + 'countryName' => 'United States' |
|
| 143 | + ], |
|
| 144 | + 'showlinks' => true |
|
| 145 | + ] |
|
| 146 | + ]); |
|
| 147 | + } |
|
| 148 | 148 | } |
@@ -14,127 +14,127 @@ |
||
| 14 | 14 | |
| 15 | 15 | class PageErrorLogViewer extends InternalPageBase |
| 16 | 16 | { |
| 17 | - /** |
|
| 18 | - * @inheritDoc |
|
| 19 | - */ |
|
| 20 | - protected function main() |
|
| 21 | - { |
|
| 22 | - $this->setHtmlTitle('Exception viewer'); |
|
| 23 | - |
|
| 24 | - $user = User::getCurrent($this->getDatabase()); |
|
| 25 | - $this->assign('canView', $this->barrierTest('view', $user)); |
|
| 26 | - $this->assign('canRemove', $this->barrierTest('remove', $user)); |
|
| 27 | - |
|
| 28 | - // Get the list of exception logs from the error log directory |
|
| 29 | - $errorLogDirectory = $this->getSiteConfiguration()->getErrorLog(); |
|
| 30 | - $files = scandir($errorLogDirectory); |
|
| 31 | - |
|
| 32 | - // Exclude the files we know should be there |
|
| 33 | - $filteredFiles = array_filter($files, function($file) { |
|
| 34 | - return !in_array($file, ['.', '..', 'README.md']); |
|
| 35 | - }); |
|
| 36 | - |
|
| 37 | - $exceptionDetails = array_map(function($item) use ($errorLogDirectory) { |
|
| 38 | - $filename = realpath($errorLogDirectory) . DIRECTORY_SEPARATOR . $item; |
|
| 39 | - |
|
| 40 | - return [ |
|
| 41 | - 'id' => str_replace('.log', '', $item), |
|
| 42 | - 'date' => date('Y-m-d H:i:s', filemtime($filename)), |
|
| 43 | - 'data' => str_replace($this->getSiteConfiguration()->getFilePath(), '.', |
|
| 44 | - unserialize(file_get_contents($filename))), |
|
| 45 | - ]; |
|
| 46 | - }, $filteredFiles); |
|
| 47 | - |
|
| 48 | - $this->assign('exceptionEntries', $exceptionDetails); |
|
| 49 | - $this->setTemplate('errorlog/main.tpl'); |
|
| 50 | - } |
|
| 51 | - |
|
| 52 | - protected function view() |
|
| 53 | - { |
|
| 54 | - $this->setHtmlTitle('Exception viewer'); |
|
| 55 | - |
|
| 56 | - $requestedErrorId = WebRequest::getString('id'); |
|
| 57 | - $safeFilename = $this->safetyCheck($requestedErrorId); |
|
| 58 | - |
|
| 59 | - if ($safeFilename === false) { |
|
| 60 | - $this->redirect('errorLog'); |
|
| 61 | - |
|
| 62 | - return; |
|
| 63 | - } |
|
| 64 | - |
|
| 65 | - // note: at this point we've done sufficient sanity checks that we can be confident this value is safe to echo |
|
| 66 | - // back to the user. |
|
| 67 | - $this->assign('id', $requestedErrorId); |
|
| 68 | - $this->assign('date', date('Y-m-d H:i:s', filemtime($safeFilename))); |
|
| 69 | - |
|
| 70 | - $data = unserialize(file_get_contents($safeFilename)); |
|
| 71 | - $this->assign('server', $data['server']); |
|
| 72 | - $this->assign('get', $data['get']); |
|
| 73 | - $this->assign('post', $data['post']); |
|
| 74 | - |
|
| 75 | - $this->assign('globalHandler', $data['globalHandler']); |
|
| 76 | - |
|
| 77 | - $exceptionList = []; |
|
| 78 | - $current = $data; |
|
| 79 | - do { |
|
| 80 | - $ex = [ |
|
| 81 | - 'exception' => $current['exception'], |
|
| 82 | - 'message' => str_replace($this->getSiteConfiguration()->getFilePath(), '.', $current['message']), |
|
| 83 | - 'stack' => str_replace($this->getSiteConfiguration()->getFilePath(), '.', $current['stack']), |
|
| 84 | - ]; |
|
| 85 | - $exceptionList[] = $ex; |
|
| 86 | - |
|
| 87 | - $current = $current['previous']; |
|
| 88 | - } |
|
| 89 | - while ($current !== null); |
|
| 90 | - |
|
| 91 | - $this->assign('exceptionList', $exceptionList); |
|
| 92 | - |
|
| 93 | - $this->setTemplate('errorlog/details.tpl'); |
|
| 94 | - } |
|
| 95 | - |
|
| 96 | - public function remove() |
|
| 97 | - { |
|
| 98 | - $safeFilename = $this->safetyCheck(WebRequest::getString('id')); |
|
| 99 | - |
|
| 100 | - if ($safeFilename === false) { |
|
| 101 | - $this->redirect('errorLog'); |
|
| 102 | - |
|
| 103 | - return; |
|
| 104 | - } |
|
| 105 | - |
|
| 106 | - unlink($safeFilename); |
|
| 107 | - |
|
| 108 | - $this->redirect('errorLog'); |
|
| 109 | - |
|
| 110 | - return; |
|
| 111 | - } |
|
| 112 | - |
|
| 113 | - /** |
|
| 114 | - * @param string|null $requestedErrorId |
|
| 115 | - * |
|
| 116 | - * @return bool|string |
|
| 117 | - */ |
|
| 118 | - protected function safetyCheck(?string $requestedErrorId) |
|
| 119 | - { |
|
| 120 | - if ($requestedErrorId === null) { |
|
| 121 | - return false; |
|
| 122 | - } |
|
| 123 | - |
|
| 124 | - // security - only allow hex-encoded filenames, as this is what is generated. |
|
| 125 | - // This is prefixed with the configured directory. Path traversal is protected against due to . and / not being |
|
| 126 | - // part of the hex character set. |
|
| 127 | - if (!preg_match('/^[a-f0-9]{40}$/', $requestedErrorId)) { |
|
| 128 | - return false; |
|
| 129 | - } |
|
| 130 | - |
|
| 131 | - $errorLogDirectory = $this->getSiteConfiguration()->getErrorLog(); |
|
| 132 | - $filename = realpath($errorLogDirectory) . DIRECTORY_SEPARATOR . $requestedErrorId . '.log'; |
|
| 133 | - |
|
| 134 | - if (!file_exists($filename)) { |
|
| 135 | - return false; |
|
| 136 | - } |
|
| 137 | - |
|
| 138 | - return $filename; |
|
| 139 | - } |
|
| 17 | + /** |
|
| 18 | + * @inheritDoc |
|
| 19 | + */ |
|
| 20 | + protected function main() |
|
| 21 | + { |
|
| 22 | + $this->setHtmlTitle('Exception viewer'); |
|
| 23 | + |
|
| 24 | + $user = User::getCurrent($this->getDatabase()); |
|
| 25 | + $this->assign('canView', $this->barrierTest('view', $user)); |
|
| 26 | + $this->assign('canRemove', $this->barrierTest('remove', $user)); |
|
| 27 | + |
|
| 28 | + // Get the list of exception logs from the error log directory |
|
| 29 | + $errorLogDirectory = $this->getSiteConfiguration()->getErrorLog(); |
|
| 30 | + $files = scandir($errorLogDirectory); |
|
| 31 | + |
|
| 32 | + // Exclude the files we know should be there |
|
| 33 | + $filteredFiles = array_filter($files, function($file) { |
|
| 34 | + return !in_array($file, ['.', '..', 'README.md']); |
|
| 35 | + }); |
|
| 36 | + |
|
| 37 | + $exceptionDetails = array_map(function($item) use ($errorLogDirectory) { |
|
| 38 | + $filename = realpath($errorLogDirectory) . DIRECTORY_SEPARATOR . $item; |
|
| 39 | + |
|
| 40 | + return [ |
|
| 41 | + 'id' => str_replace('.log', '', $item), |
|
| 42 | + 'date' => date('Y-m-d H:i:s', filemtime($filename)), |
|
| 43 | + 'data' => str_replace($this->getSiteConfiguration()->getFilePath(), '.', |
|
| 44 | + unserialize(file_get_contents($filename))), |
|
| 45 | + ]; |
|
| 46 | + }, $filteredFiles); |
|
| 47 | + |
|
| 48 | + $this->assign('exceptionEntries', $exceptionDetails); |
|
| 49 | + $this->setTemplate('errorlog/main.tpl'); |
|
| 50 | + } |
|
| 51 | + |
|
| 52 | + protected function view() |
|
| 53 | + { |
|
| 54 | + $this->setHtmlTitle('Exception viewer'); |
|
| 55 | + |
|
| 56 | + $requestedErrorId = WebRequest::getString('id'); |
|
| 57 | + $safeFilename = $this->safetyCheck($requestedErrorId); |
|
| 58 | + |
|
| 59 | + if ($safeFilename === false) { |
|
| 60 | + $this->redirect('errorLog'); |
|
| 61 | + |
|
| 62 | + return; |
|
| 63 | + } |
|
| 64 | + |
|
| 65 | + // note: at this point we've done sufficient sanity checks that we can be confident this value is safe to echo |
|
| 66 | + // back to the user. |
|
| 67 | + $this->assign('id', $requestedErrorId); |
|
| 68 | + $this->assign('date', date('Y-m-d H:i:s', filemtime($safeFilename))); |
|
| 69 | + |
|
| 70 | + $data = unserialize(file_get_contents($safeFilename)); |
|
| 71 | + $this->assign('server', $data['server']); |
|
| 72 | + $this->assign('get', $data['get']); |
|
| 73 | + $this->assign('post', $data['post']); |
|
| 74 | + |
|
| 75 | + $this->assign('globalHandler', $data['globalHandler']); |
|
| 76 | + |
|
| 77 | + $exceptionList = []; |
|
| 78 | + $current = $data; |
|
| 79 | + do { |
|
| 80 | + $ex = [ |
|
| 81 | + 'exception' => $current['exception'], |
|
| 82 | + 'message' => str_replace($this->getSiteConfiguration()->getFilePath(), '.', $current['message']), |
|
| 83 | + 'stack' => str_replace($this->getSiteConfiguration()->getFilePath(), '.', $current['stack']), |
|
| 84 | + ]; |
|
| 85 | + $exceptionList[] = $ex; |
|
| 86 | + |
|
| 87 | + $current = $current['previous']; |
|
| 88 | + } |
|
| 89 | + while ($current !== null); |
|
| 90 | + |
|
| 91 | + $this->assign('exceptionList', $exceptionList); |
|
| 92 | + |
|
| 93 | + $this->setTemplate('errorlog/details.tpl'); |
|
| 94 | + } |
|
| 95 | + |
|
| 96 | + public function remove() |
|
| 97 | + { |
|
| 98 | + $safeFilename = $this->safetyCheck(WebRequest::getString('id')); |
|
| 99 | + |
|
| 100 | + if ($safeFilename === false) { |
|
| 101 | + $this->redirect('errorLog'); |
|
| 102 | + |
|
| 103 | + return; |
|
| 104 | + } |
|
| 105 | + |
|
| 106 | + unlink($safeFilename); |
|
| 107 | + |
|
| 108 | + $this->redirect('errorLog'); |
|
| 109 | + |
|
| 110 | + return; |
|
| 111 | + } |
|
| 112 | + |
|
| 113 | + /** |
|
| 114 | + * @param string|null $requestedErrorId |
|
| 115 | + * |
|
| 116 | + * @return bool|string |
|
| 117 | + */ |
|
| 118 | + protected function safetyCheck(?string $requestedErrorId) |
|
| 119 | + { |
|
| 120 | + if ($requestedErrorId === null) { |
|
| 121 | + return false; |
|
| 122 | + } |
|
| 123 | + |
|
| 124 | + // security - only allow hex-encoded filenames, as this is what is generated. |
|
| 125 | + // This is prefixed with the configured directory. Path traversal is protected against due to . and / not being |
|
| 126 | + // part of the hex character set. |
|
| 127 | + if (!preg_match('/^[a-f0-9]{40}$/', $requestedErrorId)) { |
|
| 128 | + return false; |
|
| 129 | + } |
|
| 130 | + |
|
| 131 | + $errorLogDirectory = $this->getSiteConfiguration()->getErrorLog(); |
|
| 132 | + $filename = realpath($errorLogDirectory) . DIRECTORY_SEPARATOR . $requestedErrorId . '.log'; |
|
| 133 | + |
|
| 134 | + if (!file_exists($filename)) { |
|
| 135 | + return false; |
|
| 136 | + } |
|
| 137 | + |
|
| 138 | + return $filename; |
|
| 139 | + } |
|
| 140 | 140 | } |
| 141 | 141 | \ No newline at end of file |
@@ -30,11 +30,13 @@ |
||
| 30 | 30 | $files = scandir($errorLogDirectory); |
| 31 | 31 | |
| 32 | 32 | // Exclude the files we know should be there |
| 33 | - $filteredFiles = array_filter($files, function($file) { |
|
| 33 | + $filteredFiles = array_filter($files, function($file) |
|
| 34 | + { |
|
| 34 | 35 | return !in_array($file, ['.', '..', 'README.md']); |
| 35 | 36 | }); |
| 36 | 37 | |
| 37 | - $exceptionDetails = array_map(function($item) use ($errorLogDirectory) { |
|
| 38 | + $exceptionDetails = array_map(function($item) use ($errorLogDirectory) |
|
| 39 | + { |
|
| 38 | 40 | $filename = realpath($errorLogDirectory) . DIRECTORY_SEPARATOR . $item; |
| 39 | 41 | |
| 40 | 42 | return [ |