This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * Implements Special:Recentchangeslinked |
||
4 | * |
||
5 | * This program is free software; you can redistribute it and/or modify |
||
6 | * it under the terms of the GNU General Public License as published by |
||
7 | * the Free Software Foundation; either version 2 of the License, or |
||
8 | * (at your option) any later version. |
||
9 | * |
||
10 | * This program is distributed in the hope that it will be useful, |
||
11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||
13 | * GNU General Public License for more details. |
||
14 | * |
||
15 | * You should have received a copy of the GNU General Public License along |
||
16 | * with this program; if not, write to the Free Software Foundation, Inc., |
||
17 | * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
||
18 | * http://www.gnu.org/copyleft/gpl.html |
||
19 | * |
||
20 | * @file |
||
21 | * @ingroup SpecialPage |
||
22 | */ |
||
23 | |||
24 | /** |
||
25 | * This is to display changes made to all articles linked in an article. |
||
26 | * |
||
27 | * @ingroup SpecialPage |
||
28 | */ |
||
29 | class SpecialRecentChangesLinked extends SpecialRecentChanges { |
||
30 | /** @var bool|Title */ |
||
31 | protected $rclTargetTitle; |
||
32 | |||
33 | function __construct() { |
||
34 | parent::__construct( 'Recentchangeslinked' ); |
||
35 | } |
||
36 | |||
37 | public function getDefaultOptions() { |
||
38 | $opts = parent::getDefaultOptions(); |
||
39 | $opts->add( 'target', '' ); |
||
40 | $opts->add( 'showlinkedto', false ); |
||
41 | |||
42 | return $opts; |
||
43 | } |
||
44 | |||
45 | public function parseParameters( $par, FormOptions $opts ) { |
||
46 | $opts['target'] = $par; |
||
47 | } |
||
48 | |||
49 | public function doMainQuery( $conds, $opts ) { |
||
50 | $target = $opts['target']; |
||
51 | $showlinkedto = $opts['showlinkedto']; |
||
52 | $limit = $opts['limit']; |
||
53 | |||
54 | if ( $target === '' ) { |
||
55 | return false; |
||
56 | } |
||
57 | $outputPage = $this->getOutput(); |
||
58 | $title = Title::newFromText( $target ); |
||
59 | if ( !$title || $title->isExternal() ) { |
||
60 | $outputPage->addHTML( '<div class="errorbox">' . $this->msg( 'allpagesbadtitle' ) |
||
61 | ->parse() . '</div>' ); |
||
62 | |||
63 | return false; |
||
64 | } |
||
65 | |||
66 | $outputPage->setPageTitle( $this->msg( 'recentchangeslinked-title', $title->getPrefixedText() ) ); |
||
67 | |||
68 | /* |
||
69 | * Ordinary links are in the pagelinks table, while transclusions are |
||
70 | * in the templatelinks table, categorizations in categorylinks and |
||
71 | * image use in imagelinks. We need to somehow combine all these. |
||
72 | * Special:Whatlinkshere does this by firing multiple queries and |
||
73 | * merging the results, but the code we inherit from our parent class |
||
74 | * expects only one result set so we use UNION instead. |
||
75 | */ |
||
76 | |||
77 | $dbr = wfGetDB( DB_REPLICA, 'recentchangeslinked' ); |
||
78 | $id = $title->getArticleID(); |
||
79 | $ns = $title->getNamespace(); |
||
80 | $dbkey = $title->getDBkey(); |
||
81 | |||
82 | $tables = [ 'recentchanges' ]; |
||
83 | $select = RecentChange::selectFields(); |
||
84 | $join_conds = []; |
||
85 | $query_options = []; |
||
86 | |||
87 | // left join with watchlist table to highlight watched rows |
||
88 | $uid = $this->getUser()->getId(); |
||
89 | View Code Duplication | if ( $uid && $this->getUser()->isAllowed( 'viewmywatchlist' ) ) { |
|
90 | $tables[] = 'watchlist'; |
||
91 | $select[] = 'wl_user'; |
||
92 | $join_conds['watchlist'] = [ 'LEFT JOIN', [ |
||
93 | 'wl_user' => $uid, |
||
94 | 'wl_title=rc_title', |
||
95 | 'wl_namespace=rc_namespace' |
||
96 | ] ]; |
||
97 | } |
||
98 | View Code Duplication | if ( $this->getUser()->isAllowed( 'rollback' ) ) { |
|
99 | $tables[] = 'page'; |
||
100 | $join_conds['page'] = [ 'LEFT JOIN', 'rc_cur_id=page_id' ]; |
||
101 | $select[] = 'page_latest'; |
||
102 | } |
||
103 | ChangeTags::modifyDisplayQuery( |
||
104 | $tables, |
||
105 | $select, |
||
106 | $conds, |
||
107 | $join_conds, |
||
108 | $query_options, |
||
109 | $opts['tagfilter'] |
||
110 | ); |
||
111 | |||
112 | if ( !$this->runMainQueryHook( $tables, $select, $conds, $query_options, $join_conds, |
||
113 | $opts ) |
||
114 | ) { |
||
115 | return false; |
||
116 | } |
||
117 | |||
118 | if ( $ns == NS_CATEGORY && !$showlinkedto ) { |
||
119 | // special handling for categories |
||
120 | // XXX: should try to make this less kludgy |
||
121 | $link_tables = [ 'categorylinks' ]; |
||
122 | $showlinkedto = true; |
||
123 | } else { |
||
124 | // for now, always join on these tables; really should be configurable as in whatlinkshere |
||
125 | $link_tables = [ 'pagelinks', 'templatelinks' ]; |
||
126 | // imagelinks only contains links to pages in NS_FILE |
||
127 | if ( $ns == NS_FILE || !$showlinkedto ) { |
||
128 | $link_tables[] = 'imagelinks'; |
||
129 | } |
||
130 | } |
||
131 | |||
132 | if ( $id == 0 && !$showlinkedto ) { |
||
133 | return false; // nonexistent pages can't link to any pages |
||
134 | } |
||
135 | |||
136 | // field name prefixes for all the various tables we might want to join with |
||
137 | $prefix = [ |
||
138 | 'pagelinks' => 'pl', |
||
139 | 'templatelinks' => 'tl', |
||
140 | 'categorylinks' => 'cl', |
||
141 | 'imagelinks' => 'il' |
||
142 | ]; |
||
143 | |||
144 | $subsql = []; // SELECT statements to combine with UNION |
||
145 | |||
146 | foreach ( $link_tables as $link_table ) { |
||
147 | $pfx = $prefix[$link_table]; |
||
148 | |||
149 | // imagelinks and categorylinks tables have no xx_namespace field, |
||
150 | // and have xx_to instead of xx_title |
||
151 | if ( $link_table == 'imagelinks' ) { |
||
152 | $link_ns = NS_FILE; |
||
153 | } elseif ( $link_table == 'categorylinks' ) { |
||
154 | $link_ns = NS_CATEGORY; |
||
155 | } else { |
||
156 | $link_ns = 0; |
||
157 | } |
||
158 | |||
159 | if ( $showlinkedto ) { |
||
160 | // find changes to pages linking to this page |
||
161 | if ( $link_ns ) { |
||
162 | if ( $ns != $link_ns ) { |
||
163 | continue; |
||
164 | } // should never happen, but check anyway |
||
165 | $subconds = [ "{$pfx}_to" => $dbkey ]; |
||
166 | } else { |
||
167 | $subconds = [ "{$pfx}_namespace" => $ns, "{$pfx}_title" => $dbkey ]; |
||
168 | } |
||
169 | $subjoin = "rc_cur_id = {$pfx}_from"; |
||
170 | } else { |
||
171 | // find changes to pages linked from this page |
||
172 | $subconds = [ "{$pfx}_from" => $id ]; |
||
173 | if ( $link_table == 'imagelinks' || $link_table == 'categorylinks' ) { |
||
174 | $subconds["rc_namespace"] = $link_ns; |
||
175 | $subjoin = "rc_title = {$pfx}_to"; |
||
176 | } else { |
||
177 | $subjoin = [ "rc_namespace = {$pfx}_namespace", "rc_title = {$pfx}_title" ]; |
||
178 | } |
||
179 | } |
||
180 | |||
181 | if ( $dbr->unionSupportsOrderAndLimit() ) { |
||
182 | $order = [ 'ORDER BY' => 'rc_timestamp DESC' ]; |
||
183 | } else { |
||
184 | $order = []; |
||
185 | } |
||
186 | |||
187 | $query = $dbr->selectSQLText( |
||
188 | array_merge( $tables, [ $link_table ] ), |
||
189 | $select, |
||
190 | $conds + $subconds, |
||
191 | __METHOD__, |
||
192 | $order + $query_options, |
||
193 | $join_conds + [ $link_table => [ 'INNER JOIN', $subjoin ] ] |
||
194 | ); |
||
195 | |||
196 | if ( $dbr->unionSupportsOrderAndLimit() ) { |
||
197 | $query = $dbr->limitResult( $query, $limit ); |
||
198 | } |
||
199 | |||
200 | $subsql[] = $query; |
||
201 | } |
||
202 | |||
203 | if ( count( $subsql ) == 0 ) { |
||
204 | return false; // should never happen |
||
205 | } |
||
206 | if ( count( $subsql ) == 1 && $dbr->unionSupportsOrderAndLimit() ) { |
||
207 | $sql = $subsql[0]; |
||
208 | } else { |
||
209 | // need to resort and relimit after union |
||
210 | $sql = $dbr->unionQueries( $subsql, false ) . ' ORDER BY rc_timestamp DESC'; |
||
211 | $sql = $dbr->limitResult( $sql, $limit, false ); |
||
212 | } |
||
213 | |||
214 | $res = $dbr->query( $sql, __METHOD__ ); |
||
215 | |||
216 | if ( $res->numRows() == 0 ) { |
||
217 | $this->mResultEmpty = true; |
||
0 ignored issues
–
show
|
|||
218 | } |
||
219 | |||
220 | return $res; |
||
221 | } |
||
222 | |||
223 | function setTopText( FormOptions $opts ) { |
||
224 | $target = $this->getTargetTitle(); |
||
225 | if ( $target ) { |
||
226 | $this->getOutput()->addBacklinkSubtitle( $target ); |
||
227 | $this->getSkin()->setRelevantTitle( $target ); |
||
228 | } |
||
229 | } |
||
230 | |||
231 | /** |
||
232 | * Get options to be displayed in a form |
||
233 | * |
||
234 | * @param FormOptions $opts |
||
235 | * @return array |
||
236 | */ |
||
237 | function getExtraOptions( $opts ) { |
||
238 | $extraOpts = parent::getExtraOptions( $opts ); |
||
239 | |||
240 | $opts->consumeValues( [ 'showlinkedto', 'target' ] ); |
||
241 | |||
242 | $extraOpts['target'] = [ $this->msg( 'recentchangeslinked-page' )->escaped(), |
||
243 | Xml::input( 'target', 40, str_replace( '_', ' ', $opts['target'] ) ) . |
||
244 | Xml::check( 'showlinkedto', $opts['showlinkedto'], [ 'id' => 'showlinkedto' ] ) . ' ' . |
||
245 | Xml::label( $this->msg( 'recentchangeslinked-to' )->text(), 'showlinkedto' ) ]; |
||
246 | |||
247 | $this->addHelpLink( 'Help:Related changes' ); |
||
248 | return $extraOpts; |
||
249 | } |
||
250 | |||
251 | /** |
||
252 | * @return Title |
||
253 | */ |
||
254 | function getTargetTitle() { |
||
255 | if ( $this->rclTargetTitle === null ) { |
||
256 | $opts = $this->getOptions(); |
||
257 | if ( isset( $opts['target'] ) && $opts['target'] !== '' ) { |
||
258 | $this->rclTargetTitle = Title::newFromText( $opts['target'] ); |
||
259 | } else { |
||
260 | $this->rclTargetTitle = false; |
||
261 | } |
||
262 | } |
||
263 | |||
264 | return $this->rclTargetTitle; |
||
265 | } |
||
266 | |||
267 | /** |
||
268 | * Return an array of subpages beginning with $search that this special page will accept. |
||
269 | * |
||
270 | * @param string $search Prefix to search for |
||
271 | * @param int $limit Maximum number of results to return (usually 10) |
||
272 | * @param int $offset Number of results to skip (usually 0) |
||
273 | * @return string[] Matching subpages |
||
274 | */ |
||
275 | public function prefixSearchSubpages( $search, $limit, $offset ) { |
||
276 | return $this->prefixSearchString( $search, $limit, $offset ); |
||
277 | } |
||
278 | } |
||
279 |
In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code:
Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: