wikimedia /
mediawiki
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Rebuild search index table from scratch. This may take several |
||
| 4 | * hours, depending on the database size and server configuration. |
||
| 5 | * |
||
| 6 | * Postgres is trigger-based and should never need rebuilding. |
||
| 7 | * |
||
| 8 | * This program is free software; you can redistribute it and/or modify |
||
| 9 | * it under the terms of the GNU General Public License as published by |
||
| 10 | * the Free Software Foundation; either version 2 of the License, or |
||
| 11 | * (at your option) any later version. |
||
| 12 | * |
||
| 13 | * This program is distributed in the hope that it will be useful, |
||
| 14 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
| 15 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||
| 16 | * GNU General Public License for more details. |
||
| 17 | * |
||
| 18 | * You should have received a copy of the GNU General Public License along |
||
| 19 | * with this program; if not, write to the Free Software Foundation, Inc., |
||
| 20 | * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
||
| 21 | * http://www.gnu.org/copyleft/gpl.html |
||
| 22 | * |
||
| 23 | * @file |
||
| 24 | * @ingroup Maintenance |
||
| 25 | * @todo document |
||
| 26 | */ |
||
| 27 | |||
| 28 | require_once __DIR__ . '/Maintenance.php'; |
||
| 29 | |||
| 30 | /** |
||
| 31 | * Maintenance script that rebuilds search index table from scratch. |
||
| 32 | * |
||
| 33 | * @ingroup Maintenance |
||
| 34 | */ |
||
| 35 | class RebuildTextIndex extends Maintenance { |
||
| 36 | const RTI_CHUNK_SIZE = 500; |
||
| 37 | |||
| 38 | /** |
||
| 39 | * @var Database |
||
| 40 | */ |
||
| 41 | private $db; |
||
| 42 | |||
| 43 | public function __construct() { |
||
| 44 | parent::__construct(); |
||
| 45 | $this->addDescription( 'Rebuild search index table from scratch' ); |
||
| 46 | } |
||
| 47 | |||
| 48 | public function getDbType() { |
||
| 49 | return Maintenance::DB_ADMIN; |
||
| 50 | } |
||
| 51 | |||
| 52 | public function execute() { |
||
| 53 | // Shouldn't be needed for Postgres |
||
| 54 | $this->db = $this->getDB( DB_MASTER ); |
||
| 55 | if ( $this->db->getType() == 'postgres' ) { |
||
| 56 | $this->error( "This script is not needed when using Postgres.\n", true ); |
||
| 57 | } |
||
| 58 | |||
| 59 | if ( $this->db->getType() == 'sqlite' ) { |
||
| 60 | if ( !DatabaseSqlite::getFulltextSearchModule() ) { |
||
| 61 | $this->error( "Your version of SQLite module for PHP doesn't " |
||
| 62 | . "support full-text search (FTS3).\n", true ); |
||
| 63 | } |
||
| 64 | if ( !$this->db->checkForEnabledSearch() ) { |
||
|
0 ignored issues
–
show
|
|||
| 65 | $this->error( "Your database schema is not configured for " |
||
| 66 | . "full-text search support. Run update.php.\n", true ); |
||
| 67 | } |
||
| 68 | } |
||
| 69 | |||
| 70 | if ( $this->db->getType() == 'mysql' ) { |
||
| 71 | $this->dropMysqlTextIndex(); |
||
| 72 | $this->clearSearchIndex(); |
||
| 73 | $this->populateSearchIndex(); |
||
| 74 | $this->createMysqlTextIndex(); |
||
| 75 | } else { |
||
| 76 | $this->clearSearchIndex(); |
||
| 77 | $this->populateSearchIndex(); |
||
| 78 | } |
||
| 79 | |||
| 80 | $this->output( "Done.\n" ); |
||
| 81 | } |
||
| 82 | |||
| 83 | /** |
||
| 84 | * Populates the search index with content from all pages |
||
| 85 | */ |
||
| 86 | protected function populateSearchIndex() { |
||
| 87 | $res = $this->db->select( 'page', 'MAX(page_id) AS count' ); |
||
| 88 | $s = $this->db->fetchObject( $res ); |
||
| 89 | $count = $s->count; |
||
| 90 | $this->output( "Rebuilding index fields for {$count} pages...\n" ); |
||
| 91 | $n = 0; |
||
| 92 | |||
| 93 | $fields = array_merge( |
||
| 94 | Revision::selectPageFields(), |
||
| 95 | Revision::selectFields(), |
||
| 96 | Revision::selectTextFields() |
||
| 97 | ); |
||
| 98 | |||
| 99 | while ( $n < $count ) { |
||
| 100 | if ( $n ) { |
||
| 101 | $this->output( $n . "\n" ); |
||
| 102 | } |
||
| 103 | $end = $n + self::RTI_CHUNK_SIZE - 1; |
||
| 104 | |||
| 105 | $res = $this->db->select( [ 'page', 'revision', 'text' ], $fields, |
||
| 106 | [ "page_id BETWEEN $n AND $end", 'page_latest = rev_id', 'rev_text_id = old_id' ], |
||
| 107 | __METHOD__ |
||
| 108 | ); |
||
| 109 | |||
| 110 | foreach ( $res as $s ) { |
||
| 111 | try { |
||
| 112 | $title = Title::makeTitle( $s->page_namespace, $s->page_title ); |
||
| 113 | |||
| 114 | $rev = new Revision( $s ); |
||
| 115 | $content = $rev->getContent(); |
||
| 116 | |||
| 117 | $u = new SearchUpdate( $s->page_id, $title, $content ); |
||
| 118 | $u->doUpdate(); |
||
| 119 | } catch ( MWContentSerializationException $ex ) { |
||
| 120 | $this->output( "Failed to deserialize content of revision {$s->rev_id} of page " |
||
| 121 | . "`" . $title->getPrefixedDBkey() . "`!\n" ); |
||
| 122 | } |
||
| 123 | } |
||
| 124 | $n += self::RTI_CHUNK_SIZE; |
||
| 125 | } |
||
| 126 | } |
||
| 127 | |||
| 128 | /** |
||
| 129 | * (MySQL only) Drops fulltext index before populating the table. |
||
| 130 | */ |
||
| 131 | View Code Duplication | private function dropMysqlTextIndex() { |
|
| 132 | $searchindex = $this->db->tableName( 'searchindex' ); |
||
| 133 | if ( $this->db->indexExists( 'searchindex', 'si_title', __METHOD__ ) ) { |
||
| 134 | $this->output( "Dropping index...\n" ); |
||
| 135 | $sql = "ALTER TABLE $searchindex DROP INDEX si_title, DROP INDEX si_text"; |
||
| 136 | $this->db->query( $sql, __METHOD__ ); |
||
| 137 | } |
||
| 138 | } |
||
| 139 | |||
| 140 | /** |
||
| 141 | * (MySQL only) Adds back fulltext index after populating the table. |
||
| 142 | */ |
||
| 143 | View Code Duplication | private function createMysqlTextIndex() { |
|
| 144 | $searchindex = $this->db->tableName( 'searchindex' ); |
||
| 145 | $this->output( "\nRebuild the index...\n" ); |
||
| 146 | $sql = "ALTER TABLE $searchindex ADD FULLTEXT si_title (si_title), " . |
||
| 147 | "ADD FULLTEXT si_text (si_text)"; |
||
| 148 | $this->db->query( $sql, __METHOD__ ); |
||
| 149 | } |
||
| 150 | |||
| 151 | /** |
||
| 152 | * Deletes everything from search index. |
||
| 153 | */ |
||
| 154 | private function clearSearchIndex() { |
||
| 155 | $this->output( 'Clearing searchindex table...' ); |
||
| 156 | $this->db->delete( 'searchindex', '*', __METHOD__ ); |
||
| 157 | $this->output( "Done\n" ); |
||
| 158 | } |
||
| 159 | } |
||
| 160 | |||
| 161 | $maintClass = "RebuildTextIndex"; |
||
| 162 | require_once RUN_MAINTENANCE_IF_MAIN; |
||
| 163 |
Let’s take a look at an example:
In the above example, the authenticate() method works fine as long as you just pass instances of MyUser. However, if you now also want to pass a different sub-classes of User which does not have a getDisplayName() method, the code will break.
Available Fixes
Change the type-hint for the parameter:
Add an additional type-check:
Add the method to the parent class: