x-tools / xtools

src/Model/User.php

<?php

declare(strict_types = 1);

namespace App\Model;

use App\Repository\UserRepository;
use DateTime;
use Exception;
use Wikimedia\IPUtils;

/**
 * A User is a wiki user who has the same username across all projects in an XTools installation.
 */
class User extends Model
{
    /** @var int Maximum queryable range for IPv4. */
    public const MAX_IPV4_CIDR = 16;

    /** @var int Maximum queryable range for IPv6. */
    public const MAX_IPV6_CIDR = 32;

    /** @var string The user's username. */
    protected string $username;

    /** @var int[] Quick cache of edit counts, keyed by project domain. */
    protected array $editCounts = [];

    /**
     * Create a new User given a username.
     * @param string $username
     */
    public function __construct(UserRepository $repository, string $username)
    {
        $this->repository = $repository;
        if ('ipr-' === substr($username, 0, 4)) {
            $username = substr($username, 4);
        }
        $this->username = ucfirst(str_replace('_', ' ', trim($username)));

        // IPv6 address are stored as uppercase in the database.
        if ($this->isAnon()) {
            $this->username = IPUtils::sanitizeIP($this->username);
        }
    }

    /**
     * Unique identifier for this User, to be used in cache keys. Use of md5 ensures the cache key does not contain
     * reserved characters. You could also use the ID, but that may require an unnecessary DB query.
     * @see Repository::getCacheKey()
     * @return string
     */
    public function getCacheKey(): string
    {
        return md5($this->username);
    }

    /**
     * Get the username.
     * @return string
     */
    public function getUsername(): string
    {
        return $this->username;
    }

    /**
     * Get a prettified username for IP addresses. For accounts, just the username is returned.
     * @return string
     */
    public function getPrettyUsername(): string
    {
        if (!$this->isAnon()) {
            return $this->username;
        }
        return IPUtils::prettifyIP($this->username);
    }

    /**
     * Get the username identifier that should be used in routing. This only matters for IP ranges,
     * which get prefixed with 'ipr-' to ensure they don't conflict with other routing params (such as namespace ID).
     * Always use this method when linking to or generating internal routes, and use it nowhere else.
     * @return string
     */
    public function getUsernameIdent(): string
    {
        if ($this->isIpRange()) {
            return 'ipr-'.$this->username;
        }
        return $this->username;
    }

    /**
     * Is this an IP range?
     * @return bool
     */
    public function isIpRange(): bool
    {
        return IPUtils::isValidRange($this->username);
    }

    /**
     * Is this an IPv6 address or range?
     * @return bool
     */
    public function isIPv6(): bool
    {
        return IPUtils::isIPv6($this->username);
    }

    /**
     * Get the common characters between the start and end address of an IPv4 range.
     * This is used when running a LIKE query against actor names.
     * @return string[]|null
     */
    public function getIpSubstringFromCidr(): ?string
    {
        if (!$this->isIpRange()) {
            return null;
        }

        if ($this->isIPv6()) {
            // Adapted from https://stackoverflow.com/a/10086404/604142 (CC BY-SA 3.0)
            [$firstAddrStr, $prefixLen] = explode('/', $this->username);
            $firstAddrBin = inet_pton($firstAddrStr);
            $firstAddrUnpacked = unpack('H*', $firstAddrBin);
            $firstAddrHex = reset($firstAddrUnpacked);
            $range[0] = inet_ntop($firstAddrBin);

$range was never initialized. Although not strictly required by PHP, it is generally a good practice to add $range = array(); before regardless.

            $flexBits = 128 - $prefixLen;
            $lastAddrHex = $firstAddrHex;

            $pos = 31;
            while ($flexBits > 0) {
                $orig = substr($lastAddrHex, $pos, 1);

It seems like $lastAddrHex can also be of type array; however, parameter $string of substr() does only seem to accept string, maybe add an additional type check?

                $origVal = hexdec($orig);
                $newVal = $origVal | (pow(2, min(4, $flexBits)) - 1);
                $new = dechex($newVal);
                $lastAddrHex = substr_replace($lastAddrHex, $new, $pos, 1);
                $flexBits -= 4;
                $pos -= 1;
            }

            $lastAddrBin = pack('H*', $lastAddrHex);
            $range[1] = inet_ntop($lastAddrBin);
        } else {
            $cidr = explode('/', $this->username);
            $range[0] = long2ip(ip2long($cidr[0]) & -1 << (32 - (int)$cidr[1]));
            $range[1] = long2ip(ip2long($range[0]) + pow(2, (32 - (int)$cidr[1])) - 1);
        }

        // Find the leftmost common characters between the two addresses.
        $common = '';
        $startSplit = str_split(strtoupper($range[0]));
        $endSplit = str_split(strtoupper($range[1]));
        foreach ($startSplit as $index => $char) {
            if ($endSplit[$index] === $char) {
                $common .= $char;
            } else {
                break;
            }
        }

        return $common;
    }

    /**
     * Is this IP range outside the queryable limits?
     * @return bool
     */
    public function isQueryableRange(): bool
    {
        if (!$this->isIpRange()) {
            return true;
        }

        [, $bits] = IPUtils::parseCIDR($this->username);
        $limit = $this->isIPv6() ? self::MAX_IPV6_CIDR : self::MAX_IPV4_CIDR;
        return (int)$bits >= $limit;
    }

    /**
     * Get the user's ID on the given project.
     * @param Project $project
     * @return int|null
     */
    public function getId(Project $project): ?int
    {
        $ret = $this->repository->getIdAndRegistration(

The method getIdAndRegistration() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

            $project->getDatabaseName(),
            $this->getUsername()
        );

        return $ret ? (int)$ret['userId'] : null;
    }

    /**
     * Get the user's actor ID on the given project.
     * @param Project $project
     * @return int
     */
    public function getActorId(Project $project): int
    {
        return (int)$this->repository->getActorId(

The method getActorId() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

            $project->getDatabaseName(),
            $this->getUsername()
        );
    }

    /**
     * Get the user's registration date on the given project.
     * @param Project $project
     * @return DateTime|null null if no registration date was found.
     */
    public function getRegistrationDate(Project $project): ?DateTime
    {
        $ret = $this->repository->getIdAndRegistration(
            $project->getDatabaseName(),
            $this->getUsername()
        );

        return null !== $ret['regDate']
            ? DateTime::createFromFormat('YmdHis', $ret['regDate'])
            : null;
    }

    /**
     * Get a user's local user rights on the given Project.
     * @param Project $project
     * @return string[]
     */
    public function getUserRights(Project $project): array
    {
        return $this->repository->getUserRights($project, $this);

The method getUserRights() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

    }

    /**
     * Get a list of this user's global rights.
     * @param Project|null $project A project to query; if not provided, the default will be used.
     * @return string[]
     */
    public function getGlobalUserRights(?Project $project = null): array
    {
        return $this->repository->getGlobalUserRights($this->getUsername(), $project);

The method getGlobalUserRights() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

    }

    /**
     * Get the user's (system) edit count.
     * @param Project $project
     * @return int
     */
    public function getEditCount(Project $project): int
    {
        $domain = $project->getDomain();
        if (isset($this->editCounts[$domain])) {
            return $this->editCounts[$domain];
        }

        $this->editCounts[$domain] = (int)$this->repository->getEditCount(

The method getEditCount() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

            $project->getDatabaseName(),
            $this->getUsername()
        );

        return $this->editCounts[$domain];
    }

    /**
     * Number of edits which if exceeded, will require the user to log in.
     * @return int
     */
    public function numEditsRequiringLogin(): int
    {
        return $this->repository->numEditsRequiringLogin();

The method numEditsRequiringLogin() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

    }

    /**
     * Maximum number of edits to process, based on configuration.
     * @return int
     */
    public function maxEdits(): int
    {
        return $this->repository->maxEdits();

The method maxEdits() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

    }

    /**
     * Does this user exist on the given project?
     * @param Project $project
     * @return bool
     */
    public function existsOnProject(Project $project): bool
    {
        return $this->getId($project) > 0;
    }

    /**
     * Does this user exist globally?
     * @return bool
     */
    public function existsGlobally(): bool
    {
        return $this->repository->existsGlobally($this);

The method existsGlobally() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

    }

    /**
     * Is this user an Administrator on the given project?
     * @param Project $project The project.
     * @return bool
     */
    public function isAdmin(Project $project): bool
    {
        return false !== array_search('sysop', $this->getUserRights($project));
    }

    /**
     * Is this user an anonymous user (IP)?
     * @return bool
     */
    public function isAnon(): bool
    {
        return IPUtils::isIPAddress($this->username);
    }

    /**
     * Get the expiry of the current block on the user
     * @param Project $project The project.
     * @return DateTime|bool Expiry as DateTime, true if indefinite, or false if they are not blocked.
     */
    public function getBlockExpiry(Project $project)
    {
        $expiry = $this->repository->getBlockExpiry(

The method getBlockExpiry() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

            $project->getDatabaseName(),
            $this->getUsername()
        );

        if ('infinity' === $expiry) {
            return true;
        } elseif (false === $expiry) {
            return false;
        } else {
            return new DateTime($expiry);
        }
    }

    /**
     * Is this user currently blocked on the given project?
     * @param Project $project The project.
     * @return bool
     */
    public function isBlocked(Project $project): bool
    {
        return false !== $this->getBlockExpiry($project);
    }

    /**
     * Does the user have enough edits that we want to require login?
     * @param Project $project
     * @return bool
     */
    public function hasManyEdits(Project $project): bool
    {
        $editCount = $this->getEditCount($project);
        return $editCount > $this->numEditsRequiringLogin();
    }

    /**
     * Does the user have more edits than maximum amount allowed for processing?
     * @param Project $project
     * @return bool
     */
    public function hasTooManyEdits(Project $project): bool
    {
        $editCount = $this->getEditCount($project);
        return $this->maxEdits() > 0 && $editCount > $this->maxEdits();
    }

    /**
     * Get edit count within given timeframe and namespace
     * @param Project $project
     * @param int|string $namespace Namespace ID or 'all' for all namespaces
     * @param int|false $start Start date as Unix timestamp.
     * @param int|false $end End date as Unix timestamp.
     * @return int
     */
    public function countEdits(Project $project, $namespace = 'all', $start = false, $end = false): int
    {
        return $this->repository->countEdits($project, $this, $namespace, $start, $end);

The method countEdits() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

    }

    /**
     * Is this user the same as the current XTools user?
     * @return bool
     */
    public function isCurrentlyLoggedIn(): bool
    {
        try {
            $ident = $this->repository->getXtoolsUserInfo();

The method getXtoolsUserInfo() does not exist on App\Repository\Repository. It seems like you code against a sub-type of App\Repository\Repository such as App\Repository\UserRepository.

        } catch (Exception $exception) {
            return false;
        }
        return isset($ident->username) && $ident->username === $this->getUsername();
    }
}