Thijs/wiki.techinc.nl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
wiki.techinc.nl/img_auth.php

89 lines
2.4 KiB
PHP
Raw Normal View History

Script to allow MediaWiki-based authentication for downloading items from the upload directory. To use, deny access to the actual directory, and set $wgUploadPath to this script. Image URLs will be of the form "http://server.com/wiki/img_auth.php/0/00/Image.png". The script checks the cookies and the session data, and if everything is OK, streams out the named file.
2004-06-07 06:57:53 +00:00
<?php
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
* phpdoc for file description * single quotes
2005-01-27 04:30:18 +00:00
/**
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
* Image authorisation script
*
* To use this:
*
* Set $wgUploadDirectory to a non-public directory (not web accessible)
* Set $wgUploadPath to point to this file
* s~ +$~~
2006-01-07 13:09:30 +00:00
*
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
* Your server needs to support PATH_INFO; CGI-based configurations
* usually don't.
* phpdoc for file description * single quotes
2005-01-27 04:30:18 +00:00
*/
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
* Moved the main ob_start() from the default LocalSettings.php to WebStart.php. The ob_start() section should preferably be removed from older LocalSettings.php files. * Give Content-Length header for HTTP/1.0 clients. * Partial support for Flash cross-domain-policy filtering. Text entry points should be protected, but uploads are not.
2007-02-19 23:03:37 +00:00
define( 'MW_NO_OUTPUT_COMPRESSION', 1 );
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
require_once( dirname( __FILE__ ) . '/includes/WebStart.php' );
Consolidated web initialisation code into includes/WebStart.php. Moved profiling setup to a hook file "StartProfiler.php", following Brion's suggestion to merge Wikimedia's early profiling patch into subversion. Renamed Profiling.php and logProfilingData(), removed unnecessary wfProfileClose() calls.
2006-07-14 05:35:31 +00:00
wfProfileIn( 'img_auth.php' );
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
require_once( dirname( __FILE__ ) . '/includes/StreamFile.php' );
Script to allow MediaWiki-based authentication for downloading items from the upload directory. To use, deny access to the actual directory, and set $wgUploadPath to this script. Image URLs will be of the form "http://server.com/wiki/img_auth.php/0/00/Image.png". The script checks the cookies and the session data, and if everything is OK, streams out the named file.
2004-06-07 06:57:53 +00:00
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
// Extract path and image information
Clean up a few scriptlets
2004-10-14 02:13:12 +00:00
if( !isset( $_SERVER['PATH_INFO'] ) ) {
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
wfDebugLog( 'img_auth', 'Missing PATH_INFO' );
Clean up a few scriptlets
2004-10-14 02:13:12 +00:00
wfForbidden();
}
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
$path = $_SERVER['PATH_INFO'];
Script to allow MediaWiki-based authentication for downloading items from the upload directory. To use, deny access to the actual directory, and set $wgUploadPath to this script. Image URLs will be of the form "http://server.com/wiki/img_auth.php/0/00/Image.png". The script checks the cookies and the session data, and if everything is OK, streams out the named file.
2004-06-07 06:57:53 +00:00
$filename = realpath( $wgUploadDirectory . $_SERVER['PATH_INFO'] );
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
$realUpload = realpath( $wgUploadDirectory );
wfDebugLog( 'img_auth', "\$path is {$path}" );
wfDebugLog( 'img_auth', "\$filename is {$filename}" );
// Basic directory traversal check
if( substr( $filename, 0, strlen( $realUpload ) ) != $realUpload ) {
wfDebugLog( 'img_auth', 'Requested path not in upload directory' );
wfForbidden();
}
Output actual content with the error message, better usage of $wgWhitelistRead, explanation of how to use
2004-06-10 11:52:04 +00:00
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
// Extract the file name and chop off the size specifier
// (e.g. 120px-Foo.png => Foo.png)
$name = wfBaseName( $path );
if( preg_match( '!\d+px-(.*)!i', $name, $m ) )
$name = $m[1];
wfDebugLog( 'img_auth', "\$name is {$name}" );
$title = Title::makeTitleSafe( NS_IMAGE, $name );
if( !$title instanceof Title ) {
wfDebugLog( 'img_auth', "Unable to construct a valid Title from `{$name}`" );
Output actual content with the error message, better usage of $wgWhitelistRead, explanation of how to use
2004-06-10 11:52:04 +00:00
wfForbidden();
}
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
$title = $title->getPrefixedText();
Output actual content with the error message, better usage of $wgWhitelistRead, explanation of how to use
2004-06-10 11:52:04 +00:00
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
// Check the whitelist if needed
if( !$wgUser->getId() && ( !is_array( $wgWhitelistRead ) || !in_array( $title, $wgWhitelistRead ) ) ) {
wfDebugLog( 'img_auth', "Not logged in and `{$title}` not in whitelist." );
Output actual content with the error message, better usage of $wgWhitelistRead, explanation of how to use
2004-06-10 11:52:04 +00:00
wfForbidden();
Script to allow MediaWiki-based authentication for downloading items from the upload directory. To use, deny access to the actual directory, and set $wgUploadPath to this script. Image URLs will be of the form "http://server.com/wiki/img_auth.php/0/00/Image.png". The script checks the cookies and the session data, and if everything is OK, streams out the named file.
2004-06-07 06:57:53 +00:00
}
Clean up a few scriptlets
2004-10-14 02:13:12 +00:00
if( !file_exists( $filename ) ) {
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
wfDebugLog( 'img_auth', "`{$filename}` does not exist" );
Clean up a few scriptlets
2004-10-14 02:13:12 +00:00
wfForbidden();
}
if( is_dir( $filename ) ) {
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
wfDebugLog( 'img_auth', "`{$filename}` is a directory" );
Clean up a few scriptlets
2004-10-14 02:13:12 +00:00
wfForbidden();
}
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
// Stream the requested file
wfDebugLog( 'img_auth', "Streaming `{$filename}`" );
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested.
2005-04-16 04:33:34 +00:00
wfStreamFile( $filename );
Consolidated web initialisation code into includes/WebStart.php. Moved profiling setup to a hook file "StartProfiler.php", following Brion's suggestion to merge Wikimedia's early profiling patch into subversion. Renamed Profiling.php and logProfilingData(), removed unnecessary wfProfileClose() calls.
2006-07-14 05:35:31 +00:00
wfLogProfilingData();
Output actual content with the error message, better usage of $wgWhitelistRead, explanation of how to use
2004-06-10 11:52:04 +00:00
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
/**
* Issue a standard HTTP 403 Forbidden header and a basic
* error message, then end the script
*/
Output actual content with the error message, better usage of $wgWhitelistRead, explanation of how to use
2004-06-10 11:52:04 +00:00
function wfForbidden() {
* phpdoc for file description * single quotes
2005-01-27 04:30:18 +00:00
header( 'HTTP/1.0 403 Forbidden' );
* Add 'charset' to Content-Type headers on various HTTP error responses to forestall additional UTF-7-autodetect XSS issues. Probably not an issue on Apache 2.0+, but most servers send only 'text/html' by default when the script didn't specify more details. This fixes an issue with the Ajax interface error message on MSIE when $wgUseAjax is enabled (not default configuration); this UTF-7 variant on a previously fixed attack vector was discovered by Moshe BA from BugSec: http://www.bugsec.com/articles.php?Security=24 * Trackback responses now specify XML content type
2007-02-21 01:02:47 +00:00
header( 'Content-Type: text/html; charset=utf-8' );
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
echo <<<END
<html>
<body>
<h1>Access Denied</h1>
<p>You need to log in to access files on this server.</p>
</body>
</html>
END;
Consolidated web initialisation code into includes/WebStart.php. Moved profiling setup to a hook file "StartProfiler.php", following Brion's suggestion to merge Wikimedia's early profiling patch into subversion. Renamed Profiling.php and logProfilingData(), removed unnecessary wfProfileClose() calls.
2006-07-14 05:35:31 +00:00
wfLogProfilingData();
* Fix img_auth.php image name extraction for whitelist checking * (bug 10756) img_auth.php will now refuse logged-out requests when there is no whitelist, rather than allowing them through
2007-08-06 06:15:21 +00:00
exit();
}
Reference in a new issue Copy permalink