4191b3d0b1
Allow resetting null tokens (users affected by bug 41586), and improve the overall performance of the script for large wikis. Adds "nulls" flag to indicate that only users with bad tokens get reset. Bug: 41586 Change-Id: I524607d3e54aa1c3703019cca46b69558847182e
110 lines
3.5 KiB
PHP
110 lines
3.5 KiB
PHP
<?php
|
|
/**
|
|
* Reset the user_token for all users on the wiki. Useful if you believe
|
|
* that your user table was acidentally leaked to an external source.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
* http://www.gnu.org/copyleft/gpl.html
|
|
*
|
|
* @file
|
|
* @ingroup Maintenance
|
|
* @author Daniel Friesen <mediawiki@danielfriesen.name>
|
|
* @author Chris Steipp <csteipp@wikimedia.org>
|
|
*/
|
|
|
|
require_once __DIR__ . '/Maintenance.php';
|
|
|
|
/**
|
|
* Maintenance script to reset the user_token for all users on the wiki.
|
|
*
|
|
* @ingroup Maintenance
|
|
*/
|
|
class ResetUserTokens extends Maintenance {
|
|
public function __construct() {
|
|
parent::__construct();
|
|
$this->mDescription = "Reset the user_token of all users on the wiki. Note that this may log some of them out.";
|
|
$this->addOption( 'nowarn', "Hides the 5 seconds warning", false, false );
|
|
$this->addOption( 'nulls', 'Only reset tokens that are currently null (string of \x00\'s)', false, false );
|
|
$this->setBatchSize( 1000 );
|
|
}
|
|
|
|
public function execute() {
|
|
$this->nullsOnly = $this->getOption( 'nulls' );
|
|
|
|
if ( !$this->getOption( 'nowarn' ) ) {
|
|
if ( $this->nullsOnly ) {
|
|
$this->output( "The script is about to reset the user_token for USERS WITH NULL TOKENS in the database.\n" );
|
|
} else {
|
|
$this->output( "The script is about to reset the user_token for ALL USERS in the database.\n" );
|
|
$this->output( "This may log some of them out and is not necessary unless you believe your\n" );
|
|
$this->output( "user table has been compromised.\n" );
|
|
}
|
|
$this->output( "\n" );
|
|
$this->output( "Abort with control-c in the next five seconds (skip this countdown with --nowarn) ... " );
|
|
wfCountDown( 5 );
|
|
}
|
|
|
|
// We list user by user_id from one of the slave database
|
|
$dbr = wfGetDB( DB_SLAVE );
|
|
|
|
$where = array();
|
|
if ( $this->nullsOnly ) {
|
|
// Have to build this by hand, because \ is escaped in helper functions
|
|
$where = array( 'user_token = \'' . str_repeat( '\0', 32) . '\'' );
|
|
}
|
|
|
|
$maxid = $dbr->selectField( 'user', 'MAX(user_id)', array(), __METHOD__ );
|
|
|
|
$min = 0;
|
|
$max = $this->mBatchSize;
|
|
|
|
do {
|
|
$result = $dbr->select( 'user',
|
|
array( 'user_id' ),
|
|
array_merge(
|
|
$where,
|
|
array( 'user_id > ' . $dbr->addQuotes( $min ),
|
|
'user_id <= ' . $dbr->addQuotes( $max )
|
|
)
|
|
),
|
|
__METHOD__
|
|
);
|
|
|
|
foreach ( $result as $user ) {
|
|
$this->updateUser( $user->user_id );
|
|
}
|
|
|
|
$min = $max;
|
|
$max = $min + $this->mBatchSize;
|
|
|
|
wfWaitForSlaves();
|
|
|
|
} while ( $max <= $maxid );
|
|
|
|
}
|
|
|
|
private function updateUser( $userid ) {
|
|
$user = User::newFromId( $userid );
|
|
$username = $user->getName();
|
|
$this->output( 'Resetting user_token for "' . $username . '": ' );
|
|
// Change value
|
|
$user->setToken();
|
|
$user->saveSettings();
|
|
$this->output( " OK\n" );
|
|
}
|
|
}
|
|
|
|
$maintClass = "ResetUserTokens";
|
|
require_once RUN_MAINTENANCE_IF_MAIN;
|