dcef1674a5
This allows a file other than LocalSettings.php to be used as the primary settings file by setting the MW_CONFIG_FILE environment variable. This also allows the primary settings file to use YAML or JSON format. Using static configuration files should be the default in the future. However, YAML files in the document root could easily be exposed to the public. Better not to encourage that, and require them to be enabled explicitly and loaded from a different place. Bug: T294750 Change-Id: I7747f83481cb05a6d05f819be652259951183819
122 lines
3.9 KiB
PHP
122 lines
3.9 KiB
PHP
<?php
|
|
/**
|
|
* The set up for all MediaWiki web requests.
|
|
*
|
|
* It does:
|
|
* - web-related security checks,
|
|
* - decide how and from where to load site configuration (LocalSettings.php),
|
|
* - load Setup.php.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
* http://www.gnu.org/copyleft/gpl.html
|
|
*
|
|
* @file
|
|
*/
|
|
|
|
/**
|
|
* @defgroup entrypoint Entry points
|
|
*
|
|
* These primary scripts live in the root directory. They are the ones used by
|
|
* web requests to interact with the wiki. Other PHP files in the repository
|
|
* do not need to be accessed directly by the web.
|
|
*/
|
|
|
|
# T17461: Make IE8 turn off content sniffing. Everybody else should ignore this
|
|
# We're adding it here so that it's *always* set, even for alternate entry
|
|
# points and when $wgOut gets disabled or overridden.
|
|
use MediaWiki\Settings\SettingsBuilder;
|
|
|
|
header( 'X-Content-Type-Options: nosniff' );
|
|
|
|
# Valid web server entry point, enable includes.
|
|
# Please don't move this line to includes/Defines.php. This line essentially
|
|
# defines a valid entry point. If you put it in includes/Defines.php, then
|
|
# any script that includes it becomes an entry point, thereby defeating
|
|
# its purpose.
|
|
define( 'MEDIAWIKI', true );
|
|
|
|
# Full path to the installation directory.
|
|
$IP = getenv( 'MW_INSTALL_PATH' );
|
|
if ( $IP === false ) {
|
|
$IP = dirname( __DIR__ );
|
|
}
|
|
|
|
/**
|
|
* @return never
|
|
*/
|
|
function wfWebStartNoLocalSettings() {
|
|
# LocalSettings.php is the per-site customization file. If it does not exist
|
|
# the wiki installer needs to be launched or the generated file uploaded to
|
|
# the root wiki directory. Give a hint, if it is not readable by the server.
|
|
global $IP;
|
|
require_once "$IP/includes/NoLocalSettings.php";
|
|
die();
|
|
}
|
|
|
|
require_once "$IP/includes/BootstrapHelperFunctions.php";
|
|
|
|
// If no LocalSettings file exists, try to display an error page
|
|
// (use a callback because it depends on TemplateParser)
|
|
if ( !defined( 'MW_CONFIG_CALLBACK' ) ) {
|
|
wfDetectLocalSettingsFile( $IP );
|
|
if ( !is_readable( MW_CONFIG_FILE ) ) {
|
|
define( 'MW_CONFIG_CALLBACK', 'wfWebStartNoLocalSettings' );
|
|
}
|
|
}
|
|
|
|
function wfWebStartSetup( SettingsBuilder $settings ) {
|
|
// Initialise output buffering
|
|
// Check for previously set up buffers, to avoid a mix of gzip and non-gzip output.
|
|
if ( ob_get_level() == 0 ) {
|
|
ob_start( 'MediaWiki\\OutputHandler::handle' );
|
|
}
|
|
}
|
|
|
|
// Custom setup for WebStart entry point
|
|
if ( !defined( 'MW_SETUP_CALLBACK' ) ) {
|
|
define( 'MW_SETUP_CALLBACK', 'wfWebStartSetup' );
|
|
}
|
|
|
|
require_once "$IP/includes/Setup.php";
|
|
|
|
# Multiple DBs or commits might be used; keep the request as transactional as possible
|
|
if ( isset( $_SERVER['REQUEST_METHOD'] ) && $_SERVER['REQUEST_METHOD'] === 'POST' ) {
|
|
ignore_user_abort( true );
|
|
}
|
|
|
|
if ( !defined( 'MW_API' ) && !defined( 'MW_REST_API' ) &&
|
|
RequestContext::getMain()->getRequest()->getHeader( 'Promise-Non-Write-API-Action' )
|
|
) {
|
|
header( 'Cache-Control: no-cache' );
|
|
header( 'Content-Type: text/html; charset=utf-8' );
|
|
HttpStatus::header( 400 );
|
|
$errorHtml = wfMessage( 'nonwrite-api-promise-error' )
|
|
->useDatabase( false )
|
|
->inContentLanguage()
|
|
->escaped();
|
|
$content = <<<HTML
|
|
<!DOCTYPE html>
|
|
<html>
|
|
<head><meta charset="UTF-8" /></head>
|
|
<body>
|
|
$errorHtml
|
|
</body>
|
|
</html>
|
|
|
|
HTML;
|
|
header( 'Content-Length: ' . strlen( $content ) );
|
|
echo $content;
|
|
die();
|
|
}
|