These are needed for OAuth grants. Note that we don't bother with a 'viewmyoptions' right, since the majority will be determinable from just observing the interface. Note that the fact of having a confirmed email address cannot be reliably hidden, and if the user has 'sendemail' they may be able to determine the real name and email address by sending an email to another account that they control. Change-Id: I3f03dd010020e8d43cc2d3bca7b3ef7196d1c548
215 lines
6.2 KiB
PHP
215 lines
6.2 KiB
PHP
<?php
|
|
/**
|
|
*
|
|
*
|
|
* Created on Apr 15, 2012
|
|
*
|
|
* Copyright © 2012 Szymon Świerkosz beau@adres.pl
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
* http://www.gnu.org/copyleft/gpl.html
|
|
*
|
|
* @file
|
|
*/
|
|
|
|
/**
|
|
* API module that facilitates the changing of user's preferences.
|
|
* Requires API write mode to be enabled.
|
|
*
|
|
* @ingroup API
|
|
*/
|
|
class ApiOptions extends ApiBase {
|
|
|
|
/**
|
|
* Changes preferences of the current user.
|
|
*/
|
|
public function execute() {
|
|
$user = $this->getUser();
|
|
|
|
if ( $user->isAnon() ) {
|
|
$this->dieUsage( 'Anonymous users cannot change preferences', 'notloggedin' );
|
|
}
|
|
|
|
if ( !$user->isAllowed( 'editmyoptions' ) ) {
|
|
$this->dieUsage( 'You don\'t have permission to edit your options', 'permissiondenied' );
|
|
}
|
|
|
|
$params = $this->extractRequestParams();
|
|
$changed = false;
|
|
|
|
if ( isset( $params['optionvalue'] ) && !isset( $params['optionname'] ) ) {
|
|
$this->dieUsageMsg( array( 'missingparam', 'optionname' ) );
|
|
}
|
|
|
|
if ( $params['reset'] ) {
|
|
$user->resetOptions( $params['resetkinds'] );
|
|
$changed = true;
|
|
}
|
|
|
|
$changes = array();
|
|
if ( count( $params['change'] ) ) {
|
|
foreach ( $params['change'] as $entry ) {
|
|
$array = explode( '=', $entry, 2 );
|
|
$changes[$array[0]] = isset( $array[1] ) ? $array[1] : null;
|
|
}
|
|
}
|
|
if ( isset( $params['optionname'] ) ) {
|
|
$newValue = isset( $params['optionvalue'] ) ? $params['optionvalue'] : null;
|
|
$changes[$params['optionname']] = $newValue;
|
|
}
|
|
if ( !$changed && !count( $changes ) ) {
|
|
$this->dieUsage( 'No changes were requested', 'nochanges' );
|
|
}
|
|
|
|
$prefs = Preferences::getPreferences( $user, $this->getContext() );
|
|
$prefsKinds = $user->getOptionKinds( $this->getContext(), $changes );
|
|
|
|
foreach ( $changes as $key => $value ) {
|
|
switch ( $prefsKinds[$key] ) {
|
|
case 'registered':
|
|
// Regular option.
|
|
$field = HTMLForm::loadInputFromParameters( $key, $prefs[$key] );
|
|
$validation = $field->validate( $value, $user->getOptions() );
|
|
break;
|
|
case 'registered-multiselect':
|
|
case 'registered-checkmatrix':
|
|
// A key for a multiselect or checkmatrix option.
|
|
$validation = true;
|
|
$value = $value !== null ? (bool) $value : null;
|
|
break;
|
|
case 'userjs':
|
|
// Allow non-default preferences prefixed with 'userjs-', to be set by user scripts
|
|
if ( strlen( $key ) > 255 ) {
|
|
$validation = "key too long (no more than 255 bytes allowed)";
|
|
} elseif ( preg_match( "/[^a-zA-Z0-9_-]/", $key ) !== 0 ) {
|
|
$validation = "invalid key (only a-z, A-Z, 0-9, _, - allowed)";
|
|
} else {
|
|
$validation = true;
|
|
}
|
|
break;
|
|
case 'unused':
|
|
default:
|
|
$validation = "not a valid preference";
|
|
break;
|
|
}
|
|
if ( $validation === true ) {
|
|
$user->setOption( $key, $value );
|
|
$changed = true;
|
|
} else {
|
|
$this->setWarning( "Validation error for '$key': $validation" );
|
|
}
|
|
}
|
|
|
|
if ( $changed ) {
|
|
// Commit changes
|
|
$user->saveSettings();
|
|
}
|
|
|
|
$this->getResult()->addValue( null, $this->getModuleName(), 'success' );
|
|
}
|
|
|
|
public function mustBePosted() {
|
|
return true;
|
|
}
|
|
|
|
public function isWriteMode() {
|
|
return true;
|
|
}
|
|
|
|
public function getAllowedParams() {
|
|
$optionKinds = User::listOptionKinds();
|
|
$optionKinds[] = 'all';
|
|
|
|
return array(
|
|
'token' => array(
|
|
ApiBase::PARAM_TYPE => 'string',
|
|
ApiBase::PARAM_REQUIRED => true
|
|
),
|
|
'reset' => false,
|
|
'resetkinds' => array(
|
|
ApiBase::PARAM_TYPE => $optionKinds,
|
|
ApiBase::PARAM_DFLT => 'all',
|
|
ApiBase::PARAM_ISMULTI => true
|
|
),
|
|
'change' => array(
|
|
ApiBase::PARAM_ISMULTI => true,
|
|
),
|
|
'optionname' => array(
|
|
ApiBase::PARAM_TYPE => 'string',
|
|
),
|
|
'optionvalue' => array(
|
|
ApiBase::PARAM_TYPE => 'string',
|
|
),
|
|
);
|
|
}
|
|
|
|
public function getResultProperties() {
|
|
return array(
|
|
'' => array(
|
|
'*' => array(
|
|
ApiBase::PROP_TYPE => array(
|
|
'success'
|
|
)
|
|
)
|
|
)
|
|
);
|
|
}
|
|
|
|
public function getParamDescription() {
|
|
return array(
|
|
'token' => 'An options token previously obtained through the action=tokens',
|
|
'reset' => 'Resets preferences to the site defaults',
|
|
'resetkinds' => 'List of types of options to reset when the "reset" option is set',
|
|
'change' => 'List of changes, formatted name=value (e.g. skin=vector), value cannot contain pipe characters. If no value is given (not even an equals sign), e.g., optionname|otheroption|..., the option will be reset to its default value',
|
|
'optionname' => 'A name of a option which should have an optionvalue set',
|
|
'optionvalue' => 'A value of the option specified by the optionname, can contain pipe characters',
|
|
);
|
|
}
|
|
|
|
public function getDescription() {
|
|
return array(
|
|
'Change preferences of the current user',
|
|
'Only options which are registered in core or in one of installed extensions,',
|
|
'or as options with keys prefixed with \'userjs-\' (intended to be used by user scripts), can be set.'
|
|
);
|
|
}
|
|
|
|
public function getPossibleErrors() {
|
|
return array_merge( parent::getPossibleErrors(), array(
|
|
array( 'code' => 'notloggedin', 'info' => 'Anonymous users cannot change preferences' ),
|
|
array( 'code' => 'nochanges', 'info' => 'No changes were requested' ),
|
|
) );
|
|
}
|
|
|
|
public function needsToken() {
|
|
return true;
|
|
}
|
|
|
|
public function getTokenSalt() {
|
|
return '';
|
|
}
|
|
|
|
public function getHelpUrls() {
|
|
return 'https://www.mediawiki.org/wiki/API:Options';
|
|
}
|
|
|
|
public function getExamples() {
|
|
return array(
|
|
'api.php?action=options&reset=&token=123ABC',
|
|
'api.php?action=options&change=skin=vector|hideminor=1&token=123ABC',
|
|
'api.php?action=options&reset=&change=skin=monobook&optionname=nickname&optionvalue=[[User:Beau|Beau]]%20([[User_talk:Beau|talk]])&token=123ABC',
|
|
);
|
|
}
|
|
}
|