479 lines
15 KiB
PHP
479 lines
15 KiB
PHP
<?php
|
|
/**
|
|
* Constructor for Special:Blockip page
|
|
*
|
|
* @addtogroup SpecialPage
|
|
*/
|
|
|
|
/**
|
|
* Constructor
|
|
*/
|
|
function wfSpecialBlockip( $par ) {
|
|
global $wgUser, $wgOut, $wgRequest;
|
|
|
|
# Can't block when the database is locked
|
|
if( wfReadOnly() ) {
|
|
$wgOut->readOnlyPage();
|
|
return;
|
|
}
|
|
|
|
# Permission check
|
|
if( !$wgUser->isAllowed( 'block' ) ) {
|
|
$wgOut->permissionRequired( 'block' );
|
|
return;
|
|
}
|
|
|
|
$ipb = new IPBlockForm( $par );
|
|
|
|
$action = $wgRequest->getVal( 'action' );
|
|
if ( 'success' == $action ) {
|
|
$ipb->showSuccess();
|
|
} else if ( $wgRequest->wasPosted() && 'submit' == $action &&
|
|
$wgUser->matchEditToken( $wgRequest->getVal( 'wpEditToken' ) ) ) {
|
|
$ipb->doSubmit();
|
|
} else {
|
|
$ipb->showForm( '' );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Form object for the Special:Blockip page.
|
|
*
|
|
* @addtogroup SpecialPage
|
|
*/
|
|
class IPBlockForm {
|
|
var $BlockAddress, $BlockExpiry, $BlockReason;
|
|
# var $BlockEmail;
|
|
|
|
function IPBlockForm( $par ) {
|
|
global $wgRequest, $wgUser;
|
|
|
|
$this->BlockAddress = $wgRequest->getVal( 'wpBlockAddress', $wgRequest->getVal( 'ip', $par ) );
|
|
$this->BlockAddress = strtr( $this->BlockAddress, '_', ' ' );
|
|
$this->BlockReason = $wgRequest->getText( 'wpBlockReason' );
|
|
$this->BlockReasonList = $wgRequest->getText( 'wpBlockReasonList' );
|
|
$this->BlockExpiry = $wgRequest->getVal( 'wpBlockExpiry', wfMsg('ipbotheroption') );
|
|
$this->BlockOther = $wgRequest->getVal( 'wpBlockOther', '' );
|
|
|
|
# Unchecked checkboxes are not included in the form data at all, so having one
|
|
# that is true by default is a bit tricky
|
|
$byDefault = !$wgRequest->wasPosted();
|
|
$this->BlockAnonOnly = $wgRequest->getBool( 'wpAnonOnly', $byDefault );
|
|
$this->BlockCreateAccount = $wgRequest->getBool( 'wpCreateAccount', $byDefault );
|
|
$this->BlockEnableAutoblock = $wgRequest->getBool( 'wpEnableAutoblock', $byDefault );
|
|
$this->BlockEmail = $wgRequest->getBool( 'wpEmailBan', false );
|
|
# Re-check user's rights to hide names, very serious, defaults to 0
|
|
$this->BlockHideName = ( $wgRequest->getBool( 'wpHideName', 0 ) && $wgUser->isAllowed( 'hideuser' ) ) ? 1 : 0;
|
|
}
|
|
|
|
function showForm( $err ) {
|
|
global $wgOut, $wgUser, $wgSysopUserBans;
|
|
|
|
$wgOut->setPagetitle( wfMsg( 'blockip' ) );
|
|
$wgOut->addWikiMsg( 'blockiptext' );
|
|
|
|
if($wgSysopUserBans) {
|
|
$mIpaddress = Xml::label( wfMsg( 'ipadressorusername' ), 'mw-bi-target' );
|
|
} else {
|
|
$mIpaddress = Xml::label( wfMsg( 'ipaddress' ), 'mw-bi-target' );
|
|
}
|
|
$mIpbexpiry = Xml::label( wfMsg( 'ipbexpiry' ), 'wpBlockExpiry' );
|
|
$mIpbother = Xml::label( wfMsg( 'ipbother' ), 'mw-bi-other' );
|
|
$mIpbreasonother = Xml::label( wfMsg( 'ipbreason' ), 'wpBlockReasonList' );
|
|
$mIpbreason = Xml::label( wfMsg( 'ipbotherreason' ), 'mw-bi-reason' );
|
|
|
|
$titleObj = SpecialPage::getTitleFor( 'Blockip' );
|
|
|
|
if ( "" != $err ) {
|
|
$wgOut->setSubtitle( wfMsgHtml( 'formerror' ) );
|
|
$wgOut->addHTML( Xml::tags( 'p', array( 'class' => 'error' ), $err ) );
|
|
}
|
|
|
|
$scBlockExpiryOptions = wfMsgForContent( 'ipboptions' );
|
|
|
|
$showblockoptions = $scBlockExpiryOptions != '-';
|
|
if (!$showblockoptions)
|
|
$mIpbother = $mIpbexpiry;
|
|
|
|
$blockExpiryFormOptions = Xml::option( wfMsg( 'ipbotheroption' ), 'other' );
|
|
foreach (explode(',', $scBlockExpiryOptions) as $option) {
|
|
if ( strpos($option, ":") === false ) $option = "$option:$option";
|
|
list($show, $value) = explode(":", $option);
|
|
$show = htmlspecialchars($show);
|
|
$value = htmlspecialchars($value);
|
|
$blockExpiryFormOptions .= Xml::option( $show, $value, $this->BlockExpiry === $value ? true : false ) . "\n";
|
|
}
|
|
|
|
$reasonDropDown = Xml::listDropDown( 'wpBlockReasonList',
|
|
wfMsgForContent( 'ipbreason-dropdown' ),
|
|
wfMsgForContent( 'ipbreasonotherlist' ), '', 'wpBlockDropDown', 4 );
|
|
|
|
global $wgStylePath, $wgStyleVersion;
|
|
$wgOut->addHTML(
|
|
Xml::tags( 'script', array( 'type' => 'text/javascript', 'src' => "$wgStylePath/common/block.js?$wgStyleVersion" ), '' ) .
|
|
Xml::openElement( 'form', array( 'method' => 'post', 'action' => $titleObj->getLocalURL( "action=submit" ), 'id' => 'blockip' ) ) .
|
|
Xml::openElement( 'fieldset' ) .
|
|
Xml::element( 'legend', null, wfMsg( 'blockip-legend' ) ) .
|
|
Xml::openElement( 'table', array ( 'border' => '0', 'id' => 'mw-blockip-table' ) ) .
|
|
"<tr>
|
|
<td class='mw-label'>
|
|
{$mIpaddress}
|
|
</td>
|
|
<td class='mw-input'>" .
|
|
Xml::input( 'wpBlockAddress', 45, $this->BlockAddress,
|
|
array(
|
|
'tabindex' => '1',
|
|
'id' => 'mw-bi-target',
|
|
'onchange' => 'updateBlockOptions()' ) ). "
|
|
</td>
|
|
</tr>
|
|
<tr>"
|
|
);
|
|
if ( $showblockoptions ) {
|
|
$wgOut->addHTML("
|
|
<td class='mw-label'>
|
|
{$mIpbexpiry}
|
|
</td>
|
|
<td class='mw-input'>" .
|
|
Xml::tags( 'select',
|
|
array(
|
|
'id' => 'wpBlockExpiry',
|
|
'name' => 'wpBlockExpiry',
|
|
'onchange' => 'considerChangingExpiryFocus()',
|
|
'tabindex' => '2' ),
|
|
$blockExpiryFormOptions ) .
|
|
"</td>"
|
|
);
|
|
}
|
|
$wgOut->addHTML("
|
|
</tr>
|
|
<tr id='wpBlockOther'>
|
|
<td class='mw-label'>
|
|
{$mIpbother}
|
|
</td>
|
|
<td class='mw-input'>" .
|
|
Xml::input( 'wpBlockOther', 45, $this->BlockOther,
|
|
array( 'tabindex' => '3', 'id' => 'mw-bi-other' ) ) . "
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td class='mw-label'>
|
|
{$mIpbreasonother}
|
|
</td>
|
|
<td class='mw-input'>
|
|
{$reasonDropDown}
|
|
</td>
|
|
</tr>
|
|
<tr id=\"wpBlockReason\">
|
|
<td class='mw-label'>
|
|
{$mIpbreason}
|
|
</td>
|
|
<td class='mw-input'>" .
|
|
Xml::input( 'wpBlockReason', 45, $this->BlockReason,
|
|
array( 'tabindex' => '5', 'id' => 'mw-bi-reason', 'maxlength'=> '200' ) ) . "
|
|
</td>
|
|
</tr>
|
|
<tr id='wpAnonOnlyRow'>
|
|
<td> </td>
|
|
<td class='mw-input'>" .
|
|
Xml::checkLabel( wfMsg( 'ipbanononly' ),
|
|
'wpAnonOnly', 'wpAnonOnly', $this->BlockAnonOnly,
|
|
array( 'tabindex' => '6' ) ) . "
|
|
</td>
|
|
</tr>
|
|
<tr id='wpCreateAccountRow'>
|
|
<td> </td>
|
|
<td class='mw-input'>" .
|
|
Xml::checkLabel( wfMsg( 'ipbcreateaccount' ),
|
|
'wpCreateAccount', 'wpCreateAccount', $this->BlockCreateAccount,
|
|
array( 'tabindex' => '7' ) ) . "
|
|
</td>
|
|
</tr>
|
|
<tr id='wpEnableAutoblockRow'>
|
|
<td> </td>
|
|
<td class='mw-input'>" .
|
|
Xml::checkLabel( wfMsg( 'ipbenableautoblock' ),
|
|
'wpEnableAutoblock', 'wpEnableAutoblock', $this->BlockEnableAutoblock,
|
|
array( 'tabindex' => '8' ) ) . "
|
|
</td>
|
|
</tr>"
|
|
);
|
|
|
|
global $wgSysopEmailBans;
|
|
if ( $wgSysopEmailBans && $wgUser->isAllowed( 'blockemail' ) ) {
|
|
$wgOut->addHTML("
|
|
<tr id='wpEnableEmailBan'>
|
|
<td> </td>
|
|
<td class='mw-input'>" .
|
|
Xml::checkLabel( wfMsg( 'ipbemailban' ),
|
|
'wpEmailBan', 'wpEmailBan', $this->BlockEmail,
|
|
array( 'tabindex' => '9' )) . "
|
|
</td>
|
|
</tr>"
|
|
);
|
|
}
|
|
|
|
// Allow some users to hide name from block log, blocklist and listusers
|
|
if ( $wgUser->isAllowed( 'hideuser' ) ) {
|
|
$wgOut->addHTML("
|
|
<tr id='wpEnableHideUser'>
|
|
<td> </td>
|
|
<td class='mw-input'>" .
|
|
Xml::checkLabel( wfMsg( 'ipbhidename' ),
|
|
'wpHideName', 'wpHideName', $this->BlockHideName,
|
|
array( 'tabindex' => '10' ) ) . "
|
|
</td>
|
|
</tr>"
|
|
);
|
|
}
|
|
|
|
$wgOut->addHTML("
|
|
<tr>
|
|
<td style='padding-top: 1em'> </td>
|
|
<td class='mw-submit' style='padding-top: 1em'>" .
|
|
Xml::submitButton( wfMsg( 'ipbsubmit' ),
|
|
array( 'name' => 'wpBlock', 'tabindex' => '11' ) ) . "
|
|
</td>
|
|
</tr>" .
|
|
Xml::closeElement( 'table' ) .
|
|
Xml::hidden( 'wpEditToken', $wgUser->editToken() ) .
|
|
Xml::closeElement( 'fieldset' ) .
|
|
Xml::closeElement( 'form' ) .
|
|
Xml::tags( 'script', array( 'type' => 'text/javascript' ), 'updateBlockOptions()' ) . "\n"
|
|
);
|
|
|
|
$wgOut->addHtml( $this->getConvenienceLinks() );
|
|
|
|
$user = User::newFromName( $this->BlockAddress );
|
|
if( is_object( $user ) ) {
|
|
$this->showLogFragment( $wgOut, $user->getUserPage() );
|
|
} elseif( preg_match( '/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/', $this->BlockAddress ) ) {
|
|
$this->showLogFragment( $wgOut, Title::makeTitle( NS_USER, $this->BlockAddress ) );
|
|
} elseif( preg_match( '/^\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}/', $this->BlockAddress ) ) {
|
|
$this->showLogFragment( $wgOut, Title::makeTitle( NS_USER, $this->BlockAddress ) );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Backend block code.
|
|
* $userID and $expiry will be filled accordingly
|
|
* @return array(message key, arguments) on failure, empty array on success
|
|
*/
|
|
function doBlock(&$userId = null, &$expiry = null)
|
|
{
|
|
global $wgUser, $wgSysopUserBans, $wgSysopRangeBans;
|
|
|
|
$userId = 0;
|
|
# Expand valid IPv6 addresses, usernames are left as is
|
|
$this->BlockAddress = IP::sanitizeIP( $this->BlockAddress );
|
|
# isIPv4() and IPv6() are used for final validation
|
|
$rxIP4 = '\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}';
|
|
$rxIP6 = '\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}:\w{1,4}';
|
|
$rxIP = "($rxIP4|$rxIP6)";
|
|
|
|
# Check for invalid specifications
|
|
if ( !preg_match( "/^$rxIP$/", $this->BlockAddress ) ) {
|
|
$matches = array();
|
|
if ( preg_match( "/^($rxIP4)\\/(\\d{1,2})$/", $this->BlockAddress, $matches ) ) {
|
|
# IPv4
|
|
if ( $wgSysopRangeBans ) {
|
|
if ( !IP::isIPv4( $this->BlockAddress ) || $matches[2] < 16 || $matches[2] > 32 ) {
|
|
return array('ip_range_invalid');
|
|
}
|
|
$this->BlockAddress = Block::normaliseRange( $this->BlockAddress );
|
|
} else {
|
|
# Range block illegal
|
|
return array('range_block_disabled');
|
|
}
|
|
} else if ( preg_match( "/^($rxIP6)\\/(\\d{1,3})$/", $this->BlockAddress, $matches ) ) {
|
|
# IPv6
|
|
if ( $wgSysopRangeBans ) {
|
|
if ( !IP::isIPv6( $this->BlockAddress ) || $matches[2] < 64 || $matches[2] > 128 ) {
|
|
return array('ip_range_invalid');
|
|
}
|
|
$this->BlockAddress = Block::normaliseRange( $this->BlockAddress );
|
|
} else {
|
|
# Range block illegal
|
|
return array('range_block_disabled');
|
|
}
|
|
} else {
|
|
# Username block
|
|
if ( $wgSysopUserBans ) {
|
|
$user = User::newFromName( $this->BlockAddress );
|
|
if( !is_null( $user ) && $user->getID() ) {
|
|
# Use canonical name
|
|
$userId = $user->getID();
|
|
$this->BlockAddress = $user->getName();
|
|
} else {
|
|
return array('nosuchusershort', htmlspecialchars( $user ? $user->getName() : $this->BlockAddress ) );
|
|
}
|
|
} else {
|
|
return array('badipaddress');
|
|
}
|
|
}
|
|
}
|
|
|
|
$reasonstr = $this->BlockReasonList;
|
|
if ( $reasonstr != 'other' && $this->BlockReason != '') {
|
|
// Entry from drop down menu + additional comment
|
|
$reasonstr .= ': ' . $this->BlockReason;
|
|
} elseif ( $reasonstr == 'other' ) {
|
|
$reasonstr = $this->BlockReason;
|
|
}
|
|
|
|
$expirestr = $this->BlockExpiry;
|
|
if( $expirestr == 'other' )
|
|
$expirestr = $this->BlockOther;
|
|
|
|
if (strlen($expirestr) == 0) {
|
|
return array('ipb_expiry_invalid');
|
|
}
|
|
|
|
if ( $expirestr == 'infinite' || $expirestr == 'indefinite' ) {
|
|
$expiry = Block::infinity();
|
|
} else {
|
|
# Convert GNU-style date, on error returns -1 for PHP <5.1 and false for PHP >=5.1
|
|
$expiry = strtotime( $expirestr );
|
|
|
|
if ( $expiry < 0 || $expiry === false ) {
|
|
return array('ipb_expiry_invalid');
|
|
}
|
|
|
|
$expiry = wfTimestamp( TS_MW, $expiry );
|
|
}
|
|
|
|
# Create block
|
|
# Note: for a user block, ipb_address is only for display purposes
|
|
$block = new Block( $this->BlockAddress, $userId, $wgUser->getID(),
|
|
$reasonstr, wfTimestampNow(), 0, $expiry, $this->BlockAnonOnly,
|
|
$this->BlockCreateAccount, $this->BlockEnableAutoblock, $this->BlockHideName,
|
|
$this->BlockEmail);
|
|
|
|
if (wfRunHooks('BlockIp', array(&$block, &$wgUser))) {
|
|
|
|
if ( !$block->insert() ) {
|
|
return array('ipb_already_blocked', htmlspecialchars($this->BlockAddress));
|
|
}
|
|
|
|
wfRunHooks('BlockIpComplete', array($block, $wgUser));
|
|
|
|
# Prepare log parameters
|
|
$logParams = array();
|
|
$logParams[] = $expirestr;
|
|
$logParams[] = $this->blockLogFlags();
|
|
|
|
# Make log entry, if the name is hidden, put it in the oversight log
|
|
$log_type = ($this->BlockHideName) ? 'suppress' : 'block';
|
|
$log = new LogPage( $log_type );
|
|
$log->addEntry( 'block', Title::makeTitle( NS_USER, $this->BlockAddress ),
|
|
$reasonstr, $logParams );
|
|
|
|
# Report to the user
|
|
return array();
|
|
}
|
|
else
|
|
return array('hookaborted');
|
|
}
|
|
|
|
/**
|
|
* UI entry point for blocking
|
|
* Wraps around doBlock()
|
|
*/
|
|
function doSubmit()
|
|
{
|
|
global $wgOut;
|
|
$retval = $this->doBlock();
|
|
if(empty($retval)) {
|
|
$titleObj = SpecialPage::getTitleFor( 'Blockip' );
|
|
$wgOut->redirect( $titleObj->getFullURL( 'action=success&ip=' .
|
|
urlencode( $this->BlockAddress ) ) );
|
|
return;
|
|
}
|
|
$key = array_shift($retval);
|
|
$this->showForm(wfMsgReal($key, $retval));
|
|
}
|
|
|
|
function showSuccess() {
|
|
global $wgOut;
|
|
|
|
$wgOut->setPagetitle( wfMsg( 'blockip' ) );
|
|
$wgOut->setSubtitle( wfMsg( 'blockipsuccesssub' ) );
|
|
$text = wfMsgExt( 'blockipsuccesstext', array( 'parse' ), $this->BlockAddress );
|
|
$wgOut->addHtml( $text );
|
|
}
|
|
|
|
function showLogFragment( $out, $title ) {
|
|
$out->addHtml( Xml::element( 'h2', NULL, LogPage::logName( 'block' ) ) );
|
|
LogEventsList::showLogExtract( $out, 'block', $title->getPrefixedText() );
|
|
}
|
|
|
|
/**
|
|
* Return a comma-delimited list of "flags" to be passed to the log
|
|
* reader for this block, to provide more information in the logs
|
|
*
|
|
* @return array
|
|
*/
|
|
private function blockLogFlags() {
|
|
$flags = array();
|
|
if( $this->BlockAnonOnly && IP::isIPAddress( $this->BlockAddress ) )
|
|
// when blocking a user the option 'anononly' is not available/has no effect -> do not write this into log
|
|
$flags[] = 'anononly';
|
|
if( $this->BlockCreateAccount )
|
|
$flags[] = 'nocreate';
|
|
if( !$this->BlockEnableAutoblock )
|
|
$flags[] = 'noautoblock';
|
|
if ( $this->BlockEmail )
|
|
$flags[] = 'noemail';
|
|
return implode( ',', $flags );
|
|
}
|
|
|
|
/**
|
|
* Builds unblock and block list links
|
|
*
|
|
* @return string
|
|
*/
|
|
private function getConvenienceLinks() {
|
|
global $wgUser;
|
|
$skin = $wgUser->getSkin();
|
|
$links[] = $skin->makeLink ( 'MediaWiki:Ipbreason-dropdown', wfMsgHtml( 'ipb-edit-dropdown' ) );
|
|
$links[] = $this->getUnblockLink( $skin );
|
|
$links[] = $this->getBlockListLink( $skin );
|
|
return '<p class="mw-ipb-conveniencelinks">' . implode( ' | ', $links ) . '</p>';
|
|
}
|
|
|
|
/**
|
|
* Build a convenient link to unblock the given username or IP
|
|
* address, if available; otherwise link to a blank unblock
|
|
* form
|
|
*
|
|
* @param $skin Skin to use
|
|
* @return string
|
|
*/
|
|
private function getUnblockLink( $skin ) {
|
|
$list = SpecialPage::getTitleFor( 'Ipblocklist' );
|
|
if( $this->BlockAddress ) {
|
|
$addr = htmlspecialchars( strtr( $this->BlockAddress, '_', ' ' ) );
|
|
return $skin->makeKnownLinkObj( $list, wfMsgHtml( 'ipb-unblock-addr', $addr ),
|
|
'action=unblock&ip=' . urlencode( $this->BlockAddress ) );
|
|
} else {
|
|
return $skin->makeKnownLinkObj( $list, wfMsgHtml( 'ipb-unblock' ), 'action=unblock' );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Build a convenience link to the block list
|
|
*
|
|
* @param $skin Skin to use
|
|
* @return string
|
|
*/
|
|
private function getBlockListLink( $skin ) {
|
|
$list = SpecialPage::getTitleFor( 'Ipblocklist' );
|
|
if( $this->BlockAddress ) {
|
|
$addr = htmlspecialchars( strtr( $this->BlockAddress, '_', ' ' ) );
|
|
return $skin->makeKnownLinkObj( $list, wfMsgHtml( 'ipb-blocklist-addr', $addr ),
|
|
'ip=' . urlencode( $this->BlockAddress ) );
|
|
} else {
|
|
return $skin->makeKnownLinkObj( $list, wfMsgHtml( 'ipb-blocklist' ) );
|
|
}
|
|
}
|
|
}
|