X-Git-Url: http://git.cyclocoop.org/%22%20.%20generer_url_ecrire%28%22articles_versions%22%2C%22id_article=%24id_article%22%29%20.%20%22?a=blobdiff_plain;f=api.php;h=a5a257992da1303923d5732fff3e39c80ea31ab2;hb=81812fe2d7c7a6b799b978188c1ae44f6356922c;hp=28b56c8fbceeed409878b0d7d8c648aedc9c4db2;hpb=972b72f879c4cb2d4d45123643426d346484e245;p=lhc%2Fweb%2Fwiklou.git diff --git a/api.php b/api.php index 28b56c8fbc..a5a257992d 100644 --- a/api.php +++ b/api.php @@ -1,125 +1,150 @@ - -* -* This program is free software; you can redistribute it and/or modify -* it under the terms of the GNU General Public License as published by -* the Free Software Foundation; either version 2 of the License, or -* (at your option) any later version. -* -* This program is distributed in the hope that it will be useful, -* but WITHOUT ANY WARRANTY; without even the implied warranty of -* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -* GNU General Public License for more details. -* -* You should have received a copy of the GNU General Public License along -* with this program; if not, write to the Free Software Foundation, Inc., -* 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. -* http://www.gnu.org/copyleft/gpl.html -*/ - -$wgApiStartTime = microtime(true); - -/** - * When no format parameter is given, this format will be used - */ -define('API_DEFAULT_FORMAT', 'xmlfm'); - -/** - * All API classes reside in this directory - */ -$wgApiDirectory = 'includes/api/'; - -/** - * List of classes and containing files. - */ -$wgApiAutoloadClasses = array ( - - 'ApiMain' => 'ApiMain.php', - - // Utility classes - 'ApiBase' => 'ApiBase.php', - 'ApiQueryBase' => 'ApiQueryBase.php', - 'ApiResult' => 'ApiResult.php', - 'ApiPageSet' => 'ApiPageSet.php', - - // Formats - 'ApiFormatBase' => 'ApiFormatBase.php', - 'ApiFormatYaml' => 'ApiFormatYaml.php', - 'ApiFormatXml' => 'ApiFormatXml.php', - 'ApiFormatJson' => 'ApiFormatJson.php', - - // Modules (action=...) - should match the $apiModules list - 'ApiHelp' => 'ApiHelp.php', - 'ApiLogin' => 'ApiLogin.php', - 'ApiQuery' => 'ApiQuery.php', - - // Query items (meta/prop/list=...) - 'ApiQuerySiteinfo' => 'ApiQuerySiteinfo.php', - 'ApiQueryInfo' => 'ApiQueryInfo.php', - 'ApiQueryRevisions' => 'ApiQueryRevisions.php', - 'ApiQueryAllpages' => 'ApiQueryAllpages.php' -); - -/** - * List of available modules: action name => module class - * The class must also be listed in the $wgApiAutoloadClasses array. - */ -$wgApiModules = array ( - 'help' => 'ApiHelp', - 'login' => 'ApiLogin', - 'query' => 'ApiQuery' -); - -/** - * List of available formats: format name => format class - * The class must also be listed in the $wgApiAutoloadClasses array. - */ -$wgApiFormats = array ( - 'json' => 'ApiFormatJson', - 'jsonfm' => 'ApiFormatJson', - 'xml' => 'ApiFormatXml', - 'xmlfm' => 'ApiFormatXml', - 'yaml' => 'ApiFormatYaml', - 'yamlfm' => 'ApiFormatYaml' -); - -// Initialise common code -require_once ('./includes/WebStart.php'); -wfProfileIn('api.php'); - -// Verify that the API has not been disabled -// The next line should be -// if (isset ($wgEnableAPI) && !$wgEnableAPI) { -// but will be in a safe mode until api is stabler -if (!isset ($wgEnableAPI) || !$wgEnableAPI) { - echo 'MediaWiki API is not enabled for this site. Add the following line to your LocalSettings.php'; - echo '
$wgEnableAPI=true;'; - die(-1); -} - -ApiInitAutoloadClasses($wgApiAutoloadClasses, $wgApiDirectory); -$processor = new ApiMain($wgApiStartTime, $wgApiModules, $wgApiFormats); -$processor->Execute(); - -wfProfileOut('api.php'); -wfLogProfilingData(); -exit; // Done! - -function ApiInitAutoloadClasses($apiAutoloadClasses, $apiDirectory) { - - // Prefix each api class with the proper prefix, - // and append them to $wgAutoloadClasses - global $wgAutoloadClasses; - - if (!isset ($wgAutoloadClasses)) - $wgAutoloadClasses = array(); - - foreach ($apiAutoloadClasses as $className => $classFile) - $wgAutoloadClasses[$className] = $apiDirectory . $classFile; -} -?> \ No newline at end of file +
$wgEnableAPI=true;' ); + die(1); +} + +// Selectively allow cross-site AJAX + +/** + * Helper function to convert wildcard string into a regex + * '*' => '.*?' + * '?' => '.' + * + * @param $search string + * @return string + */ +function convertWildcard( $search ) { + $search = preg_quote( $search, '/' ); + $search = str_replace( + array( '\*', '\?' ), + array( '.*?', '.' ), + $search + ); + return "/$search/"; +} + +if ( $wgCrossSiteAJAXdomains && isset( $_SERVER['HTTP_ORIGIN'] ) ) { + $exceptions = array_map( 'convertWildcard', $wgCrossSiteAJAXdomainExceptions ); + $regexes = array_map( 'convertWildcard', $wgCrossSiteAJAXdomains ); + foreach ( $regexes as $regex ) { + if ( preg_match( $regex, $_SERVER['HTTP_ORIGIN'] ) ) { + foreach ( $exceptions as $exc ) { // Check against exceptions + if ( preg_match( $exc, $_SERVER['HTTP_ORIGIN'] ) ) { + break 2; + } + } + header( "Access-Control-Allow-Origin: {$_SERVER['HTTP_ORIGIN']}" ); + header( 'Access-Control-Allow-Credentials: true' ); + break; + } + } +} + +// Set a dummy $wgTitle, because $wgTitle == null breaks various things +// In a perfect world this wouldn't be necessary +$wgTitle = Title::makeTitle( NS_MAIN, 'API' ); + +/* Construct an ApiMain with the arguments passed via the URL. What we get back + * is some form of an ApiMain, possibly even one that produces an error message, + * but we don't care here, as that is handled by the ctor. + */ +$processor = new ApiMain( $wgRequest, $wgEnableWriteAPI ); + +// Process data & print results +$processor->execute(); + +// Execute any deferred updates +DeferredUpdates::doUpdates(); + +// Log what the user did, for book-keeping purposes. +$endtime = microtime( true ); +wfProfileOut( 'api.php' ); +wfLogProfilingData(); + +// Log the request +if ( $wgAPIRequestLog ) { + $items = array( + wfTimestamp( TS_MW ), + $endtime - $starttime, + $wgRequest->getIP(), + $_SERVER['HTTP_USER_AGENT'] + ); + $items[] = $wgRequest->wasPosted() ? 'POST' : 'GET'; + $module = $processor->getModule(); + if ( $module->mustBePosted() ) { + $items[] = "action=" . $wgRequest->getVal( 'action' ); + } else { + $items[] = wfArrayToCGI( $wgRequest->getValues() ); + } + wfErrorLog( implode( ',', $items ) . "\n", $wgAPIRequestLog ); + wfDebug( "Logged API request to $wgAPIRequestLog\n" ); +} + +// Shut down the database. foo()->bar() syntax is not supported in PHP4: we won't ever actually +// get here to worry about whether this should be = or =&, but the file has to parse properly. +$lb = wfGetLBFactory(); +$lb->shutdown(); +