61fad2db5930e750f367b54666c5c12dc4d0f301
[lhc/web/wiklou.git] / includes / Setup.php
1 <?php
2 /**
3 * Include most things that are needed to make MediaWiki work.
4 *
5 * This file is included by WebStart.php and doMaintenance.php so that both
6 * web and maintenance scripts share a final set up phase to include necessary
7 * files and create global object variables.
8 *
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
13 *
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
18 *
19 * You should have received a copy of the GNU General Public License along
20 * with this program; if not, write to the Free Software Foundation, Inc.,
21 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
22 * http://www.gnu.org/copyleft/gpl.html
23 *
24 * @file
25 */
26 use MediaWiki\MediaWikiServices;
27 use Wikimedia\Rdbms\LBFactory;
28 use Wikimedia\Rdbms\ChronologyProtector;
29
30 /**
31 * This file is not a valid entry point, perform no further processing unless
32 * MEDIAWIKI is defined
33 */
34 if ( !defined( 'MEDIAWIKI' ) ) {
35 exit( 1 );
36 }
37
38 // Check to see if we are at the file scope
39 $wgScopeTest = 'MediaWiki Setup.php scope test';
40 if ( !isset( $GLOBALS['wgScopeTest'] ) || $GLOBALS['wgScopeTest'] !== $wgScopeTest ) {
41 echo "Error, Setup.php must be included from the file scope.\n";
42 die( 1 );
43 }
44 unset( $wgScopeTest );
45
46 /**
47 * Pre-config setup: Before loading LocalSettings.php
48 */
49
50 // Sanity check (T5782, T122807)
51 if ( ini_get( 'mbstring.func_overload' ) ) {
52 die( 'MediaWiki does not support installations where mbstring.func_overload is non-zero.' );
53 }
54
55 // Start the autoloader, so that extensions can derive classes from core files
56 require_once "$IP/includes/AutoLoader.php";
57
58 // Load up some global defines
59 require_once "$IP/includes/Defines.php";
60
61 // Load default settings
62 require_once "$IP/includes/DefaultSettings.php";
63
64 // Load global functions
65 require_once "$IP/includes/GlobalFunctions.php";
66
67 // Load composer's autoloader if present
68 if ( is_readable( "$IP/vendor/autoload.php" ) ) {
69 require_once "$IP/vendor/autoload.php";
70 }
71
72 // Assert that composer dependencies were successfully loaded
73 // Purposely no leading \ due to it breaking HHVM RepoAuthorative mode
74 // PHP works fine with both versions
75 // See https://github.com/facebook/hhvm/issues/5833
76 if ( !interface_exists( 'Psr\Log\LoggerInterface' ) ) {
77 $message = (
78 'MediaWiki requires the <a href="https://github.com/php-fig/log">PSR-3 logging ' .
79 "library</a> to be present. This library is not embedded directly in MediaWiki's " .
80 "git repository and must be installed separately by the end user.\n\n" .
81 'Please see <a href="https://www.mediawiki.org/wiki/Download_from_Git' .
82 '#Fetch_external_libraries">mediawiki.org</a> for help on installing ' .
83 'the required components.'
84 );
85 echo $message;
86 trigger_error( $message, E_USER_ERROR );
87 die( 1 );
88 }
89
90 // Install a header callback
91 MediaWiki\HeaderCallback::register();
92
93 /**
94 * Load LocalSettings.php
95 */
96
97 if ( defined( 'MW_CONFIG_CALLBACK' ) ) {
98 call_user_func( MW_CONFIG_CALLBACK );
99 } else {
100 if ( !defined( 'MW_CONFIG_FILE' ) ) {
101 define( 'MW_CONFIG_FILE', "$IP/LocalSettings.php" );
102 }
103 require_once MW_CONFIG_FILE;
104 }
105
106 /**
107 * Customization point after all loading (constants, functions, classes,
108 * DefaultSettings, LocalSettings). Specifically, this is before usage of
109 * settings, before instantiation of Profiler (and other singletons), and
110 * before any setup functions or hooks run.
111 */
112
113 if ( defined( 'MW_SETUP_CALLBACK' ) ) {
114 call_user_func( MW_SETUP_CALLBACK );
115 }
116
117 /**
118 * Main setup
119 */
120
121 $fname = 'Setup.php';
122 $ps_setup = Profiler::instance()->scopedProfileIn( $fname );
123
124 // Load queued extensions
125 ExtensionRegistry::getInstance()->loadFromQueue();
126 // Don't let any other extensions load
127 ExtensionRegistry::getInstance()->finish();
128
129 mb_internal_encoding( 'UTF-8' );
130
131 // Set the configured locale on all requests for consisteny
132 putenv( "LC_ALL=$wgShellLocale" );
133 setlocale( LC_ALL, $wgShellLocale );
134
135 // Set various default paths sensibly...
136 $ps_default = Profiler::instance()->scopedProfileIn( $fname . '-defaults' );
137
138 if ( $wgScript === false ) {
139 $wgScript = "$wgScriptPath/index.php";
140 }
141 if ( $wgLoadScript === false ) {
142 $wgLoadScript = "$wgScriptPath/load.php";
143 }
144
145 if ( $wgArticlePath === false ) {
146 if ( $wgUsePathInfo ) {
147 $wgArticlePath = "$wgScript/$1";
148 } else {
149 $wgArticlePath = "$wgScript?title=$1";
150 }
151 }
152
153 if ( !empty( $wgActionPaths ) && !isset( $wgActionPaths['view'] ) ) {
154 // 'view' is assumed the default action path everywhere in the code
155 // but is rarely filled in $wgActionPaths
156 $wgActionPaths['view'] = $wgArticlePath;
157 }
158
159 if ( $wgResourceBasePath === null ) {
160 $wgResourceBasePath = $wgScriptPath;
161 }
162 if ( $wgStylePath === false ) {
163 $wgStylePath = "$wgResourceBasePath/skins";
164 }
165 if ( $wgLocalStylePath === false ) {
166 // Avoid wgResourceBasePath here since that may point to a different domain (e.g. CDN)
167 $wgLocalStylePath = "$wgScriptPath/skins";
168 }
169 if ( $wgExtensionAssetsPath === false ) {
170 $wgExtensionAssetsPath = "$wgResourceBasePath/extensions";
171 }
172
173 if ( $wgLogo === false ) {
174 $wgLogo = "$wgResourceBasePath/resources/assets/wiki.png";
175 }
176
177 if ( $wgUploadPath === false ) {
178 $wgUploadPath = "$wgScriptPath/images";
179 }
180 if ( $wgUploadDirectory === false ) {
181 $wgUploadDirectory = "$IP/images";
182 }
183 if ( $wgReadOnlyFile === false ) {
184 $wgReadOnlyFile = "{$wgUploadDirectory}/lock_yBgMBwiR";
185 }
186 if ( $wgFileCacheDirectory === false ) {
187 $wgFileCacheDirectory = "{$wgUploadDirectory}/cache";
188 }
189 if ( $wgDeletedDirectory === false ) {
190 $wgDeletedDirectory = "{$wgUploadDirectory}/deleted";
191 }
192
193 if ( $wgGitInfoCacheDirectory === false && $wgCacheDirectory !== false ) {
194 $wgGitInfoCacheDirectory = "{$wgCacheDirectory}/gitinfo";
195 }
196
197 if ( $wgEnableParserCache === false ) {
198 $wgParserCacheType = CACHE_NONE;
199 }
200
201 // Fix path to icon images after they were moved in 1.24
202 if ( $wgRightsIcon ) {
203 $wgRightsIcon = str_replace(
204 "{$wgStylePath}/common/images/",
205 "{$wgResourceBasePath}/resources/assets/licenses/",
206 $wgRightsIcon
207 );
208 }
209
210 if ( isset( $wgFooterIcons['copyright']['copyright'] )
211 && $wgFooterIcons['copyright']['copyright'] === []
212 ) {
213 if ( $wgRightsIcon || $wgRightsText ) {
214 $wgFooterIcons['copyright']['copyright'] = [
215 'url' => $wgRightsUrl,
216 'src' => $wgRightsIcon,
217 'alt' => $wgRightsText,
218 ];
219 }
220 }
221
222 if ( isset( $wgFooterIcons['poweredby'] )
223 && isset( $wgFooterIcons['poweredby']['mediawiki'] )
224 && $wgFooterIcons['poweredby']['mediawiki']['src'] === null
225 ) {
226 $wgFooterIcons['poweredby']['mediawiki']['src'] =
227 "$wgResourceBasePath/resources/assets/poweredby_mediawiki_88x31.png";
228 $wgFooterIcons['poweredby']['mediawiki']['srcset'] =
229 "$wgResourceBasePath/resources/assets/poweredby_mediawiki_132x47.png 1.5x, " .
230 "$wgResourceBasePath/resources/assets/poweredby_mediawiki_176x62.png 2x";
231 }
232
233 /**
234 * Unconditional protection for NS_MEDIAWIKI since otherwise it's too easy for a
235 * sysadmin to set $wgNamespaceProtection incorrectly and leave the wiki insecure.
236 *
237 * Note that this is the definition of editinterface and it can be granted to
238 * all users if desired.
239 */
240 $wgNamespaceProtection[NS_MEDIAWIKI] = 'editinterface';
241
242 /**
243 * The canonical names of namespaces 6 and 7 are, as of v1.14, "File"
244 * and "File_talk". The old names "Image" and "Image_talk" are
245 * retained as aliases for backwards compatibility.
246 */
247 $wgNamespaceAliases['Image'] = NS_FILE;
248 $wgNamespaceAliases['Image_talk'] = NS_FILE_TALK;
249
250 /**
251 * Initialise $wgLockManagers to include basic FS version
252 */
253 $wgLockManagers[] = [
254 'name' => 'fsLockManager',
255 'class' => FSLockManager::class,
256 'lockDirectory' => "{$wgUploadDirectory}/lockdir",
257 ];
258 $wgLockManagers[] = [
259 'name' => 'nullLockManager',
260 'class' => NullLockManager::class,
261 ];
262
263 /**
264 * Default parameters for the "<gallery>" tag.
265 * @see DefaultSettings.php for description of the fields.
266 */
267 $wgGalleryOptions += [
268 'imagesPerRow' => 0,
269 'imageWidth' => 120,
270 'imageHeight' => 120,
271 'captionLength' => true,
272 'showBytes' => true,
273 'showDimensions' => true,
274 'mode' => 'traditional',
275 ];
276
277 /**
278 * Shortcuts for $wgLocalFileRepo
279 */
280 if ( !$wgLocalFileRepo ) {
281 $wgLocalFileRepo = [
282 'class' => LocalRepo::class,
283 'name' => 'local',
284 'directory' => $wgUploadDirectory,
285 'scriptDirUrl' => $wgScriptPath,
286 'url' => $wgUploadBaseUrl ? $wgUploadBaseUrl . $wgUploadPath : $wgUploadPath,
287 'hashLevels' => $wgHashedUploadDirectory ? 2 : 0,
288 'thumbScriptUrl' => $wgThumbnailScriptPath,
289 'transformVia404' => !$wgGenerateThumbnailOnParse,
290 'deletedDir' => $wgDeletedDirectory,
291 'deletedHashLevels' => $wgHashedUploadDirectory ? 3 : 0
292 ];
293 }
294
295 if ( !isset( $wgLocalFileRepo['backend'] ) ) {
296 // Create a default FileBackend name.
297 // FileBackendGroup will register a default, if absent from $wgFileBackends.
298 $wgLocalFileRepo['backend'] = $wgLocalFileRepo['name'] . '-backend';
299 }
300
301 /**
302 * Shortcuts for $wgForeignFileRepos
303 */
304 if ( $wgUseSharedUploads ) {
305 if ( $wgSharedUploadDBname ) {
306 $wgForeignFileRepos[] = [
307 'class' => ForeignDBRepo::class,
308 'name' => 'shared',
309 'directory' => $wgSharedUploadDirectory,
310 'url' => $wgSharedUploadPath,
311 'hashLevels' => $wgHashedSharedUploadDirectory ? 2 : 0,
312 'thumbScriptUrl' => $wgSharedThumbnailScriptPath,
313 'transformVia404' => !$wgGenerateThumbnailOnParse,
314 'dbType' => $wgDBtype,
315 'dbServer' => $wgDBserver,
316 'dbUser' => $wgDBuser,
317 'dbPassword' => $wgDBpassword,
318 'dbName' => $wgSharedUploadDBname,
319 'dbFlags' => ( $wgDebugDumpSql ? DBO_DEBUG : 0 ) | DBO_DEFAULT,
320 'tablePrefix' => $wgSharedUploadDBprefix,
321 'hasSharedCache' => $wgCacheSharedUploads,
322 'descBaseUrl' => $wgRepositoryBaseUrl,
323 'fetchDescription' => $wgFetchCommonsDescriptions,
324 ];
325 } else {
326 $wgForeignFileRepos[] = [
327 'class' => FileRepo::class,
328 'name' => 'shared',
329 'directory' => $wgSharedUploadDirectory,
330 'url' => $wgSharedUploadPath,
331 'hashLevels' => $wgHashedSharedUploadDirectory ? 2 : 0,
332 'thumbScriptUrl' => $wgSharedThumbnailScriptPath,
333 'transformVia404' => !$wgGenerateThumbnailOnParse,
334 'descBaseUrl' => $wgRepositoryBaseUrl,
335 'fetchDescription' => $wgFetchCommonsDescriptions,
336 ];
337 }
338 }
339 if ( $wgUseInstantCommons ) {
340 $wgForeignFileRepos[] = [
341 'class' => ForeignAPIRepo::class,
342 'name' => 'wikimediacommons',
343 'apibase' => 'https://commons.wikimedia.org/w/api.php',
344 'url' => 'https://upload.wikimedia.org/wikipedia/commons',
345 'thumbUrl' => 'https://upload.wikimedia.org/wikipedia/commons/thumb',
346 'hashLevels' => 2,
347 'transformVia404' => true,
348 'fetchDescription' => true,
349 'descriptionCacheExpiry' => 43200,
350 'apiThumbCacheExpiry' => 0,
351 ];
352 }
353 foreach ( $wgForeignFileRepos as &$repo ) {
354 if ( !isset( $repo['directory'] ) && $repo['class'] === ForeignAPIRepo::class ) {
355 $repo['directory'] = $wgUploadDirectory; // b/c
356 }
357 if ( !isset( $repo['backend'] ) ) {
358 $repo['backend'] = $repo['name'] . '-backend';
359 }
360 }
361 unset( $repo ); // no global pollution; destroy reference
362
363 $rcMaxAgeDays = $wgRCMaxAge / ( 3600 * 24 );
364 if ( $wgRCFilterByAge ) {
365 // Trim down $wgRCLinkDays so that it only lists links which are valid
366 // as determined by $wgRCMaxAge.
367 // Note that we allow 1 link higher than the max for things like 56 days but a 60 day link.
368 sort( $wgRCLinkDays );
369
370 foreach ( $wgRCLinkDays as $i => $days ) {
371 if ( $days >= $rcMaxAgeDays ) {
372 array_splice( $wgRCLinkDays, $i + 1 );
373 break;
374 }
375 }
376 }
377 // Ensure that default user options are not invalid, since that breaks Special:Preferences
378 $wgDefaultUserOptions['rcdays'] = min(
379 $wgDefaultUserOptions['rcdays'],
380 ceil( $rcMaxAgeDays )
381 );
382 $wgDefaultUserOptions['watchlistdays'] = min(
383 $wgDefaultUserOptions['watchlistdays'],
384 ceil( $rcMaxAgeDays )
385 );
386 unset( $rcMaxAgeDays );
387
388 if ( $wgSkipSkin ) {
389 $wgSkipSkins[] = $wgSkipSkin;
390 }
391
392 $wgSkipSkins[] = 'fallback';
393 $wgSkipSkins[] = 'apioutput';
394
395 if ( $wgLocalInterwiki ) {
396 array_unshift( $wgLocalInterwikis, $wgLocalInterwiki );
397 }
398
399 // Set default shared prefix
400 if ( $wgSharedPrefix === false ) {
401 $wgSharedPrefix = $wgDBprefix;
402 }
403
404 // Set default shared schema
405 if ( $wgSharedSchema === false ) {
406 $wgSharedSchema = $wgDBmwschema;
407 }
408
409 if ( !$wgCookiePrefix ) {
410 if ( $wgSharedDB && $wgSharedPrefix && in_array( 'user', $wgSharedTables ) ) {
411 $wgCookiePrefix = $wgSharedDB . '_' . $wgSharedPrefix;
412 } elseif ( $wgSharedDB && in_array( 'user', $wgSharedTables ) ) {
413 $wgCookiePrefix = $wgSharedDB;
414 } elseif ( $wgDBprefix ) {
415 $wgCookiePrefix = $wgDBname . '_' . $wgDBprefix;
416 } else {
417 $wgCookiePrefix = $wgDBname;
418 }
419 }
420 $wgCookiePrefix = strtr( $wgCookiePrefix, '=,; +."\'\\[', '__________' );
421
422 if ( $wgEnableEmail ) {
423 $wgUseEnotif = $wgEnotifUserTalk || $wgEnotifWatchlist;
424 } else {
425 // Disable all other email settings automatically if $wgEnableEmail
426 // is set to false. - T65678
427 $wgAllowHTMLEmail = false;
428 $wgEmailAuthentication = false; // do not require auth if you're not sending email anyway
429 $wgEnableUserEmail = false;
430 $wgEnotifFromEditor = false;
431 $wgEnotifImpersonal = false;
432 $wgEnotifMaxRecips = 0;
433 $wgEnotifMinorEdits = false;
434 $wgEnotifRevealEditorAddress = false;
435 $wgEnotifUseRealName = false;
436 $wgEnotifUserTalk = false;
437 $wgEnotifWatchlist = false;
438 unset( $wgGroupPermissions['user']['sendemail'] );
439 $wgUseEnotif = false;
440 $wgUserEmailUseReplyTo = false;
441 $wgUsersNotifiedOnAllChanges = [];
442 }
443
444 if ( $wgMetaNamespace === false ) {
445 $wgMetaNamespace = str_replace( ' ', '_', $wgSitename );
446 }
447
448 // Default value is 2000 or the suhosin limit if it is between 1 and 2000
449 if ( $wgResourceLoaderMaxQueryLength === false ) {
450 $suhosinMaxValueLength = (int)ini_get( 'suhosin.get.max_value_length' );
451 if ( $suhosinMaxValueLength > 0 && $suhosinMaxValueLength < 2000 ) {
452 $wgResourceLoaderMaxQueryLength = $suhosinMaxValueLength;
453 } else {
454 $wgResourceLoaderMaxQueryLength = 2000;
455 }
456 unset( $suhosinMaxValueLength );
457 }
458
459 // Ensure the minimum chunk size is less than PHP upload limits or the maximum
460 // upload size.
461 $wgMinUploadChunkSize = min(
462 $wgMinUploadChunkSize,
463 UploadBase::getMaxUploadSize( 'file' ),
464 UploadBase::getMaxPhpUploadSize(),
465 ( wfShorthandToInteger(
466 ini_get( 'post_max_size' ) ?: ini_get( 'hhvm.server.max_post_size' ),
467 PHP_INT_MAX
468 ) ?: PHP_INT_MAX ) - 1024 // Leave some room for other POST parameters
469 );
470
471 /**
472 * Definitions of the NS_ constants are in Defines.php
473 * @private
474 */
475 $wgCanonicalNamespaceNames = [
476 NS_MEDIA => 'Media',
477 NS_SPECIAL => 'Special',
478 NS_TALK => 'Talk',
479 NS_USER => 'User',
480 NS_USER_TALK => 'User_talk',
481 NS_PROJECT => 'Project',
482 NS_PROJECT_TALK => 'Project_talk',
483 NS_FILE => 'File',
484 NS_FILE_TALK => 'File_talk',
485 NS_MEDIAWIKI => 'MediaWiki',
486 NS_MEDIAWIKI_TALK => 'MediaWiki_talk',
487 NS_TEMPLATE => 'Template',
488 NS_TEMPLATE_TALK => 'Template_talk',
489 NS_HELP => 'Help',
490 NS_HELP_TALK => 'Help_talk',
491 NS_CATEGORY => 'Category',
492 NS_CATEGORY_TALK => 'Category_talk',
493 ];
494
495 /// @todo UGLY UGLY
496 if ( is_array( $wgExtraNamespaces ) ) {
497 $wgCanonicalNamespaceNames = $wgCanonicalNamespaceNames + $wgExtraNamespaces;
498 }
499
500 // Hard-deprecate setting $wgDummyLanguageCodes in LocalSettings.php
501 if ( count( $wgDummyLanguageCodes ) !== 0 ) {
502 wfDeprecated( '$wgDummyLanguageCodes', '1.29' );
503 }
504 // Merge in the legacy language codes, incorporating overrides from the config
505 $wgDummyLanguageCodes += [
506 // Internal language codes of the private-use area which get mapped to
507 // themselves.
508 'qqq' => 'qqq', // Used for message documentation
509 'qqx' => 'qqx', // Used for viewing message keys
510 ] + $wgExtraLanguageCodes + LanguageCode::getDeprecatedCodeMapping();
511 // Merge in (inverted) BCP 47 mappings
512 foreach ( LanguageCode::getNonstandardLanguageCodeMapping() as $code => $bcp47 ) {
513 $bcp47 = strtolower( $bcp47 ); // force case-insensitivity
514 if ( !isset( $wgDummyLanguageCodes[$bcp47] ) ) {
515 $wgDummyLanguageCodes[$bcp47] = $wgDummyLanguageCodes[$code] ?? $code;
516 }
517 }
518
519 // These are now the same, always
520 // To determine the user language, use $wgLang->getCode()
521 $wgContLanguageCode = $wgLanguageCode;
522
523 // Easy to forget to falsify $wgDebugToolbar for static caches.
524 // If file cache or CDN cache is on, just disable this (DWIMD).
525 if ( $wgUseFileCache || $wgUseSquid ) {
526 $wgDebugToolbar = false;
527 }
528
529 // We always output HTML5 since 1.22, overriding these is no longer supported
530 // we set them here for extensions that depend on its value.
531 $wgHtml5 = true;
532 $wgXhtmlDefaultNamespace = 'http://www.w3.org/1999/xhtml';
533 $wgJsMimeType = 'text/javascript';
534
535 // Blacklisted file extensions shouldn't appear on the "allowed" list
536 $wgFileExtensions = array_values( array_diff( $wgFileExtensions, $wgFileBlacklist ) );
537
538 if ( $wgInvalidateCacheOnLocalSettingsChange ) {
539 Wikimedia\suppressWarnings();
540 $wgCacheEpoch = max( $wgCacheEpoch, gmdate( 'YmdHis', filemtime( "$IP/LocalSettings.php" ) ) );
541 Wikimedia\restoreWarnings();
542 }
543
544 if ( $wgNewUserLog ) {
545 // Add new user log type
546 $wgLogTypes[] = 'newusers';
547 $wgLogNames['newusers'] = 'newuserlogpage';
548 $wgLogHeaders['newusers'] = 'newuserlogpagetext';
549 $wgLogActionsHandlers['newusers/newusers'] = NewUsersLogFormatter::class;
550 $wgLogActionsHandlers['newusers/create'] = NewUsersLogFormatter::class;
551 $wgLogActionsHandlers['newusers/create2'] = NewUsersLogFormatter::class;
552 $wgLogActionsHandlers['newusers/byemail'] = NewUsersLogFormatter::class;
553 $wgLogActionsHandlers['newusers/autocreate'] = NewUsersLogFormatter::class;
554 }
555
556 if ( $wgPageCreationLog ) {
557 // Add page creation log type
558 $wgLogTypes[] = 'create';
559 $wgLogActionsHandlers['create/create'] = LogFormatter::class;
560 }
561
562 if ( $wgPageLanguageUseDB ) {
563 $wgLogTypes[] = 'pagelang';
564 $wgLogActionsHandlers['pagelang/pagelang'] = PageLangLogFormatter::class;
565 }
566
567 if ( $wgCookieSecure === 'detect' ) {
568 $wgCookieSecure = ( WebRequest::detectProtocol() === 'https' );
569 }
570
571 if ( $wgProfileOnly ) {
572 $wgDebugLogGroups['profileoutput'] = $wgDebugLogFile;
573 $wgDebugLogFile = '';
574 }
575
576 // Backwards compatibility with old password limits
577 if ( $wgMinimalPasswordLength !== false ) {
578 $wgPasswordPolicy['policies']['default']['MinimalPasswordLength'] = $wgMinimalPasswordLength;
579 }
580
581 if ( $wgMaximalPasswordLength !== false ) {
582 $wgPasswordPolicy['policies']['default']['MaximalPasswordLength'] = $wgMaximalPasswordLength;
583 }
584
585 // Backwards compatibility warning
586 if ( !$wgSessionsInObjectCache ) {
587 wfDeprecated( '$wgSessionsInObjectCache = false', '1.27' );
588 if ( $wgSessionHandler ) {
589 wfDeprecated( '$wgSessionsHandler', '1.27' );
590 }
591 $cacheType = get_class( ObjectCache::getInstance( $wgSessionCacheType ) );
592 wfDebugLog(
593 'caches',
594 "Session data will be stored in \"$cacheType\" cache with " .
595 "expiry $wgObjectCacheSessionExpiry seconds"
596 );
597 }
598 $wgSessionsInObjectCache = true;
599
600 if ( $wgPHPSessionHandling !== 'enable' &&
601 $wgPHPSessionHandling !== 'warn' &&
602 $wgPHPSessionHandling !== 'disable'
603 ) {
604 $wgPHPSessionHandling = 'warn';
605 }
606 if ( defined( 'MW_NO_SESSION' ) ) {
607 // If the entry point wants no session, force 'disable' here unless they
608 // specifically set it to the (undocumented) 'warn'.
609 $wgPHPSessionHandling = MW_NO_SESSION === 'warn' ? 'warn' : 'disable';
610 }
611
612 Profiler::instance()->scopedProfileOut( $ps_default );
613
614 // Disable MWDebug for command line mode, this prevents MWDebug from eating up
615 // all the memory from logging SQL queries on maintenance scripts
616 global $wgCommandLineMode;
617 if ( $wgDebugToolbar && !$wgCommandLineMode ) {
618 MWDebug::init();
619 }
620
621 // Reset the global service locator, so any services that have already been created will be
622 // re-created while taking into account any custom settings and extensions.
623 MediaWikiServices::resetGlobalInstance( new GlobalVarConfig(), 'quick' );
624
625 if ( $wgSharedDB && $wgSharedTables ) {
626 // Apply $wgSharedDB table aliases for the local LB (all non-foreign DB connections)
627 MediaWikiServices::getInstance()->getDBLoadBalancer()->setTableAliases(
628 array_fill_keys(
629 $wgSharedTables,
630 [
631 'dbname' => $wgSharedDB,
632 'schema' => $wgSharedSchema,
633 'prefix' => $wgSharedPrefix
634 ]
635 )
636 );
637 }
638
639 // Define a constant that indicates that the bootstrapping of the service locator
640 // is complete.
641 define( 'MW_SERVICE_BOOTSTRAP_COMPLETE', 1 );
642
643 MWExceptionHandler::installHandler();
644
645 // T48998: Bail out early if $wgArticlePath is non-absolute
646 foreach ( [ 'wgArticlePath', 'wgVariantArticlePath' ] as $varName ) {
647 if ( $$varName && !preg_match( '/^(https?:\/\/|\/)/', $$varName ) ) {
648 throw new FatalError(
649 "If you use a relative URL for \$$varName, it must start " .
650 'with a slash (<code>/</code>).<br><br>See ' .
651 "<a href=\"https://www.mediawiki.org/wiki/Manual:\$$varName\">" .
652 "https://www.mediawiki.org/wiki/Manual:\$$varName</a>."
653 );
654 }
655 }
656
657 $ps_default2 = Profiler::instance()->scopedProfileIn( $fname . '-defaults2' );
658
659 if ( $wgCanonicalServer === false ) {
660 $wgCanonicalServer = wfExpandUrl( $wgServer, PROTO_HTTP );
661 }
662
663 // Set server name
664 $serverParts = wfParseUrl( $wgCanonicalServer );
665 if ( $wgServerName !== false ) {
666 wfWarn( '$wgServerName should be derived from $wgCanonicalServer, '
667 . 'not customized. Overwriting $wgServerName.' );
668 }
669 $wgServerName = $serverParts['host'];
670 unset( $serverParts );
671
672 // Set defaults for configuration variables
673 // that are derived from the server name by default
674 // Note: $wgEmergencyContact and $wgPasswordSender may be false or empty string (T104142)
675 if ( !$wgEmergencyContact ) {
676 $wgEmergencyContact = 'wikiadmin@' . $wgServerName;
677 }
678 if ( !$wgPasswordSender ) {
679 $wgPasswordSender = 'apache@' . $wgServerName;
680 }
681 if ( !$wgNoReplyAddress ) {
682 $wgNoReplyAddress = $wgPasswordSender;
683 }
684
685 if ( $wgSecureLogin && substr( $wgServer, 0, 2 ) !== '//' ) {
686 $wgSecureLogin = false;
687 wfWarn( 'Secure login was enabled on a server that only supports '
688 . 'HTTP or HTTPS. Disabling secure login.' );
689 }
690
691 $wgVirtualRestConfig['global']['domain'] = $wgCanonicalServer;
692
693 // Now that GlobalFunctions is loaded, set defaults that depend on it.
694 if ( $wgTmpDirectory === false ) {
695 $wgTmpDirectory = wfTempDir();
696 }
697
698 // We don't use counters anymore. Left here for extensions still
699 // expecting this to exist. Should be removed sometime 1.26 or later.
700 if ( !isset( $wgDisableCounters ) ) {
701 $wgDisableCounters = true;
702 }
703
704 if ( $wgMainWANCache === false ) {
705 // Setup a WAN cache from $wgMainCacheType with no relayer.
706 // Sites using multiple datacenters can configure a relayer.
707 $wgMainWANCache = 'mediawiki-main-default';
708 $wgWANObjectCaches[$wgMainWANCache] = [
709 'class' => WANObjectCache::class,
710 'cacheId' => $wgMainCacheType,
711 'channels' => [ 'purge' => 'wancache-main-default-purge' ]
712 ];
713 }
714
715 Profiler::instance()->scopedProfileOut( $ps_default2 );
716
717 $ps_misc = Profiler::instance()->scopedProfileIn( $fname . '-misc' );
718
719 // Raise the memory limit if it's too low
720 wfMemoryLimit();
721
722 /**
723 * Set up the timezone, suppressing the pseudo-security warning in PHP 5.1+
724 * that happens whenever you use a date function without the timezone being
725 * explicitly set. Inspired by phpMyAdmin's treatment of the problem.
726 */
727 if ( is_null( $wgLocaltimezone ) ) {
728 Wikimedia\suppressWarnings();
729 $wgLocaltimezone = date_default_timezone_get();
730 Wikimedia\restoreWarnings();
731 }
732
733 date_default_timezone_set( $wgLocaltimezone );
734 if ( is_null( $wgLocalTZoffset ) ) {
735 $wgLocalTZoffset = date( 'Z' ) / 60;
736 }
737 // The part after the System| is ignored, but rest of MW fills it
738 // out as the local offset.
739 $wgDefaultUserOptions['timecorrection'] = "System|$wgLocalTZoffset";
740
741 if ( !$wgDBerrorLogTZ ) {
742 $wgDBerrorLogTZ = $wgLocaltimezone;
743 }
744
745 // Initialize the request object in $wgRequest
746 $wgRequest = RequestContext::getMain()->getRequest(); // BackCompat
747 // Set user IP/agent information for agent session consistency purposes
748 $cpPosInfo = LBFactory::getCPInfoFromCookieValue(
749 // The cookie has no prefix and is set by MediaWiki::preOutputCommit()
750 $wgRequest->getCookie( 'cpPosIndex', '' ),
751 // Mitigate broken client-side cookie expiration handling (T190082)
752 time() - ChronologyProtector::POSITION_COOKIE_TTL
753 );
754 MediaWikiServices::getInstance()->getDBLoadBalancerFactory()->setRequestInfo( [
755 'IPAddress' => $wgRequest->getIP(),
756 'UserAgent' => $wgRequest->getHeader( 'User-Agent' ),
757 'ChronologyProtection' => $wgRequest->getHeader( 'ChronologyProtection' ),
758 'ChronologyPositionIndex' => $wgRequest->getInt( 'cpPosIndex', $cpPosInfo['index'] ),
759 'ChronologyClientId' => $cpPosInfo['clientId']
760 ] );
761 unset( $cpPosInfo );
762 // Make sure that object caching does not undermine the ChronologyProtector improvements
763 if ( $wgRequest->getCookie( 'UseDC', '' ) === 'master' ) {
764 // The user is pinned to the primary DC, meaning that they made recent changes which should
765 // be reflected in their subsequent web requests. Avoid the use of interim cache keys because
766 // they use a blind TTL and could be stale if an object changes twice in a short time span.
767 MediaWikiServices::getInstance()->getMainWANObjectCache()->useInterimHoldOffCaching( false );
768 }
769
770 // Useful debug output
771 if ( $wgCommandLineMode ) {
772 wfDebug( "\n\nStart command line script $self\n" );
773 } else {
774 $debug = "\n\nStart request {$wgRequest->getMethod()} {$wgRequest->getRequestURL()}\n";
775
776 if ( $wgDebugPrintHttpHeaders ) {
777 $debug .= "HTTP HEADERS:\n";
778
779 foreach ( $wgRequest->getAllHeaders() as $name => $value ) {
780 $debug .= "$name: $value\n";
781 }
782 }
783 wfDebug( $debug );
784 }
785
786 $wgMemc = ObjectCache::getLocalClusterInstance();
787 $messageMemc = wfGetMessageCacheStorage();
788
789 wfDebugLog( 'caches',
790 'cluster: ' . get_class( $wgMemc ) .
791 ', WAN: ' . ( $wgMainWANCache === CACHE_NONE ? 'CACHE_NONE' : $wgMainWANCache ) .
792 ', stash: ' . $wgMainStash .
793 ', message: ' . get_class( $messageMemc ) .
794 ', session: ' . get_class( ObjectCache::getInstance( $wgSessionCacheType ) )
795 );
796
797 Profiler::instance()->scopedProfileOut( $ps_misc );
798
799 // Most of the config is out, some might want to run hooks here.
800 Hooks::run( 'SetupAfterCache' );
801
802 $ps_globals = Profiler::instance()->scopedProfileIn( $fname . '-globals' );
803
804 /**
805 * @var Language $wgContLang
806 * @deprecated since 1.32, use the ContentLanguage service directly
807 */
808 $wgContLang = MediaWikiServices::getInstance()->getContentLanguage();
809
810 // Now that variant lists may be available...
811 $wgRequest->interpolateTitle();
812
813 if ( !is_object( $wgAuth ) ) {
814 $wgAuth = new MediaWiki\Auth\AuthManagerAuthPlugin;
815 Hooks::run( 'AuthPluginSetup', [ &$wgAuth ] );
816 }
817 if ( $wgAuth && !$wgAuth instanceof MediaWiki\Auth\AuthManagerAuthPlugin ) {
818 MediaWiki\Auth\AuthManager::singleton()->forcePrimaryAuthenticationProviders( [
819 new MediaWiki\Auth\TemporaryPasswordPrimaryAuthenticationProvider( [
820 'authoritative' => false,
821 ] ),
822 new MediaWiki\Auth\AuthPluginPrimaryAuthenticationProvider( $wgAuth ),
823 new MediaWiki\Auth\LocalPasswordPrimaryAuthenticationProvider( [
824 'authoritative' => true,
825 ] ),
826 ], '$wgAuth is ' . get_class( $wgAuth ) );
827 }
828
829 /**
830 * @var MediaWiki\Session\SessionId|null $wgInitialSessionId The persistent
831 * session ID (if any) loaded at startup
832 */
833 $wgInitialSessionId = null;
834 if ( !defined( 'MW_NO_SESSION' ) && !$wgCommandLineMode ) {
835 // If session.auto_start is there, we can't touch session name
836 if ( $wgPHPSessionHandling !== 'disable' && !wfIniGetBool( 'session.auto_start' ) ) {
837 session_name( $wgSessionName ?: $wgCookiePrefix . '_session' );
838 }
839
840 // Create the SessionManager singleton and set up our session handler,
841 // unless we're specifically asked not to.
842 if ( !defined( 'MW_NO_SESSION_HANDLER' ) ) {
843 MediaWiki\Session\PHPSessionHandler::install(
844 MediaWiki\Session\SessionManager::singleton()
845 );
846 }
847
848 // Initialize the session
849 try {
850 $session = MediaWiki\Session\SessionManager::getGlobalSession();
851 } catch ( OverflowException $ex ) {
852 if ( isset( $ex->sessionInfos ) && count( $ex->sessionInfos ) >= 2 ) {
853 // The exception is because the request had multiple possible
854 // sessions tied for top priority. Report this to the user.
855 $list = [];
856 foreach ( $ex->sessionInfos as $info ) {
857 $list[] = $info->getProvider()->describe( $wgContLang );
858 }
859 $list = $wgContLang->listToText( $list );
860 throw new HttpError( 400,
861 Message::newFromKey( 'sessionmanager-tie', $list )->inLanguage( $wgContLang )->plain()
862 );
863 }
864
865 // Not the one we want, rethrow
866 throw $ex;
867 }
868
869 if ( $session->isPersistent() ) {
870 $wgInitialSessionId = $session->getSessionId();
871 }
872
873 $session->renew();
874 if ( MediaWiki\Session\PHPSessionHandler::isEnabled() &&
875 ( $session->isPersistent() || $session->shouldRememberUser() )
876 ) {
877 // Start the PHP-session for backwards compatibility
878 session_id( $session->getId() );
879 Wikimedia\quietCall( 'session_start' );
880 }
881
882 unset( $session );
883 } else {
884 // Even if we didn't set up a global Session, still install our session
885 // handler unless specifically requested not to.
886 if ( !defined( 'MW_NO_SESSION_HANDLER' ) ) {
887 MediaWiki\Session\PHPSessionHandler::install(
888 MediaWiki\Session\SessionManager::singleton()
889 );
890 }
891 }
892
893 /**
894 * @var User $wgUser
895 */
896 $wgUser = RequestContext::getMain()->getUser(); // BackCompat
897
898 /**
899 * @var Language $wgLang
900 */
901 $wgLang = new StubUserLang;
902
903 /**
904 * @var OutputPage $wgOut
905 */
906 $wgOut = RequestContext::getMain()->getOutput(); // BackCompat
907
908 /**
909 * @var Parser $wgParser
910 * @deprecated since 1.32, use MediaWikiServices::getParser() instead
911 */
912 $wgParser = new StubObject( 'wgParser', function () {
913 return MediaWikiServices::getInstance()->getParser();
914 } );
915
916 /**
917 * @var Title $wgTitle
918 */
919 $wgTitle = null;
920
921 Profiler::instance()->scopedProfileOut( $ps_globals );
922 $ps_extensions = Profiler::instance()->scopedProfileIn( $fname . '-extensions' );
923
924 // Extension setup functions
925 // Entries should be added to this variable during the inclusion
926 // of the extension file. This allows the extension to perform
927 // any necessary initialisation in the fully initialised environment
928 foreach ( $wgExtensionFunctions as $func ) {
929 call_user_func( $func );
930 }
931
932 // If the session user has a 0 id but a valid name, that means we need to
933 // autocreate it.
934 if ( !defined( 'MW_NO_SESSION' ) && !$wgCommandLineMode ) {
935 $sessionUser = MediaWiki\Session\SessionManager::getGlobalSession()->getUser();
936 if ( $sessionUser->getId() === 0 && User::isValidUserName( $sessionUser->getName() ) ) {
937 $res = MediaWiki\Auth\AuthManager::singleton()->autoCreateUser(
938 $sessionUser,
939 MediaWiki\Auth\AuthManager::AUTOCREATE_SOURCE_SESSION,
940 true
941 );
942 \MediaWiki\Logger\LoggerFactory::getInstance( 'authevents' )->info( 'Autocreation attempt', [
943 'event' => 'autocreate',
944 'status' => $res,
945 ] );
946 unset( $res );
947 }
948 unset( $sessionUser );
949 }
950
951 if ( !$wgCommandLineMode ) {
952 Pingback::schedulePingback();
953 }
954
955 $wgFullyInitialised = true;
956
957 Profiler::instance()->scopedProfileOut( $ps_extensions );
958 Profiler::instance()->scopedProfileOut( $ps_setup );