More bugs! Why did I only spot these after commit >:|
[lhc/web/wiklou.git] / includes / Block.php
1 <?php
2 /**
3 * Blocks and bans object
4 * @package MediaWiki
5 */
6
7 /**
8 * The block class
9 * All the functions in this class assume the object is either explicitly
10 * loaded or filled. It is not load-on-demand. There are no accessors.
11 *
12 * Globals used: $wgAutoblockExpiry, $wgAntiLockFlags
13 *
14 * @todo This could be used everywhere, but it isn't.
15 * @package MediaWiki
16 */
17 class Block
18 {
19 /* public*/ var $mAddress, $mUser, $mBy, $mReason, $mTimestamp, $mAuto, $mId, $mExpiry,
20 $mRangeStart, $mRangeEnd, $mAnonOnly, $mEnableAutoblock;
21 /* private */ var $mNetworkBits, $mIntegerAddr, $mForUpdate, $mFromMaster, $mByName;
22
23 const EB_KEEP_EXPIRED = 1;
24 const EB_FOR_UPDATE = 2;
25 const EB_RANGE_ONLY = 4;
26
27 function Block( $address = '', $user = 0, $by = 0, $reason = '',
28 $timestamp = '' , $auto = 0, $expiry = '', $anonOnly = 0, $createAccount = 0, $enableAutoblock = 0 )
29 {
30 $this->mId = 0;
31 $this->mAddress = $address;
32 $this->mUser = $user;
33 $this->mBy = $by;
34 $this->mReason = $reason;
35 $this->mTimestamp = wfTimestamp(TS_MW,$timestamp);
36 $this->mAuto = $auto;
37 $this->mAnonOnly = $anonOnly;
38 $this->mCreateAccount = $createAccount;
39 $this->mExpiry = self::decodeExpiry( $expiry );
40 $this->mEnableAutoblock = $enableAutoblock;
41
42 $this->mForUpdate = false;
43 $this->mFromMaster = false;
44 $this->mByName = false;
45 $this->initialiseRange();
46 }
47
48 static function newFromDB( $address, $user = 0, $killExpired = true )
49 {
50 $block = new Block();
51 $block->load( $address, $user, $killExpired );
52 if ( $block->isValid() ) {
53 return $block;
54 } else {
55 return null;
56 }
57 }
58
59 static function newFromID( $id )
60 {
61 $dbr =& wfGetDB( DB_SLAVE );
62 $res = $dbr->resultObject( $dbr->select( 'ipblocks', '*',
63 array( 'ipb_id' => $id ), __METHOD__ ) );
64 $block = new Block;
65 if ( $block->loadFromResult( $res ) ) {
66 return $block;
67 } else {
68 return null;
69 }
70 }
71
72 function clear()
73 {
74 $this->mAddress = $this->mReason = $this->mTimestamp = '';
75 $this->mId = $this->mAnonOnly = $this->mCreateAccount =
76 $this->mEnableAutoblock = $this->mAuto = $this->mUser =
77 $this->mBy = 0;
78 $this->mByName = false;
79 }
80
81 /**
82 * Get the DB object and set the reference parameter to the query options
83 */
84 function &getDBOptions( &$options )
85 {
86 global $wgAntiLockFlags;
87 if ( $this->mForUpdate || $this->mFromMaster ) {
88 $db =& wfGetDB( DB_MASTER );
89 if ( !$this->mForUpdate || ($wgAntiLockFlags & ALF_NO_BLOCK_LOCK) ) {
90 $options = array();
91 } else {
92 $options = array( 'FOR UPDATE' );
93 }
94 } else {
95 $db =& wfGetDB( DB_SLAVE );
96 $options = array();
97 }
98 return $db;
99 }
100
101 /**
102 * Get a ban from the DB, with either the given address or the given username
103 *
104 * @param string $address The IP address of the user, or blank to skip IP blocks
105 * @param integer $user The user ID, or zero for anonymous users
106 * @param bool $killExpired Whether to delete expired rows while loading
107 *
108 */
109 function load( $address = '', $user = 0, $killExpired = true )
110 {
111 wfDebug( "Block::load: '$address', '$user', $killExpired\n" );
112
113 $options = array();
114 $db =& $this->getDBOptions( $options );
115
116 $ret = false;
117 $killed = false;
118
119 if ( 0 == $user && $address == '' ) {
120 # Invalid user specification, not blocked
121 $this->clear();
122 return false;
123 }
124
125 # Try user block
126 if ( $user ) {
127 $res = $db->resultObject( $db->select( 'ipblocks', '*', array( 'ipb_user' => $user ),
128 __METHOD__, $options ) );
129 if ( $this->loadFromResult( $res, $killExpired ) ) {
130 return true;
131 }
132 }
133
134 # Try IP block
135 # TODO: improve performance by merging this query with the autoblock one
136 # Slightly tricky while handling killExpired as well
137 if ( $address ) {
138 $conds = array( 'ipb_address' => $address, 'ipb_auto' => 0 );
139 $res = $db->resultObject( $db->select( 'ipblocks', '*', $conds, __METHOD__, $options ) );
140 if ( $this->loadFromResult( $res, $killExpired ) ) {
141 if ( $user && $this->mAnonOnly ) {
142 # Block is marked anon-only
143 # Whitelist this IP address against autoblocks and range blocks
144 $this->clear();
145 return false;
146 } else {
147 return true;
148 }
149 }
150 }
151
152 # Try range block
153 if ( $this->loadRange( $address, $killExpired, $user == 0 ) ) {
154 if ( $user && $this->mAnonOnly ) {
155 $this->clear();
156 return false;
157 } else {
158 return true;
159 }
160 }
161
162 # Try autoblock
163 if ( $address ) {
164 $conds = array( 'ipb_address' => $address, 'ipb_auto' => 1 );
165 if ( $user ) {
166 $conds['ipb_anon_only'] = 0;
167 }
168 $res = $db->resultObject( $db->select( 'ipblocks', '*', $conds, __METHOD__, $options ) );
169 if ( $this->loadFromResult( $res, $killExpired ) ) {
170 return true;
171 }
172 }
173
174 # Give up
175 $this->clear();
176 return false;
177 }
178
179 /**
180 * Fill in member variables from a result wrapper
181 */
182 function loadFromResult( ResultWrapper $res, $killExpired = true ) {
183 $ret = false;
184 if ( 0 != $res->numRows() ) {
185 # Get first block
186 $row = $res->fetchObject();
187 $this->initFromRow( $row );
188
189 if ( $killExpired ) {
190 # If requested, delete expired rows
191 do {
192 $killed = $this->deleteIfExpired();
193 if ( $killed ) {
194 $row = $res->fetchObject();
195 if ( $row ) {
196 $this->initFromRow( $row );
197 }
198 }
199 } while ( $killed && $row );
200
201 # If there were any left after the killing finished, return true
202 if ( $row ) {
203 $ret = true;
204 }
205 } else {
206 $ret = true;
207 }
208 }
209 $res->free();
210 return $ret;
211 }
212
213 /**
214 * Search the database for any range blocks matching the given address, and
215 * load the row if one is found.
216 */
217 function loadRange( $address, $killExpired = true )
218 {
219 $iaddr = IP::toHex( $address );
220 if ( $iaddr === false ) {
221 # Invalid address
222 return false;
223 }
224
225 # Only scan ranges which start in this /16, this improves search speed
226 # Blocks should not cross a /16 boundary.
227 $range = substr( $iaddr, 0, 4 );
228
229 $options = array();
230 $db =& $this->getDBOptions( $options );
231 $conds = array(
232 "ipb_range_start LIKE '$range%'",
233 "ipb_range_start <= '$iaddr'",
234 "ipb_range_end >= '$iaddr'"
235 );
236
237 $res = $db->resultObject( $db->select( 'ipblocks', '*', $conds, __METHOD__, $options ) );
238 $success = $this->loadFromResult( $res, $killExpired );
239 return $success;
240 }
241
242 /**
243 * Determine if a given integer IPv4 address is in a given CIDR network
244 * @deprecated Use IP::isAddressInRange
245 */
246 function isAddressInRange( $addr, $range ) {
247 return IP::isAddressInRange( $addr, $range );
248 }
249
250 function initFromRow( $row )
251 {
252 $this->mAddress = $row->ipb_address;
253 $this->mReason = $row->ipb_reason;
254 $this->mTimestamp = wfTimestamp(TS_MW,$row->ipb_timestamp);
255 $this->mUser = $row->ipb_user;
256 $this->mBy = $row->ipb_by;
257 $this->mAuto = $row->ipb_auto;
258 $this->mAnonOnly = $row->ipb_anon_only;
259 $this->mCreateAccount = $row->ipb_create_account;
260 $this->mEnableAutoblock = $row->ipb_enable_autoblock;
261 $this->mId = $row->ipb_id;
262 $this->mExpiry = self::decodeExpiry( $row->ipb_expiry );
263 if ( isset( $row->user_name ) ) {
264 $this->mByName = $row->user_name;
265 } else {
266 $this->mByName = false;
267 }
268 $this->mRangeStart = $row->ipb_range_start;
269 $this->mRangeEnd = $row->ipb_range_end;
270 }
271
272 function initialiseRange()
273 {
274 $this->mRangeStart = '';
275 $this->mRangeEnd = '';
276
277 if ( $this->mUser == 0 ) {
278 list($this->mRangeStart, $this->mRangeEnd) = IP::parseRange($this->mAddress);
279 }
280 }
281
282 /**
283 * Callback with a Block object for every block
284 * @return integer number of blocks;
285 */
286 /*static*/ function enumBlocks( $callback, $tag, $flags = 0 )
287 {
288 global $wgAntiLockFlags;
289
290 $block = new Block();
291 if ( $flags & Block::EB_FOR_UPDATE ) {
292 $db =& wfGetDB( DB_MASTER );
293 if ( $wgAntiLockFlags & ALF_NO_BLOCK_LOCK ) {
294 $options = '';
295 } else {
296 $options = 'FOR UPDATE';
297 }
298 $block->forUpdate( true );
299 } else {
300 $db =& wfGetDB( DB_SLAVE );
301 $options = '';
302 }
303 if ( $flags & Block::EB_RANGE_ONLY ) {
304 $cond = " AND ipb_range_start <> ''";
305 } else {
306 $cond = '';
307 }
308
309 $now = wfTimestampNow();
310
311 extract( $db->tableNames( 'ipblocks', 'user' ) );
312
313 $sql = "SELECT $ipblocks.*,user_name FROM $ipblocks,$user " .
314 "WHERE user_id=ipb_by $cond ORDER BY ipb_timestamp DESC $options";
315 $res = $db->query( $sql, 'Block::enumBlocks' );
316 $num_rows = $db->numRows( $res );
317
318 while ( $row = $db->fetchObject( $res ) ) {
319 $block->initFromRow( $row );
320 if ( ( $flags & Block::EB_RANGE_ONLY ) && $block->mRangeStart == '' ) {
321 continue;
322 }
323
324 if ( !( $flags & Block::EB_KEEP_EXPIRED ) ) {
325 if ( $block->mExpiry && $now > $block->mExpiry ) {
326 $block->delete();
327 } else {
328 call_user_func( $callback, $block, $tag );
329 }
330 } else {
331 call_user_func( $callback, $block, $tag );
332 }
333 }
334 $db->freeResult( $res );
335 return $num_rows;
336 }
337
338 function delete()
339 {
340 if (wfReadOnly()) {
341 return false;
342 }
343 if ( !$this->mId ) {
344 throw new MWException( "Block::delete() now requires that the mId member be filled\n" );
345 }
346
347 $dbw =& wfGetDB( DB_MASTER );
348 $dbw->delete( 'ipblocks', array( 'ipb_id' => $this->mId ), __METHOD__ );
349 return $dbw->affectedRows() > 0;
350 }
351
352 /**
353 * Insert a block into the block table.
354 *@return Whether or not the insertion was successful.
355 */
356 function insert()
357 {
358 wfDebug( "Block::insert; timestamp {$this->mTimestamp}\n" );
359 $dbw =& wfGetDB( DB_MASTER );
360 $dbw->begin();
361
362 # Unset ipb_anon_only for user blocks, makes no sense
363 if ( $this->mUser ) {
364 $this->mAnonOnly = 0;
365 }
366
367 # Unset ipb_enable_autoblock for IP blocks, makes no sense
368 if ( !$this->mUser ) {
369 $this->mEnableAutoblock = 0;
370 }
371
372 # Don't collide with expired blocks
373 Block::purgeExpired();
374
375 $ipb_id = $dbw->nextSequenceValue('ipblocks_ipb_id_val');
376 $dbw->insert( 'ipblocks',
377 array(
378 'ipb_id' => $ipb_id,
379 'ipb_address' => $this->mAddress,
380 'ipb_user' => $this->mUser,
381 'ipb_by' => $this->mBy,
382 'ipb_reason' => $this->mReason,
383 'ipb_timestamp' => $dbw->timestamp($this->mTimestamp),
384 'ipb_auto' => $this->mAuto,
385 'ipb_anon_only' => $this->mAnonOnly,
386 'ipb_create_account' => $this->mCreateAccount,
387 'ipb_enable_autoblock' => $this->mEnableAutoblock,
388 'ipb_expiry' => self::encodeExpiry( $this->mExpiry, $dbw ),
389 'ipb_range_start' => $this->mRangeStart,
390 'ipb_range_end' => $this->mRangeEnd,
391 ), 'Block::insert', array( 'IGNORE' )
392 );
393 $affected = $dbw->affectedRows();
394 $dbw->commit();
395
396 if ($affected)
397 $this->doRetroactiveAutoblock();
398
399 return $affected;
400 }
401
402 /**
403 * Retroactively autoblocks the last IP used by the user (if it is a user)
404 * blocked by this Block.
405 *@return Whether or not a retroactive autoblock was made.
406 */
407 function doRetroactiveAutoblock() {
408 $dbr = wfGetDb( DB_SLAVE );
409 #If autoblock is enabled, autoblock the LAST IP used
410 # - stolen shamelessly from CheckUser_body.php
411
412 if ($this->mEnableAutoblock && $this->mUser) {
413 wfDebug("Doing retroactive autoblocks for " . $this->mAddress . "\n");
414
415 $row = $dbr->selectRow( 'recentchanges', array( 'rc_ip' ), array( 'rc_user_text' => $this->mAddress ),
416 $fname, array( 'ORDER BY' => 'rc_timestamp DESC' ) );
417
418 if ( !$row || !$row->rc_ip ) {
419 #No results, don't autoblock anything
420 wfDebug("No IP found to retroactively autoblock\n");
421 } else {
422 #Limit is 1, so no loop needed.
423 $retroblockip = $row->rc_ip;
424 return $this->doAutoblock($retroblockip);
425 }
426 }
427 }
428
429 /**
430 * Autoblocks the given IP, referring to this Block.
431 * @param string $autoblockip The IP to autoblock, dotted-quad.
432 * @return bool True if an autoblock was inserted OR redundant to preexisting block.
433 */
434 public function doAutoblock( $autoblockip ) {
435 # Check if this IP address is already blocked
436 $dbw =& wfGetDb( DB_MASTER );
437 $dbw->begin();
438
439 # If autoblocks are disabled, or if this IP is whitelisted, go away.
440 if ( !$this->mEnableAutoblock || self::isWhitelistedIp( $autoblockip ) ) {
441 return false;
442 }
443
444 # It's okay to autoblock. Go ahead and create/insert the block.
445
446 $ipblock = Block::newFromDB( $autoblockip );
447 if ( $ipblock ) {
448 # If the user is already blocked. Then check if the autoblock would
449 # exceed the user block. If it would exceed, then do nothing, else
450 # prolong block time
451 if ($this->mExpiry &&
452 ($this->mExpiry < Block::getAutoblockExpiry($ipblock->mTimestamp))) {
453 return true;
454 }
455 # Just update the timestamp
456 $ipblock->updateTimestamp();
457 return true;
458 } else {
459 $ipblock = new Block;
460 }
461
462 # Make a new block object with the desired properties
463 wfDebug( "Autoblocking {$this->mAddress}@" . $autoblockip . "\n" );
464 $ipblock->mAddress = $autoblockip;
465 $ipblock->mUser = 0;
466 $ipblock->mBy = $this->mBy;
467 $ipblock->mReason = wfMsgForContent( 'autoblocker', $this->mAddress, $this->mReason );
468 $ipblock->mTimestamp = wfTimestampNow();
469 $ipblock->mAuto = 1;
470 $ipblock->mCreateAccount = $this->mCreateAccount;
471
472 # If the user is already blocked with an expiry date, we don't
473 # want to pile on top of that!
474 if($this->mExpiry) {
475 $ipblock->mExpiry = min ( $this->mExpiry, Block::getAutoblockExpiry( $this->mTimestamp ));
476 } else {
477 $ipblock->mExpiry = Block::getAutoblockExpiry( $this->mTimestamp );
478 }
479 # Insert it
480 return $ipblock->insert();
481 }
482
483 /**
484 * Checks whether an IP is whitelisted in the autoblock_whitelist message.
485 * @todo Cache this?
486 *
487 * @param string $ip Dotted quad
488 * @return bool
489 */
490 private static function isWhitelistedIp( $ip ) {
491 $lines = explode( "\n", wfMsgForContentNoTrans( 'autoblock_whitelist' ) );
492
493 wfDebug("Checking the autoblock whitelist..\n");
494
495 foreach( $lines as $line ) {
496 # Parse list items only
497 if ( substr( $line, 0, 1 ) !== '*' ) {
498 continue;
499 }
500
501 $wlEntry = substr($line, 1);
502 $wlEntry = trim($wlEntry);
503
504 wfDebug("Checking $wlEntry\n");
505
506 # Is the IP in this range?
507 if (IP::isAddressInRange( $ip, $wlEntry )) {
508 wfDebug("IP $ip matches $wlEntry, not autoblocking\n");
509 return true; #This /SHOULD/ introduce a dummy block - but
510 # I don't know a safe way to do so. -werdna
511 }
512 }
513 return false;
514 }
515 function deleteIfExpired()
516 {
517 $fname = 'Block::deleteIfExpired';
518 wfProfileIn( $fname );
519 if ( $this->isExpired() ) {
520 wfDebug( "Block::deleteIfExpired() -- deleting\n" );
521 $this->delete();
522 $retVal = true;
523 } else {
524 wfDebug( "Block::deleteIfExpired() -- not expired\n" );
525 $retVal = false;
526 }
527 wfProfileOut( $fname );
528 return $retVal;
529 }
530
531 function isExpired()
532 {
533 wfDebug( "Block::isExpired() checking current " . wfTimestampNow() . " vs $this->mExpiry\n" );
534 if ( !$this->mExpiry ) {
535 return false;
536 } else {
537 return wfTimestampNow() > $this->mExpiry;
538 }
539 }
540
541 function isValid()
542 {
543 return $this->mAddress != '';
544 }
545
546 function updateTimestamp()
547 {
548 if ( $this->mAuto ) {
549 $this->mTimestamp = wfTimestamp();
550 $this->mExpiry = Block::getAutoblockExpiry( $this->mTimestamp );
551
552 $dbw =& wfGetDB( DB_MASTER );
553 $dbw->update( 'ipblocks',
554 array( /* SET */
555 'ipb_timestamp' => $dbw->timestamp($this->mTimestamp),
556 'ipb_expiry' => $dbw->timestamp($this->mExpiry),
557 ), array( /* WHERE */
558 'ipb_address' => $this->mAddress
559 ), 'Block::updateTimestamp'
560 );
561 }
562 }
563
564 /*
565 function getIntegerAddr()
566 {
567 return $this->mIntegerAddr;
568 }
569
570 function getNetworkBits()
571 {
572 return $this->mNetworkBits;
573 }*/
574
575 /**
576 * @return The blocker user ID.
577 */
578 public function getBy() {
579 return $this->mBy;
580 }
581
582 /**
583 * @return The blocker user name.
584 */
585 function getByName()
586 {
587 if ( $this->mByName === false ) {
588 $this->mByName = User::whoIs( $this->mBy );
589 }
590 return $this->mByName;
591 }
592
593 function forUpdate( $x = NULL ) {
594 return wfSetVar( $this->mForUpdate, $x );
595 }
596
597 function fromMaster( $x = NULL ) {
598 return wfSetVar( $this->mFromMaster, $x );
599 }
600
601 function getRedactedName() {
602 if ( $this->mAuto ) {
603 return '#' . $this->mId;
604 } else {
605 return $this->mAddress;
606 }
607 }
608
609 /**
610 * Encode expiry for DB
611 */
612 static function encodeExpiry( $expiry, $db ) {
613 if ( $expiry == '' || $expiry == Block::infinity() ) {
614 return Block::infinity();
615 } else {
616 return $db->timestamp( $expiry );
617 }
618 }
619
620 /**
621 * Decode expiry which has come from the DB
622 */
623 static function decodeExpiry( $expiry ) {
624 if ( $expiry == '' || $expiry == Block::infinity() ) {
625 return Block::infinity();
626 } else {
627 return wfTimestamp( TS_MW, $expiry );
628 }
629 }
630
631 static function getAutoblockExpiry( $timestamp )
632 {
633 global $wgAutoblockExpiry;
634 return wfTimestamp( TS_MW, wfTimestamp( TS_UNIX, $timestamp ) + $wgAutoblockExpiry );
635 }
636
637 static function normaliseRange( $range )
638 {
639 $parts = explode( '/', $range );
640 if ( count( $parts ) == 2 ) {
641 $shift = 32 - $parts[1];
642 $ipint = IP::toUnsigned( $parts[0] );
643 $ipint = $ipint >> $shift << $shift;
644 $newip = long2ip( $ipint );
645 $range = "$newip/{$parts[1]}";
646 }
647 return $range;
648 }
649
650 /**
651 * Purge expired blocks from the ipblocks table
652 */
653 static function purgeExpired() {
654 $dbw =& wfGetDB( DB_MASTER );
655 $dbw->delete( 'ipblocks', array( 'ipb_expiry < ' . $dbw->addQuotes( $dbw->timestamp() ) ), __METHOD__ );
656 }
657
658 static function infinity() {
659 # This is a special keyword for timestamps in PostgreSQL, and
660 # works with CHAR(14) as well because "i" sorts after all numbers.
661 return 'infinity';
662
663 /*
664 static $infinity;
665 if ( !isset( $infinity ) ) {
666 $dbr =& wfGetDB( DB_SLAVE );
667 $infinity = $dbr->bigTimestamp();
668 }
669 return $infinity;
670 */
671 }
672
673 }
674 ?>