Allowing user ids to be specified e.g. "#1234@en", to work around any encoding problems
[lhc/web/wiklou.git] / includes / SpecialMakesysop.php
1 <?php
2 include_once( "LinksUpdate.php" );
3
4 function wfSpecialMakesysop()
5 {
6 global $wgUser, $wgOut, $action, $target;
7
8 if ( 0 == $wgUser->getID() or $wgUser->isBlocked() ) {
9 $wgOut->errorpage( "movenologin", "movenologintext" );
10 return;
11 }
12 if (! $wgUser->isBureaucrat() && ! $wgUser->isDeveloper() ){
13 $wgOut->errorpage( "bureaucrattitle", "bureaucrattext" );
14 return;
15 }
16
17 if ( wfReadOnly() ) {
18 $wgOut->readOnlyPage();
19 return;
20 }
21
22 $f = new MakesysopForm();
23
24 if ( $_POST['wpMakesysopSubmit'] ) {
25 $f->doSubmit();
26 } else {
27 $f->showForm( "" );
28 }
29 }
30
31 class MakesysopForm {
32 function showForm( $err = "")
33 {
34 global $wgOut, $wgUser, $wgLang;
35 global $wpNewTitle, $wpOldTitle, $wpMovetalk, $target, $wpRights, $wpMakesysopUser;
36
37 if ( $wgUser->isDeveloper() ) {
38 $wgOut->setPageTitle( wfMsg( "set_user_rights" ) );
39 } else {
40 $wgOut->setPagetitle( wfMsg( "makesysoptitle" ) );
41 }
42
43 $wgOut->addWikiText( wfMsg( "makesysoptext" ) );
44
45 $titleObj = Title::makeTitle( NS_SPECIAL, "Makesysop" );
46 $action = $titleObj->escapeLocalURL( "action=submit" );
47
48 if ( "" != $err ) {
49 $wgOut->setSubtitle( wfMsg( "formerror" ) );
50 $wgOut->addHTML( "<p><font color='red' size='+1'>{$err}</font>\n" );
51 }
52 $namedesc = wfMsg( "makesysopname" );
53 if ( isset( $wpMakesysopUser ) ) {
54 $encUser = htmlspecialchars( $wpMakesysopUser );
55 } else {
56 $encUser = "";
57 }
58
59 $wgOut->addHTML( "<p>
60 <form id=\"makesysop\" method=\"post\" action=\"{$action}\">
61 <table border=0>
62 <tr>
63 <td align=right>$namedesc</td>
64 <td align=left>
65 <input type=text size=40 name=\"wpMakesysopUser\" value=\"$encUser\">
66 </td>
67 </tr>"
68 );
69 /*
70 $makeburo = wfMsg( "setbureaucratflag" );
71 $wgOut->addHTML(
72 "<tr>
73 <td>&nbsp;</td><td align=left>
74 <input type=checkbox name=\"wpSetBureaucrat\" value=1>$makeburo
75 </td>
76 </tr>"
77 );*/
78
79 if ( $wgUser->isDeveloper() ) {
80 $rights = wfMsg( "rights" );
81 if ( isset( $wpRights ) ) {
82 $encRights = htmlspecialchars( $wpRights );
83 } else {
84 $encRights = "sysop";
85 }
86
87 $wgOut->addHTML( "
88 <tr>
89 <td align=right>$rights</td>
90 <td align=left>
91 <input type=text size=40 name=\"wpRights\" value=\"$encRights\">
92 </td>
93 </tr>"
94 );
95 }
96
97 if ( $wgUser->isDeveloper() ) {
98 $mss = wfMsg( "set_user_rights" );
99 } else {
100 $mss = wfMsg( "makesysopsubmit" );
101 }
102 $wgOut->addHTML(
103 "<tr>
104 <td>&nbsp;</td><td align=left>
105 <input type=submit name=\"wpMakesysopSubmit\" value=\"{$mss}\">
106 </td></tr></table>
107 </form>\n"
108 );
109
110 }
111
112 function doSubmit()
113 {
114
115 global $wgOut, $wgUser, $wgLang, $wpMakesysopUser, $wpSetBureaucrat;
116 global $wgDBname, $wgMemc, $wpRights, $wgLocalDatabases;
117
118 $parts = explode( "@", $wpMakesysopUser );
119 if( count( $parts ) == 2 && $wgUser->isDeveloper() ){
120 $username = $parts[0];
121 if ( array_key_exists( $parts[1], $wgLocalDatabases ) ) {
122 $dbName = $wgLocalDatabases[$parts[1]];
123 $usertable = $dbName . ".user";
124 } else {
125 $this->showFail();
126 return;
127 }
128 } else {
129 $username = $wpMakesysopUser;
130 $usertable = "user";
131 $dbName = $wgDBname;
132 }
133 if ( $username{0} == "#" ) {
134 $id = intval( substr( $username, 1 ) );
135 $sql = "SELECT user_id,user_rights FROM $usertable WHERE user_id=$id";
136 } else {
137 $encName = wfStrencode( $username );
138 $sql = "SELECT user_id, user_rights FROM $usertable WHERE user_name = '{$encName}'";
139 }
140
141 $prev = wfIgnoreSQLErrors( TRUE );
142 $res = wfQuery( $sql, DB_WRITE);
143 wfIgnoreSQLErrors( $prev );
144
145 global $wgOut, $wgUser, $wgLang, $wpMakesysopUser, $wpSetBureaucrat;
146 global $wgDBname, $wgMemc, $wpRights, $wgLocalDatabases;
147
148 $parts = explode( "@", $wpMakesysopUser );
149 if( count( $parts ) == 2 && $wgUser->isDeveloper() ){
150 $username = wfStrencode( $parts[0] );
151 if ( array_key_exists( $parts[1], $wgLocalDatabases ) ) {
152 $dbName = $wgLocalDatabases[$parts[1]];
153 $usertable = $dbName . ".user";
154 } else {
155 $this->showFail();
156 return;
157 }
158 } else {
159 $username = wfStrencode( $wpMakesysopUser );
160 $usertable = "user";
161 $dbName = $wgDBname;
162 }
163 if ( $username{0} == "#" ) {
164 $id = intval( substr( $username, 1 ) );
165 $sql = "SELECT user_id,user_rights FROM $usertable WHERE user_id=$id";
166 } else {
167 $encName = wfStrencode( $username );
168 $sql = "SELECT user_id, user_rights FROM $usertable WHERE user_name = '{$username}'";
169 }
170
171
172 $prev = wfIgnoreSQLErrors( TRUE );
173 $res = wfQuery("SELECT user_id, user_rights FROM $usertable WHERE user_name = '{$username}'", DB_WRITE);
174 wfIgnoreSQLErrors( $prev );
175
176 if( wfLastErrno() || ! $username || wfNumRows( $res ) == 0 ){
177 $this->showFail();
178 return;
179 }
180
181 $row = wfFetchObject( $res );
182 $id = intval( $row->user_id );
183 $rightsNotation = array();
184
185 if ( $wgUser->isDeveloper() ) {
186 $newrights = (string)$wpRights;
187 $rightsNotation[] = "=$wpRights";
188 } else {
189 if( $row->user_rights ){
190 $rights = explode(",", $row->user_rights );
191 if(! in_array("sysop", $rights ) ){
192 $rights[] = "sysop";
193 $rightsNotation[] = "+sysop ";
194 }
195 if ( $wpSetBureaucrat && !in_array( "bureaucrat", $rights ) ) {
196 $rights[] = "bureaucrat";
197 $rightsNotation[] = "+bureaucrat ";
198 }
199 $newrights = addslashes( implode( ",", $rights ) );
200 } else {
201 $newrights = "sysop";
202 $rightsNotation[] = "+sysop";
203 if ( $wpSetBureaucrat ) {
204 $rightsNotation[] = "+bureaucrat";
205 $newrights .= ",bureaucrat";
206 }
207 }
208 }
209
210 if ( count( $rightsNotation ) == 0 ) {
211 $this->showFail();
212 } else {
213 $sql = "UPDATE $usertable SET user_rights = '{$newrights}' WHERE user_id = $id LIMIT 1";
214 wfQuery($sql, DB_WRITE);
215 $wgMemc->delete( "$dbName:user:id:$id" );
216
217 $bureaucratLog = wfMsg( "bureaucratlog" );
218 $action = wfMsg( "bureaucratlogentry", $wpMakesysopUser, implode( " ", $rightsNotation ) );
219
220 $log = new LogPage( $bureaucratLog );
221 $log->addEntry( $action, "" );
222
223 $this->showSuccess();
224 }
225 }
226
227 function showSuccess()
228 {
229 global $wgOut, $wpMakesysopUser, $wgUser;
230
231 $wgOut->setPagetitle( wfMsg( "makesysoptitle" ) );
232
233 if ( $wgUser->isDeveloper() ) {
234 $text = wfMsg( "user_rights_set", $wpMakesysopUser );
235 } else {
236 $text = wfMsg( "makesysopok", $wpMakesysopUser );
237 }
238 $text .= "\n\n";
239 $wgOut->addWikiText( $text );
240 $this->showForm();
241
242 }
243
244 function showFail()
245 {
246 global $wgOut, $wpMakesysopUser, $wgUser;
247
248 $wgOut->setPagetitle( wfMsg( "makesysoptitle" ) );
249 if ( $wgUser->isDeveloper() ) {
250 $this->showForm( wfMsg( "set_rights_fail", $wpMakesysopUser ) );
251 } else {
252 $this->showForm( wfMsg( "makesysopfail", $wpMakesysopUser ) );
253 }
254 }
255 }
256 ?>