includes/api/ApiQueryBlocks.php

   1 <?php
   2 /**
   3  *
   4  *
   5  * Created on Sep 10, 2007
   6  *
   7  * Copyright © 2007 Roan Kattouw <Firstname>.<Lastname>@gmail.com
   8  *
   9  * This program is free software; you can redistribute it and/or modify
  10  * it under the terms of the GNU General Public License as published by
  11  * the Free Software Foundation; either version 2 of the License, or
  12  * (at your option) any later version.
  13  *
  14  * This program is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  17  * GNU General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU General Public License along
  20  * with this program; if not, write to the Free Software Foundation, Inc.,
  21  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  22  * http://www.gnu.org/copyleft/gpl.html
  23  *
  24  * @file
  25  */
  26
  27 /**
  28  * Query module to enumerate all user blocks
  29  *
  30  * @ingroup API
  31  */
  32 class ApiQueryBlocks extends ApiQueryBase {
  33
  34         /**
  35          * @var Array
  36          */
  37         protected $usernames;
  38
  39         public function __construct( $query, $moduleName ) {
  40                 parent::__construct( $query, $moduleName, 'bk' );
  41         }
  42
  43         public function execute() {
  44                 global $wgContLang;
  45
  46                 $params = $this->extractRequestParams();
  47                 $this->requireMaxOneParameter( $params, 'users', 'ip' );
  48
  49                 $prop = array_flip( $params['prop'] );
  50                 $fld_id = isset( $prop['id'] );
  51                 $fld_user = isset( $prop['user'] );
  52                 $fld_userid = isset( $prop['userid'] );
  53                 $fld_by = isset( $prop['by'] );
  54                 $fld_byid = isset( $prop['byid'] );
  55                 $fld_timestamp = isset( $prop['timestamp'] );
  56                 $fld_expiry = isset( $prop['expiry'] );
  57                 $fld_reason = isset( $prop['reason'] );
  58                 $fld_range = isset( $prop['range'] );
  59                 $fld_flags = isset( $prop['flags'] );
  60
  61                 $result = $this->getResult();
  62
  63                 $this->addTables( 'ipblocks' );
  64                 $this->addFields( 'ipb_auto' );
  65
  66                 $this->addFieldsIf ( 'ipb_id', $fld_id );
  67                 $this->addFieldsIf( array( 'ipb_address', 'ipb_user' ), $fld_user || $fld_userid );
  68                 $this->addFieldsIf( 'ipb_by_text', $fld_by );
  69                 $this->addFieldsIf( 'ipb_by', $fld_byid );
  70                 $this->addFieldsIf( 'ipb_timestamp', $fld_timestamp );
  71                 $this->addFieldsIf( 'ipb_expiry', $fld_expiry );
  72                 $this->addFieldsIf( 'ipb_reason', $fld_reason );
  73                 $this->addFieldsIf( array( 'ipb_range_start', 'ipb_range_end' ), $fld_range );
  74                 $this->addFieldsIf( array( 'ipb_anon_only', 'ipb_create_account', 'ipb_enable_autoblock',
  75                                                                         'ipb_block_email', 'ipb_deleted', 'ipb_allow_usertalk' ),
  76                                                         $fld_flags );
  77
  78                 $this->addOption( 'LIMIT', $params['limit'] + 1 );
  79                 $this->addTimestampWhereRange( 'ipb_timestamp', $params['dir'], $params['start'], $params['end'] );
  80
  81                 $db = $this->getDB();
  82
  83                 if ( isset( $params['ids'] ) ) {
  84                         $this->addWhereFld( 'ipb_id', $params['ids'] );
  85                 }
  86                 if ( isset( $params['users'] ) ) {
  87                         foreach ( (array)$params['users'] as $u ) {
  88                                 $this->prepareUsername( $u );
  89                         }
  90                         $this->addWhereFld( 'ipb_address', $this->usernames );
  91                         $this->addWhereFld( 'ipb_auto', 0 );
  92                 }
  93                 if ( isset( $params['ip'] ) ) {
  94                         list( $ip, $range ) = IP::parseCIDR( $params['ip'] );
  95                         if ( $ip && $range ) {
  96                                 // We got a CIDR range
  97                                 if ( $range < 16 )
  98                                         $this->dieUsage( 'CIDR ranges broader than /16 are not accepted', 'cidrtoobroad' );
  99                                 $lower = wfBaseConvert( $ip, 10, 16, 8, false );
 100                                 $upper = wfBaseConvert( $ip + pow( 2, 32 - $range ) - 1, 10, 16, 8, false );
 101                         } else {
 102                                 $lower = $upper = IP::toHex( $params['ip'] );
 103                         }
 104                         $prefix = substr( $lower, 0, 4 );
 105
 106                         # Fairly hard to make a malicious SQL statement out of hex characters,
 107                         # but it is good practice to add quotes
 108                         $lower = $db->addQuotes( $lower );
 109                         $upper = $db->addQuotes( $upper );
 110
 111                         $this->addWhere( array(
 112                                 'ipb_range_start' . $db->buildLike( $prefix, $db->anyString() ),
 113                                 'ipb_range_start <= ' . $lower,
 114                                 'ipb_range_end >= ' . $upper,
 115                                 'ipb_auto' => 0
 116                         ) );
 117                 }
 118
 119                 if ( !is_null( $params['show'] ) ) {
 120                         $show = array_flip( $params['show'] );
 121
 122                         /* Check for conflicting parameters. */
 123                         if ( ( isset ( $show['account'] ) && isset ( $show['!account'] ) )
 124                                         || ( isset ( $show['ip'] ) && isset ( $show['!ip'] ) )
 125                                         || ( isset ( $show['range'] ) && isset ( $show['!range'] ) )
 126                                         || ( isset ( $show['temp'] ) && isset ( $show['!temp'] ) )
 127                         ) {
 128                                 $this->dieUsageMsg( 'show' );
 129                         }
 130
 131                         $this->addWhereIf( 'ipb_user = 0', isset( $show['!account'] ) );
 132                         $this->addWhereIf( 'ipb_user != 0', isset( $show['account'] ) );
 133                         $this->addWhereIf( 'ipb_user != 0 OR ipb_range_end > ipb_range_start', isset( $show['!ip'] ) );
 134                         $this->addWhereIf( 'ipb_user = 0 AND ipb_range_end = ipb_range_start', isset( $show['ip'] ) );
 135                         $this->addWhereIf( 'ipb_expiry =  '.$db->addQuotes($db->getInfinity()), isset( $show['!temp'] ) );
 136                         $this->addWhereIf( 'ipb_expiry != '.$db->addQuotes($db->getInfinity()), isset( $show['temp'] ) );
 137                         $this->addWhereIf( "ipb_range_end = ipb_range_start", isset( $show['!range'] ) );
 138                         $this->addWhereIf( "ipb_range_end > ipb_range_start", isset( $show['range'] ) );
 139                 }
 140
 141                 if ( !$this->getUser()->isAllowed( 'hideuser' ) ) {
 142                         $this->addWhereFld( 'ipb_deleted', 0 );
 143                 }
 144
 145                 // Purge expired entries on one in every 10 queries
 146                 if ( !mt_rand( 0, 10 ) ) {
 147                         Block::purgeExpired();
 148                 }
 149
 150                 $res = $this->select( __METHOD__ );
 151
 152                 $count = 0;
 153                 foreach ( $res as $row ) {
 154                         if ( ++$count > $params['limit'] ) {
 155                                 // We've had enough
 156                                 $this->setContinueEnumParameter( 'start', wfTimestamp( TS_ISO_8601, $row->ipb_timestamp ) );
 157                                 break;
 158                         }
 159                         $block = array();
 160                         if ( $fld_id ) {
 161                                 $block['id'] = $row->ipb_id;
 162                         }
 163                         if ( $fld_user && !$row->ipb_auto ) {
 164                                 $block['user'] = $row->ipb_address;
 165                         }
 166                         if ( $fld_userid && !$row->ipb_auto ) {
 167                                 $block['userid'] = $row->ipb_user;
 168                         }
 169                         if ( $fld_by ) {
 170                                 $block['by'] = $row->ipb_by_text;
 171                         }
 172                         if ( $fld_byid ) {
 173                                 $block['byid'] = $row->ipb_by;
 174                         }
 175                         if ( $fld_timestamp ) {
 176                                 $block['timestamp'] = wfTimestamp( TS_ISO_8601, $row->ipb_timestamp );
 177                         }
 178                         if ( $fld_expiry ) {
 179                                 $block['expiry'] = $wgContLang->formatExpiry( $row->ipb_expiry, TS_ISO_8601 );
 180                         }
 181                         if ( $fld_reason ) {
 182                                 $block['reason'] = $row->ipb_reason;
 183                         }
 184                         if ( $fld_range && !$row->ipb_auto ) {
 185                                 $block['rangestart'] = IP::hexToQuad( $row->ipb_range_start );
 186                                 $block['rangeend'] = IP::hexToQuad( $row->ipb_range_end );
 187                         }
 188                         if ( $fld_flags ) {
 189                                 // For clarity, these flags use the same names as their action=block counterparts
 190                                 if ( $row->ipb_auto ) {
 191                                         $block['automatic'] = '';
 192                                 }
 193                                 if ( $row->ipb_anon_only ) {
 194                                         $block['anononly'] = '';
 195                                 }
 196                                 if ( $row->ipb_create_account ) {
 197                                         $block['nocreate'] = '';
 198                                 }
 199                                 if ( $row->ipb_enable_autoblock ) {
 200                                         $block['autoblock'] = '';
 201                                 }
 202                                 if ( $row->ipb_block_email ) {
 203                                         $block['noemail'] = '';
 204                                 }
 205                                 if ( $row->ipb_deleted ) {
 206                                         $block['hidden'] = '';
 207                                 }
 208                                 if ( $row->ipb_allow_usertalk ) {
 209                                         $block['allowusertalk'] = '';
 210                                 }
 211                         }
 212                         $fit = $result->addValue( array( 'query', $this->getModuleName() ), null, $block );
 213                         if ( !$fit ) {
 214                                 $this->setContinueEnumParameter( 'start', wfTimestamp( TS_ISO_8601, $row->ipb_timestamp ) );
 215                                 break;
 216                         }
 217                 }
 218                 $result->setIndexedTagName_internal( array( 'query', $this->getModuleName() ), 'block' );
 219         }
 220
 221         protected function prepareUsername( $user ) {
 222                 if ( !$user ) {
 223                         $this->dieUsage( 'User parameter may not be empty', 'param_user' );
 224                 }
 225                 $name = User::isIP( $user )
 226                         ? $user
 227                         : User::getCanonicalName( $user, 'valid' );
 228                 if ( $name === false ) {
 229                         $this->dieUsage( "User name {$user} is not valid", 'param_user' );
 230                 }
 231                 $this->usernames[] = $name;
 232         }
 233
 234         public function getAllowedParams() {
 235                 return array(
 236                         'start' => array(
 237                                 ApiBase::PARAM_TYPE => 'timestamp'
 238                         ),
 239                         'end' => array(
 240                                 ApiBase::PARAM_TYPE => 'timestamp',
 241                         ),
 242                         'dir' => array(
 243                                 ApiBase::PARAM_TYPE => array(
 244                                         'newer',
 245                                         'older'
 246                                 ),
 247                                 ApiBase::PARAM_DFLT => 'older'
 248                         ),
 249                         'ids' => array(
 250                                 ApiBase::PARAM_TYPE => 'integer',
 251                                 ApiBase::PARAM_ISMULTI => true
 252                         ),
 253                         'users' => array(
 254                                 ApiBase::PARAM_ISMULTI => true
 255                         ),
 256                         'ip' => null,
 257                         'limit' => array(
 258                                 ApiBase::PARAM_DFLT => 10,
 259                                 ApiBase::PARAM_TYPE => 'limit',
 260                                 ApiBase::PARAM_MIN => 1,
 261                                 ApiBase::PARAM_MAX => ApiBase::LIMIT_BIG1,
 262                                 ApiBase::PARAM_MAX2 => ApiBase::LIMIT_BIG2
 263                         ),
 264                         'prop' => array(
 265                                 ApiBase::PARAM_DFLT => 'id|user|by|timestamp|expiry|reason|flags',
 266                                 ApiBase::PARAM_TYPE => array(
 267                                         'id',
 268                                         'user',
 269                                         'userid',
 270                                         'by',
 271                                         'byid',
 272                                         'timestamp',
 273                                         'expiry',
 274                                         'reason',
 275                                         'range',
 276                                         'flags'
 277                                 ),
 278                                 ApiBase::PARAM_ISMULTI => true
 279                         ),
 280                         'show' => array(
 281                                 ApiBase::PARAM_TYPE => array(
 282                                         'account',
 283                                         '!account',
 284                                         'temp',
 285                                         '!temp',
 286                                         'ip',
 287                                         '!ip',
 288                                         'range',
 289                                         '!range',
 290                                 ),
 291                                 ApiBase::PARAM_ISMULTI => true
 292                         ),
 293                 );
 294         }
 295
 296         public function getParamDescription() {
 297                 $p = $this->getModulePrefix();
 298                 return array(
 299                         'start' => 'The timestamp to start enumerating from',
 300                         'end' => 'The timestamp to stop enumerating at',
 301                         'dir' => $this->getDirectionDescription( $p ),
 302                         'ids' => 'Pipe-separated list of block IDs to list (optional)',
 303                         'users' => 'Pipe-separated list of users to search for (optional)',
 304                         'ip' => array(  'Get all blocks applying to this IP or CIDR range, including range blocks.',
 305                                         'Cannot be used together with bkusers. CIDR ranges broader than /16 are not accepted' ),
 306                         'limit' => 'The maximum amount of blocks to list',
 307                         'prop' => array(
 308                                 'Which properties to get',
 309                                 ' id         - Adds the ID of the block',
 310                                 ' user       - Adds the username of the blocked user',
 311                                 ' userid     - Adds the user ID of the blocked user',
 312                                 ' by         - Adds the username of the blocking user',
 313                                 ' byid       - Adds the user ID of the blocking user',
 314                                 ' timestamp  - Adds the timestamp of when the block was given',
 315                                 ' expiry     - Adds the timestamp of when the block expires',
 316                                 ' reason     - Adds the reason given for the block',
 317                                 ' range      - Adds the range of IPs affected by the block',
 318                                 ' flags      - Tags the ban with (autoblock, anononly, etc)',
 319                         ),
 320                         'show' => array(
 321                                 'Show only items that meet this criteria.',
 322                                 "For example, to see only indefinite blocks on IPs, set {$p}show=ip|!temp"
 323                         ),
 324                 );
 325         }
 326
 327         public function getResultProperties() {
 328                 return array(
 329                         'id' => array(
 330                                 'id' => 'integer'
 331                         ),
 332                         'user' => array(
 333                                 'user' => array(
 334                                         ApiBase::PROP_TYPE => 'string',
 335                                         ApiBase::PROP_NULLABLE => true
 336                                 )
 337                         ),
 338                         'userid' => array(
 339                                 'userid' => array(
 340                                         ApiBase::PROP_TYPE => 'integer',
 341                                         ApiBase::PROP_NULLABLE => true
 342                                 )
 343                         ),
 344                         'by' => array(
 345                                 'by' => 'string'
 346                         ),
 347                         'byid' => array(
 348                                 'byid' => 'integer'
 349                         ),
 350                         'timestamp' => array(
 351                                 'timestamp' => 'timestamp'
 352                         ),
 353                         'expiry' => array(
 354                                 'expiry' => 'timestamp'
 355                         ),
 356                         'reason' => array(
 357                                 'reason' => 'string'
 358                         ),
 359                         'range' => array(
 360                                 'rangestart' => array(
 361                                         ApiBase::PROP_TYPE => 'string',
 362                                         ApiBase::PROP_NULLABLE => true
 363                                 ),
 364                                 'rangeend' => array(
 365                                         ApiBase::PROP_TYPE => 'string',
 366                                         ApiBase::PROP_NULLABLE => true
 367                                 )
 368                         ),
 369                         'flags' => array(
 370                                 'automatic' => 'boolean',
 371                                 'anononly' => 'boolean',
 372                                 'nocreate' => 'boolean',
 373                                 'autoblock' => 'boolean',
 374                                 'noemail' => 'boolean',
 375                                 'hidden' => 'boolean',
 376                                 'allowusertalk' => 'boolean'
 377                         )
 378                 );
 379         }
 380
 381         public function getDescription() {
 382                 return 'List all blocked users and IP addresses';
 383         }
 384
 385         public function getPossibleErrors() {
 386                 return array_merge( parent::getPossibleErrors(), array(
 387                         $this->getRequireOnlyOneParameterErrorMessages( array( 'users', 'ip' ) ),
 388                         array( 'code' => 'cidrtoobroad', 'info' => 'CIDR ranges broader than /16 are not accepted' ),
 389                         array( 'code' => 'param_user', 'info' => 'User parameter may not be empty' ),
 390                         array( 'code' => 'param_user', 'info' => 'User name user is not valid' ),
 391                         array( 'show' ),
 392                 ) );
 393         }
 394
 395         public function getExamples() {
 396                 return array(
 397                         'api.php?action=query&list=blocks',
 398                         'api.php?action=query&list=blocks&bkusers=Alice|Bob'
 399                 );
 400         }
 401
 402         public function getHelpUrls() {
 403                 return 'https://www.mediawiki.org/wiki/API:Blocks';
 404         }
 405
 406         public function getVersion() {
 407                 return __CLASS__ . ': $Id$';
 408         }
 409 }