Merge "Revert "Revert "Show a "(blocked)" hint on Special:ListUsers/ActiveUsers"""

[lhc/web/wiklou.git] / includes / AjaxDispatcher.php

diff --git a/includes/AjaxDispatcher.php b/includes/AjaxDispatcher.php
index 969efa4..b00cf30 100644 (file)
--- a/includes/AjaxDispatcher.php
+++ b/includes/AjaxDispatcher.php
@@ -1,54 +1,105 @@
 <?php
 /**
- * @defgroup Ajax Ajax
+ * Handle ajax requests and send them to the proper handler.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along
+ * with this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+ * http://www.gnu.org/copyleft/gpl.html
  *
  * @file
  * @ingroup Ajax
- * Handle ajax requests and send them to the proper handler.
  */
 
-if ( !( defined( 'MEDIAWIKI' ) && $wgUseAjax ) ) {
-       die( 1 );
-}
-
-require_once( 'AjaxFunctions.php' );
+/**
+ * @defgroup Ajax Ajax
+ */
 
 /**
  * Object-Oriented Ajax functions.
  * @ingroup Ajax
  */
 class AjaxDispatcher {
-       /** Name of the requested handler */
-       private $func_name = null;
+       /**
+        * The way the request was made, either a 'get' or a 'post'
+        * @var string $mode
+        */
+       private $mode;
 
-       /** Arguments passed */
-       private $args = array();
+       /**
+        * Name of the requested handler
+        * @var string $func_name
+        */
+       private $func_name;
 
-       /** Load up our object with user supplied data */
-       public function __construct( WebRequest $req ) {
+       /** Arguments passed
+        * @var array $args
+        */
+       private $args;
+
+       /**
+        * Load up our object with user supplied data
+        */
+       function __construct() {
                wfProfileIn( __METHOD__ );
 
-               $rs = $req->getVal( 'rs' );
-               if( $rs !== null ) {
-                       $this->func_name = $rs;
+               $this->mode = "";
+
+               if ( ! empty( $_GET["rs"] ) ) {
+                       $this->mode = "get";
                }
-               $rsargs = $req->getVal( 'rsargs' );
-               if( $rsargs !== null ) {
-                       $this->args = $rsargs;
+
+               if ( !empty( $_POST["rs"] ) ) {
+                       $this->mode = "post";
+               }
+
+               switch( $this->mode ) {
+                       case 'get':
+                               $this->func_name = isset( $_GET["rs"] ) ? $_GET["rs"] : '';
+                               if ( ! empty( $_GET["rsargs"] ) ) {
+                                       $this->args = $_GET["rsargs"];
+                               } else {
+                                       $this->args = array();
+                               }
+                               break;
+                       case 'post':
+                               $this->func_name = isset( $_POST["rs"] ) ? $_POST["rs"] : '';
+                               if ( ! empty( $_POST["rsargs"] ) ) {
+                                       $this->args = $_POST["rsargs"];
+                               } else {
+                                       $this->args = array();
+                               }
+                               break;
+                       default:
+                               wfProfileOut( __METHOD__ );
+                               return;
+                               # Or we could throw an exception:
+                               # throw new MWException( __METHOD__ . ' called without any data (mode empty).' );
                }
 
                wfProfileOut( __METHOD__ );
        }
 
-       /** Pass the request to our internal function.
+       /**
+        * Pass the request to our internal function.
         * BEWARE! Data are passed as they have been supplied by the user,
         * they should be carefully handled in the function processing the
         * request.
         */
        function performAction() {
-               global $wgAjaxExportList, $wgOut;
+               global $wgAjaxExportList, $wgUser;
 
-               if ( is_null( $this->func_name ) ) {
+               if ( empty( $this->mode ) ) {
                        return;
                }
 
@@ -62,17 +113,18 @@ class AjaxDispatcher {
                                'Bad Request',
                                "unknown function " . (string) $this->func_name
                        );
+               } elseif ( !in_array( 'read', User::getGroupPermissions( array( '*' ) ), true )
+                       && !$wgUser->isAllowed( 'read' ) )
+               {
+                       wfHttpError(
+                               403,
+                               'Forbidden',
+                               'You must log in to view pages.' );
                } else {
                        wfDebug( __METHOD__ . ' dispatching ' . $this->func_name . "\n" );
 
-                       if ( strpos( $this->func_name, '::' ) !== false ) {
-                               $func = explode( '::', $this->func_name, 2 );
-                       } else {
-                               $func = $this->func_name;
-                       }
-
                        try {
-                               $result = call_user_func_array( $func, $this->args );
+                               $result = call_user_func_array( $this->func_name, $this->args );
 
                                if ( $result === false || $result === null ) {
                                        wfDebug( __METHOD__ . ' ERROR while dispatching '
@@ -106,6 +158,5 @@ class AjaxDispatcher {
                }
 
                wfProfileOut( __METHOD__ );
-               $wgOut = null;
        }
 }