* Rewrote showEXIFdata() to use addWikiText() instead of addHTML()
[lhc/web/wiklou.git] / includes / RawPage.php
index 66a6305..fdbd0a8 100644 (file)
@@ -10,6 +10,9 @@
  * @package MediaWiki
  */
 
+/** */
+require_once( 'Revision.php' );
+
 /**
  * @todo document
  * @package MediaWiki
@@ -23,9 +26,8 @@ class RawPage {
                $this->mTitle =& $article->mTitle;
                        
                $ctype = $wgRequest->getText( 'ctype' );
-               $charset = $wgRequest->getText( 'charset' );
-               $smaxage = $wgRequest->getText( 'smaxage' );
-               $maxage = $wgRequest->getText( 'maxage' );
+               $smaxage = $wgRequest->getInt( 'smaxage', $wgSquidMaxage );
+               $maxage = $wgRequest->getInt( 'maxage', $wgSquidMaxage );
                $this->mOldId = $wgRequest->getInt( 'oldid' );
                # special case for 'generated' raw things: user css/js
                $gen = $wgRequest->getText( 'gen' );
@@ -40,9 +42,9 @@ class RawPage {
                } else {
                        $this->mGen = false;
                }
-               $this->mCharset = !empty($charset) ? $charset : $wgInputEncoding;
-               $this->mSmaxage = ($smaxage != '') ? $smaxage : 0;
-               $this->mMaxage = ($maxage != '') ? $maxage : 86400;
+               $this->mCharset = $wgInputEncoding;
+               $this->mSmaxage = $smaxage;
+               $this->mMaxage = $maxage;
                if(empty($ctype) or !in_array($ctype, $allowedCTypes)) {
                        $this->mContentType = 'text/x-wiki';
                } else {
@@ -51,7 +53,41 @@ class RawPage {
        }
        
        function view() {
-               global $wgUser, $wgOut;
+               global $wgUser, $wgOut, $wgScript;
+
+               if( isset( $_SERVER['SCRIPT_URL'] ) ) {
+                       # Normally we use PHP_SELF to get the URL to the script
+                       # as it was called, minus the query string.
+                       #
+                       # Some sites use Apache rewrite rules to handle subdomains,
+                       # and have PHP set up in a weird way that causes PHP_SELF
+                       # to contain the rewritten URL instead of the one that the
+                       # outside world sees.
+                       #
+                       # If in this mode, use SCRIPT_URL instead, which mod_rewrite
+                       # provides containing the "before" URL.
+                       $url = $_SERVER['SCRIPT_URL'];
+               } else {
+                       $url = $_SERVER['PHP_SELF'];
+               }
+               if( strcmp( $wgScript, $url ) ) {
+                       # Internet Explorer will ignore the Content-Type header if it
+                       # thinks it sees a file extension it recognizes. Make sure that
+                       # all raw requests are done through the script node, which will
+                       # have eg '.php' and should remain safe.
+                       #
+                       # We used to redirect to a canonical-form URL as a general
+                       # backwards-compatibility / good-citizen nice thing. However
+                       # a lot of servers are set up in buggy ways, resulting in
+                       # redirect loops which hang the browser until the CSS load
+                       # times out.
+                       #
+                       # Just return a 403 Forbidden and get it over with.
+                       wfHttpError( 403, 'Forbidden',
+                               'Raw pages must be accessed through the primary script entry point.' );
+                       return;
+               }
+               
                header( "Content-type: ".$this->mContentType.'; charset='.$this->mCharset );
                # allow the client to cache this for 24 hours
                header( 'Cache-Control: s-maxage='.$this->mSmaxage.', max-age='.$this->mMaxage );
@@ -73,39 +109,31 @@ class RawPage {
                global $wgInputEncoding, $wgContLang;
                $fname = 'RawPage::getrawtext';
                
-               if( !$this->mTitle ) return '';
-               $dbr =& wfGetDB( DB_SLAVE );
-               extract( $dbr->tableNames( 'cur', 'old' ) );
-
-               $t = $dbr->strencode( $this->mTitle->getDBKey() );
-               $ns = $this->mTitle->getNamespace();
-               # special case
-               if($ns == NS_MEDIAWIKI) {
-                       $rawtext = wfMsg($t);
-                       if($wgInputEncoding != $this->mCharset)
-                       $rawtext = $wgContLang->iconv( $wgInputEncoding, $this->mCharset, $rawtext );
-                       return $rawtext;
-               }
-               # else get it from the DB
-               if(!empty($this->mOldId)) {
-                       $sql = "SELECT old_text AS text,old_timestamp AS timestamp,".
-                                   "old_user AS user,old_flags AS flags FROM $old " .
-                       "WHERE old_id={$this->mOldId}";
-               } else {
-                       $sql = "SELECT cur_id as id,cur_timestamp as timestamp,cur_user as user,cur_user_text as user_text," .
-                       "cur_restrictions as restrictions,cur_comment as comment,cur_text as text FROM $cur " .
-                       "WHERE cur_namespace=$ns AND cur_title='$t'";
+               if( $this->mTitle ) {
+                       # Special case for MediaWiki: messages; we can hit the message cache.
+                       if( $this->mTitle->getNamespace() == NS_MEDIAWIKI) {
+                               $rawtext = wfMsg( $this->mTitle->getDbkey() );
+                               return $rawtext;
+                       }
+                       
+                       # else get it from the DB
+                       $rev = Revision::newFromTitle( $this->mTitle, $this->mOldId );
+                       if( $rev ) {
+                               $lastmod = wfTimestamp( TS_RFC2822, $rev->getTimestamp() );
+                               header( 'Last-modified: ' . $lastmod );
+                               return $rev->getText();
+                       }
                }
-               $res = $dbr->query( $sql, $fname );
-               if( $s = $dbr->fetchObject( $res ) ) {
-                       $rawtext = Article::getRevisionText( $s, "" );
-                       if($wgInputEncoding != $this->mCharset)
-                       $rawtext = $wgContLang->iconv( $wgInputEncoding, $this->mCharset, $rawtext );
-                       header( 'Last-modified: '.gmdate( "D, j M Y H:i:s", wfTimestamp2Unix( $s->timestamp )).' GMT' );
-                       return $rawtext;
-               } else {
-                       return '';
+               
+               # Bad title or page does not exist
+               if( $this->mContentType == 'text/x-wiki' ) {
+                       # Don't return a 404 response for CSS or JavaScript;
+                       # 404s aren't generally cached and it would create
+                       # extra hits when user CSS/JS are on and the user doesn't
+                       # have the pages.
+                       header( "HTTP/1.0 404 Not Found" );
                }
+               return '';
        }
 }
 ?>