X-Git-Url: http://git.heureux-cyclage.org/?a=blobdiff_plain;f=includes%2Fspecials%2FSpecialUserlogout.php;h=ab2bf0ac4be3607d4f12f29d87981a5a9b571fc1;hb=fcdf2518605954fe1bcf88598fc14bd95d525882;hp=3d497bd7d785de6a5a65ebed68e49c48debe3e3a;hpb=650be91fb8163bcf5951dd7ec9e6b7d7147b0ab2;p=lhc%2Fweb%2Fwiklou.git

diff --git a/includes/specials/SpecialUserlogout.php b/includes/specials/SpecialUserlogout.php
index 3d497bd7d7..ab2bf0ac4b 100644
--- a/includes/specials/SpecialUserlogout.php
+++ b/includes/specials/SpecialUserlogout.php
@@ -1,23 +1,62 @@
 <?php
 /**
+ * Implements Special:Userlogout
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along
+ * with this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+ * http://www.gnu.org/copyleft/gpl.html
+ *
  * @file
  * @ingroup SpecialPage
  */
 
 /**
- * constructor
+ * Implements Special:Userlogout
+ *
+ * @ingroup SpecialPage
  */
-function wfSpecialUserlogout() {
-	global $wgUser, $wgOut;
+class SpecialUserlogout extends UnlistedSpecialPage {
+
+	function __construct() {
+		parent::__construct( 'Userlogout' );
+	}
+
+	function execute( $par ) {
+		/**
+		 * Some satellite ISPs use broken precaching schemes that log people out straight after
+		 * they're logged in (bug 17790). Luckily, there's a way to detect such requests.
+		 */
+		if ( isset( $_SERVER['REQUEST_URI'] ) && strpos( $_SERVER['REQUEST_URI'], '&amp;' ) !== false ) {
+			wfDebug( "Special:Userlogout request {$_SERVER['REQUEST_URI']} looks suspicious, denying.\n" );
+			throw new HttpError( 400, $this->msg( 'suspicious-userlogout' ), $this->msg( 'loginerror' ) );
+		}
+
+		$this->setHeaders();
+		$this->outputHeader();
+
+		$user = $this->getUser();
+		$oldName = $user->getName();
+		$user->logout();
 
-	$oldName = $wgUser->getName();
-	$wgUser->logout();
-	$wgOut->setRobotPolicy( 'noindex,nofollow' );
+		$out = $this->getOutput();
+		$out->addWikiMsg( 'logouttext' );
 
-	// Hook.
-	$injected_html = '';
-	wfRunHooks( 'UserLogoutComplete', array(&$wgUser, &$injected_html, $oldName) );
+		// Hook.
+		$injected_html = '';
+		wfRunHooks( 'UserLogoutComplete', array( &$user, &$injected_html, $oldName ) );
+		$out->addHTML( $injected_html );
 
-	$wgOut->addHTML( wfMsgExt( 'logouttext', array( 'parse' ) ) . $injected_html );
-	$wgOut->returnToMain();
+		$out->returnToMain();
+	}
 }