* (bug 3244) Fix remote image loading hack, JavaScript injection on MSIE
[lhc/web/wiklou.git] / includes / SpecialIpblocklist.php
1 <?php
2 /**
3 *
4 * @package MediaWiki
5 * @subpackage SpecialPage
6 */
7
8 /**
9 * @todo document
10 */
11 function wfSpecialIpblocklist() {
12 global $wgUser, $wgOut, $wgRequest;
13
14 $ip = $wgRequest->getVal( 'wpUnblockAddress', $wgRequest->getVal( 'ip' ) );
15 $reason = $wgRequest->getText( 'wpUnblockReason' );
16 $action = $wgRequest->getText( 'action' );
17
18 $ipu = new IPUnblockForm( $ip, $reason );
19
20 if ( "success" == $action ) {
21 $msg = wfMsg( "ipusuccess", htmlspecialchars( $ip ) );
22 $ipu->showList( $msg );
23 } else if ( "submit" == $action && $wgRequest->wasPosted() &&
24 $wgUser->matchEditToken( $wgRequest->getVal( 'wpEditToken' ) ) ) {
25 if ( ! $wgUser->isAllowed('block') ) {
26 $wgOut->sysopRequired();
27 return;
28 }
29 $ipu->doSubmit();
30 } else if ( "unblock" == $action ) {
31 $ipu->showForm( "" );
32 } else {
33 $ipu->showList( "" );
34 }
35 }
36
37 /**
38 *
39 * @package MediaWiki
40 * @subpackage SpecialPage
41 */
42 class IPUnblockForm {
43 var $ip, $reason;
44
45 function IPUnblockForm( $ip, $reason ) {
46 $this->ip = $ip;
47 $this->reason = $reason;
48 }
49
50 function showForm( $err )
51 {
52 global $wgOut, $wgUser, $wgLang, $wgSysopUserBans;
53
54 $wgOut->setPagetitle( wfMsg( 'unblockip' ) );
55 $wgOut->addWikiText( wfMsg( 'unblockiptext' ) );
56
57 $ipa = wfMsgHtml( $wgSysopUserBans ? 'ipadressorusername' : 'ipaddress' );
58 $ipr = wfMsgHtml( 'ipbreason' );
59 $ipus = wfMsgHtml( 'ipusubmit' );
60 $titleObj = Title::makeTitle( NS_SPECIAL, "Ipblocklist" );
61 $action = $titleObj->escapeLocalURL( "action=submit" );
62
63 if ( "" != $err ) {
64 $wgOut->setSubtitle( wfMsg( "formerror" ) );
65 $wgOut->addWikitext( "<span class='error'>{$err}</span>\n" );
66 }
67 $token = htmlspecialchars( $wgUser->editToken() );
68
69 $wgOut->addHTML( "
70 <form id=\"unblockip\" method=\"post\" action=\"{$action}\">
71 <table border='0'>
72 <tr>
73 <td align='right'>{$ipa}:</td>
74 <td align='left'>
75 <input tabindex='1' type='text' size='20' name=\"wpUnblockAddress\" value=\"" . htmlspecialchars( $this->ip ) . "\" />
76 </td>
77 </tr>
78 <tr>
79 <td align='right'>{$ipr}:</td>
80 <td align='left'>
81 <input tabindex='1' type='text' size='40' name=\"wpUnblockReason\" value=\"" . htmlspecialchars( $this->reason ) . "\" />
82 </td>
83 </tr>
84 <tr>
85 <td>&nbsp;</td>
86 <td align='left'>
87 <input tabindex='2' type='submit' name=\"wpBlock\" value=\"{$ipus}\" />
88 </td>
89 </tr>
90 </table>
91 <input type='hidden' name='wpEditToken' value=\"{$token}\" />
92 </form>\n" );
93
94 }
95
96 function doSubmit() {
97 global $wgOut, $wgUser, $wgLang;
98
99 $block = new Block();
100 $this->ip = trim( $this->ip );
101
102 if ( $this->ip{0} == "#" ) {
103 $block->mId = substr( $this->ip, 1 );
104 } else {
105 $block->mAddress = $this->ip;
106 }
107
108 # Delete block (if it exists)
109 # We should probably check for errors rather than just declaring success
110 $block->delete();
111
112 # Make log entry
113 $log = new LogPage( 'block' );
114 $log->addEntry( 'unblock', Title::makeTitle( NS_USER, $this->ip ), $this->reason );
115
116 # Report to the user
117 $titleObj = Title::makeTitle( NS_SPECIAL, "Ipblocklist" );
118 $success = $titleObj->getFullURL( "action=success&ip=" . urlencode( $this->ip ) );
119 $wgOut->redirect( $success );
120 }
121
122 function showList( $msg ) {
123 global $wgOut;
124
125 $wgOut->setPagetitle( wfMsg( "ipblocklist" ) );
126 if ( "" != $msg ) {
127 $wgOut->setSubtitle( $msg );
128 }
129 $wgOut->addHTML( "<ul>" );
130 // FIXME hack to solve #bug 1487
131 if(!Block::enumBlocks( "wfAddRow", 0 ))
132 $wgOut->addHTML( '<li>'.wfMsg( 'ipblocklistempty' ).'</li>' );
133 $wgOut->addHTML( "</ul>\n" );
134 }
135 }
136
137 /**
138 * Callback function to output a block
139 */
140 function wfAddRow( $block, $tag ) {
141 global $wgOut, $wgUser, $wgLang, $wgContLang;
142
143 $sk = $wgUser->getSkin();
144
145 # Hide addresses blocked by User::spreadBlocks, for privacy
146 $addr = $block->mAuto ? "#{$block->mId}" : $block->mAddress;
147
148 $name = $block->getByName();
149 $ulink = $sk->makeKnownLinkObj( Title::makeTitle( NS_USER, $name ), $name );
150 $formattedTime = $wgLang->timeanddate( $block->mTimestamp, true );
151
152 if ( $block->mExpiry === "" ) {
153 $formattedExpiry = wfMsgHtml('infiniteblock');
154 } else {
155 $formattedExpiry = wfMsgHtml('expiringblock', $wgLang->timeanddate( $block->mExpiry, true ) );
156 }
157
158 $line = wfMsg( "blocklistline", $formattedTime, $ulink, $addr, $formattedExpiry );
159
160 $wgOut->addHTML( "<li>{$line}" );
161
162 if ( !$block->mAuto ) {
163 $titleObj = Title::makeTitle( NS_SPECIAL, "Contributions" );
164 $wgOut->addHTML( ' (' . $sk->makeKnownLinkObj($titleObj, wfMsgHtml( 'contribslink' ), "target={$block->mAddress}") . ')' );
165 }
166
167 if ( $wgUser->isAllowed('block') ) {
168 $titleObj = Title::makeTitle( NS_SPECIAL, "Ipblocklist" );
169 $wgOut->addHTML( ' (' . $sk->makeKnownLinkObj($titleObj, wfMsgHtml( 'unblocklink' ), 'action=unblock&ip=' . urlencode( $addr ) ) . ')' );
170 }
171 $wgOut->addHTML( $sk->commentBlock( $block->mReason ) );
172 $wgOut->addHTML( "</li>\n" );
173 }
174
175
176 ?>