Follow-up r84358 CR: rename 'editusertalk' to 'editownusertalk', private --> protecte...
[lhc/web/wiklou.git] / includes / Block.php
index 9423b88..aa2d98e 100644 (file)
  * Globals used: $wgAutoblockExpiry, $wgAntiLockFlags
  *
  * @todo This could be used everywhere, but it isn't.
+ * FIXME: this whole class is a cesspit, needs a complete rewrite
  */
 class Block {
        /* public*/ var $mAddress, $mUser, $mBy, $mReason, $mTimestamp, $mAuto, $mId, $mExpiry,
-                               $mRangeStart, $mRangeEnd, $mAnonOnly, $mEnableAutoblock, $mHideName,
-                               $mBlockEmail, $mByName, $mAngryAutoblock, $mAllowUsertalk;
-       /* private */ var $mNetworkBits, $mIntegerAddr, $mForUpdate, $mFromMaster;
-
-       const EB_KEEP_EXPIRED = 1;
-       const EB_FOR_UPDATE = 2;
-       const EB_RANGE_ONLY = 4;
+                               $mEnableAutoblock, $mHideName,
+                               $mByName, $mAngryAutoblock;
+       protected
+               $mFromMaster,
+               $mRangeStart,
+               $mRangeEnd,
+               $mAnonOnly,
+               $mBlockEmail,
+               $mAllowUsertalk,
+               $mCreateAccount;
+
+       # TYPE constants
+       const TYPE_USER = 1;
+       const TYPE_IP = 2;
+       const TYPE_RANGE = 3;
+       const TYPE_AUTO = 4;
+       const TYPE_ID = 5;
 
        function __construct( $address = '', $user = 0, $by = 0, $reason = '',
-               $timestamp = '' , $auto = 0, $expiry = '', $anonOnly = 0, $createAccount = 0, $enableAutoblock = 0,
-               $hideName = 0, $blockEmail = 0, $allowUsertalk = 0 )
+               $timestamp = 0, $auto = 0, $expiry = '', $anonOnly = 0, $createAccount = 0, $enableAutoblock = 0,
+               $hideName = 0, $blockEmail = 0, $allowUsertalk = 0, $byName = false )
        {
                $this->mId = 0;
                # Expand valid IPv6 addresses
@@ -34,18 +45,17 @@ class Block {
                $this->mUser = $user;
                $this->mBy = $by;
                $this->mReason = $reason;
-               $this->mTimestamp = wfTimestamp(TS_MW,$timestamp);
+               $this->mTimestamp = wfTimestamp( TS_MW, $timestamp );
                $this->mAuto = $auto;
                $this->mAnonOnly = $anonOnly;
                $this->mCreateAccount = $createAccount;
-               $this->mExpiry = self::decodeExpiry( $expiry );
+               $this->mExpiry = $expiry;
                $this->mEnableAutoblock = $enableAutoblock;
                $this->mHideName = $hideName;
                $this->mBlockEmail = $blockEmail;
                $this->mAllowUsertalk = $allowUsertalk;
-               $this->mForUpdate = false;
                $this->mFromMaster = false;
-               $this->mByName = false;
+               $this->mByName = $byName;
                $this->mAngryAutoblock = false;
                $this->initialiseRange();
        }
@@ -54,7 +64,7 @@ class Block {
         * Load a block from the database, using either the IP address or
         * user ID. Tries the user ID first, and if that doesn't work, tries
         * the address.
-        * 
+        *
         * @param $address String: IP address of user/anon
         * @param $user Integer: user id of user
         * @param $killExpired Boolean: delete expired blocks on load
@@ -81,20 +91,21 @@ class Block {
                $res = $dbr->resultObject( $dbr->select( 'ipblocks', '*',
                        array( 'ipb_id' => $id ), __METHOD__ ) );
                $block = new Block;
+
                if ( $block->loadFromResult( $res ) ) {
                        return $block;
                } else {
                        return null;
                }
        }
-       
+
        /**
         * Check if two blocks are effectively equal
         *
         * @return Boolean
         */
        public function equals( Block $block ) {
-               return ( 
+               return (
                        $this->mAddress == $block->mAddress
                        && $this->mUser == $block->mUser
                        && $this->mAuto == $block->mAuto
@@ -105,6 +116,7 @@ class Block {
                        && $this->mHideName == $block->mHideName
                        && $this->mBlockEmail == $block->mBlockEmail
                        && $this->mAllowUsertalk == $block->mAllowUsertalk
+                       && $this->mReason == $block->mReason
                );
        }
 
@@ -120,29 +132,6 @@ class Block {
                $this->mByName = false;
        }
 
-       /**
-        * Get the DB object and set the reference parameter to the select options.
-        * The options array will contain FOR UPDATE if appropriate.
-        *
-        * @param $options Array
-        * @return Database
-        */
-       protected function &getDBOptions( &$options ) {
-               global $wgAntiLockFlags;
-               if ( $this->mForUpdate || $this->mFromMaster ) {
-                       $db = wfGetDB( DB_MASTER );
-                       if ( !$this->mForUpdate || ($wgAntiLockFlags & ALF_NO_BLOCK_LOCK) ) {
-                               $options = array();
-                       } else {
-                               $options = array( 'FOR UPDATE' );
-                       }
-               } else {
-                       $db = wfGetDB( DB_SLAVE );
-                       $options = array();
-               }
-               return $db;
-       }
-
        /**
         * Get a block from the DB, with either the given address or the given username
         *
@@ -155,19 +144,24 @@ class Block {
        public function load( $address = '', $user = 0, $killExpired = true ) {
                wfDebug( "Block::load: '$address', '$user', $killExpired\n" );
 
-               $options = array();
-               $db =& $this->getDBOptions( $options );
+               $db = wfGetDB( $this->mFromMaster ? DB_MASTER : DB_SLAVE );
 
-               if ( 0 == $user && $address == '' ) {
+               if ( 0 == $user && $address === '' ) {
                        # Invalid user specification, not blocked
                        $this->clear();
+
                        return false;
                }
 
                # Try user block
                if ( $user ) {
-                       $res = $db->resultObject( $db->select( 'ipblocks', '*', array( 'ipb_user' => $user ),
-                               __METHOD__, $options ) );
+                       $res = $db->resultObject( $db->select(
+                               'ipblocks',
+                               '*',
+                               array( 'ipb_user' => $user ),
+                               __METHOD__
+                       ) );
+
                        if ( $this->loadFromResult( $res, $killExpired ) ) {
                                return true;
                        }
@@ -176,17 +170,24 @@ class Block {
                # Try IP block
                # TODO: improve performance by merging this query with the autoblock one
                # Slightly tricky while handling killExpired as well
-               if ( $address ) {
+               if ( $address !== '' ) {
                        $conds = array( 'ipb_address' => $address, 'ipb_auto' => 0 );
-                       $res = $db->resultObject( $db->select( 'ipblocks', '*', $conds, __METHOD__, $options ) );
+                       $res = $db->resultObject( $db->select(
+                               'ipblocks',
+                               '*',
+                               $conds,
+                               __METHOD__
+                       ) );
+
                        if ( $this->loadFromResult( $res, $killExpired ) ) {
                                if ( $user && $this->mAnonOnly ) {
                                        # Block is marked anon-only
                                        # Whitelist this IP address against autoblocks and range blocks
                                        # (but not account creation blocks -- bug 13611)
-                                       if( !$this->mCreateAccount ) {
+                                       if ( !$this->mCreateAccount ) {
                                                $this->clear();
                                        }
+
                                        return false;
                                } else {
                                        return true;
@@ -198,9 +199,10 @@ class Block {
                if ( $this->loadRange( $address, $killExpired, $user ) ) {
                        if ( $user && $this->mAnonOnly ) {
                                # Respect account creation blocks on logged-in users -- bug 13611
-                               if( !$this->mCreateAccount ) {
+                               if ( !$this->mCreateAccount ) {
                                        $this->clear();
                                }
+
                                return false;
                        } else {
                                return true;
@@ -210,10 +212,18 @@ class Block {
                # Try autoblock
                if ( $address ) {
                        $conds = array( 'ipb_address' => $address, 'ipb_auto' => 1 );
+
                        if ( $user ) {
                                $conds['ipb_anon_only'] = 0;
                        }
-                       $res = $db->resultObject( $db->select( 'ipblocks', '*', $conds, __METHOD__, $options ) );
+
+                       $res = $db->resultObject( $db->select(
+                               'ipblocks',
+                               '*',
+                               $conds,
+                               __METHOD__
+                       ) );
+
                        if ( $this->loadFromResult( $res, $killExpired ) ) {
                                return true;
                        }
@@ -224,6 +234,54 @@ class Block {
                return false;
        }
 
+       /**
+        * Get a set of SQL conditions which will select rangeblocks encompasing a given range
+        * @param $start String Hexadecimal IP representation
+        * @param $end String Hexadecimal IP represenation, or null to use $start = $end
+        * @return String
+        */
+       public static function getRangeCond( $start, $end = null ) {
+               if ( $end === null ) {
+                       $end = $start;
+               }
+               # Per bug 14634, we want to include relevant active rangeblocks; for
+               # rangeblocks, we want to include larger ranges which enclose the given
+               # range. We know that all blocks must be smaller than $wgBlockCIDRLimit,
+               # so we can improve performance by filtering on a LIKE clause
+               $chunk = self::getIpFragment( $start );
+               $dbr = wfGetDB( DB_SLAVE );
+               $like = $dbr->buildLike( $chunk, $dbr->anyString() );
+
+               # Fairly hard to make a malicious SQL statement out of hex characters,
+               # but stranger things have happened...
+               $safeStart = $dbr->addQuotes( $start );
+               $safeEnd = $dbr->addQuotes( $end );
+
+               return $dbr->makeList(
+                       array(
+                               "ipb_range_start $like",
+                               "ipb_range_start <= $safeStart",
+                               "ipb_range_end >= $safeEnd",
+                       ),
+                       LIST_AND
+               );
+       }
+
+       /**
+        * Get the component of an IP address which is certain to be the same between an IP
+        * address and a rangeblock containing that IP address.
+        * @param  $hex String Hexadecimal IP representation
+        * @return String
+        */
+       protected static function getIpFragment( $hex ) {
+               global $wgBlockCIDRLimit;
+               if ( substr( $hex, 0, 3 ) == 'v6-' ) {
+                       return 'v6-' . substr( substr( $hex, 3 ), 0,  floor( $wgBlockCIDRLimit['IPv6'] / 4 ) );
+               } else {
+                       return substr( $hex, 0,  floor( $wgBlockCIDRLimit['IPv4'] / 4 ) );
+               }
+       }
+
        /**
         * Fill in member variables from a result wrapper
         *
@@ -233,6 +291,7 @@ class Block {
         */
        protected function loadFromResult( ResultWrapper $res, $killExpired = true ) {
                $ret = false;
+
                if ( 0 != $res->numRows() ) {
                        # Get first block
                        $row = $res->fetchObject();
@@ -259,6 +318,7 @@ class Block {
                        }
                }
                $res->free();
+
                return $ret;
        }
 
@@ -268,11 +328,12 @@ class Block {
         *
         * @param $address String: IP address range
         * @param $killExpired Boolean: whether to delete expired rows while loading
-        * @param $userid Integer: if not 0, then sets ipb_anon_only
+        * @param $user Integer: if not 0, then sets ipb_anon_only
         * @return Boolean
         */
-       public function loadRange( $address, $killExpired = true, $user = 0 ) {
+       protected function loadRange( $address, $killExpired = true, $user = 0 ) {
                $iaddr = IP::toHex( $address );
+
                if ( $iaddr === false ) {
                        # Invalid address
                        return false;
@@ -282,10 +343,9 @@ class Block {
                # Blocks should not cross a /16 boundary.
                $range = substr( $iaddr, 0, 4 );
 
-               $options = array();
-               $db =& $this->getDBOptions( $options );
+               $db = wfGetDB( $this->mFromMaster ? DB_MASTER : DB_SLAVE );
                $conds = array(
-                       "ipb_range_start LIKE '$range%'",
+                       'ipb_range_start' . $db->buildLike( $range, $db->anyString() ),
                        "ipb_range_start <= '$iaddr'",
                        "ipb_range_end >= '$iaddr'"
                );
@@ -294,8 +354,9 @@ class Block {
                        $conds['ipb_anon_only'] = 0;
                }
 
-               $res = $db->resultObject( $db->select( 'ipblocks', '*', $conds, __METHOD__, $options ) );
+               $res = $db->resultObject( $db->select( 'ipblocks', '*', $conds, __METHOD__ ) );
                $success = $this->loadFromResult( $res, $killExpired );
+
                return $success;
        }
 
@@ -305,10 +366,10 @@ class Block {
         *
         * @param $row ResultWrapper: a row from the ipblocks table
         */
-       public function initFromRow( $row ) {
+       protected function initFromRow( $row ) {
                $this->mAddress = $row->ipb_address;
                $this->mReason = $row->ipb_reason;
-               $this->mTimestamp = wfTimestamp(TS_MW,$row->ipb_timestamp);
+               $this->mTimestamp = wfTimestamp( TS_MW, $row->ipb_timestamp );
                $this->mUser = $row->ipb_user;
                $this->mBy = $row->ipb_by;
                $this->mAuto = $row->ipb_auto;
@@ -319,18 +380,20 @@ class Block {
                $this->mAllowUsertalk = $row->ipb_allow_usertalk;
                $this->mHideName = $row->ipb_deleted;
                $this->mId = $row->ipb_id;
-               $this->mExpiry = self::decodeExpiry( $row->ipb_expiry );
+               $this->mExpiry = $row->ipb_expiry;
+
                if ( isset( $row->user_name ) ) {
                        $this->mByName = $row->user_name;
                } else {
                        $this->mByName = $row->ipb_by_text;
                }
+
                $this->mRangeStart = $row->ipb_range_start;
                $this->mRangeEnd = $row->ipb_range_end;
        }
 
        /**
-        * Once $mAddress has been set, get the range they came from. 
+        * Once $mAddress has been set, get the range they came from.
         * Wrapper for IP::parseRange
         */
        protected function initialiseRange() {
@@ -351,12 +414,14 @@ class Block {
                if ( wfReadOnly() ) {
                        return false;
                }
+
                if ( !$this->mId ) {
                        throw new MWException( "Block::delete() now requires that the mId member be filled\n" );
                }
 
                $dbw = wfGetDB( DB_MASTER );
                $dbw->delete( 'ipblocks', array( 'ipb_id' => $this->mId ), __METHOD__ );
+
                return $dbw->affectedRows() > 0;
        }
 
@@ -366,9 +431,11 @@ class Block {
         *
         * @return Boolean: whether or not the insertion was successful.
         */
-       public function insert() {
+       public function insert( $dbw = null ) {
                wfDebug( "Block::insert; timestamp {$this->mTimestamp}\n" );
-               $dbw = wfGetDB( DB_MASTER );
+
+               if ( $dbw === null )
+                       $dbw = wfGetDB( DB_MASTER );
 
                $this->validateBlockParams();
                $this->initialiseRange();
@@ -376,8 +443,9 @@ class Block {
                # Don't collide with expired blocks
                Block::purgeExpired();
 
-               $ipb_id = $dbw->nextSequenceValue('ipblocks_ipb_id_val');
-               $dbw->insert( 'ipblocks',
+               $ipb_id = $dbw->nextSequenceValue( 'ipblocks_ipb_id_seq' );
+               $dbw->insert(
+                       'ipblocks',
                        array(
                                'ipb_id' => $ipb_id,
                                'ipb_address' => $this->mAddress,
@@ -385,22 +453,24 @@ class Block {
                                'ipb_by' => $this->mBy,
                                'ipb_by_text' => $this->mByName,
                                'ipb_reason' => $this->mReason,
-                               'ipb_timestamp' => $dbw->timestamp($this->mTimestamp),
+                               'ipb_timestamp' => $dbw->timestamp( $this->mTimestamp ),
                                'ipb_auto' => $this->mAuto,
                                'ipb_anon_only' => $this->mAnonOnly,
                                'ipb_create_account' => $this->mCreateAccount,
                                'ipb_enable_autoblock' => $this->mEnableAutoblock,
-                               'ipb_expiry' => self::encodeExpiry( $this->mExpiry, $dbw ),
+                               'ipb_expiry' => $dbw->encodeExpiry( $this->mExpiry ),
                                'ipb_range_start' => $this->mRangeStart,
                                'ipb_range_end' => $this->mRangeEnd,
-                               'ipb_deleted'   => $this->mHideName,
+                               'ipb_deleted'   => intval( $this->mHideName ), // typecast required for SQLite
                                'ipb_block_email' => $this->mBlockEmail,
                                'ipb_allow_usertalk' => $this->mAllowUsertalk
-                       ), 'Block::insert', array( 'IGNORE' )
+                       ),
+                       'Block::insert',
+                       array( 'IGNORE' )
                );
                $affected = $dbw->affectedRows();
 
-               if ($affected)
+               if ( $affected )
                        $this->doRetroactiveAutoblock();
 
                return (bool)$affected;
@@ -416,29 +486,32 @@ class Block {
 
                $this->validateBlockParams();
 
-               $dbw->update( 'ipblocks',
+               $dbw->update(
+                       'ipblocks',
                        array(
                                'ipb_user' => $this->mUser,
                                'ipb_by' => $this->mBy,
                                'ipb_by_text' => $this->mByName,
                                'ipb_reason' => $this->mReason,
-                               'ipb_timestamp' => $dbw->timestamp($this->mTimestamp),
+                               'ipb_timestamp' => $dbw->timestamp( $this->mTimestamp ),
                                'ipb_auto' => $this->mAuto,
                                'ipb_anon_only' => $this->mAnonOnly,
                                'ipb_create_account' => $this->mCreateAccount,
                                'ipb_enable_autoblock' => $this->mEnableAutoblock,
-                               'ipb_expiry' => self::encodeExpiry( $this->mExpiry, $dbw ),
+                               'ipb_expiry' => $dbw->encodeExpiry( $this->mExpiry ),
                                'ipb_range_start' => $this->mRangeStart,
                                'ipb_range_end' => $this->mRangeEnd,
                                'ipb_deleted'   => $this->mHideName,
                                'ipb_block_email' => $this->mBlockEmail,
-                               'ipb_allow_usertalk' => $this->mAllowUsertalk ),
+                               'ipb_allow_usertalk' => $this->mAllowUsertalk
+                       ),
                        array( 'ipb_id' => $this->mId ),
-                       'Block::update' );
+                       'Block::update'
+               );
 
                return $dbw->affectedRows();
        }
-       
+
        /**
         * Make sure all the proper members are set to sane values
         * before adding/updating a block
@@ -452,11 +525,15 @@ class Block {
                # Unset ipb_enable_autoblock for IP blocks, makes no sense
                if ( !$this->mUser ) {
                        $this->mEnableAutoblock = 0;
-                       $this->mBlockEmail = 0; //Same goes for email...
                }
 
-               if( !$this->mByName ) {
-                       if( $this->mBy ) {
+               # bug 18860: non-anon-only IP blocks should be allowed to block email
+               if ( !$this->mUser && $this->mAnonOnly ) {
+                       $this->mBlockEmail = 0;
+               }
+
+               if ( !$this->mByName ) {
+                       if ( $this->mBy ) {
                                $this->mByName = User::whoIs( $this->mBy );
                        } else {
                                global $wgUser;
@@ -464,28 +541,27 @@ class Block {
                        }
                }
        }
-       
-       
+
        /**
-       * Retroactively autoblocks the last IP used by the user (if it is a user)
-       * blocked by this Block.
-       *
-       * @return Boolean: whether or not a retroactive autoblock was made.
-       */
-       public function doRetroactiveAutoblock() {
+        * Retroactively autoblocks the last IP used by the user (if it is a user)
+        * blocked by this Block.
+        *
+        * @return Boolean: whether or not a retroactive autoblock was made.
+        */
+       protected function doRetroactiveAutoblock() {
                $dbr = wfGetDB( DB_SLAVE );
-               #If autoblock is enabled, autoblock the LAST IP used
+               # If autoblock is enabled, autoblock the LAST IP used
                # - stolen shamelessly from CheckUser_body.php
 
-               if ($this->mEnableAutoblock && $this->mUser) {
-                       wfDebug("Doing retroactive autoblocks for " . $this->mAddress . "\n");
-                       
+               if ( $this->mEnableAutoblock && $this->mUser ) {
+                       wfDebug( "Doing retroactive autoblocks for " . $this->mAddress . "\n" );
+
                        $options = array( 'ORDER BY' => 'rc_timestamp DESC' );
                        $conds = array( 'rc_user_text' => $this->mAddress );
-                       
-                       if ($this->mAngryAutoblock) {
+
+                       if ( $this->mAngryAutoblock ) {
                                // Block any IP used in the last 7 days. Up to five IPs.
-                               $conds[] = 'rc_timestamp < ' . $dbr->addQuotes( $dbr->timestamp( time() - (7*86400) ) );
+                               $conds[] = 'rc_timestamp < ' . $dbr->addQuotes( $dbr->timestamp( time() - ( 7 * 86400 ) ) );
                                $options['LIMIT'] = 5;
                        } else {
                                // Just the last IP used.
@@ -493,20 +569,21 @@ class Block {
                        }
 
                        $res = $dbr->select( 'recentchanges', array( 'rc_ip' ), $conds,
-                               __METHOD__ ,  $options);
+                               __METHOD__ ,  $options );
 
                        if ( !$dbr->numRows( $res ) ) {
-                               #No results, don't autoblock anything
-                               wfDebug("No IP found to retroactively autoblock\n");
+                               # No results, don't autoblock anything
+                               wfDebug( "No IP found to retroactively autoblock\n" );
                        } else {
-                               while ( $row = $dbr->fetchObject( $res ) ) {
-                                       if ( $row->rc_ip )
+                               foreach ( $res as $row ) {
+                                       if ( $row->rc_ip ) {
                                                $this->doAutoblock( $row->rc_ip );
+                                       }
                                }
                        }
                }
        }
-       
+
        /**
         * Checks whether a given IP is on the autoblock whitelist.
         *
@@ -515,7 +592,7 @@ class Block {
         */
        public static function isWhitelistedFromAutoblocks( $ip ) {
                global $wgMemc;
-               
+
                // Try to get the autoblock_whitelist from the cache, as it's faster
                // than getting the msg raw and explode()'ing it.
                $key = wfMemcKey( 'ipb', 'autoblock', 'whitelist' );
@@ -525,28 +602,28 @@ class Block {
                        $wgMemc->set( $key, $lines, 3600 * 24 );
                }
 
-               wfDebug("Checking the autoblock whitelist..\n");
+               wfDebug( "Checking the autoblock whitelist..\n" );
 
-               foreach( $lines as $line ) {
+               foreach ( $lines as $line ) {
                        # List items only
                        if ( substr( $line, 0, 1 ) !== '*' ) {
                                continue;
                        }
 
-                       $wlEntry = substr($line, 1);
-                       $wlEntry = trim($wlEntry);
+                       $wlEntry = substr( $line, 1 );
+                       $wlEntry = trim( $wlEntry );
 
-                       wfDebug("Checking $ip against $wlEntry...");
+                       wfDebug( "Checking $ip against $wlEntry..." );
 
                        # Is the IP in this range?
-                       if (IP::isInRange( $ip, $wlEntry )) {
-                               wfDebug(" IP $ip matches $wlEntry, not autoblocking\n");
+                       if ( IP::isInRange( $ip, $wlEntry ) ) {
+                               wfDebug( " IP $ip matches $wlEntry, not autoblocking\n" );
                                return true;
                        } else {
                                wfDebug( " No match\n" );
                        }
                }
-               
+
                return false;
        }
 
@@ -564,12 +641,12 @@ class Block {
                }
 
                # Check for presence on the autoblock whitelist
-               if (Block::isWhitelistedFromAutoblocks($autoblockIP)) {
+               if ( Block::isWhitelistedFromAutoblocks( $autoblockIP ) ) {
                        return;
                }
-               
-               ## Allow hooks to cancel the autoblock.
-               if (!wfRunHooks( 'AbortAutoblock', array( $autoblockIP, &$this ) )) {
+
+               # # Allow hooks to cancel the autoblock.
+               if ( !wfRunHooks( 'AbortAutoblock', array( $autoblockIP, &$this ) ) ) {
                        wfDebug( "Autoblock aborted by hook.\n" );
                        return false;
                }
@@ -581,14 +658,17 @@ class Block {
                        # If the user is already blocked. Then check if the autoblock would
                        # exceed the user block. If it would exceed, then do nothing, else
                        # prolong block time
-                       if ($this->mExpiry &&
-                       ($this->mExpiry < Block::getAutoblockExpiry($ipblock->mTimestamp))) {
+                       if ( $this->mExpiry &&
+                               ( $this->mExpiry < Block::getAutoblockExpiry( $ipblock->mTimestamp ) )
+                       ) {
                                return;
                        }
+
                        # Just update the timestamp
                        if ( !$justInserted ) {
                                $ipblock->updateTimestamp();
                        }
+
                        return;
                } else {
                        $ipblock = new Block;
@@ -607,13 +687,15 @@ class Block {
                # Continue suppressing the name if needed
                $ipblock->mHideName = $this->mHideName;
                $ipblock->mAllowUsertalk = $this->mAllowUsertalk;
+
                # If the user is already blocked with an expiry date, we don't
                # want to pile on top of that!
-               if($this->mExpiry) {
-                       $ipblock->mExpiry = min ( $this->mExpiry, Block::getAutoblockExpiry( $this->mTimestamp ));
+               if ( $this->mExpiry ) {
+                       $ipblock->mExpiry = min( $this->mExpiry, Block::getAutoblockExpiry( $this->mTimestamp ) );
                } else {
                        $ipblock->mExpiry = Block::getAutoblockExpiry( $this->mTimestamp );
                }
+
                # Insert it
                return $ipblock->insert();
        }
@@ -623,8 +705,8 @@ class Block {
         * @return Boolean
         */
        public function deleteIfExpired() {
-               $fname = 'Block::deleteIfExpired';
-               wfProfileIn( $fname );
+               wfProfileIn( __METHOD__ );
+
                if ( $this->isExpired() ) {
                        wfDebug( "Block::deleteIfExpired() -- deleting\n" );
                        $this->delete();
@@ -633,7 +715,8 @@ class Block {
                        wfDebug( "Block::deleteIfExpired() -- not expired\n" );
                        $retVal = false;
                }
-               wfProfileOut( $fname );
+
+               wfProfileOut( __METHOD__ );
                return $retVal;
        }
 
@@ -643,6 +726,7 @@ class Block {
         */
        public function isExpired() {
                wfDebug( "Block::isExpired() checking current " . wfTimestampNow() . " vs $this->mExpiry\n" );
+
                if ( !$this->mExpiry ) {
                        return false;
                } else {
@@ -659,7 +743,7 @@ class Block {
        }
 
        /**
-        * Update the timestamp on autoblocks. 
+        * Update the timestamp on autoblocks.
         */
        public function updateTimestamp() {
                if ( $this->mAuto ) {
@@ -669,8 +753,8 @@ class Block {
                        $dbw = wfGetDB( DB_MASTER );
                        $dbw->update( 'ipblocks',
                                array( /* SET */
-                                       'ipb_timestamp' => $dbw->timestamp($this->mTimestamp),
-                                       'ipb_expiry' => $dbw->timestamp($this->mExpiry),
+                                       'ipb_timestamp' => $dbw->timestamp( $this->mTimestamp ),
+                                       'ipb_expiry' => $dbw->timestamp( $this->mExpiry ),
                                ), array( /* WHERE */
                                        'ipb_address' => $this->mAddress
                                ), 'Block::updateTimestamp'
@@ -678,6 +762,38 @@ class Block {
                }
        }
 
+       /**
+        * Get the IP address at the start of the range in Hex form
+        * @return String IP in Hex form
+        */
+       public function getRangeStart() {
+               switch( $this->type ) {
+                       case self::TYPE_USER:
+                               return null;
+                       case self::TYPE_IP:
+                               return IP::toHex( $this->target );
+                       case self::TYPE_RANGE:
+                               return $this->mRangeStart;
+                       default: throw new MWException( "Block with invalid type" );
+               }
+       }
+
+       /**
+        * Get the IP address at the start of the range in Hex form
+        * @return String IP in Hex form
+        */
+       public function getRangeEnd() {
+               switch( $this->type ) {
+                       case self::TYPE_USER:
+                               return null;
+                       case self::TYPE_IP:
+                               return IP::toHex( $this->target );
+                       case self::TYPE_RANGE:
+                               return $this->mRangeEnd;
+                       default: throw new MWException( "Block with invalid type" );
+               }
+       }
+
        /**
         * Get the user id of the blocking sysop
         *
@@ -698,43 +814,88 @@ class Block {
 
        /**
         * Get/set the SELECT ... FOR UPDATE flag
+        * @deprecated since 1.18
         */
-       public function forUpdate( $x = NULL ) {
-               return wfSetVar( $this->mForUpdate, $x );
+       public function forUpdate( $x = null ) {
+               # noop
        }
 
        /**
         * Get/set a flag determining whether the master is used for reads
         */
-       public function fromMaster( $x = NULL ) {
+       public function fromMaster( $x = null ) {
                return wfSetVar( $this->mFromMaster, $x );
        }
 
+       /**
+        * Get/set whether the Block is a hardblock (affects logged-in users on a given IP/range
+        * @param $x Bool
+        * @return  Bool
+        */
+       public function isHardblock( $x = null ) {
+               $y = $this->mAnonOnly;
+               if ( $x !== null ) {
+                       $this->mAnonOnly = !$x;
+               }
+               return !$y;
+       }
+
+       /**
+        * Get/set whether the Block prevents a given action
+        * @param $action String
+        * @param $x Bool
+        * @return Bool
+        */
+       public function prevents( $action, $x = null ) {
+               switch( $action ) {
+                       case 'edit':
+                               # TODO Not actually quite this simple (bug 13611 etc)
+                               return true;
+
+                       case 'createaccount':
+                               return wfSetVar( $this->mCreateAccount, $x );
+
+                       case 'sendemail':
+                               return wfSetVar( $this->mBlockEmail, $x );
+
+                       case 'editownusertalk':
+                               $y = $this->mAllowUsertalk;
+                               if ( $x !== null ) {
+                                       $this->mAllowUsertalk = !$x;
+                               }
+                               return !$y;
+
+                       default:
+                               return null;
+               }
+       }
+
        /**
         * Get the block name, but with autoblocked IPs hidden as per standard privacy policy
-        * @return String
+        * @return String, text is escaped
         */
        public function getRedactedName() {
                if ( $this->mAuto ) {
-                       return '#' . $this->mId;
+                       return HTML::rawElement(
+                               'span',
+                               array( 'class' => 'mw-autoblockid' ),
+                               wfMessage( 'autoblockid', $this->mId )
+                       );
                } else {
-                       return $this->mAddress;
+                       return htmlspecialchars( $this->mAddress );
                }
        }
 
        /**
         * Encode expiry for DB
         *
-        * @param $expiry String: timestamp for expiry, or 
+        * @param $expiry String: timestamp for expiry, or
         * @param $db Database object
         * @return String
+        * @deprecated since 1.18; use $dbw->encodeExpiry() instead
         */
        public static function encodeExpiry( $expiry, $db ) {
-               if ( $expiry == '' || $expiry == Block::infinity() ) {
-                       return Block::infinity();
-               } else {
-                       return $db->timestamp( $expiry );
-               }
+               return $db->encodeExpiry( $expiry );
        }
 
        /**
@@ -743,13 +904,11 @@ class Block {
         * @param $expiry String: Database expiry format
         * @param $timestampType Requested timestamp format
         * @return String
+        * @deprecated since 1.18; use $wgLang->decodeExpiry() instead
         */
        public static function decodeExpiry( $expiry, $timestampType = TS_MW ) {
-               if ( $expiry == '' || $expiry == Block::infinity() ) {
-                       return Block::infinity();
-               } else {
-                       return wfTimestamp( $timestampType, $expiry );
-               }
+               global $wgContLang;
+               return $wgContLang->formatExpiry( $expiry, $timestampType );
        }
 
        /**
@@ -759,6 +918,7 @@ class Block {
         */
        public static function getAutoblockExpiry( $timestamp ) {
                global $wgAutoblockExpiry;
+
                return wfTimestamp( TS_MW, wfTimestamp( TS_UNIX, $timestamp ) + $wgAutoblockExpiry );
        }
 
@@ -767,34 +927,10 @@ class Block {
         * For example, 127.111.113.151/24 -> 127.111.113.0/24
         * @param $range String: IP address to normalize
         * @return string
+        * @deprecated since 1.18, call IP::sanitizeRange() directly
         */
        public static function normaliseRange( $range ) {
-               $parts = explode( '/', $range );
-               if ( count( $parts ) == 2 ) {
-                       // IPv6
-                       if ( IP::isIPv6($range) && $parts[1] >= 64 && $parts[1] <= 128 ) {
-                               $bits = $parts[1];
-                               $ipint = IP::toUnsigned6( $parts[0] );
-                               # Native 32 bit functions WONT work here!!!
-                               # Convert to a padded binary number
-                               $network = wfBaseConvert( $ipint, 10, 2, 128 );
-                               # Truncate the last (128-$bits) bits and replace them with zeros
-                               $network = str_pad( substr( $network, 0, $bits ), 128, 0, STR_PAD_RIGHT );
-                               # Convert back to an integer
-                               $network = wfBaseConvert( $network, 2, 10 );
-                               # Reform octet address
-                               $newip = IP::toOctet( $network );
-                               $range = "$newip/{$parts[1]}";
-                       } // IPv4
-                       else if ( IP::isIPv4($range) && $parts[1] >= 16 && $parts[1] <= 32 ) {
-                               $shift = 32 - $parts[1];
-                               $ipint = IP::toUnsigned( $parts[0] );
-                               $ipint = $ipint >> $shift << $shift;
-                               $newip = long2ip( $ipint );
-                               $range = "$newip/{$parts[1]}";
-                       }
-               }
-               return $range;
+               return IP::sanitizeRange( $range );
        }
 
        /**
@@ -807,60 +943,166 @@ class Block {
 
        /**
         * Get a value to insert into expiry field of the database when infinite expiry
-        * is desired. In principle this could be DBMS-dependant, but currently all 
-        * supported DBMS's support the string "infinity", so we just use that.
-        *
+        * is desired
+        * @deprecated since 1.18, call $dbr->getInfinity() directly
         * @return String
         */
        public static function infinity() {
-               # This is a special keyword for timestamps in PostgreSQL, and
-               # works with CHAR(14) as well because "i" sorts after all numbers.
-               return 'infinity';
+               return wfGetDB( DB_SLAVE )->getInfinity();
        }
-       
+
        /**
         * Convert a DB-encoded expiry into a real string that humans can read.
         *
         * @param $encoded_expiry String: Database encoded expiry time
-        * @return String
+        * @return Html-escaped String
+        * @deprecated since 1.18; use $wgLang->formatExpiry() instead
         */
        public static function formatExpiry( $encoded_expiry ) {
+               global $wgContLang;
                static $msg = null;
-               
-               if( is_null( $msg ) ) {
+
+               if ( is_null( $msg ) ) {
                        $msg = array();
                        $keys = array( 'infiniteblock', 'expiringblock' );
-                       foreach( $keys as $key ) {
+
+                       foreach ( $keys as $key ) {
                                $msg[$key] = wfMsgHtml( $key );
                        }
                }
-               
-               $expiry = Block::decodeExpiry( $encoded_expiry );
-               if ($expiry == 'infinity') {
+
+               $expiry = $wgContLang->formatExpiry( $encoded_expiry, TS_MW );
+               if ( $expiry == wfGetDB( DB_SLAVE )->getInfinity() ) {
                        $expirystr = $msg['infiniteblock'];
                } else {
                        global $wgLang;
-                       $expiretimestr = $wgLang->timeanddate( $expiry, true );
-                       $expirystr = wfMsgReplaceArgs( $msg['expiringblock'], array($expiretimestr) );
+                       $expiredatestr = htmlspecialchars( $wgLang->date( $expiry, true ) );
+                       $expiretimestr = htmlspecialchars( $wgLang->time( $expiry, true ) );
+                       $expirystr = wfMsgReplaceArgs( $msg['expiringblock'], array( $expiredatestr, $expiretimestr ) );
                }
+
                return $expirystr;
        }
-       
+
+       # FIXME: everything above here is a mess, needs much cleaning up
+
        /**
-        * Convert a typed-in expiry time into something we can put into the database.
-        * @param $expiry_input String: whatever was typed into the form
-        * @return String: more database friendly
+        * Convert a submitted expiry time, which may be relative ("2 weeks", etc) or absolute
+        * ("24 May 2034"), into an absolute timestamp we can put into the database.
+        * @param $expiry String: whatever was typed into the form
+        * @return String: timestamp or "infinity" string for th DB implementation
+        * @deprecated since 1.18 moved to SpecialBlock::parseExpiryInput()
         */
-       public static function parseExpiryInput( $expiry_input ) {
-               if ( $expiry_input == 'infinite' || $expiry_input == 'indefinite' ) {
-                       $expiry = 'infinity';
-               } else {
-                       $expiry = strtotime( $expiry_input );
-                       if ($expiry < 0 || $expiry === false) {
-                               return false;
+       public static function parseExpiryInput( $expiry ) {
+               wfDeprecated( __METHOD__ );
+               return SpecialBlock::parseExpiryInput( $expiry );
+       }
+
+       /**
+        * Given a target and the target's type, get an existing Block object if possible.
+        * Note that passing an IP address will get an applicable rangeblock if the IP is
+        * not individually blocked but falls within that range
+        * TODO: check that that fallback handles nested rangeblocks nicely (should return
+        *     smallest one)
+        * @param $target String|User|Int a block target, which may be one of several types:
+        *     * A user to block, in which case $target will be a User
+        *     * An IP to block, in which case $target will be a User generated by using
+        *       User::newFromName( $ip, false ) to turn off name validation
+        *     * An IP range, in which case $target will be a String "123.123.123.123/18" etc
+        *     * The ID of an existing block, in which case $target will be an Int
+        * @param $type Block::TYPE_ constant the type of block as described above
+        * @return Block|null (null if the target is not blocked)
+        */
+       public static function newFromTargetAndType( $target, $type ) {
+               if ( $target instanceof User ) {
+                       if ( $type == Block::TYPE_IP ) {
+                               return Block::newFromDB( $target->getName(), 0 );
+                       } elseif ( $type == Block::TYPE_USER ) {
+                               return Block::newFromDB( '', $target->getId() );
+                       } else {
+                               # Should be unreachable;
+                               return null;
                        }
+
+               } elseif ( $type == Block::TYPE_RANGE ) {
+                       return Block::newFromDB( $target, 0 );
+
+               } elseif ( $type == Block::TYPE_ID || $type == Block::TYPE_AUTO ) {
+                       return Block::newFromID( $target );
+
+               } else {
+                       return null;
+               }
+       }
+
+       public static function newFromTarget( $target ) {
+               list( $target, $type ) = self::parseTarget( $target );
+               return self::newFromTargetAndType( $target, $type );
+       }
+
+       /**
+        * From an existing Block, get the target and the type of target.  Note that it is
+        * always safe to treat the target as a string; for User objects this will return
+        * User::__toString() which in turn gives User::getName().
+        * @return array( User|String, Block::TYPE_ constant )
+        */
+       public static function parseTarget( $target ) {
+               $target = trim( $target );
+
+               $userObj = User::newFromName( $target );
+               if ( $userObj instanceof User ) {
+                       # Note that since numbers are valid usernames, a $target of "12345" will be
+                       # considered a User.  If you want to pass a block ID, prepend a hash "#12345",
+                       # since hash characters are not valid in usernames or titles generally.
+                       return array( $userObj, Block::TYPE_USER );
+
+               } elseif ( IP::isValid( $target ) ) {
+                       # We can still create a User if it's an IP address, but we need to turn
+                       # off validation checking (which would exclude IP addresses)
+                       return array(
+                               User::newFromName( IP::sanitizeIP( $target ), false ),
+                               Block::TYPE_IP
+                       );
+
+               } elseif ( IP::isValidBlock( $target ) ) {
+                       # Can't create a User from an IP range
+                       return array( IP::sanitizeRange( $target ), Block::TYPE_RANGE );
+
+               } elseif ( preg_match( '/^#\d+$/', $target ) ) {
+                       # Autoblock reference in the form "#12345"
+                       return array( substr( $target, 1 ), Block::TYPE_AUTO );
+
+               } else {
+                       # WTF?
+                       return array( null, null );
                }
-               return $expiry;
        }
 
+       /**
+        * Get the target and target type for this particular Block.  Note that for autoblocks,
+        * this returns the unredacted name; frontend functions need to call $block->getRedactedName()
+        * in this situation.
+        * @return array( User|String, Block::TYPE_ constant )
+        * FIXME: this should be an integral part of the Block member variables
+        */
+       public function getTargetAndType() {
+               list( $target, $type ) = self::parseTarget( $this->mAddress );
+
+               # Check whether it's an autoblock
+               if ( $this->mAuto ) {
+                       $type = self::TYPE_AUTO;
+               }
+
+               return array( $target, $type );
+       }
+
+       public function getType() {
+               list( /*...*/, $type ) = $this->getTargetAndType();
+               return $type;
+       }
+
+       public function getTarget() {
+               list( $target, /*...*/ ) = $this->getTargetAndType();
+               return $target;
+       }
 }