<?php
/**
- * Special page for creating/registering new user accounts.
+ * Redirect page: Special:CreateAccount --> Special:UserLogin/signup.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along
+ * with this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+ * http://www.gnu.org/copyleft/gpl.html
+ *
+ * @file
* @ingroup SpecialPage
*/
-class SpecialCreateAccount extends SpecialPage {
- var $mUsername, $mPassword, $mRetype, $mReturnTo, $mPosted;
- var $mCreateaccountMail, $mRemember, $mEmail, $mDomain, $mLanguage;
- var $mReturnToQuery;
-
- protected $mLogin;
-
- public $mDomains = array();
-
- public $mUseEmail = true; # Can be switched off by AuthPlugins etc
- public $mUseRealname = true;
- public $mUseRemember = true;
-
- public $mFormHeader = '';
- public $mFormFields = array(
- 'Name' => array(
- 'type' => 'text',
- 'label-message' => 'yourname',
- 'id' => 'wpName2',
- 'tabindex' => '1',
- 'size' => '20',
- 'required' => '1',
- 'autofocus' => '',
- ),
- 'Password' => array(
- 'type' => 'password',
- 'label-message' => 'yourpassword',
- 'size' => '20',
- 'id' => 'wpPassword2',
- 'required' => '',
- ),
- 'Retype' => array(
- 'type' => 'password',
- 'label-message' => 'yourpasswordagain',
- 'size' => '20',
- 'id' => 'wpRetype',
- 'required' => '',
- ),
- 'Email' => array(
- 'type' => 'email',
- 'label-message' => 'youremail',
- 'size' => '20',
- 'id' => 'wpEmail',
- ),
- 'RealName' => array(
- 'type' => 'text',
- 'label-message' => 'yourrealname',
- 'id' => 'wpRealName',
- 'tabindex' => '1',
- 'size' => '20',
- ),
- 'Remember' => array(
- 'type' => 'check',
- 'label-message' => 'remembermypassword',
- 'id' => 'wpRemember',
- ),
- 'Domain' => array(
- 'type' => 'select',
- 'id' => 'wpDomain',
- 'label-message' => 'yourdomainname',
- 'options' => null,
- 'default' => null,
- ),
- );
-
- public function __construct(){
- parent::__construct( 'CreateAccount', 'createaccount' );
- $this->mLogin = new Login();
- $this->mFormFields['RealName']['label-help'] = 'prefs-help-realname';
- }
-
- public function execute( $par ){
- global $wgUser, $wgOut;
-
- $this->setHeaders();
- $this->loadQuery();
-
- # Block signup here if in readonly. Keeps user from
- # going through the process (filling out data, etc)
- # and being informed later.
- if ( wfReadOnly() ) {
- $wgOut->readOnlyPage();
- return;
- }
- # Bail out straightaway on permissions errors
- if ( !$this->userCanExecute( $wgUser ) ) {
- $this->displayRestrictionError();
- return;
- } elseif ( $wgUser->isBlockedFromCreateAccount() ) {
- $this->userBlockedMessage();
- return;
- } elseif ( count( $permErrors = $this->getTitle()->getUserPermissionsErrors( 'createaccount', $wgUser, true ) )>0 ) {
- $wgOut->showPermissionsErrorPage( $permErrors, 'createaccount' );
- return;
- }
-
- if( $this->mPosted ) {
- $this->addNewAccount( $this->mCreateaccountMail );
- } else {
- $this->showMainForm('');
- }
- }
-
- /**
- * Load the member variables from the request parameters
- */
- protected function loadQuery(){
- global $wgRequest, $wgAuth, $wgHiddenPrefs, $wgEnableEmail, $wgRedirectOnLogin;
- $this->mCreateaccountMail = $wgRequest->getCheck( 'wpCreateaccountMail' )
- && $wgEnableEmail;
-
- $this->mUsername = $wgRequest->getText( 'wpName' );
- $this->mPassword = $wgRequest->getText( 'wpPassword' );
- $this->mRetype = $wgRequest->getText( 'wpRetype' );
- $this->mDomain = $wgRequest->getText( 'wpDomain' );
- $this->mReturnTo = $wgRequest->getVal( 'returnto' );
- $this->mReturnToQuery = $wgRequest->getVal( 'returntoquery' );
- $this->mPosted = $wgRequest->wasPosted();
- $this->mCreateaccountMail = $wgRequest->getCheck( 'wpCreateaccountMail' )
- && $wgEnableEmail;
- $this->mRemember = $wgRequest->getCheck( 'wpRemember' );
- $this->mLanguage = $wgRequest->getText( 'uselang' );
-
- if ( $wgRedirectOnLogin ) {
- $this->mReturnTo = $wgRedirectOnLogin;
- $this->mReturnToQuery = '';
- }
-
- if( $wgEnableEmail ) {
- $this->mEmail = $wgRequest->getText( 'wpEmail' );
- } else {
- $this->mEmail = '';
- }
- if( !in_array( 'realname', $wgHiddenPrefs ) ) {
- $this->mRealName = $wgRequest->getText( 'wpRealName' );
- } else {
- $this->mRealName = '';
- }
-
- if( !$wgAuth->validDomain( $this->mDomain ) ) {
- $this->mDomain = 'invaliddomain';
- }
- $wgAuth->setDomain( $this->mDomain );
-
- # When switching accounts, it sucks to get automatically logged out
- $returnToTitle = Title::newFromText( $this->mReturnTo );
- if( is_object( $returnToTitle ) && $returnToTitle->isSpecial( 'Userlogout' ) ) {
- $this->mReturnTo = '';
- $this->mReturnToQuery = '';
- }
- }
-
- /**
- * Create a new user account from the provided data
- */
- protected function addNewAccount( $byEmail=false ) {
- global $wgUser, $wgEmailAuthentication;
-
- # Do a quick check that the user actually managed to type
- # the password in the same both times
- if ( 0 != strcmp( $this->mPassword, $this->mRetype ) ) {
- return $this->showMainForm( wfMsgExt( 'badretype', 'parseinline' ) );
- }
-
- # Create the account and abort if there's a problem doing so
- $status = $this->mLogin->attemptCreation( $byEmail );
- switch( $status ){
- case Login::SUCCESS:
- case Login::MAIL_ERROR:
- break;
-
- case Login::CREATE_BADDOMAIN:
- case Login::CREATE_EXISTS:
- case Login::NO_NAME:
- case Login::CREATE_NEEDEMAIL:
- case Login::CREATE_BADEMAIL:
- case Login::CREATE_BADNAME:
- case Login::WRONG_PLUGIN_PASS:
- case Login::ABORTED:
- return $this->showMainForm( wfMsgExt( $this->mLogin->mCreateResult, 'parseinline' ) );
-
- case Login::CREATE_SORBS:
- return $this->showMainForm( wfMsgExt( 'sorbs_create_account_reason', 'parseinline' ) . ' (' . wfGetIP() . ')' );
-
- case Login::CREATE_BLOCKED:
- return $this->userBlockedMessage();
-
- case Login::CREATE_BADPASS:
- global $wgMinimalPasswordLength;
- return $this->showMainForm( wfMsgExt( $this->mLogin->mCreateResult, array( 'parsemag' ), $wgMinimalPasswordLength ) );
-
- case Login::THROTTLED:
- global $wgAccountCreationThrottle;
- return $this->showMainForm( wfMsgExt( 'acct_creation_throttle_hit', array( 'parseinline' ), $wgAccountCreationThrottle ) );
-
- default:
- throw new MWException( "Unhandled status code $status in " . __METHOD__ );
- }
-
- # If we showed up language selection links, and one was in use, be
- # smart (and sensible) and save that language as the user's preference
- global $wgLoginLanguageSelector;
- if( $wgLoginLanguageSelector && $this->mLanguage )
- $this->mLogin->mUser->setOption( 'language', $this->mLanguage );
- $this->mLogin->mUser->saveSettings();
-
- if( $byEmail ) {
- if( $result == Login::MAIL_ERROR ){
- # FIXME: we are totally screwed if we end up here...
- $this->showMainForm( wfMsgExt( 'mailerror', 'parseinline', $this->mLogin->mMailResult->getMessage() ) );
- } else {
- $wgOut->setPageTitle( wfMsg( 'accmailtitle' ) );
- $wgOut->addWikiMsg( 'accmailtext', $this->mLogin->mUser->getName(), $this->mLogin->mUser->getEmail() );
- $wgOut->returnToMain( false );
- }
-
- } else {
-
- # There might be a message stored from the confirmation mail
- # send, which we can display.
- if( $wgEmailAuthentication && $this->mLogin->mMailResult ) {
- global $wgOut;
- if( WikiError::isError( $this->mLogin->mMailResult ) ) {
- $wgOut->addWikiMsg( 'confirmemail_sendfailed', $this->mLogin->mMailResult->getMessage() );
- } else {
- $wgOut->addWikiMsg( 'confirmemail_oncreate' );
- }
- }
-
- # If not logged in, assume the new account as the current
- # one and set session cookies then show a "welcome" message
- # or a "need cookies" message as needed
- if( $wgUser->isAnon() ) {
- $wgUser = $this->mLogin->mUser;
- $wgUser->setCookies();
- if( $this->hasSessionCookie() ) {
- return $this->successfulCreation();
- } else {
- return $this->cookieRedirectCheck();
- }
- } else {
- # Show confirmation that the account was created
- global $wgOut;
- $self = SpecialPage::getTitleFor( 'Userlogin' );
- $wgOut->setPageTitle( wfMsgHtml( 'accountcreated' ) );
- $wgOut->addHTML( wfMsgWikiHtml( 'accountcreatedtext', $this->mLogin->mUser->getName() ) );
- $wgOut->returnToMain( false, $self );
- return true;
- }
- }
- }
-
- /**
- * Run any hooks registered for logins, then
- * display a message welcoming the user.
- */
- protected function successfulCreation(){
- global $wgUser, $wgOut;
-
- # Run any hooks; display injected HTML
- $injected_html = '';
- wfRunHooks('UserLoginComplete', array(&$wgUser, &$injected_html));
-
- SpecialUserLogin::displaySuccessfulLogin(
- 'welcomecreation',
- $injected_html,
- $this->mReturnTo,
- $this->mReturnToQuery );
- }
-
- /**
- * Display a message indicating that account creation from their IP has
- * been blocked by a (range)block with 'block account creation' enabled.
- * It's likely that this feature will be used for blocking large numbers
- * of innocent people, e.g. range blocks on schools. Don't blame it on
- * the user. There's a small chance that it really is the user's fault,
- * i.e. the username is blocked and they haven't bothered to log out
- * before trying to create an account to evade it, but we'll leave that
- * to their guilty conscience to figure out...
- */
- protected function userBlockedMessage() {
- global $wgOut, $wgUser;
-
- $wgOut->setPageTitle( wfMsg( 'cantcreateaccounttitle' ) );
- $wgOut->setRobotPolicy( 'noindex,nofollow' );
- $wgOut->setArticleRelated( false );
-
- $ip = wfGetIP();
- $blocker = User::whoIs( $wgUser->mBlock->mBy );
- $block_reason = $wgUser->mBlock->mReason;
-
- if ( strval( $block_reason ) === '' ) {
- $block_reason = wfMsgExt( 'blockednoreason', 'parseinline' );
- }
- $wgOut->addWikiMsg( 'cantcreateaccount-text', $ip, $block_reason, $blocker );
- $wgOut->returnToMain( false );
- }
-
- /**
- * Show the main input form, with an appropriate error message
- * from a previous iteration, if necessary
- * @param $msg String HTML of message received previously
- * @param $msgtype String type of message, usually 'error'
- */
- protected function showMainForm( $msg, $msgtype = 'error' ) {
- global $wgUser, $wgOut, $wgHiddenPrefs, $wgEnableEmail;
- global $wgCookiePrefix, $wgLoginLanguageSelector;
- global $wgAuth, $wgEmailConfirmToEdit, $wgCookieExpiration;
-
- # Parse the error message if we got one
- if( $msg ){
- if( $msgtype == 'error' ){
- $msg = wfMsgExt( 'createaccounterror', array( 'parseinline', 'replaceafter' ), $msg );
- }
- $msg = Html::rawElement(
- 'div',
- array( 'class' => $msgtype . 'box' ),
- $msg
- );
- } else {
- $msg = '';
- }
-
- # Make sure the returnTo strings don't get lost if the
- # user changes language, etc
- $linkq = array();
- if ( !empty( $this->mReturnTo ) ) {
- $linkq['returnto'] = wfUrlencode( $this->mReturnTo );
- if ( !empty( $this->mReturnToQuery ) )
- $linkq['returntoquery'] = wfUrlencode( $this->mReturnToQuery );
- }
-
- # Pass any language selection on to the mode switch link
- if( $wgLoginLanguageSelector && $this->mLanguage )
- $linkq['uselang'] = $this->mLanguage;
-
- $skin = $wgUser->getSkin();
- $link = $skin->link(
- SpecialPage::getTitleFor( 'Userlogin' ),
- wfMsgHtml( 'gotaccountlink' ),
- array(),
- $linkq );
- $link = $wgUser->isLoggedIn()
- ? ''
- : wfMsgWikiHtml( 'gotaccount', $link );
-
- # Prepare language selection links as needed
- $langSelector = $wgLoginLanguageSelector
- ? Html::rawElement(
- 'div',
- array( 'id' => 'languagelinks' ),
- SpecialUserLogin::makeLanguageSelector( $this->getTitle(), $this->mReturnTo ) )
- : '';
-
- # Give authentication and captcha plugins a chance to
- # modify the form, by hook or by using $wgAuth
- $wgAuth->modifyUITemplate( $this, 'new' );
- wfRunHooks( 'UserCreateForm', array( &$this ) );
-
- # The most likely use of the hook is to enable domains;
- # check that now, and add fields if necessary
- if( $this->mDomains ){
- $this->mFormFields['Domain']['options'] = $this->mDomains;
- $this->mFormFields['Domain']['default'] = $this->mDomain;
- } else {
- unset( $this->mFormFields['Domain'] );
- }
-
- # Or to switch email on or off
- if( !$wgEnableEmail || !$this->mUseEmail ){
- unset( $this->mFormFields['Email'] );
- } else {
- if( $wgEmailConfirmToEdit ){
- $this->mFormFields['Email']['label-help'] = 'prefs-help-email-required';
- $this->mFormFields['Email']['required'] = '';
- } else {
- $this->mFormFields['Email']['label-help'] = 'prefs-help-email';
- }
- }
-
- # Or to play with realname
- if( in_array( 'realname', $wgHiddenPrefs ) || !$this->mUseRealname ){
- unset( $this->mFormFields['Realname'] );
- }
-
- # Or to tweak the 'remember my password' checkbox
- if( !($wgCookieExpiration > 0) || !$this->mUseRemember ){
- # Remove it altogether
- unset( $this->mFormFields['Remember'] );
- } elseif( $wgUser->getOption( 'rememberpassword' ) || $this->mRemember ){
- # Or check it by default
- # FIXME: this doesn't always work?
- $this->mFormFields['Remember']['checked'] = '1';
- }
-
- $form = new HTMLForm( $this->mFormFields, '' );
- $form->setTitle( $this->getTitle() );
- $form->setSubmitText( wfMsg( 'createaccount' ) );
- $form->setSubmitId( 'wpCreateaccount' );
- $form->suppressReset();
- $form->loadData();
- $form->addHiddenField( 'returnto', $this->mReturnTo );
- $form->addHiddenField( 'returntoquery', $this->mReturnToQuery );
-
- # Add a 'send password by email' button if available
- if( $wgEnableEmail && $wgUser->isLoggedIn() ){
- $form->addButton(
- 'wpCreateaccountMail',
- wfMsg( 'createaccountmail' ),
- 'wpCreateaccountMail'
- );
- }
-
- $formContents = ''
- . Html::rawElement( 'p', array( 'id' => 'userloginlink' ),
- $link )
- . $this->mFormHeader
- . $langSelector
- . $form->getBody()
- . $form->getHiddenFields()
- . $form->getButtons()
- ;
-
- $wgOut->setPageTitle( wfMsg( 'createaccount' ) );
- $wgOut->setRobotPolicy( 'noindex,nofollow' );
- $wgOut->setArticleRelated( false );
- $wgOut->disallowUserJs(); # Stop malicious userscripts sniffing passwords
-
- $wgOut->addHTML(
- Html::rawElement(
- 'div',
- array( 'id' => 'loginstart' ),
- wfMsgExt( 'loginstart', array( 'parseinline' ) )
- ) .
- $msg .
- Html::rawElement(
- 'div',
- array( 'id' => 'userloginForm' ),
- $form->wrapForm( $formContents )
- ) .
- Html::rawElement(
- 'div',
- array( 'id' => 'loginend' ),
- wfMsgExt( 'loginend', array( 'parseinline' ) )
- )
- );
-
- }
-
- /**
- * Check if a session cookie is present.
- *
- * This will not pick up a cookie set during _this_ request, but is meant
- * to ensure that the client is returning the cookie which was set on a
- * previous pass through the system.
- *
- * @private
- */
- protected function hasSessionCookie() {
- global $wgDisableCookieCheck, $wgRequest;
- return $wgDisableCookieCheck ? true : $wgRequest->checkSessionCookie();
+/**
+ * Redirect page: Special:CreateAccount --> Special:UserLogin/signup.
+ * @todo FIXME: This (and the rest of the login frontend) needs to die a horrible painful death
+ *
+ * @ingroup SpecialPage
+ */
+class SpecialCreateAccount extends SpecialRedirectToSpecial {
+ function __construct() {
+ parent::__construct( 'CreateAccount', 'Userlogin', 'signup', array( 'returnto', 'returntoquery', 'uselang' ) );
}
- /**
- * Do a redirect back to the same page, so we can check any
- * new session cookies.
- */
- protected function cookieRedirectCheck() {
- global $wgOut;
-
- $query = array( 'wpCookieCheck' => '1' );
- if ( $this->mReturnTo ) $query['returnto'] = $this->mReturnTo;
- $check = $this->getTitle()->getFullURL( $query );
-
- return $wgOut->redirect( $check );
+ // No reason to hide this link on Special:Specialpages
+ public function isListed() {
+ return true;
}
- /**
- * Check the cookies and show errors if they're not enabled.
- * @param $type String action being performed
- */
- protected function onCookieRedirectCheck() {
- if ( !$this->hasSessionCookie() ) {
- return $this->mainLoginForm( wfMsgExt( 'nocookiesnew', array( 'parseinline' ) ) );
- } else {
- return SpecialUserlogin::successfulLogin(
- array( 'welcomecreate' ),
- $this->mReturnTo,
- $this->mReturnToQuery
- );
- }
- }
-
- /**
- * Add text to the header. Only write to $mFormHeader directly
- * if you're determined to overwrite anything that other
- * extensions might have added.
- * @param $text String HTML
- */
- public function addFormHeader( $text ){
- $this->mFormHeader .= $text;
- }
-
- /**
- * Since the UserCreateForm hook was changed to pass a SpecialPage
- * instead of a QuickTemplate derivative, old extensions might
- * easily try calling these methods expecing them to exist. Tempting
- * though it is to let them have the fatal error, let's at least
- * fail gracefully...
- * @deprecated
- */
- public function set(){
- wfDeprecated( __METHOD__ );
- }
- public function addInputItem(){
- wfDeprecated( __METHOD__ );
+ protected function getGroupName() {
+ return 'login';
}
}
dépôts / lhc / web / wiklou.git / blobdiff