X-Git-Url: https://git.heureux-cyclage.org/?a=blobdiff_plain;f=includes%2FProtectionForm.php;h=aa682bfa2aa8dda025fed208962f4463c0e7728e;hb=3205049d446abb53b217e7cf1af82a640f9e0480;hp=f333db5e11313631dbcc862a606047fbdc4ba4a9;hpb=1d95a6efa9a595460474bac537a554ecbedb341e;p=lhc%2Fweb%2Fwiklou.git
diff --git a/includes/ProtectionForm.php b/includes/ProtectionForm.php
index f333db5e11..aa682bfa2a 100644
--- a/includes/ProtectionForm.php
+++ b/includes/ProtectionForm.php
@@ -17,34 +17,49 @@
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* http://www.gnu.org/copyleft/gpl.html
- *
- * @package MediaWiki
- * @subpackage SpecialPage
*/
+/**
+ * @todo document, briefly.
+ */
class ProtectionForm {
var $mRestrictions = array();
var $mReason = '';
var $mCascade = false;
+ var $mExpiry = null;
+ var $mPermErrors = array();
+ var $mApplicableTypes = array();
- function ProtectionForm( &$article ) {
+ function __construct( &$article ) {
global $wgRequest, $wgUser;
global $wgRestrictionTypes, $wgRestrictionLevels;
$this->mArticle =& $article;
$this->mTitle =& $article->mTitle;
+ $this->mApplicableTypes = $this->mTitle->exists() ? $wgRestrictionTypes : array('create');
if( $this->mTitle ) {
- foreach( $wgRestrictionTypes as $action ) {
+ $this->mTitle->loadRestrictions();
+
+ foreach( $this->mApplicableTypes as $action ) {
// Fixme: this form currently requires individual selections,
// but the db allows multiples separated by commas.
$this->mRestrictions[$action] = implode( '', $this->mTitle->getRestrictions( $action ) );
}
$this->mCascade = $this->mTitle->areRestrictionsCascading();
+
+ if ( $this->mTitle->mRestrictionsExpiry == 'infinity' ) {
+ $this->mExpiry = 'infinite';
+ } else if ( strlen($this->mTitle->mRestrictionsExpiry) == 0 ) {
+ $this->mExpiry = '';
+ } else {
+ // FIXME: this format is not user friendly
+ $this->mExpiry = wfTimestamp( TS_ISO_8601, $this->mTitle->mRestrictionsExpiry );
+ }
}
// The form will be available in read-only to show levels.
- $this->disabled = !$wgUser->isAllowed( 'protect' ) || wfReadOnly() || $wgUser->isBlocked();
+ $this->disabled = wfReadOnly() || ($this->mPermErrors = $this->mTitle->getUserPermissionsErrors('protect',$wgUser)) != array();
$this->disabledAttrib = $this->disabled
? array( 'disabled' => 'disabled' )
: array();
@@ -52,50 +67,83 @@ class ProtectionForm {
if( $wgRequest->wasPosted() ) {
$this->mReason = $wgRequest->getText( 'mwProtect-reason' );
$this->mCascade = $wgRequest->getBool( 'mwProtect-cascade' );
- foreach( $wgRestrictionTypes as $action ) {
+ $this->mExpiry = $wgRequest->getText( 'mwProtect-expiry' );
+
+ foreach( $this->mApplicableTypes as $action ) {
$val = $wgRequest->getVal( "mwProtect-level-$action" );
if( isset( $val ) && in_array( $val, $wgRestrictionLevels ) ) {
+ //prevent users from setting levels that they cannot later unset
+ if( $val == 'sysop' ) {
+ //special case, rewrite sysop to either protect and editprotected
+ if( !$wgUser->isAllowed('protect') && !$wgUser->isAllowed('editprotected') )
+ continue;
+ } else {
+ if( !$wgUser->isAllowed($val) )
+ continue;
+ }
$this->mRestrictions[$action] = $val;
}
}
}
}
- function show() {
- global $wgOut;
+ function execute() {
+ global $wgRequest, $wgOut;
+ if( $wgRequest->wasPosted() ) {
+ if( $this->save() ) {
+ $article = new Article( $this->mTitle );
+ $q = $article->isRedirect() ? 'redirect=no' : '';
+ $wgOut->redirect( $this->mTitle->getFullUrl( $q ) );
+ }
+ } else {
+ $this->show();
+ }
+ }
- $wgOut->setRobotpolicy( 'noindex,nofollow' );
+ function show( $err = null ) {
+ global $wgOut, $wgUser;
+
+ $wgOut->setRobotPolicy( 'noindex,nofollow' );
if( is_null( $this->mTitle ) ||
- !$this->mTitle->exists() ||
$this->mTitle->getNamespace() == NS_MEDIAWIKI ) {
$wgOut->showFatalError( wfMsg( 'badarticleerror' ) );
return;
}
- $cascadeSources = $this->mTitle->getCascadeProtectionSources();
+ list( $cascadeSources, /* $restrictions */ ) = $this->mTitle->getCascadeProtectionSources();
+
+ if ( "" != $err ) {
+ $wgOut->setSubtitle( wfMsgHtml( 'formerror' ) );
+ $wgOut->addHTML( "{$err}
\n" );
+ }
- if ( count($cascadeSources) > 0 ) {
+ if ( $cascadeSources && count($cascadeSources) > 0 ) {
$titles = '';
foreach ( $cascadeSources as $title ) {
- $titles .= '* ' . $title->getPrefixedText() . "\r\n";
+ $titles .= '* [[:' . $title->getPrefixedText() . "]]\n";
}
- $wgOut->addWikiText( wfMsgForContent( 'protect-cascadeon', $titles ) );
- }
-
- if( $this->save() ) {
- $wgOut->redirect( $this->mTitle->getFullUrl() );
- return;
+ $wgOut->wrapWikiMsg( "$1\n$titles", array( 'protect-cascadeon', count($cascadeSources) ) );
}
- $wgOut->setPageTitle( wfMsg( 'confirmprotect' ) );
- $wgOut->setSubtitle( wfMsg( 'protectsub', $this->mTitle->getPrefixedText() ) );
+ $sk = $wgUser->getSkin();
+ $titleLink = $sk->makeLinkObj( $this->mTitle );
+ $wgOut->setPageTitle( wfMsg( 'protect-title', $this->mTitle->getPrefixedText() ) );
+ $wgOut->setSubtitle( wfMsg( 'protect-backlink', $titleLink ) );
- $wgOut->addWikiText(
- wfMsg( $this->disabled ? "protect-viewtext" : "protect-text",
- wfEscapeWikiText( $this->mTitle->getPrefixedText() ) ) );
+ # Show an appropriate message if the user isn't allowed or able to change
+ # the protection settings at this time
+ if( $this->disabled ) {
+ if( wfReadOnly() ) {
+ $wgOut->readOnlyPage();
+ } elseif( $this->mPermErrors ) {
+ $wgOut->addWikiText( $wgOut->formatPermissionsErrorMessage( $this->mPermErrors ) );
+ }
+ } else {
+ $wgOut->addWikiMsg( 'protect-text', $this->mTitle->getPrefixedText() );
+ }
$wgOut->addHTML( $this->buildForm() );
@@ -104,26 +152,78 @@ class ProtectionForm {
function save() {
global $wgRequest, $wgUser, $wgOut;
- if( !$wgRequest->wasPosted() ) {
- return false;
- }
if( $this->disabled ) {
+ $this->show();
return false;
}
$token = $wgRequest->getVal( 'wpEditToken' );
if( !$wgUser->matchEditToken( $token ) ) {
- throw new FatalError( wfMsg( 'sessionfailure' ) );
+ $this->show( wfMsg( 'sessionfailure' ) );
+ return false;
+ }
+
+ if ( strlen( $this->mExpiry ) == 0 ) {
+ $this->mExpiry = 'infinite';
+ }
+
+ if ( $this->mExpiry == 'infinite' || $this->mExpiry == 'indefinite' ) {
+ $expiry = Block::infinity();
+ } else {
+ # Convert GNU-style date, on error returns -1 for PHP <5.1 and false for PHP >=5.1
+ $expiry = strtotime( $this->mExpiry );
+
+ if ( $expiry < 0 || $expiry === false ) {
+ $this->show( wfMsg( 'protect_expiry_invalid' ) );
+ return false;
+ }
+
+ // Fixme: non-qualified absolute times are not in users specified timezone
+ // and there isn't notice about it in the ui
+ $expiry = wfTimestamp( TS_MW, $expiry );
+
+ if ( $expiry < wfTimestampNow() ) {
+ $this->show( wfMsg( 'protect_expiry_old' ) );
+ return false;
+ }
+
+ }
+
+ # They shouldn't be able to do this anyway, but just to make sure, ensure that cascading restrictions aren't being applied
+ # to a semi-protected page.
+ global $wgGroupPermissions;
+
+ $edit_restriction = $this->mRestrictions['edit'];
+
+ if ($this->mCascade && ($edit_restriction != 'protect') &&
+ !(isset($wgGroupPermissions[$edit_restriction]['protect']) && $wgGroupPermissions[$edit_restriction]['protect'] ) )
+ $this->mCascade = false;
+
+ if ($this->mTitle->exists()) {
+ $ok = $this->mArticle->updateRestrictions( $this->mRestrictions, $this->mReason, $this->mCascade, $expiry );
+ } else {
+ $ok = $this->mTitle->updateTitleProtection( $this->mRestrictions['create'], $this->mReason, $expiry );
}
- $ok = $this->mArticle->updateRestrictions( $this->mRestrictions, $this->mReason, $this->mCascade );
if( !$ok ) {
throw new FatalError( "Unknown error at restriction save time." );
}
+
+ if( $wgRequest->getCheck( 'mwProtectWatch' ) ) {
+ $this->mArticle->doWatch();
+ } elseif( $this->mTitle->userIsWatching() ) {
+ $this->mArticle->doUnwatch();
+ }
+
return $ok;
}
+ /**
+ * Build the input form
+ *
+ * @return $out string HTML form
+ */
function buildForm() {
global $wgUser;
@@ -132,59 +232,98 @@ class ProtectionForm {
$out .= $this->buildScript();
// The submission needs to reenable the move permission selector
// if it's in locked mode, or some browsers won't submit the data.
- $out .= wfOpenElement( 'form', array(
- 'action' => $this->mTitle->getLocalUrl( 'action=protect' ),
- 'method' => 'post',
- 'onsubmit' => 'protectEnable(true)' ) );
-
- $out .= wfElement( 'input', array(
- 'type' => 'hidden',
- 'name' => 'wpEditToken',
- 'value' => $wgUser->editToken() ) );
+ $out .= Xml::openElement( 'form', array( 'method' => 'post', 'action' => $this->mTitle->getLocalUrl( 'action=protect' ), 'id' => 'mw-Protect-Form', 'onsubmit' => 'protectEnable(true)' ) ) .
+ Xml::hidden( 'wpEditToken',$wgUser->editToken() );
}
- $out .= "";
- $out .= "";
- $out .= "\n";
+ $out .= Xml::openElement( 'fieldset' ) .
+ Xml::element( 'legend', null, wfMsg( 'protect-legend' ) ) .
+ Xml::openElement( 'table', array( 'id' => 'mwProtectSet' ) ) .
+ Xml::openElement( 'tbody' ) .
+ "
\n";
+
foreach( $this->mRestrictions as $action => $required ) {
/* Not all languages have V_x <-> N_x relation */
- $out .= "| " . wfMsgHtml( 'restriction-' . $action ) . " | \n";
+ $label = Xml::element( 'label',
+ array( 'for' => "mwProtect-level-$action" ),
+ wfMsg( 'restriction-' . $action ) );
+ $out .= "$label | ";
}
- $out .= "
\n";
- $out .= "\n";
+ $out .= "
+ \n";
foreach( $this->mRestrictions as $action => $selected ) {
- $out .= "| \n";
- $out .= $this->buildSelector( $action, $selected );
- $out .= " | \n";
+ $out .= "" .
+ $this->buildSelector( $action, $selected ) .
+ " | ";
}
$out .= "
\n";
// JavaScript will add another row with a value-chaining checkbox
- $out .= "\n";
- $out .= "
\n";
-
- global $wgEnableCascadingProtection;
+ $out .= Xml::closeElement( 'tbody' ) .
+ Xml::closeElement( 'table' ) .
+ Xml::openElement( 'table', array( 'id' => 'mw-protect-table2' ) ) .
+ Xml::openElement( 'tbody' );
+
+ if( $this->mTitle->exists() ) {
+ $out .= '
+ |
+ ' .
+ Xml::checkLabel( wfMsg( 'protect-cascade' ), 'mwProtect-cascade', 'mwProtect-cascade', $this->mCascade, $this->disabledAttrib ) .
+ " |
+
\n";
+ }
- if ($wgEnableCascadingProtection)
- $out .= $this->buildCascadeInput();
+ $attribs = array( 'id' => 'expires' ) + $this->disabledAttrib;
+ $out .= "
+ | " .
+ Xml::label( wfMsgExt( 'protectexpiry', array( 'parseinline' ) ), 'expires' ) .
+ ' |
+ ' .
+ Xml::input( 'mwProtect-expiry', 60, $this->mExpiry, $attribs ) .
+ ' |
+
';
if( !$this->disabled ) {
- $out .= "\n";
- $out .= "\n";
- $out .= "| " . $this->buildReasonInput() . " |
\n";
- $out .= " | " . $this->buildSubmit() . " |
\n";
- $out .= "\n";
- $out .= "
\n";
- $out .= "\n";
- $out .= $this->buildCleanupScript();
+ $id = 'mwProtect-reason';
+ $out .= "
+ | " .
+ Xml::label( wfMsg( 'protectcomment' ), $id ) .
+ ' |
+ ' .
+ Xml::input( $id, 60, $this->mReason, array( 'type' => 'text', 'id' => $id, 'maxlength' => 255 ) ) .
+ " |
+
+
+ |
+ " .
+ Xml::checkLabel( wfMsg( 'watchthis' ),
+ 'mwProtectWatch', 'mwProtectWatch',
+ $this->mTitle->userIsWatching() || $wgUser->getOption( 'watchdefault' ) ) .
+ " |
+
+
+ |
+ " .
+ Xml::submitButton( wfMsg( 'confirm' ), array( 'id' => 'mw-Protect-submit' ) ) .
+ " |
+
\n";
+ }
+
+ $out .= Xml::closeElement( 'tbody' ) .
+ Xml::closeElement( 'table' ) .
+ Xml::closeElement( 'fieldset' );
+
+ if ( !$this->disabled ) {
+ $out .= Xml::closeElement( 'form' ) .
+ $this->buildCleanupScript();
}
return $out;
}
function buildSelector( $action, $selected ) {
- global $wgRestrictionLevels;
+ global $wgRestrictionLevels, $wgUser;
$id = 'mwProtect-level-' . $action;
$attribs = array(
'id' => $id,
@@ -193,62 +332,60 @@ class ProtectionForm {
'onchange' => 'protectLevelsUpdate(this)',
) + $this->disabledAttrib;
- $out = wfOpenElement( 'select', $attribs );
+ $out = Xml::openElement( 'select', $attribs );
foreach( $wgRestrictionLevels as $key ) {
- $out .= $this->buildOption( $key, $selected );
+ //don't let them choose levels above their own (aka so they can still unprotect and edit the page). but only when the form isn't disabled
+ if( $key == 'sysop' ) {
+ //special case, rewrite sysop to protect and editprotected
+ if( !$wgUser->isAllowed('protect') && !$wgUser->isAllowed('editprotected') && !$this->disabled )
+ continue;
+ } else {
+ if( !$wgUser->isAllowed($key) && !$this->disabled )
+ continue;
+ }
+ $out .= Xml::option( $this->getOptionLabel( $key ), $key, $key == $selected );
}
- $out .= "\n";
+ $out .= Xml::closeElement( 'select' );
return $out;
}
- function buildOption( $key, $selected ) {
- $text = ( $key == '' )
- ? wfMsg( 'protect-default' )
- : wfMsg( "protect-level-$key" );
- $selectedAttrib = ($selected == $key)
- ? array( 'selected' => 'selected' )
- : array();
- return wfElement( 'option',
- array( 'value' => $key ) + $selectedAttrib,
- $text );
- }
-
- function buildReasonInput() {
- $id = 'mwProtect-reason';
- return wfElement( 'label', array(
- 'id' => "$id-label",
- 'for' => $id ),
- wfMsg( 'protectcomment' ) ) .
- '' .
- wfElement( 'input', array(
- 'size' => 60,
- 'name' => $id,
- 'id' => $id ) );
- }
-
- function buildCascadeInput() {
- $id = 'mwProtect-cascade';
- $ci = wfCheckLabel( wfMsg( 'protect-cascade' ), $id, $id, $this->mCascade, $this->disabledAttrib);
-
- return $ci;
- }
-
- function buildSubmit() {
- return wfElement( 'input', array(
- 'type' => 'submit',
- 'value' => wfMsg( 'confirm' ) ) );
+ /**
+ * Prepare the label for a protection selector option
+ *
+ * @param string $permission Permission required
+ * @return string
+ */
+ private function getOptionLabel( $permission ) {
+ if( $permission == '' ) {
+ return wfMsg( 'protect-default' );
+ } else {
+ $key = "protect-level-{$permission}";
+ $msg = wfMsg( $key );
+ if( wfEmptyMsg( $key, $msg ) )
+ $msg = wfMsg( 'protect-fallback', $permission );
+ return $msg;
+ }
}
function buildScript() {
global $wgStylePath, $wgStyleVersion;
- return '';
+ return Xml::tags( 'script', array(
+ 'type' => 'text/javascript',
+ 'src' => $wgStylePath . "/common/protect.js?$wgStyleVersion" ), '' );
}
function buildCleanupScript() {
- return '';
+ global $wgRestrictionLevels, $wgGroupPermissions;
+ $script = 'var wgCascadeableLevels=';
+ $CascadeableLevels = array();
+ foreach( $wgRestrictionLevels as $key ) {
+ if ( (isset($wgGroupPermissions[$key]['protect']) && $wgGroupPermissions[$key]['protect']) || $key == 'protect' ) {
+ $CascadeableLevels[] = "'" . Xml::escapeJsString( $key ) . "'";
+ }
+ }
+ $script .= "[" . implode(',',$CascadeableLevels) . "];\n";
+ $script .= 'protectInitialize("mwProtectSet","' . Xml::escapeJsString( wfMsg( 'protect-unchain' ) ) . '","' . count($this->mApplicableTypes) . '")';
+ return Xml::tags( 'script', array( 'type' => 'text/javascript' ), $script );
}
/**
@@ -256,16 +393,8 @@ class ProtectionForm {
* @access private
*/
function showLogExtract( &$out ) {
- # Show relevant lines from the deletion log:
- $out->addHTML( "" . htmlspecialchars( LogPage::logName( 'protect' ) ) . "\n" );
- $logViewer = new LogViewer(
- new LogReader(
- new FauxRequest(
- array( 'page' => $this->mTitle->getPrefixedText(),
- 'type' => 'protect' ) ) ) );
- $logViewer->showList( $out );
+ # Show relevant lines from the protection log:
+ $out->addHTML( Xml::element( 'h2', null, LogPage::logName( 'protect' ) ) );
+ LogEventsList::showLogExtract( $out, 'protect', $this->mTitle->getPrefixedText() );
}
}
-
-
-?>
|