includes/Setup.php

   1 <?php
   2 /**
   3  * Include most things that are needed to make MediaWiki work.
   4  *
   5  * This file is included by WebStart.php and doMaintenance.php so that both
   6  * web and maintenance scripts share a final set up phase to include necessary
   7  * files and create global object variables.
   8  *
   9  * This program is free software; you can redistribute it and/or modify
  10  * it under the terms of the GNU General Public License as published by
  11  * the Free Software Foundation; either version 2 of the License, or
  12  * (at your option) any later version.
  13  *
  14  * This program is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  17  * GNU General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU General Public License along
  20  * with this program; if not, write to the Free Software Foundation, Inc.,
  21  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  22  * http://www.gnu.org/copyleft/gpl.html
  23  *
  24  * @file
  25  */
  26 use MediaWiki\MediaWikiServices;
  27 use Wikimedia\Rdbms\LBFactory;
  28 use Wikimedia\Rdbms\ChronologyProtector;
  29
  30 /**
  31  * This file is not a valid entry point, perform no further processing unless
  32  * MEDIAWIKI is defined
  33  */
  34 if ( !defined( 'MEDIAWIKI' ) ) {
  35         exit( 1 );
  36 }
  37
  38 // Check to see if we are at the file scope
  39 $wgScopeTest = 'MediaWiki Setup.php scope test';
  40 if ( !isset( $GLOBALS['wgScopeTest'] ) || $GLOBALS['wgScopeTest'] !== $wgScopeTest ) {
  41         echo "Error, Setup.php must be included from the file scope.\n";
  42         die( 1 );
  43 }
  44 unset( $wgScopeTest );
  45
  46 /**
  47  * Pre-config setup: Before loading LocalSettings.php
  48  */
  49
  50 // Sanity check (T5782, T122807)
  51 if ( ini_get( 'mbstring.func_overload' ) ) {
  52         die( 'MediaWiki does not support installations where mbstring.func_overload is non-zero.' );
  53 }
  54
  55 // Define MW_ENTRY_POINT if it's not already, so that config code can check the
  56 // value without using defined()
  57 if ( !defined( 'MW_ENTRY_POINT' ) ) {
  58         /**
  59          * The entry point, which may be either the script filename without the
  60          * file extension, or "cli" for maintenance scripts, or "unknown" for any
  61          * entry point that does not set the constant.
  62          */
  63         define( 'MW_ENTRY_POINT', 'unknown' );
  64 }
  65
  66 // Start the autoloader, so that extensions can derive classes from core files
  67 require_once "$IP/includes/AutoLoader.php";
  68
  69 // Load global constants
  70 require_once "$IP/includes/Defines.php";
  71
  72 // Load default settings
  73 require_once "$IP/includes/DefaultSettings.php";
  74
  75 // Load global functions
  76 require_once "$IP/includes/GlobalFunctions.php";
  77
  78 // Load composer's autoloader if present
  79 if ( is_readable( "$IP/vendor/autoload.php" ) ) {
  80         require_once "$IP/vendor/autoload.php";
  81 } elseif ( file_exists( "$IP/vendor/autoload.php" ) ) {
  82         die( "$IP/vendor/autoload.php exists but is not readable" );
  83 }
  84
  85 // Assert that composer dependencies were successfully loaded
  86 // Purposely no leading \ due to it breaking HHVM RepoAuthorative mode
  87 // PHP works fine with both versions
  88 // See https://github.com/facebook/hhvm/issues/5833
  89 if ( !interface_exists( 'Psr\Log\LoggerInterface' ) ) {
  90         $message = (
  91                 'MediaWiki requires the <a href="https://github.com/php-fig/log">PSR-3 logging ' .
  92                 "library</a> to be present. This library is not embedded directly in MediaWiki's " .
  93                 "git repository and must be installed separately by the end user.\n\n" .
  94                 'Please see <a href="https://www.mediawiki.org/wiki/Download_from_Git' .
  95                 '#Fetch_external_libraries">mediawiki.org</a> for help on installing ' .
  96                 'the required components.'
  97         );
  98         echo $message;
  99         trigger_error( $message, E_USER_ERROR );
 100         die( 1 );
 101 }
 102
 103 /**
 104  * Changes to the PHP environment that don't vary on configuration.
 105  */
 106
 107 // Install a header callback
 108 MediaWiki\HeaderCallback::register();
 109
 110 // Set the encoding used by PHP for reading HTTP input, and writing output.
 111 // This is also the default for mbstring functions.
 112 mb_internal_encoding( 'UTF-8' );
 113
 114 /**
 115  * Load LocalSettings.php
 116  */
 117
 118 if ( defined( 'MW_CONFIG_CALLBACK' ) ) {
 119         call_user_func( MW_CONFIG_CALLBACK );
 120 } else {
 121         if ( !defined( 'MW_CONFIG_FILE' ) ) {
 122                 define( 'MW_CONFIG_FILE', "$IP/LocalSettings.php" );
 123         }
 124         require_once MW_CONFIG_FILE;
 125 }
 126
 127 /**
 128  * Customization point after all loading (constants, functions, classes,
 129  * DefaultSettings, LocalSettings). Specifically, this is before usage of
 130  * settings, before instantiation of Profiler (and other singletons), and
 131  * before any setup functions or hooks run.
 132  */
 133
 134 if ( defined( 'MW_SETUP_CALLBACK' ) ) {
 135         call_user_func( MW_SETUP_CALLBACK );
 136 }
 137
 138 /**
 139  * Main setup
 140  */
 141
 142 // Load queued extensions
 143 ExtensionRegistry::getInstance()->loadFromQueue();
 144 // Don't let any other extensions load
 145 ExtensionRegistry::getInstance()->finish();
 146
 147 // Set the configured locale on all requests for consisteny
 148 putenv( "LC_ALL=$wgShellLocale" );
 149 setlocale( LC_ALL, $wgShellLocale );
 150
 151 // Set various default paths sensibly...
 152 if ( $wgScript === false ) {
 153         $wgScript = "$wgScriptPath/index.php";
 154 }
 155 if ( $wgLoadScript === false ) {
 156         $wgLoadScript = "$wgScriptPath/load.php";
 157 }
 158 if ( $wgRestPath === false ) {
 159         $wgRestPath = "$wgScriptPath/rest.php";
 160 }
 161
 162 if ( $wgArticlePath === false ) {
 163         if ( $wgUsePathInfo ) {
 164                 $wgArticlePath = "$wgScript/$1";
 165         } else {
 166                 $wgArticlePath = "$wgScript?title=$1";
 167         }
 168 }
 169
 170 if ( $wgResourceBasePath === null ) {
 171         $wgResourceBasePath = $wgScriptPath;
 172 }
 173 if ( $wgStylePath === false ) {
 174         $wgStylePath = "$wgResourceBasePath/skins";
 175 }
 176 if ( $wgLocalStylePath === false ) {
 177         // Avoid wgResourceBasePath here since that may point to a different domain (e.g. CDN)
 178         $wgLocalStylePath = "$wgScriptPath/skins";
 179 }
 180 if ( $wgExtensionAssetsPath === false ) {
 181         $wgExtensionAssetsPath = "$wgResourceBasePath/extensions";
 182 }
 183
 184 if ( $wgLogo === false ) {
 185         $wgLogo = "$wgResourceBasePath/resources/assets/wiki.png";
 186 }
 187
 188 if ( $wgUploadPath === false ) {
 189         $wgUploadPath = "$wgScriptPath/images";
 190 }
 191 if ( $wgUploadDirectory === false ) {
 192         $wgUploadDirectory = "$IP/images";
 193 }
 194 if ( $wgReadOnlyFile === false ) {
 195         $wgReadOnlyFile = "{$wgUploadDirectory}/lock_yBgMBwiR";
 196 }
 197 if ( $wgFileCacheDirectory === false ) {
 198         $wgFileCacheDirectory = "{$wgUploadDirectory}/cache";
 199 }
 200 if ( $wgDeletedDirectory === false ) {
 201         $wgDeletedDirectory = "{$wgUploadDirectory}/deleted";
 202 }
 203
 204 if ( $wgGitInfoCacheDirectory === false && $wgCacheDirectory !== false ) {
 205         $wgGitInfoCacheDirectory = "{$wgCacheDirectory}/gitinfo";
 206 }
 207
 208 // Fix path to icon images after they were moved in 1.24
 209 if ( $wgRightsIcon ) {
 210         $wgRightsIcon = str_replace(
 211                 "{$wgStylePath}/common/images/",
 212                 "{$wgResourceBasePath}/resources/assets/licenses/",
 213                 $wgRightsIcon
 214         );
 215 }
 216
 217 if ( isset( $wgFooterIcons['copyright']['copyright'] )
 218         && $wgFooterIcons['copyright']['copyright'] === []
 219 ) {
 220         if ( $wgRightsIcon || $wgRightsText ) {
 221                 $wgFooterIcons['copyright']['copyright'] = [
 222                         'url' => $wgRightsUrl,
 223                         'src' => $wgRightsIcon,
 224                         'alt' => $wgRightsText,
 225                 ];
 226         }
 227 }
 228
 229 if ( isset( $wgFooterIcons['poweredby'] )
 230         && isset( $wgFooterIcons['poweredby']['mediawiki'] )
 231         && $wgFooterIcons['poweredby']['mediawiki']['src'] === null
 232 ) {
 233         $wgFooterIcons['poweredby']['mediawiki']['src'] =
 234                 "$wgResourceBasePath/resources/assets/poweredby_mediawiki_88x31.png";
 235         $wgFooterIcons['poweredby']['mediawiki']['srcset'] =
 236                 "$wgResourceBasePath/resources/assets/poweredby_mediawiki_132x47.png 1.5x, " .
 237                 "$wgResourceBasePath/resources/assets/poweredby_mediawiki_176x62.png 2x";
 238 }
 239
 240 /**
 241  * Unconditional protection for NS_MEDIAWIKI since otherwise it's too easy for a
 242  * sysadmin to set $wgNamespaceProtection incorrectly and leave the wiki insecure.
 243  *
 244  * Note that this is the definition of editinterface and it can be granted to
 245  * all users if desired.
 246  */
 247 $wgNamespaceProtection[NS_MEDIAWIKI] = 'editinterface';
 248
 249 /**
 250  * The canonical names of namespaces 6 and 7 are, as of v1.14, "File"
 251  * and "File_talk".  The old names "Image" and "Image_talk" are
 252  * retained as aliases for backwards compatibility.
 253  */
 254 $wgNamespaceAliases['Image'] = NS_FILE;
 255 $wgNamespaceAliases['Image_talk'] = NS_FILE_TALK;
 256
 257 /**
 258  * Initialise $wgLockManagers to include basic FS version
 259  */
 260 $wgLockManagers[] = [
 261         'name' => 'fsLockManager',
 262         'class' => FSLockManager::class,
 263         'lockDirectory' => "{$wgUploadDirectory}/lockdir",
 264 ];
 265 $wgLockManagers[] = [
 266         'name' => 'nullLockManager',
 267         'class' => NullLockManager::class,
 268 ];
 269
 270 /**
 271  * Default parameters for the "<gallery>" tag.
 272  * @see DefaultSettings.php for description of the fields.
 273  */
 274 $wgGalleryOptions += [
 275         'imagesPerRow' => 0,
 276         'imageWidth' => 120,
 277         'imageHeight' => 120,
 278         'captionLength' => true,
 279         'showBytes' => true,
 280         'showDimensions' => true,
 281         'mode' => 'traditional',
 282 ];
 283
 284 /**
 285  * Shortcuts for $wgLocalFileRepo
 286  */
 287 if ( !$wgLocalFileRepo ) {
 288         $wgLocalFileRepo = [
 289                 'class' => LocalRepo::class,
 290                 'name' => 'local',
 291                 'directory' => $wgUploadDirectory,
 292                 'scriptDirUrl' => $wgScriptPath,
 293                 'url' => $wgUploadBaseUrl ? $wgUploadBaseUrl . $wgUploadPath : $wgUploadPath,
 294                 'hashLevels' => $wgHashedUploadDirectory ? 2 : 0,
 295                 'thumbScriptUrl' => $wgThumbnailScriptPath,
 296                 'transformVia404' => !$wgGenerateThumbnailOnParse,
 297                 'deletedDir' => $wgDeletedDirectory,
 298                 'deletedHashLevels' => $wgHashedUploadDirectory ? 3 : 0
 299         ];
 300 }
 301
 302 if ( !isset( $wgLocalFileRepo['backend'] ) ) {
 303         // Create a default FileBackend name.
 304         // FileBackendGroup will register a default, if absent from $wgFileBackends.
 305         $wgLocalFileRepo['backend'] = $wgLocalFileRepo['name'] . '-backend';
 306 }
 307
 308 /**
 309  * Shortcuts for $wgForeignFileRepos
 310  */
 311 if ( $wgUseSharedUploads ) {
 312         if ( $wgSharedUploadDBname ) {
 313                 $wgForeignFileRepos[] = [
 314                         'class' => ForeignDBRepo::class,
 315                         'name' => 'shared',
 316                         'directory' => $wgSharedUploadDirectory,
 317                         'url' => $wgSharedUploadPath,
 318                         'hashLevels' => $wgHashedSharedUploadDirectory ? 2 : 0,
 319                         'thumbScriptUrl' => $wgSharedThumbnailScriptPath,
 320                         'transformVia404' => !$wgGenerateThumbnailOnParse,
 321                         'dbType' => $wgDBtype,
 322                         'dbServer' => $wgDBserver,
 323                         'dbUser' => $wgDBuser,
 324                         'dbPassword' => $wgDBpassword,
 325                         'dbName' => $wgSharedUploadDBname,
 326                         'dbFlags' => ( $wgDebugDumpSql ? DBO_DEBUG : 0 ) | DBO_DEFAULT,
 327                         'tablePrefix' => $wgSharedUploadDBprefix,
 328                         'hasSharedCache' => $wgCacheSharedUploads,
 329                         'descBaseUrl' => $wgRepositoryBaseUrl,
 330                         'fetchDescription' => $wgFetchCommonsDescriptions,
 331                 ];
 332         } else {
 333                 $wgForeignFileRepos[] = [
 334                         'class' => FileRepo::class,
 335                         'name' => 'shared',
 336                         'directory' => $wgSharedUploadDirectory,
 337                         'url' => $wgSharedUploadPath,
 338                         'hashLevels' => $wgHashedSharedUploadDirectory ? 2 : 0,
 339                         'thumbScriptUrl' => $wgSharedThumbnailScriptPath,
 340                         'transformVia404' => !$wgGenerateThumbnailOnParse,
 341                         'descBaseUrl' => $wgRepositoryBaseUrl,
 342                         'fetchDescription' => $wgFetchCommonsDescriptions,
 343                 ];
 344         }
 345 }
 346 if ( $wgUseInstantCommons ) {
 347         $wgForeignFileRepos[] = [
 348                 'class' => ForeignAPIRepo::class,
 349                 'name' => 'wikimediacommons',
 350                 'apibase' => 'https://commons.wikimedia.org/w/api.php',
 351                 'url' => 'https://upload.wikimedia.org/wikipedia/commons',
 352                 'thumbUrl' => 'https://upload.wikimedia.org/wikipedia/commons/thumb',
 353                 'hashLevels' => 2,
 354                 'transformVia404' => true,
 355                 'fetchDescription' => true,
 356                 'descriptionCacheExpiry' => 43200,
 357                 'apiThumbCacheExpiry' => 0,
 358         ];
 359 }
 360 foreach ( $wgForeignFileRepos as &$repo ) {
 361         if ( !isset( $repo['directory'] ) && $repo['class'] === ForeignAPIRepo::class ) {
 362                 $repo['directory'] = $wgUploadDirectory; // b/c
 363         }
 364         if ( !isset( $repo['backend'] ) ) {
 365                 $repo['backend'] = $repo['name'] . '-backend';
 366         }
 367 }
 368 unset( $repo ); // no global pollution; destroy reference
 369
 370 $rcMaxAgeDays = $wgRCMaxAge / ( 3600 * 24 );
 371 // Ensure that default user options are not invalid, since that breaks Special:Preferences
 372 $wgDefaultUserOptions['rcdays'] = min(
 373         $wgDefaultUserOptions['rcdays'],
 374         ceil( $rcMaxAgeDays )
 375 );
 376 $wgDefaultUserOptions['watchlistdays'] = min(
 377         $wgDefaultUserOptions['watchlistdays'],
 378         ceil( $rcMaxAgeDays )
 379 );
 380 unset( $rcMaxAgeDays );
 381
 382 if ( $wgSkipSkin ) {
 383         // Hard deprecated in 1.34.
 384         wfDeprecated( '$wgSkipSkin – use $wgSkipSkins instead', '1.23' );
 385         $wgSkipSkins[] = $wgSkipSkin;
 386 }
 387
 388 $wgSkipSkins[] = 'fallback';
 389 $wgSkipSkins[] = 'apioutput';
 390
 391 if ( $wgLocalInterwiki ) {
 392         // Hard deprecated in 1.34.
 393         wfDeprecated( '$wgLocalInterwiki – use $wgLocalInterwikis instead', '1.23' );
 394         // @phan-suppress-next-line PhanUndeclaredVariableDim
 395         array_unshift( $wgLocalInterwikis, $wgLocalInterwiki );
 396 }
 397
 398 // Set default shared prefix
 399 if ( $wgSharedPrefix === false ) {
 400         $wgSharedPrefix = $wgDBprefix;
 401 }
 402
 403 // Set default shared schema
 404 if ( $wgSharedSchema === false ) {
 405         $wgSharedSchema = $wgDBmwschema;
 406 }
 407
 408 if ( !$wgCookiePrefix ) {
 409         if ( $wgSharedDB && $wgSharedPrefix && in_array( 'user', $wgSharedTables ) ) {
 410                 $wgCookiePrefix = $wgSharedDB . '_' . $wgSharedPrefix;
 411         } elseif ( $wgSharedDB && in_array( 'user', $wgSharedTables ) ) {
 412                 $wgCookiePrefix = $wgSharedDB;
 413         } elseif ( $wgDBprefix ) {
 414                 $wgCookiePrefix = $wgDBname . '_' . $wgDBprefix;
 415         } else {
 416                 $wgCookiePrefix = $wgDBname;
 417         }
 418 }
 419 $wgCookiePrefix = strtr( $wgCookiePrefix, '=,; +."\'\\[', '__________' );
 420
 421 if ( $wgEnableEmail ) {
 422         $wgUseEnotif = $wgEnotifUserTalk || $wgEnotifWatchlist;
 423 } else {
 424         // Disable all other email settings automatically if $wgEnableEmail
 425         // is set to false. - T65678
 426         $wgAllowHTMLEmail = false;
 427         $wgEmailAuthentication = false; // do not require auth if you're not sending email anyway
 428         $wgEnableUserEmail = false;
 429         $wgEnotifFromEditor = false;
 430         $wgEnotifImpersonal = false;
 431         $wgEnotifMaxRecips = 0;
 432         $wgEnotifMinorEdits = false;
 433         $wgEnotifRevealEditorAddress = false;
 434         $wgEnotifUseRealName = false;
 435         $wgEnotifUserTalk = false;
 436         $wgEnotifWatchlist = false;
 437         unset( $wgGroupPermissions['user']['sendemail'] );
 438         $wgUseEnotif = false;
 439         $wgUserEmailUseReplyTo = false;
 440         $wgUsersNotifiedOnAllChanges = [];
 441 }
 442
 443 // $wgSysopEmailBans deprecated in 1.34
 444 if ( isset( $wgSysopEmailBans ) && $wgSysopEmailBans === false ) {
 445         wfDeprecated( 'wgSysopEmailBans', '1.34' );
 446         foreach ( $wgGroupPermissions as $group => $_ ) {
 447                 unset( $wgGroupPermissions[$group]['blockemail'] );
 448         }
 449 }
 450
 451 if ( $wgMetaNamespace === false ) {
 452         $wgMetaNamespace = str_replace( ' ', '_', $wgSitename );
 453 }
 454
 455 // Ensure the minimum chunk size is less than PHP upload limits or the maximum
 456 // upload size.
 457 $wgMinUploadChunkSize = min(
 458         $wgMinUploadChunkSize,
 459         UploadBase::getMaxUploadSize( 'file' ),
 460         UploadBase::getMaxPhpUploadSize(),
 461         ( wfShorthandToInteger(
 462                 ini_get( 'post_max_size' ) ?: ini_get( 'hhvm.server.max_post_size' ),
 463                 PHP_INT_MAX
 464         ) ?: PHP_INT_MAX ) - 1024 // Leave some room for other POST parameters
 465 );
 466
 467 /**
 468  * Definitions of the NS_ constants are in Defines.php
 469  * @private
 470  */
 471 $wgCanonicalNamespaceNames = NamespaceInfo::$canonicalNames;
 472
 473 /// @todo UGLY UGLY
 474 if ( is_array( $wgExtraNamespaces ) ) {
 475         $wgCanonicalNamespaceNames += $wgExtraNamespaces;
 476 }
 477
 478 // Hard-deprecate setting $wgDummyLanguageCodes in LocalSettings.php
 479 if ( count( $wgDummyLanguageCodes ) !== 0 ) {
 480         wfDeprecated( '$wgDummyLanguageCodes', '1.29' );
 481 }
 482 // Merge in the legacy language codes, incorporating overrides from the config
 483 $wgDummyLanguageCodes += [
 484         // Internal language codes of the private-use area which get mapped to
 485         // themselves.
 486         'qqq' => 'qqq', // Used for message documentation
 487         'qqx' => 'qqx', // Used for viewing message keys
 488 ] + $wgExtraLanguageCodes + LanguageCode::getDeprecatedCodeMapping();
 489 // Merge in (inverted) BCP 47 mappings
 490 foreach ( LanguageCode::getNonstandardLanguageCodeMapping() as $code => $bcp47 ) {
 491         $bcp47 = strtolower( $bcp47 ); // force case-insensitivity
 492         if ( !isset( $wgDummyLanguageCodes[$bcp47] ) ) {
 493                 $wgDummyLanguageCodes[$bcp47] = $wgDummyLanguageCodes[$code] ?? $code;
 494         }
 495 }
 496
 497 // These are now the same, always
 498 // To determine the user language, use $wgLang->getCode()
 499 $wgContLanguageCode = $wgLanguageCode;
 500
 501 // Temporary backwards-compatibility reading of old Squid-named CDN settings as of MediaWiki 1.34,
 502 // to support sysadmins who fail to update their settings immediately:
 503
 504 if ( isset( $wgUseSquid ) ) {
 505         // If the sysadmin is still setting a value of $wgUseSquid to true but $wgUseCdn is the default of
 506         // false, to be safe, assume they do want this still, so enable it.
 507         if ( !$wgUseCdn && $wgUseSquid ) {
 508                 $wgUseCdn = $wgUseSquid;
 509                 wfDeprecated( '$wgUseSquid enabled but $wgUseCdn disabled; enabling CDN functions', '1.34' );
 510         }
 511 } else {
 512         // Backwards-compatibility for extensions that read this value.
 513         $wgUseSquid = $wgUseCdn;
 514 }
 515
 516 if ( isset( $wgSquidServers ) ) {
 517         // If the sysadmin is still setting a value of $wgSquidServers but $wgCdnServers is the default of
 518         // empty, to be safe, assume they do want these servers to be still used, so use them.
 519         if ( !empty( $wgSquidServers ) && empty( $wgCdnServers ) ) {
 520                 $wgCdnServers = $wgSquidServers;
 521                 wfDeprecated( '$wgSquidServers set, $wgCdnServers empty; using them', '1.34' );
 522         }
 523 } else {
 524         // Backwards-compatibility for extensions that read this value.
 525         $wgSquidServers = $wgCdnServers;
 526 }
 527
 528 if ( isset( $wgSquidServersNoPurge ) ) {
 529         // If the sysadmin is still setting values in $wgSquidServersNoPurge but $wgCdnServersNoPurge is
 530         // the default of empty, to be safe, assume they do want these servers to be still used, so use
 531         // them.
 532         if ( !empty( $wgSquidServersNoPurge ) && empty( $wgCdnServersNoPurge ) ) {
 533                 $wgCdnServersNoPurge = $wgSquidServersNoPurge;
 534                 wfDeprecated( '$wgSquidServersNoPurge set, $wgCdnServersNoPurge empty; using them', '1.34' );
 535         }
 536 } else {
 537         // Backwards-compatibility for extensions that read this value.
 538         $wgSquidServersNoPurge = $wgCdnServersNoPurge;
 539 }
 540
 541 if ( isset( $wgSquidMaxage ) ) {
 542         // If the sysadmin is still setting a value of $wgSquidMaxage and it's higher than $wgCdnMaxAge,
 543         // to be safe, assume they want the higher (lower performance requirement) value, so use that.
 544         if ( $wgCdnMaxAge < $wgSquidMaxage ) {
 545                 $wgCdnMaxAge = $wgSquidMaxage;
 546                 wfDeprecated( '$wgSquidMaxage set higher than $wgCdnMaxAge; using the higher value', '1.34' );
 547         }
 548 } else {
 549         // Backwards-compatibility for extensions that read this value.
 550         $wgSquidMaxage = $wgCdnMaxAge;
 551 }
 552
 553 // Blacklisted file extensions shouldn't appear on the "allowed" list
 554 $wgFileExtensions = array_values( array_diff( $wgFileExtensions, $wgFileBlacklist ) );
 555
 556 if ( $wgInvalidateCacheOnLocalSettingsChange ) {
 557         Wikimedia\suppressWarnings();
 558         $wgCacheEpoch = max( $wgCacheEpoch, gmdate( 'YmdHis', filemtime( "$IP/LocalSettings.php" ) ) );
 559         Wikimedia\restoreWarnings();
 560 }
 561
 562 if ( $wgNewUserLog ) {
 563         // Add new user log type
 564         $wgLogTypes[] = 'newusers';
 565         $wgLogNames['newusers'] = 'newuserlogpage';
 566         $wgLogHeaders['newusers'] = 'newuserlogpagetext';
 567         $wgLogActionsHandlers['newusers/newusers'] = NewUsersLogFormatter::class;
 568         $wgLogActionsHandlers['newusers/create'] = NewUsersLogFormatter::class;
 569         $wgLogActionsHandlers['newusers/create2'] = NewUsersLogFormatter::class;
 570         $wgLogActionsHandlers['newusers/byemail'] = NewUsersLogFormatter::class;
 571         $wgLogActionsHandlers['newusers/autocreate'] = NewUsersLogFormatter::class;
 572 }
 573
 574 if ( $wgPageCreationLog ) {
 575         // Add page creation log type
 576         $wgLogTypes[] = 'create';
 577         $wgLogActionsHandlers['create/create'] = LogFormatter::class;
 578 }
 579
 580 if ( $wgPageLanguageUseDB ) {
 581         $wgLogTypes[] = 'pagelang';
 582         $wgLogActionsHandlers['pagelang/pagelang'] = PageLangLogFormatter::class;
 583 }
 584
 585 if ( $wgCookieSecure === 'detect' ) {
 586         $wgCookieSecure = ( WebRequest::detectProtocol() === 'https' );
 587 }
 588
 589 if ( $wgProfileOnly ) {
 590         // Hard deprecated in 1.34.
 591         wfDeprecated(
 592                 '$wgProfileOnly set the log file in $wgDebugLogGroups[\'profileoutput\'] instead',
 593                 '1.23'
 594         );
 595         $wgDebugLogGroups['profileoutput'] = $wgDebugLogFile;
 596         $wgDebugLogFile = '';
 597 }
 598
 599 // Backwards compatibility with old password limits
 600 if ( $wgMinimalPasswordLength !== false ) {
 601         $wgPasswordPolicy['policies']['default']['MinimalPasswordLength'] = $wgMinimalPasswordLength;
 602 }
 603
 604 if ( $wgMaximalPasswordLength !== false ) {
 605         $wgPasswordPolicy['policies']['default']['MaximalPasswordLength'] = $wgMaximalPasswordLength;
 606 }
 607
 608 if ( $wgPHPSessionHandling !== 'enable' &&
 609         $wgPHPSessionHandling !== 'warn' &&
 610         $wgPHPSessionHandling !== 'disable'
 611 ) {
 612         $wgPHPSessionHandling = 'warn';
 613 }
 614 if ( defined( 'MW_NO_SESSION' ) ) {
 615         // If the entry point wants no session, force 'disable' here unless they
 616         // specifically set it to the (undocumented) 'warn'.
 617         // @phan-suppress-next-line PhanUndeclaredConstant
 618         $wgPHPSessionHandling = MW_NO_SESSION === 'warn' ? 'warn' : 'disable';
 619 }
 620
 621 MWDebug::setup();
 622
 623 // Reset the global service locator, so any services that have already been created will be
 624 // re-created while taking into account any custom settings and extensions.
 625 MediaWikiServices::resetGlobalInstance( new GlobalVarConfig(), 'quick' );
 626
 627 // Define a constant that indicates that the bootstrapping of the service locator
 628 // is complete.
 629 define( 'MW_SERVICE_BOOTSTRAP_COMPLETE', 1 );
 630
 631 MWExceptionHandler::installHandler();
 632
 633 // T30798: $wgServer must be explicitly set
 634 if ( $wgServer === false ) {
 635         throw new FatalError(
 636                 '$wgServer must be set in LocalSettings.php. ' .
 637                 'See <a href="https://www.mediawiki.org/wiki/Manual:$wgServer">' .
 638                 'https://www.mediawiki.org/wiki/Manual:$wgServer</a>.'
 639         );
 640 }
 641
 642 // T48998: Bail out early if $wgArticlePath is non-absolute
 643 foreach ( [ 'wgArticlePath', 'wgVariantArticlePath' ] as $varName ) {
 644         if ( $$varName && !preg_match( '/^(https?:\/\/|\/)/', $$varName ) ) {
 645                 throw new FatalError(
 646                         "If you use a relative URL for \$$varName, it must start " .
 647                         'with a slash (<code>/</code>).<br><br>See ' .
 648                         "<a href=\"https://www.mediawiki.org/wiki/Manual:\$$varName\">" .
 649                         "https://www.mediawiki.org/wiki/Manual:\$$varName</a>."
 650                 );
 651         }
 652 }
 653
 654 if ( $wgCanonicalServer === false ) {
 655         $wgCanonicalServer = wfExpandUrl( $wgServer, PROTO_HTTP );
 656 }
 657
 658 // Set server name
 659 $serverParts = wfParseUrl( $wgCanonicalServer );
 660 if ( $wgServerName !== false ) {
 661         wfWarn( '$wgServerName should be derived from $wgCanonicalServer, '
 662                 . 'not customized. Overwriting $wgServerName.' );
 663 }
 664 $wgServerName = $serverParts['host'];
 665 unset( $serverParts );
 666
 667 // Set defaults for configuration variables
 668 // that are derived from the server name by default
 669 // Note: $wgEmergencyContact and $wgPasswordSender may be false or empty string (T104142)
 670 if ( !$wgEmergencyContact ) {
 671         $wgEmergencyContact = 'wikiadmin@' . $wgServerName;
 672 }
 673 if ( !$wgPasswordSender ) {
 674         $wgPasswordSender = 'apache@' . $wgServerName;
 675 }
 676 if ( !$wgNoReplyAddress ) {
 677         $wgNoReplyAddress = $wgPasswordSender;
 678 }
 679
 680 if ( $wgSecureLogin && substr( $wgServer, 0, 2 ) !== '//' ) {
 681         $wgSecureLogin = false;
 682         wfWarn( 'Secure login was enabled on a server that only supports '
 683                 . 'HTTP or HTTPS. Disabling secure login.' );
 684 }
 685
 686 $wgVirtualRestConfig['global']['domain'] = $wgCanonicalServer;
 687
 688 // Now that GlobalFunctions is loaded, set defaults that depend on it.
 689 if ( $wgTmpDirectory === false ) {
 690         $wgTmpDirectory = wfTempDir();
 691 }
 692
 693 // We don't use counters anymore. Left here for extensions still
 694 // expecting this to exist. Should be removed sometime 1.26 or later.
 695 if ( !isset( $wgDisableCounters ) ) {
 696         $wgDisableCounters = true;
 697 }
 698
 699 if ( $wgMainWANCache === false ) {
 700         // Setup a WAN cache from $wgMainCacheType with no relayer.
 701         // Sites using multiple datacenters can configure a relayer.
 702         $wgMainWANCache = 'mediawiki-main-default';
 703         $wgWANObjectCaches[$wgMainWANCache] = [
 704                 'class'    => WANObjectCache::class,
 705                 'cacheId'  => $wgMainCacheType
 706         ];
 707 }
 708
 709 if ( $wgSharedDB && $wgSharedTables ) {
 710         // Apply $wgSharedDB table aliases for the local LB (all non-foreign DB connections)
 711         MediaWikiServices::getInstance()->getDBLoadBalancer()->setTableAliases(
 712                 array_fill_keys(
 713                         $wgSharedTables,
 714                         [
 715                                 'dbname' => $wgSharedDB,
 716                                 'schema' => $wgSharedSchema,
 717                                 'prefix' => $wgSharedPrefix
 718                         ]
 719                 )
 720         );
 721 }
 722
 723 // Raise the memory limit if it's too low
 724 // Note, this makes use of wfDebug, and thus should not be before
 725 // MWDebug::init() is called.
 726 wfMemoryLimit( $wgMemoryLimit );
 727
 728 /**
 729  * Set up the timezone, suppressing the pseudo-security warning in PHP 5.1+
 730  * that happens whenever you use a date function without the timezone being
 731  * explicitly set. Inspired by phpMyAdmin's treatment of the problem.
 732  */
 733 if ( is_null( $wgLocaltimezone ) ) {
 734         Wikimedia\suppressWarnings();
 735         $wgLocaltimezone = date_default_timezone_get();
 736         Wikimedia\restoreWarnings();
 737 }
 738
 739 date_default_timezone_set( $wgLocaltimezone );
 740 if ( is_null( $wgLocalTZoffset ) ) {
 741         $wgLocalTZoffset = (int)date( 'Z' ) / 60;
 742 }
 743 // The part after the System| is ignored, but rest of MW fills it
 744 // out as the local offset.
 745 $wgDefaultUserOptions['timecorrection'] = "System|$wgLocalTZoffset";
 746
 747 if ( !$wgDBerrorLogTZ ) {
 748         $wgDBerrorLogTZ = $wgLocaltimezone;
 749 }
 750
 751 // Initialize the request object in $wgRequest
 752 $wgRequest = RequestContext::getMain()->getRequest(); // BackCompat
 753 // Set user IP/agent information for agent session consistency purposes
 754 $cpPosInfo = LBFactory::getCPInfoFromCookieValue(
 755         // The cookie has no prefix and is set by MediaWiki::preOutputCommit()
 756         $wgRequest->getCookie( 'cpPosIndex', '' ),
 757         // Mitigate broken client-side cookie expiration handling (T190082)
 758         time() - ChronologyProtector::POSITION_COOKIE_TTL
 759 );
 760 MediaWikiServices::getInstance()->getDBLoadBalancerFactory()->setRequestInfo( [
 761         'IPAddress' => $wgRequest->getIP(),
 762         'UserAgent' => $wgRequest->getHeader( 'User-Agent' ),
 763         'ChronologyProtection' => $wgRequest->getHeader( 'MediaWiki-Chronology-Protection' ),
 764         'ChronologyPositionIndex' => $wgRequest->getInt( 'cpPosIndex', $cpPosInfo['index'] ),
 765         'ChronologyClientId' => $cpPosInfo['clientId']
 766                 ?? $wgRequest->getHeader( 'MediaWiki-Chronology-Client-Id' )
 767 ] );
 768 unset( $cpPosInfo );
 769 // Make sure that object caching does not undermine the ChronologyProtector improvements
 770 if ( $wgRequest->getCookie( 'UseDC', '' ) === 'master' ) {
 771         // The user is pinned to the primary DC, meaning that they made recent changes which should
 772         // be reflected in their subsequent web requests. Avoid the use of interim cache keys because
 773         // they use a blind TTL and could be stale if an object changes twice in a short time span.
 774         MediaWikiServices::getInstance()->getMainWANObjectCache()->useInterimHoldOffCaching( false );
 775 }
 776
 777 // Useful debug output
 778 if ( $wgCommandLineMode ) {
 779         if ( isset( $self ) ) {
 780                 wfDebug( "\n\nStart command line script $self\n" );
 781         }
 782 } else {
 783         $debug = "\n\nStart request {$wgRequest->getMethod()} {$wgRequest->getRequestURL()}\n";
 784         $debug .= "HTTP HEADERS:\n";
 785         foreach ( $wgRequest->getAllHeaders() as $name => $value ) {
 786                 $debug .= "$name: $value\n";
 787         }
 788         wfDebug( $debug );
 789 }
 790
 791 $wgMemc = ObjectCache::getLocalClusterInstance();
 792 $messageMemc = wfGetMessageCacheStorage();
 793
 794 // Most of the config is out, some might want to run hooks here.
 795 Hooks::run( 'SetupAfterCache' );
 796
 797 /**
 798  * @var Language $wgContLang
 799  * @deprecated since 1.32, use the ContentLanguage service directly
 800  */
 801 $wgContLang = MediaWikiServices::getInstance()->getContentLanguage();
 802
 803 // Now that variant lists may be available...
 804 $wgRequest->interpolateTitle();
 805
 806 /**
 807  * @var MediaWiki\Session\SessionId|null $wgInitialSessionId The persistent
 808  * session ID (if any) loaded at startup
 809  */
 810 $wgInitialSessionId = null;
 811 if ( !defined( 'MW_NO_SESSION' ) && !$wgCommandLineMode ) {
 812         // If session.auto_start is there, we can't touch session name
 813         if ( $wgPHPSessionHandling !== 'disable' && !wfIniGetBool( 'session.auto_start' ) ) {
 814                 session_name( $wgSessionName ?: $wgCookiePrefix . '_session' );
 815         }
 816
 817         // Create the SessionManager singleton and set up our session handler,
 818         // unless we're specifically asked not to.
 819         if ( !defined( 'MW_NO_SESSION_HANDLER' ) ) {
 820                 MediaWiki\Session\PHPSessionHandler::install(
 821                         MediaWiki\Session\SessionManager::singleton()
 822                 );
 823         }
 824
 825         // Initialize the session
 826         try {
 827                 $session = MediaWiki\Session\SessionManager::getGlobalSession();
 828         } catch ( MediaWiki\Session\SessionOverflowException $ex ) {
 829                 // The exception is because the request had multiple possible
 830                 // sessions tied for top priority. Report this to the user.
 831                 $list = [];
 832                 foreach ( $ex->getSessionInfos() as $info ) {
 833                         $list[] = $info->getProvider()->describe( $wgContLang );
 834                 }
 835                 $list = $wgContLang->listToText( $list );
 836                 throw new HttpError( 400,
 837                         Message::newFromKey( 'sessionmanager-tie', $list )->inLanguage( $wgContLang )->plain()
 838                 );
 839         }
 840
 841         if ( $session->isPersistent() ) {
 842                 $wgInitialSessionId = $session->getSessionId();
 843         }
 844
 845         $session->renew();
 846         if ( MediaWiki\Session\PHPSessionHandler::isEnabled() &&
 847                 ( $session->isPersistent() || $session->shouldRememberUser() ) &&
 848                 session_id() !== $session->getId()
 849         ) {
 850                 // Start the PHP-session for backwards compatibility
 851                 if ( session_id() !== '' ) {
 852                         wfDebugLog( 'session', 'PHP session {old_id} was already started, changing to {new_id}', 'all', [
 853                                 'old_id' => session_id(),
 854                                 'new_id' => $session->getId(),
 855                         ] );
 856                         session_write_close();
 857                 }
 858                 session_id( $session->getId() );
 859                 session_start();
 860         }
 861
 862         unset( $session );
 863 } else {
 864         // Even if we didn't set up a global Session, still install our session
 865         // handler unless specifically requested not to.
 866         if ( !defined( 'MW_NO_SESSION_HANDLER' ) ) {
 867                 MediaWiki\Session\PHPSessionHandler::install(
 868                         MediaWiki\Session\SessionManager::singleton()
 869                 );
 870         }
 871 }
 872
 873 /**
 874  * @var User $wgUser
 875  */
 876 $wgUser = RequestContext::getMain()->getUser(); // BackCompat
 877
 878 /**
 879  * @var Language $wgLang
 880  */
 881 $wgLang = new StubUserLang;
 882
 883 /**
 884  * @var OutputPage $wgOut
 885  */
 886 $wgOut = RequestContext::getMain()->getOutput(); // BackCompat
 887
 888 /**
 889  * @var Parser $wgParser
 890  * @deprecated since 1.32, use MediaWikiServices::getInstance()->getParser() instead
 891  */
 892 $wgParser = new StubObject( 'wgParser', function () {
 893         return MediaWikiServices::getInstance()->getParser();
 894 } );
 895
 896 /**
 897  * @var Title $wgTitle
 898  */
 899 $wgTitle = null;
 900
 901 // Extension setup functions
 902 // Entries should be added to this variable during the inclusion
 903 // of the extension file. This allows the extension to perform
 904 // any necessary initialisation in the fully initialised environment
 905 foreach ( $wgExtensionFunctions as $func ) {
 906         call_user_func( $func );
 907 }
 908
 909 // If the session user has a 0 id but a valid name, that means we need to
 910 // autocreate it.
 911 if ( !defined( 'MW_NO_SESSION' ) && !$wgCommandLineMode ) {
 912         $sessionUser = MediaWiki\Session\SessionManager::getGlobalSession()->getUser();
 913         if ( $sessionUser->getId() === 0 && User::isValidUserName( $sessionUser->getName() ) ) {
 914                 $res = MediaWiki\Auth\AuthManager::singleton()->autoCreateUser(
 915                         $sessionUser,
 916                         MediaWiki\Auth\AuthManager::AUTOCREATE_SOURCE_SESSION,
 917                         true
 918                 );
 919                 \MediaWiki\Logger\LoggerFactory::getInstance( 'authevents' )->info( 'Autocreation attempt', [
 920                         'event' => 'autocreate',
 921                         'status' => $res,
 922                 ] );
 923                 unset( $res );
 924         }
 925         unset( $sessionUser );
 926 }
 927
 928 if ( !$wgCommandLineMode ) {
 929         Pingback::schedulePingback();
 930 }
 931
 932 $wgFullyInitialised = true;