includes/api/ApiQueryBlocks.php

   1 <?php
   2 /**
   3  *
   4  *
   5  * Created on Sep 10, 2007
   6  *
   7  * Copyright © 2007 Roan Kattouw "<Firstname>.<Lastname>@gmail.com"
   8  *
   9  * This program is free software; you can redistribute it and/or modify
  10  * it under the terms of the GNU General Public License as published by
  11  * the Free Software Foundation; either version 2 of the License, or
  12  * (at your option) any later version.
  13  *
  14  * This program is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  17  * GNU General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU General Public License along
  20  * with this program; if not, write to the Free Software Foundation, Inc.,
  21  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  22  * http://www.gnu.org/copyleft/gpl.html
  23  *
  24  * @file
  25  */
  26
  27 /**
  28  * Query module to enumerate all user blocks
  29  *
  30  * @ingroup API
  31  */
  32 class ApiQueryBlocks extends ApiQueryBase {
  33
  34         public function __construct( ApiQuery $query, $moduleName ) {
  35                 parent::__construct( $query, $moduleName, 'bk' );
  36         }
  37
  38         public function execute() {
  39                 global $wgContLang;
  40
  41                 $db = $this->getDB();
  42                 $params = $this->extractRequestParams();
  43                 $this->requireMaxOneParameter( $params, 'users', 'ip' );
  44
  45                 $prop = array_flip( $params['prop'] );
  46                 $fld_id = isset( $prop['id'] );
  47                 $fld_user = isset( $prop['user'] );
  48                 $fld_userid = isset( $prop['userid'] );
  49                 $fld_by = isset( $prop['by'] );
  50                 $fld_byid = isset( $prop['byid'] );
  51                 $fld_timestamp = isset( $prop['timestamp'] );
  52                 $fld_expiry = isset( $prop['expiry'] );
  53                 $fld_reason = isset( $prop['reason'] );
  54                 $fld_range = isset( $prop['range'] );
  55                 $fld_flags = isset( $prop['flags'] );
  56
  57                 $result = $this->getResult();
  58
  59                 $this->addTables( 'ipblocks' );
  60                 $this->addFields( [ 'ipb_auto', 'ipb_id', 'ipb_timestamp' ] );
  61
  62                 $this->addFieldsIf( [ 'ipb_address', 'ipb_user' ], $fld_user || $fld_userid );
  63                 $this->addFieldsIf( 'ipb_by_text', $fld_by );
  64                 $this->addFieldsIf( 'ipb_by', $fld_byid );
  65                 $this->addFieldsIf( 'ipb_expiry', $fld_expiry );
  66                 $this->addFieldsIf( 'ipb_reason', $fld_reason );
  67                 $this->addFieldsIf( [ 'ipb_range_start', 'ipb_range_end' ], $fld_range );
  68                 $this->addFieldsIf( [ 'ipb_anon_only', 'ipb_create_account', 'ipb_enable_autoblock',
  69                         'ipb_block_email', 'ipb_deleted', 'ipb_allow_usertalk' ],
  70                         $fld_flags );
  71
  72                 $this->addOption( 'LIMIT', $params['limit'] + 1 );
  73                 $this->addTimestampWhereRange(
  74                         'ipb_timestamp',
  75                         $params['dir'],
  76                         $params['start'],
  77                         $params['end']
  78                 );
  79                 // Include in ORDER BY for uniqueness
  80                 $this->addWhereRange( 'ipb_id', $params['dir'], null, null );
  81
  82                 if ( !is_null( $params['continue'] ) ) {
  83                         $cont = explode( '|', $params['continue'] );
  84                         $this->dieContinueUsageIf( count( $cont ) != 2 );
  85                         $op = ( $params['dir'] == 'newer' ? '>' : '<' );
  86                         $continueTimestamp = $db->addQuotes( $db->timestamp( $cont[0] ) );
  87                         $continueId = (int)$cont[1];
  88                         $this->dieContinueUsageIf( $continueId != $cont[1] );
  89                         $this->addWhere( "ipb_timestamp $op $continueTimestamp OR " .
  90                                 "(ipb_timestamp = $continueTimestamp AND " .
  91                                 "ipb_id $op= $continueId)"
  92                         );
  93                 }
  94
  95                 if ( isset( $params['ids'] ) ) {
  96                         $this->addWhereFld( 'ipb_id', $params['ids'] );
  97                 }
  98                 if ( isset( $params['users'] ) ) {
  99                         $usernames = [];
 100                         foreach ( (array)$params['users'] as $u ) {
 101                                 $usernames[] = $this->prepareUsername( $u );
 102                         }
 103                         $this->addWhereFld( 'ipb_address', $usernames );
 104                         $this->addWhereFld( 'ipb_auto', 0 );
 105                 }
 106                 if ( isset( $params['ip'] ) ) {
 107                         $blockCIDRLimit = $this->getConfig()->get( 'BlockCIDRLimit' );
 108                         if ( IP::isIPv4( $params['ip'] ) ) {
 109                                 $type = 'IPv4';
 110                                 $cidrLimit = $blockCIDRLimit['IPv4'];
 111                                 $prefixLen = 0;
 112                         } elseif ( IP::isIPv6( $params['ip'] ) ) {
 113                                 $type = 'IPv6';
 114                                 $cidrLimit = $blockCIDRLimit['IPv6'];
 115                                 $prefixLen = 3; // IP::toHex output is prefixed with "v6-"
 116                         } else {
 117                                 $this->dieWithError( 'apierror-badip', 'param_ip' );
 118                         }
 119
 120                         # Check range validity, if it's a CIDR
 121                         list( $ip, $range ) = IP::parseCIDR( $params['ip'] );
 122                         if ( $ip !== false && $range !== false && $range < $cidrLimit ) {
 123                                 $this->dieWithError( [ 'apierror-cidrtoobroad', $type, $cidrLimit ] );
 124                         }
 125
 126                         # Let IP::parseRange handle calculating $upper, instead of duplicating the logic here.
 127                         list( $lower, $upper ) = IP::parseRange( $params['ip'] );
 128
 129                         # Extract the common prefix to any rangeblock affecting this IP/CIDR
 130                         $prefix = substr( $lower, 0, $prefixLen + floor( $cidrLimit / 4 ) );
 131
 132                         # Fairly hard to make a malicious SQL statement out of hex characters,
 133                         # but it is good practice to add quotes
 134                         $lower = $db->addQuotes( $lower );
 135                         $upper = $db->addQuotes( $upper );
 136
 137                         $this->addWhere( [
 138                                 'ipb_range_start' . $db->buildLike( $prefix, $db->anyString() ),
 139                                 'ipb_range_start <= ' . $lower,
 140                                 'ipb_range_end >= ' . $upper,
 141                                 'ipb_auto' => 0
 142                         ] );
 143                 }
 144
 145                 if ( !is_null( $params['show'] ) ) {
 146                         $show = array_flip( $params['show'] );
 147
 148                         /* Check for conflicting parameters. */
 149                         if ( ( isset( $show['account'] ) && isset( $show['!account'] ) )
 150                                 || ( isset( $show['ip'] ) && isset( $show['!ip'] ) )
 151                                 || ( isset( $show['range'] ) && isset( $show['!range'] ) )
 152                                 || ( isset( $show['temp'] ) && isset( $show['!temp'] ) )
 153                         ) {
 154                                 $this->dieWithError( 'apierror-show' );
 155                         }
 156
 157                         $this->addWhereIf( 'ipb_user = 0', isset( $show['!account'] ) );
 158                         $this->addWhereIf( 'ipb_user != 0', isset( $show['account'] ) );
 159                         $this->addWhereIf( 'ipb_user != 0 OR ipb_range_end > ipb_range_start', isset( $show['!ip'] ) );
 160                         $this->addWhereIf( 'ipb_user = 0 AND ipb_range_end = ipb_range_start', isset( $show['ip'] ) );
 161                         $this->addWhereIf( 'ipb_expiry = ' .
 162                                 $db->addQuotes( $db->getInfinity() ), isset( $show['!temp'] ) );
 163                         $this->addWhereIf( 'ipb_expiry != ' .
 164                                 $db->addQuotes( $db->getInfinity() ), isset( $show['temp'] ) );
 165                         $this->addWhereIf( 'ipb_range_end = ipb_range_start', isset( $show['!range'] ) );
 166                         $this->addWhereIf( 'ipb_range_end > ipb_range_start', isset( $show['range'] ) );
 167                 }
 168
 169                 if ( !$this->getUser()->isAllowed( 'hideuser' ) ) {
 170                         $this->addWhereFld( 'ipb_deleted', 0 );
 171                 }
 172
 173                 # Filter out expired rows
 174                 $this->addWhere( 'ipb_expiry > ' . $db->addQuotes( $db->timestamp() ) );
 175
 176                 $res = $this->select( __METHOD__ );
 177
 178                 $count = 0;
 179                 foreach ( $res as $row ) {
 180                         if ( ++$count > $params['limit'] ) {
 181                                 // We've had enough
 182                                 $this->setContinueEnumParameter( 'continue', "$row->ipb_timestamp|$row->ipb_id" );
 183                                 break;
 184                         }
 185                         $block = [
 186                                 ApiResult::META_TYPE => 'assoc',
 187                         ];
 188                         if ( $fld_id ) {
 189                                 $block['id'] = (int)$row->ipb_id;
 190                         }
 191                         if ( $fld_user && !$row->ipb_auto ) {
 192                                 $block['user'] = $row->ipb_address;
 193                         }
 194                         if ( $fld_userid && !$row->ipb_auto ) {
 195                                 $block['userid'] = (int)$row->ipb_user;
 196                         }
 197                         if ( $fld_by ) {
 198                                 $block['by'] = $row->ipb_by_text;
 199                         }
 200                         if ( $fld_byid ) {
 201                                 $block['byid'] = (int)$row->ipb_by;
 202                         }
 203                         if ( $fld_timestamp ) {
 204                                 $block['timestamp'] = wfTimestamp( TS_ISO_8601, $row->ipb_timestamp );
 205                         }
 206                         if ( $fld_expiry ) {
 207                                 $block['expiry'] = $wgContLang->formatExpiry( $row->ipb_expiry, TS_ISO_8601 );
 208                         }
 209                         if ( $fld_reason ) {
 210                                 $block['reason'] = $row->ipb_reason;
 211                         }
 212                         if ( $fld_range && !$row->ipb_auto ) {
 213                                 $block['rangestart'] = IP::formatHex( $row->ipb_range_start );
 214                                 $block['rangeend'] = IP::formatHex( $row->ipb_range_end );
 215                         }
 216                         if ( $fld_flags ) {
 217                                 // For clarity, these flags use the same names as their action=block counterparts
 218                                 $block['automatic'] = (bool)$row->ipb_auto;
 219                                 $block['anononly'] = (bool)$row->ipb_anon_only;
 220                                 $block['nocreate'] = (bool)$row->ipb_create_account;
 221                                 $block['autoblock'] = (bool)$row->ipb_enable_autoblock;
 222                                 $block['noemail'] = (bool)$row->ipb_block_email;
 223                                 $block['hidden'] = (bool)$row->ipb_deleted;
 224                                 $block['allowusertalk'] = (bool)$row->ipb_allow_usertalk;
 225                         }
 226                         $fit = $result->addValue( [ 'query', $this->getModuleName() ], null, $block );
 227                         if ( !$fit ) {
 228                                 $this->setContinueEnumParameter( 'continue', "$row->ipb_timestamp|$row->ipb_id" );
 229                                 break;
 230                         }
 231                 }
 232                 $result->addIndexedTagName( [ 'query', $this->getModuleName() ], 'block' );
 233         }
 234
 235         protected function prepareUsername( $user ) {
 236                 if ( !$user ) {
 237                         $encParamName = $this->encodeParamName( 'users' );
 238                         $this->dieWithError( [ 'apierror-baduser', $encParamName, wfEscapeWikiText( $user ) ],
 239                                 "baduser_{$encParamName}"
 240                         );
 241                 }
 242                 $name = User::isIP( $user )
 243                         ? $user
 244                         : User::getCanonicalName( $user, 'valid' );
 245                 if ( $name === false ) {
 246                         $encParamName = $this->encodeParamName( 'users' );
 247                         $this->dieWithError( [ 'apierror-baduser', $encParamName, wfEscapeWikiText( $user ) ],
 248                                 "baduser_{$encParamName}"
 249                         );
 250                 }
 251                 return $name;
 252         }
 253
 254         public function getAllowedParams() {
 255                 $blockCIDRLimit = $this->getConfig()->get( 'BlockCIDRLimit' );
 256
 257                 return [
 258                         'start' => [
 259                                 ApiBase::PARAM_TYPE => 'timestamp'
 260                         ],
 261                         'end' => [
 262                                 ApiBase::PARAM_TYPE => 'timestamp',
 263                         ],
 264                         'dir' => [
 265                                 ApiBase::PARAM_TYPE => [
 266                                         'newer',
 267                                         'older'
 268                                 ],
 269                                 ApiBase::PARAM_DFLT => 'older',
 270                                 ApiBase::PARAM_HELP_MSG => 'api-help-param-direction',
 271                         ],
 272                         'ids' => [
 273                                 ApiBase::PARAM_TYPE => 'integer',
 274                                 ApiBase::PARAM_ISMULTI => true
 275                         ],
 276                         'users' => [
 277                                 ApiBase::PARAM_TYPE => 'user',
 278                                 ApiBase::PARAM_ISMULTI => true
 279                         ],
 280                         'ip' => [
 281                                 ApiBase::PARAM_HELP_MSG => [
 282                                         'apihelp-query+blocks-param-ip',
 283                                         $blockCIDRLimit['IPv4'],
 284                                         $blockCIDRLimit['IPv6'],
 285                                 ],
 286                         ],
 287                         'limit' => [
 288                                 ApiBase::PARAM_DFLT => 10,
 289                                 ApiBase::PARAM_TYPE => 'limit',
 290                                 ApiBase::PARAM_MIN => 1,
 291                                 ApiBase::PARAM_MAX => ApiBase::LIMIT_BIG1,
 292                                 ApiBase::PARAM_MAX2 => ApiBase::LIMIT_BIG2
 293                         ],
 294                         'prop' => [
 295                                 ApiBase::PARAM_DFLT => 'id|user|by|timestamp|expiry|reason|flags',
 296                                 ApiBase::PARAM_TYPE => [
 297                                         'id',
 298                                         'user',
 299                                         'userid',
 300                                         'by',
 301                                         'byid',
 302                                         'timestamp',
 303                                         'expiry',
 304                                         'reason',
 305                                         'range',
 306                                         'flags'
 307                                 ],
 308                                 ApiBase::PARAM_ISMULTI => true,
 309                                 ApiBase::PARAM_HELP_MSG_PER_VALUE => [],
 310                         ],
 311                         'show' => [
 312                                 ApiBase::PARAM_TYPE => [
 313                                         'account',
 314                                         '!account',
 315                                         'temp',
 316                                         '!temp',
 317                                         'ip',
 318                                         '!ip',
 319                                         'range',
 320                                         '!range',
 321                                 ],
 322                                 ApiBase::PARAM_ISMULTI => true
 323                         ],
 324                         'continue' => [
 325                                 ApiBase::PARAM_HELP_MSG => 'api-help-param-continue',
 326                         ],
 327                 ];
 328         }
 329
 330         protected function getExamplesMessages() {
 331                 return [
 332                         'action=query&list=blocks'
 333                                 => 'apihelp-query+blocks-example-simple',
 334                         'action=query&list=blocks&bkusers=Alice|Bob'
 335                                 => 'apihelp-query+blocks-example-users',
 336                 ];
 337         }
 338
 339         public function getHelpUrls() {
 340                 return 'https://www.mediawiki.org/wiki/API:Blocks';
 341         }
 342 }