Fix use of GenderCache in ApiPageSet::processTitlesArray
[lhc/web/wiklou.git] / includes / api / ApiQueryRevisions.php
1 <?php
2 /**
3 * Copyright © 2006 Yuri Astrakhan "<Firstname><Lastname>@gmail.com"
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
7 * the Free Software Foundation; either version 2 of the License, or
8 * (at your option) any later version.
9 *
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
14 *
15 * You should have received a copy of the GNU General Public License along
16 * with this program; if not, write to the Free Software Foundation, Inc.,
17 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 * http://www.gnu.org/copyleft/gpl.html
19 *
20 * @file
21 */
22
23 use MediaWiki\MediaWikiServices;
24 use MediaWiki\Revision\RevisionRecord;
25 use MediaWiki\Storage\NameTableAccessException;
26
27 /**
28 * A query action to enumerate revisions of a given page, or show top revisions
29 * of multiple pages. Various pieces of information may be shown - flags,
30 * comments, and the actual wiki markup of the rev. In the enumeration mode,
31 * ranges of revisions may be requested and filtered.
32 *
33 * @ingroup API
34 */
35 class ApiQueryRevisions extends ApiQueryRevisionsBase {
36
37 private $token = null;
38
39 public function __construct( ApiQuery $query, $moduleName ) {
40 parent::__construct( $query, $moduleName, 'rv' );
41 }
42
43 private $tokenFunctions;
44
45 /** @deprecated since 1.24 */
46 protected function getTokenFunctions() {
47 // tokenname => function
48 // function prototype is func($pageid, $title, $rev)
49 // should return token or false
50
51 // Don't call the hooks twice
52 if ( isset( $this->tokenFunctions ) ) {
53 return $this->tokenFunctions;
54 }
55
56 // If we're in a mode that breaks the same-origin policy, no tokens can
57 // be obtained
58 if ( $this->lacksSameOriginSecurity() ) {
59 return [];
60 }
61
62 $this->tokenFunctions = [
63 'rollback' => [ self::class, 'getRollbackToken' ]
64 ];
65 Hooks::run( 'APIQueryRevisionsTokens', [ &$this->tokenFunctions ] );
66
67 return $this->tokenFunctions;
68 }
69
70 /**
71 * @deprecated since 1.24
72 * @param int $pageid
73 * @param Title $title
74 * @param Revision $rev
75 * @return bool|string
76 */
77 public static function getRollbackToken( $pageid, $title, $rev ) {
78 global $wgUser;
79 if ( !MediaWikiServices::getInstance()->getPermissionManager()
80 ->userHasRight( $wgUser, 'rollback' ) ) {
81 return false;
82 }
83
84 return $wgUser->getEditToken( 'rollback' );
85 }
86
87 protected function run( ApiPageSet $resultPageSet = null ) {
88 global $wgActorTableSchemaMigrationStage;
89
90 $params = $this->extractRequestParams( false );
91 $revisionStore = MediaWikiServices::getInstance()->getRevisionStore();
92
93 // If any of those parameters are used, work in 'enumeration' mode.
94 // Enum mode can only be used when exactly one page is provided.
95 // Enumerating revisions on multiple pages make it extremely
96 // difficult to manage continuations and require additional SQL indexes
97 $enumRevMode = ( $params['user'] !== null || $params['excludeuser'] !== null ||
98 $params['limit'] !== null || $params['startid'] !== null ||
99 $params['endid'] !== null || $params['dir'] === 'newer' ||
100 $params['start'] !== null || $params['end'] !== null );
101
102 $pageSet = $this->getPageSet();
103 $pageCount = $pageSet->getGoodTitleCount();
104 $revCount = $pageSet->getRevisionCount();
105
106 // Optimization -- nothing to do
107 if ( $revCount === 0 && $pageCount === 0 ) {
108 // Nothing to do
109 return;
110 }
111 if ( $revCount > 0 && count( $pageSet->getLiveRevisionIDs() ) === 0 ) {
112 // We're in revisions mode but all given revisions are deleted
113 return;
114 }
115
116 if ( $revCount > 0 && $enumRevMode ) {
117 $this->dieWithError(
118 [ 'apierror-revisions-norevids', $this->getModulePrefix() ], 'invalidparammix'
119 );
120 }
121
122 if ( $pageCount > 1 && $enumRevMode ) {
123 $this->dieWithError(
124 [ 'apierror-revisions-singlepage', $this->getModulePrefix() ], 'invalidparammix'
125 );
126 }
127
128 // In non-enum mode, rvlimit can't be directly used. Use the maximum
129 // allowed value.
130 if ( !$enumRevMode ) {
131 $this->setParsedLimit = false;
132 $params['limit'] = 'max';
133 }
134
135 $db = $this->getDB();
136
137 $idField = 'rev_id';
138 $tsField = 'rev_timestamp';
139 $pageField = 'rev_page';
140 if ( $params['user'] !== null &&
141 ( $wgActorTableSchemaMigrationStage & SCHEMA_COMPAT_READ_NEW )
142 ) {
143 // We're going to want to use the page_actor_timestamp index (on revision_actor_temp)
144 // so use that table's denormalized fields.
145 $idField = 'revactor_rev';
146 $tsField = 'revactor_timestamp';
147 $pageField = 'revactor_page';
148 }
149
150 if ( $resultPageSet === null ) {
151 $this->parseParameters( $params );
152 $this->token = $params['token'];
153 $opts = [];
154 if ( $this->token !== null || $pageCount > 0 ) {
155 $opts[] = 'page';
156 }
157 if ( $this->fld_user ) {
158 $opts[] = 'user';
159 }
160 $revQuery = $revisionStore->getQueryInfo( $opts );
161
162 if ( $idField !== 'rev_id' ) {
163 $aliasFields = [ 'rev_id' => $idField, 'rev_timestamp' => $tsField, 'rev_page' => $pageField ];
164 $revQuery['fields'] = array_merge(
165 $aliasFields,
166 array_diff( $revQuery['fields'], array_keys( $aliasFields ) )
167 );
168 }
169
170 $this->addTables( $revQuery['tables'] );
171 $this->addFields( $revQuery['fields'] );
172 $this->addJoinConds( $revQuery['joins'] );
173 } else {
174 $this->limit = $this->getParameter( 'limit' ) ?: 10;
175 // Always join 'page' so orphaned revisions are filtered out
176 $this->addTables( [ 'revision', 'page' ] );
177 $this->addJoinConds(
178 [ 'page' => [ 'JOIN', [ 'page_id = rev_page' ] ] ]
179 );
180 $this->addFields( [
181 'rev_id' => $idField, 'rev_timestamp' => $tsField, 'rev_page' => $pageField
182 ] );
183 }
184
185 if ( $this->fld_tags ) {
186 $this->addFields( [ 'ts_tags' => ChangeTags::makeTagSummarySubquery( 'revision' ) ] );
187 }
188
189 if ( $params['tag'] !== null ) {
190 $this->addTables( 'change_tag' );
191 $this->addJoinConds(
192 [ 'change_tag' => [ 'JOIN', [ 'rev_id=ct_rev_id' ] ] ]
193 );
194 $changeTagDefStore = MediaWikiServices::getInstance()->getChangeTagDefStore();
195 try {
196 $this->addWhereFld( 'ct_tag_id', $changeTagDefStore->getId( $params['tag'] ) );
197 } catch ( NameTableAccessException $exception ) {
198 // Return nothing.
199 $this->addWhere( '1=0' );
200 }
201 }
202
203 if ( $resultPageSet === null && $this->fetchContent ) {
204 // For each page we will request, the user must have read rights for that page
205 $status = Status::newGood();
206 $user = $this->getUser();
207
208 /** @var Title $title */
209 foreach ( $pageSet->getGoodTitles() as $title ) {
210 if ( !$this->getPermissionManager()->userCan( 'read', $user, $title ) ) {
211 $status->fatal( ApiMessage::create(
212 [ 'apierror-cannotviewtitle', wfEscapeWikiText( $title->getPrefixedText() ) ],
213 'accessdenied'
214 ) );
215 }
216 }
217 if ( !$status->isGood() ) {
218 $this->dieStatus( $status );
219 }
220 }
221
222 if ( $enumRevMode ) {
223 // Indexes targeted:
224 // page_timestamp if we don't have rvuser
225 // page_actor_timestamp (on revision_actor_temp) if we have rvuser in READ_NEW mode
226 // page_user_timestamp if we have a logged-in rvuser
227 // page_timestamp or usertext_timestamp if we have an IP rvuser
228
229 // This is mostly to prevent parameter errors (and optimize SQL?)
230 $this->requireMaxOneParameter( $params, 'startid', 'start' );
231 $this->requireMaxOneParameter( $params, 'endid', 'end' );
232 $this->requireMaxOneParameter( $params, 'user', 'excludeuser' );
233
234 if ( $params['continue'] !== null ) {
235 $cont = explode( '|', $params['continue'] );
236 $this->dieContinueUsageIf( count( $cont ) != 2 );
237 $op = ( $params['dir'] === 'newer' ? '>' : '<' );
238 $continueTimestamp = $db->addQuotes( $db->timestamp( $cont[0] ) );
239 $continueId = (int)$cont[1];
240 $this->dieContinueUsageIf( $continueId != $cont[1] );
241 $this->addWhere( "$tsField $op $continueTimestamp OR " .
242 "($tsField = $continueTimestamp AND " .
243 "$idField $op= $continueId)"
244 );
245 }
246
247 // Convert startid/endid to timestamps (T163532)
248 $revids = [];
249 if ( $params['startid'] !== null ) {
250 $revids[] = (int)$params['startid'];
251 }
252 if ( $params['endid'] !== null ) {
253 $revids[] = (int)$params['endid'];
254 }
255 if ( $revids ) {
256 $db = $this->getDB();
257 $sql = $db->unionQueries( [
258 $db->selectSQLText(
259 'revision',
260 [ 'id' => 'rev_id', 'ts' => 'rev_timestamp' ],
261 [ 'rev_id' => $revids ],
262 __METHOD__
263 ),
264 $db->selectSQLText(
265 'archive',
266 [ 'id' => 'ar_rev_id', 'ts' => 'ar_timestamp' ],
267 [ 'ar_rev_id' => $revids ],
268 __METHOD__
269 ),
270 ], $db::UNION_DISTINCT );
271 $res = $db->query( $sql, __METHOD__ );
272 foreach ( $res as $row ) {
273 if ( (int)$row->id === (int)$params['startid'] ) {
274 $params['start'] = $row->ts;
275 }
276 if ( (int)$row->id === (int)$params['endid'] ) {
277 $params['end'] = $row->ts;
278 }
279 }
280 if ( $params['startid'] !== null && $params['start'] === null ) {
281 $p = $this->encodeParamName( 'startid' );
282 $this->dieWithError( [ 'apierror-revisions-badid', $p ], "badid_$p" );
283 }
284 if ( $params['endid'] !== null && $params['end'] === null ) {
285 $p = $this->encodeParamName( 'endid' );
286 $this->dieWithError( [ 'apierror-revisions-badid', $p ], "badid_$p" );
287 }
288
289 if ( $params['start'] !== null ) {
290 $op = ( $params['dir'] === 'newer' ? '>' : '<' );
291 $ts = $db->addQuotes( $db->timestampOrNull( $params['start'] ) );
292 if ( $params['startid'] !== null ) {
293 $this->addWhere( "$tsField $op $ts OR "
294 . "$tsField = $ts AND $idField $op= " . (int)$params['startid'] );
295 } else {
296 $this->addWhere( "$tsField $op= $ts" );
297 }
298 }
299 if ( $params['end'] !== null ) {
300 $op = ( $params['dir'] === 'newer' ? '<' : '>' ); // Yes, opposite of the above
301 $ts = $db->addQuotes( $db->timestampOrNull( $params['end'] ) );
302 if ( $params['endid'] !== null ) {
303 $this->addWhere( "$tsField $op $ts OR "
304 . "$tsField = $ts AND $idField $op= " . (int)$params['endid'] );
305 } else {
306 $this->addWhere( "$tsField $op= $ts" );
307 }
308 }
309 } else {
310 $this->addTimestampWhereRange( $tsField, $params['dir'],
311 $params['start'], $params['end'] );
312 }
313
314 $sort = ( $params['dir'] === 'newer' ? '' : 'DESC' );
315 $this->addOption( 'ORDER BY', [ "rev_timestamp $sort", "rev_id $sort" ] );
316
317 // There is only one ID, use it
318 $ids = array_keys( $pageSet->getGoodTitles() );
319 $this->addWhereFld( $pageField, reset( $ids ) );
320
321 if ( $params['user'] !== null ) {
322 $actorQuery = ActorMigration::newMigration()
323 ->getWhere( $db, 'rev_user', User::newFromName( $params['user'], false ) );
324 $this->addTables( $actorQuery['tables'] );
325 $this->addJoinConds( $actorQuery['joins'] );
326 $this->addWhere( $actorQuery['conds'] );
327 } elseif ( $params['excludeuser'] !== null ) {
328 $actorQuery = ActorMigration::newMigration()
329 ->getWhere( $db, 'rev_user', User::newFromName( $params['excludeuser'], false ) );
330 $this->addTables( $actorQuery['tables'] );
331 $this->addJoinConds( $actorQuery['joins'] );
332 $this->addWhere( 'NOT(' . $actorQuery['conds'] . ')' );
333 }
334 if ( $params['user'] !== null || $params['excludeuser'] !== null ) {
335 // Paranoia: avoid brute force searches (T19342)
336 if ( !$this->getPermissionManager()->userHasRight( $this->getUser(), 'deletedhistory' ) ) {
337 $bitmask = RevisionRecord::DELETED_USER;
338 } elseif ( !$this->getPermissionManager()
339 ->userHasAnyRight( $this->getUser(), 'suppressrevision', 'viewsuppressed' )
340 ) {
341 $bitmask = RevisionRecord::DELETED_USER | RevisionRecord::DELETED_RESTRICTED;
342 } else {
343 $bitmask = 0;
344 }
345 if ( $bitmask ) {
346 $this->addWhere( $db->bitAnd( 'rev_deleted', $bitmask ) . " != $bitmask" );
347 }
348 }
349 } elseif ( $revCount > 0 ) {
350 // Always targets the PRIMARY index
351
352 $revs = $pageSet->getLiveRevisionIDs();
353
354 // Get all revision IDs
355 $this->addWhereFld( 'rev_id', array_keys( $revs ) );
356
357 if ( $params['continue'] !== null ) {
358 $this->addWhere( 'rev_id >= ' . (int)$params['continue'] );
359 }
360 $this->addOption( 'ORDER BY', 'rev_id' );
361 } elseif ( $pageCount > 0 ) {
362 // Always targets the rev_page_id index
363
364 $titles = $pageSet->getGoodTitles();
365
366 // When working in multi-page non-enumeration mode,
367 // limit to the latest revision only
368 $this->addWhere( 'page_latest=rev_id' );
369
370 // Get all page IDs
371 $this->addWhereFld( 'page_id', array_keys( $titles ) );
372 // Every time someone relies on equality propagation, god kills a kitten :)
373 $this->addWhereFld( 'rev_page', array_keys( $titles ) );
374
375 if ( $params['continue'] !== null ) {
376 $cont = explode( '|', $params['continue'] );
377 $this->dieContinueUsageIf( count( $cont ) != 2 );
378 $pageid = (int)$cont[0];
379 $revid = (int)$cont[1];
380 $this->addWhere(
381 "rev_page > $pageid OR " .
382 "(rev_page = $pageid AND " .
383 "rev_id >= $revid)"
384 );
385 }
386 $this->addOption( 'ORDER BY', [
387 'rev_page',
388 'rev_id'
389 ] );
390 } else {
391 ApiBase::dieDebug( __METHOD__, 'param validation?' );
392 }
393
394 $this->addOption( 'LIMIT', $this->limit + 1 );
395
396 // T224017: `rev_timestamp` is never the correct index to use for this module, but
397 // MariaDB (10.1.37-39) sometimes insists on trying to use it anyway. Tell it not to.
398 $this->addOption( 'IGNORE INDEX', [ 'revision' => 'rev_timestamp' ] );
399
400 $count = 0;
401 $generated = [];
402 $hookData = [];
403 $res = $this->select( __METHOD__, [], $hookData );
404
405 foreach ( $res as $row ) {
406 if ( ++$count > $this->limit ) {
407 // We've reached the one extra which shows that there are
408 // additional pages to be had. Stop here...
409 if ( $enumRevMode ) {
410 $this->setContinueEnumParameter( 'continue',
411 $row->rev_timestamp . '|' . (int)$row->rev_id );
412 } elseif ( $revCount > 0 ) {
413 $this->setContinueEnumParameter( 'continue', (int)$row->rev_id );
414 } else {
415 $this->setContinueEnumParameter( 'continue', (int)$row->rev_page .
416 '|' . (int)$row->rev_id );
417 }
418 break;
419 }
420
421 if ( $resultPageSet !== null ) {
422 $generated[] = $row->rev_id;
423 } else {
424 $revision = $revisionStore->newRevisionFromRow( $row );
425 $rev = $this->extractRevisionInfo( $revision, $row );
426
427 if ( $this->token !== null ) {
428 $title = Title::newFromLinkTarget( $revision->getPageAsLinkTarget() );
429 $revisionCompat = new Revision( $revision );
430 $tokenFunctions = $this->getTokenFunctions();
431 foreach ( $this->token as $t ) {
432 $val = call_user_func( $tokenFunctions[$t], $title->getArticleID(), $title, $revisionCompat );
433 if ( $val === false ) {
434 $this->addWarning( [ 'apiwarn-tokennotallowed', $t ] );
435 } else {
436 $rev[$t . 'token'] = $val;
437 }
438 }
439 }
440
441 $fit = $this->processRow( $row, $rev, $hookData ) &&
442 $this->addPageSubItem( $row->rev_page, $rev, 'rev' );
443 if ( !$fit ) {
444 if ( $enumRevMode ) {
445 $this->setContinueEnumParameter( 'continue',
446 $row->rev_timestamp . '|' . (int)$row->rev_id );
447 } elseif ( $revCount > 0 ) {
448 $this->setContinueEnumParameter( 'continue', (int)$row->rev_id );
449 } else {
450 $this->setContinueEnumParameter( 'continue', (int)$row->rev_page .
451 '|' . (int)$row->rev_id );
452 }
453 break;
454 }
455 }
456 }
457
458 if ( $resultPageSet !== null ) {
459 $resultPageSet->populateFromRevisionIDs( $generated );
460 }
461 }
462
463 public function getCacheMode( $params ) {
464 if ( isset( $params['token'] ) ) {
465 return 'private';
466 }
467 return parent::getCacheMode( $params );
468 }
469
470 public function getAllowedParams() {
471 $ret = parent::getAllowedParams() + [
472 'startid' => [
473 ApiBase::PARAM_TYPE => 'integer',
474 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
475 ],
476 'endid' => [
477 ApiBase::PARAM_TYPE => 'integer',
478 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
479 ],
480 'start' => [
481 ApiBase::PARAM_TYPE => 'timestamp',
482 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
483 ],
484 'end' => [
485 ApiBase::PARAM_TYPE => 'timestamp',
486 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
487 ],
488 'dir' => [
489 ApiBase::PARAM_DFLT => 'older',
490 ApiBase::PARAM_TYPE => [
491 'newer',
492 'older'
493 ],
494 ApiBase::PARAM_HELP_MSG => 'api-help-param-direction',
495 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
496 ],
497 'user' => [
498 ApiBase::PARAM_TYPE => 'user',
499 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
500 ],
501 'excludeuser' => [
502 ApiBase::PARAM_TYPE => 'user',
503 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
504 ],
505 'tag' => null,
506 'token' => [
507 ApiBase::PARAM_DEPRECATED => true,
508 ApiBase::PARAM_TYPE => array_keys( $this->getTokenFunctions() ),
509 ApiBase::PARAM_ISMULTI => true
510 ],
511 'continue' => [
512 ApiBase::PARAM_HELP_MSG => 'api-help-param-continue',
513 ],
514 ];
515
516 $ret['limit'][ApiBase::PARAM_HELP_MSG_INFO] = [ [ 'singlepageonly' ] ];
517
518 return $ret;
519 }
520
521 protected function getExamplesMessages() {
522 return [
523 'action=query&prop=revisions&titles=API|Main%20Page&' .
524 'rvslots=*&rvprop=timestamp|user|comment|content'
525 => 'apihelp-query+revisions-example-content',
526 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
527 'rvprop=timestamp|user|comment'
528 => 'apihelp-query+revisions-example-last5',
529 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
530 'rvprop=timestamp|user|comment&rvdir=newer'
531 => 'apihelp-query+revisions-example-first5',
532 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
533 'rvprop=timestamp|user|comment&rvdir=newer&rvstart=2006-05-01T00:00:00Z'
534 => 'apihelp-query+revisions-example-first5-after',
535 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
536 'rvprop=timestamp|user|comment&rvexcludeuser=127.0.0.1'
537 => 'apihelp-query+revisions-example-first5-not-localhost',
538 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
539 'rvprop=timestamp|user|comment&rvuser=MediaWiki%20default'
540 => 'apihelp-query+revisions-example-first5-user',
541 ];
542 }
543
544 public function getHelpUrls() {
545 return 'https://www.mediawiki.org/wiki/Special:MyLanguage/API:Revisions';
546 }
547 }