includes/specials/SpecialUndelete.php

   1 <?php
   2 /**
   3  * Implements Special:Undelete
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  *
  10  * This program is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13  * GNU General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along
  16  * with this program; if not, write to the Free Software Foundation, Inc.,
  17  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  18  * http://www.gnu.org/copyleft/gpl.html
  19  *
  20  * @file
  21  * @ingroup SpecialPage
  22  */
  23
  24 use Wikimedia\Rdbms\ResultWrapper;
  25
  26 /**
  27  * Special page allowing users with the appropriate permissions to view
  28  * and restore deleted content.
  29  *
  30  * @ingroup SpecialPage
  31  */
  32 class SpecialUndelete extends SpecialPage {
  33         private $mAction;
  34         private $mTarget;
  35         private $mTimestamp;
  36         private $mRestore;
  37         private $mRevdel;
  38         private $mInvert;
  39         private $mFilename;
  40         private $mTargetTimestamp;
  41         private $mAllowed;
  42         private $mCanView;
  43         private $mComment;
  44         private $mToken;
  45
  46         /** @var Title */
  47         private $mTargetObj;
  48         /**
  49          * @var string Search prefix
  50          */
  51         private $mSearchPrefix;
  52
  53         function __construct() {
  54                 parent::__construct( 'Undelete', 'deletedhistory' );
  55         }
  56
  57         public function doesWrites() {
  58                 return true;
  59         }
  60
  61         function loadRequest( $par ) {
  62                 $request = $this->getRequest();
  63                 $user = $this->getUser();
  64
  65                 $this->mAction = $request->getVal( 'action' );
  66                 if ( $par !== null && $par !== '' ) {
  67                         $this->mTarget = $par;
  68                 } else {
  69                         $this->mTarget = $request->getVal( 'target' );
  70                 }
  71
  72                 $this->mTargetObj = null;
  73
  74                 if ( $this->mTarget !== null && $this->mTarget !== '' ) {
  75                         $this->mTargetObj = Title::newFromText( $this->mTarget );
  76                 }
  77
  78                 $this->mSearchPrefix = $request->getText( 'prefix' );
  79                 $time = $request->getVal( 'timestamp' );
  80                 $this->mTimestamp = $time ? wfTimestamp( TS_MW, $time ) : '';
  81                 $this->mFilename = $request->getVal( 'file' );
  82
  83                 $posted = $request->wasPosted() &&
  84                         $user->matchEditToken( $request->getVal( 'wpEditToken' ) );
  85                 $this->mRestore = $request->getCheck( 'restore' ) && $posted;
  86                 $this->mRevdel = $request->getCheck( 'revdel' ) && $posted;
  87                 $this->mInvert = $request->getCheck( 'invert' ) && $posted;
  88                 $this->mPreview = $request->getCheck( 'preview' ) && $posted;
  89                 $this->mDiff = $request->getCheck( 'diff' );
  90                 $this->mDiffOnly = $request->getBool( 'diffonly', $this->getUser()->getOption( 'diffonly' ) );
  91                 $this->mComment = $request->getText( 'wpComment' );
  92                 $this->mUnsuppress = $request->getVal( 'wpUnsuppress' ) && $user->isAllowed( 'suppressrevision' );
  93                 $this->mToken = $request->getVal( 'token' );
  94
  95                 if ( $this->isAllowed( 'undelete' ) && !$user->isBlocked() ) {
  96                         $this->mAllowed = true; // user can restore
  97                         $this->mCanView = true; // user can view content
  98                 } elseif ( $this->isAllowed( 'deletedtext' ) ) {
  99                         $this->mAllowed = false; // user cannot restore
 100                         $this->mCanView = true; // user can view content
 101                         $this->mRestore = false;
 102                 } else { // user can only view the list of revisions
 103                         $this->mAllowed = false;
 104                         $this->mCanView = false;
 105                         $this->mTimestamp = '';
 106                         $this->mRestore = false;
 107                 }
 108
 109                 if ( $this->mRestore || $this->mInvert ) {
 110                         $timestamps = [];
 111                         $this->mFileVersions = [];
 112                         foreach ( $request->getValues() as $key => $val ) {
 113                                 $matches = [];
 114                                 if ( preg_match( '/^ts(\d{14})$/', $key, $matches ) ) {
 115                                         array_push( $timestamps, $matches[1] );
 116                                 }
 117
 118                                 if ( preg_match( '/^fileid(\d+)$/', $key, $matches ) ) {
 119                                         $this->mFileVersions[] = intval( $matches[1] );
 120                                 }
 121                         }
 122                         rsort( $timestamps );
 123                         $this->mTargetTimestamp = $timestamps;
 124                 }
 125         }
 126
 127         /**
 128          * Checks whether a user is allowed the permission for the
 129          * specific title if one is set.
 130          *
 131          * @param string $permission
 132          * @param User $user
 133          * @return bool
 134          */
 135         protected function isAllowed( $permission, User $user = null ) {
 136                 $user = $user ?: $this->getUser();
 137                 if ( $this->mTargetObj !== null ) {
 138                         return $this->mTargetObj->userCan( $permission, $user );
 139                 } else {
 140                         return $user->isAllowed( $permission );
 141                 }
 142         }
 143
 144         function userCanExecute( User $user ) {
 145                 return $this->isAllowed( $this->mRestriction, $user );
 146         }
 147
 148         function execute( $par ) {
 149                 $this->useTransactionalTimeLimit();
 150
 151                 $user = $this->getUser();
 152
 153                 $this->setHeaders();
 154                 $this->outputHeader();
 155
 156                 $this->loadRequest( $par );
 157                 $this->checkPermissions(); // Needs to be after mTargetObj is set
 158
 159                 $out = $this->getOutput();
 160
 161                 if ( is_null( $this->mTargetObj ) ) {
 162                         $out->addWikiMsg( 'undelete-header' );
 163
 164                         # Not all users can just browse every deleted page from the list
 165                         if ( $user->isAllowed( 'browsearchive' ) ) {
 166                                 $this->showSearchForm();
 167                         }
 168
 169                         return;
 170                 }
 171
 172                 $this->addHelpLink( 'Help:Undelete' );
 173                 if ( $this->mAllowed ) {
 174                         $out->setPageTitle( $this->msg( 'undeletepage' ) );
 175                 } else {
 176                         $out->setPageTitle( $this->msg( 'viewdeletedpage' ) );
 177                 }
 178
 179                 $this->getSkin()->setRelevantTitle( $this->mTargetObj );
 180
 181                 if ( $this->mTimestamp !== '' ) {
 182                         $this->showRevision( $this->mTimestamp );
 183                 } elseif ( $this->mFilename !== null && $this->mTargetObj->inNamespace( NS_FILE ) ) {
 184                         $file = new ArchivedFile( $this->mTargetObj, '', $this->mFilename );
 185                         // Check if user is allowed to see this file
 186                         if ( !$file->exists() ) {
 187                                 $out->addWikiMsg( 'filedelete-nofile', $this->mFilename );
 188                         } elseif ( !$file->userCan( File::DELETED_FILE, $user ) ) {
 189                                 if ( $file->isDeleted( File::DELETED_RESTRICTED ) ) {
 190                                         throw new PermissionsError( 'suppressrevision' );
 191                                 } else {
 192                                         throw new PermissionsError( 'deletedtext' );
 193                                 }
 194                         } elseif ( !$user->matchEditToken( $this->mToken, $this->mFilename ) ) {
 195                                 $this->showFileConfirmationForm( $this->mFilename );
 196                         } else {
 197                                 $this->showFile( $this->mFilename );
 198                         }
 199                 } elseif ( $this->mAction === "submit" ) {
 200                         if ( $this->mRestore ) {
 201                                 $this->undelete();
 202                         } elseif ( $this->mRevdel ) {
 203                                 $this->redirectToRevDel();
 204                         }
 205
 206                 } else {
 207                         $this->showHistory();
 208                 }
 209         }
 210
 211         /**
 212          * Convert submitted form data to format expected by RevisionDelete and
 213          * redirect the request
 214          */
 215         private function redirectToRevDel() {
 216                 $archive = new PageArchive( $this->mTargetObj );
 217
 218                 $revisions = [];
 219
 220                 foreach ( $this->getRequest()->getValues() as $key => $val ) {
 221                         $matches = [];
 222                         if ( preg_match( "/^ts(\d{14})$/", $key, $matches ) ) {
 223                                 $revisions[ $archive->getRevision( $matches[1] )->getId() ] = 1;
 224                         }
 225                 }
 226                 $query = [
 227                         "type" => "revision",
 228                         "ids" => $revisions,
 229                         "target" => $this->mTargetObj->getPrefixedText()
 230                 ];
 231                 $url = SpecialPage::getTitleFor( 'Revisiondelete' )->getFullURL( $query );
 232                 $this->getOutput()->redirect( $url );
 233         }
 234
 235         function showSearchForm() {
 236                 $out = $this->getOutput();
 237                 $out->setPageTitle( $this->msg( 'undelete-search-title' ) );
 238                 $fuzzySearch = $this->getRequest()->getVal( 'fuzzy', true );
 239
 240                 $out->enableOOUI();
 241
 242                 $fields[] = new OOUI\ActionFieldLayout(
 243                         new OOUI\TextInputWidget( [
 244                                 'name' => 'prefix',
 245                                 'inputId' => 'prefix',
 246                                 'infusable' => true,
 247                                 'value' => $this->mSearchPrefix,
 248                                 'autofocus' => true,
 249                         ] ),
 250                         new OOUI\ButtonInputWidget( [
 251                                 'label' => $this->msg( 'undelete-search-submit' )->text(),
 252                                 'flags' => [ 'primary', 'progressive' ],
 253                                 'inputId' => 'searchUndelete',
 254                                 'type' => 'submit',
 255                         ] ),
 256                         [
 257                                 'label' => new OOUI\HtmlSnippet(
 258                                         $this->msg(
 259                                                 $fuzzySearch ? 'undelete-search-full' : 'undelete-search-prefix'
 260                                         )->parse()
 261                                 ),
 262                                 'align' => 'left',
 263                         ]
 264                 );
 265
 266                 $fieldset = new OOUI\FieldsetLayout( [
 267                         'label' => $this->msg( 'undelete-search-box' )->text(),
 268                         'items' => $fields,
 269                 ] );
 270
 271                 $form = new OOUI\FormLayout( [
 272                         'method' => 'get',
 273                         'action' => wfScript(),
 274                 ] );
 275
 276                 $form->appendContent(
 277                         $fieldset,
 278                         new OOUI\HtmlSnippet(
 279                                 Html::hidden( 'title', $this->getPageTitle()->getPrefixedDBkey() ) .
 280                                 Html::hidden( 'fuzzy', $fuzzySearch )
 281                         )
 282                 );
 283
 284                 $out->addHTML(
 285                         new OOUI\PanelLayout( [
 286                                 'expanded' => false,
 287                                 'padded' => true,
 288                                 'framed' => true,
 289                                 'content' => $form,
 290                         ] )
 291                 );
 292
 293                 # List undeletable articles
 294                 if ( $this->mSearchPrefix ) {
 295                         // For now, we enable search engine match only when specifically asked to
 296                         // by using fuzzy=1 parameter.
 297                         if ( $fuzzySearch ) {
 298                                 $result = PageArchive::listPagesBySearch( $this->mSearchPrefix );
 299                         } else {
 300                                 $result = PageArchive::listPagesByPrefix( $this->mSearchPrefix );
 301                         }
 302                         $this->showList( $result );
 303                 }
 304         }
 305
 306         /**
 307          * Generic list of deleted pages
 308          *
 309          * @param ResultWrapper $result
 310          * @return bool
 311          */
 312         private function showList( $result ) {
 313                 $out = $this->getOutput();
 314
 315                 if ( $result->numRows() == 0 ) {
 316                         $out->addWikiMsg( 'undelete-no-results' );
 317
 318                         return false;
 319                 }
 320
 321                 $out->addWikiMsg( 'undeletepagetext', $this->getLanguage()->formatNum( $result->numRows() ) );
 322
 323                 $linkRenderer = $this->getLinkRenderer();
 324                 $undelete = $this->getPageTitle();
 325                 $out->addHTML( "<ul id='undeleteResultsList'>\n" );
 326                 foreach ( $result as $row ) {
 327                         $title = Title::makeTitleSafe( $row->ar_namespace, $row->ar_title );
 328                         if ( $title !== null ) {
 329                                 $item = $linkRenderer->makeKnownLink(
 330                                         $undelete,
 331                                         $title->getPrefixedText(),
 332                                         [],
 333                                         [ 'target' => $title->getPrefixedText() ]
 334                                 );
 335                         } else {
 336                                 // The title is no longer valid, show as text
 337                                 $item = Html::element(
 338                                         'span',
 339                                         [ 'class' => 'mw-invalidtitle' ],
 340                                         Linker::getInvalidTitleDescription(
 341                                                 $this->getContext(),
 342                                                 $row->ar_namespace,
 343                                                 $row->ar_title
 344                                         )
 345                                 );
 346                         }
 347                         $revs = $this->msg( 'undeleterevisions' )->numParams( $row->count )->parse();
 348                         $out->addHTML( "<li class='undeleteResult'>{$item} ({$revs})</li>\n" );
 349                 }
 350                 $result->free();
 351                 $out->addHTML( "</ul>\n" );
 352
 353                 return true;
 354         }
 355
 356         private function showRevision( $timestamp ) {
 357                 if ( !preg_match( '/[0-9]{14}/', $timestamp ) ) {
 358                         return;
 359                 }
 360
 361                 $archive = new PageArchive( $this->mTargetObj, $this->getConfig() );
 362                 if ( !Hooks::run( 'UndeleteForm::showRevision', [ &$archive, $this->mTargetObj ] ) ) {
 363                         return;
 364                 }
 365                 $rev = $archive->getRevision( $timestamp );
 366
 367                 $out = $this->getOutput();
 368                 $user = $this->getUser();
 369
 370                 if ( !$rev ) {
 371                         $out->addWikiMsg( 'undeleterevision-missing' );
 372
 373                         return;
 374                 }
 375
 376                 if ( $rev->isDeleted( Revision::DELETED_TEXT ) ) {
 377                         if ( !$rev->userCan( Revision::DELETED_TEXT, $user ) ) {
 378                                 $out->wrapWikiMsg(
 379                                         "<div class='mw-warning plainlinks'>\n$1\n</div>\n",
 380                                 $rev->isDeleted( Revision::DELETED_RESTRICTED ) ?
 381                                         'rev-suppressed-text-permission' : 'rev-deleted-text-permission'
 382                                 );
 383
 384                                 return;
 385                         }
 386
 387                         $out->wrapWikiMsg(
 388                                 "<div class='mw-warning plainlinks'>\n$1\n</div>\n",
 389                                 $rev->isDeleted( Revision::DELETED_RESTRICTED ) ?
 390                                         'rev-suppressed-text-view' : 'rev-deleted-text-view'
 391                         );
 392                         $out->addHTML( '<br />' );
 393                         // and we are allowed to see...
 394                 }
 395
 396                 if ( $this->mDiff ) {
 397                         $previousRev = $archive->getPreviousRevision( $timestamp );
 398                         if ( $previousRev ) {
 399                                 $this->showDiff( $previousRev, $rev );
 400                                 if ( $this->mDiffOnly ) {
 401                                         return;
 402                                 }
 403
 404                                 $out->addHTML( '<hr />' );
 405                         } else {
 406                                 $out->addWikiMsg( 'undelete-nodiff' );
 407                         }
 408                 }
 409
 410                 $link = $this->getLinkRenderer()->makeKnownLink(
 411                         $this->getPageTitle( $this->mTargetObj->getPrefixedDBkey() ),
 412                         $this->mTargetObj->getPrefixedText()
 413                 );
 414
 415                 $lang = $this->getLanguage();
 416
 417                 // date and time are separate parameters to facilitate localisation.
 418                 // $time is kept for backward compat reasons.
 419                 $time = $lang->userTimeAndDate( $timestamp, $user );
 420                 $d = $lang->userDate( $timestamp, $user );
 421                 $t = $lang->userTime( $timestamp, $user );
 422                 $userLink = Linker::revUserTools( $rev );
 423
 424                 $content = $rev->getContent( Revision::FOR_THIS_USER, $user );
 425
 426                 $isText = ( $content instanceof TextContent );
 427
 428                 if ( $this->mPreview || $isText ) {
 429                         $openDiv = '<div id="mw-undelete-revision" class="mw-warning">';
 430                 } else {
 431                         $openDiv = '<div id="mw-undelete-revision">';
 432                 }
 433                 $out->addHTML( $openDiv );
 434
 435                 // Revision delete links
 436                 if ( !$this->mDiff ) {
 437                         $revdel = Linker::getRevDeleteLink( $user, $rev, $this->mTargetObj );
 438                         if ( $revdel ) {
 439                                 $out->addHTML( "$revdel " );
 440                         }
 441                 }
 442
 443                 $out->addHTML( $this->msg( 'undelete-revision' )->rawParams( $link )->params(
 444                         $time )->rawParams( $userLink )->params( $d, $t )->parse() . '</div>' );
 445
 446                 if ( !Hooks::run( 'UndeleteShowRevision', [ $this->mTargetObj, $rev ] ) ) {
 447                         return;
 448                 }
 449
 450                 if ( ( $this->mPreview || !$isText ) && $content ) {
 451                         // NOTE: non-text content has no source view, so always use rendered preview
 452
 453                         // Hide [edit]s
 454                         $popts = $out->parserOptions();
 455                         $popts->setEditSection( false );
 456
 457                         $pout = $content->getParserOutput( $this->mTargetObj, $rev->getId(), $popts, true );
 458                         $out->addParserOutput( $pout, [
 459                                 'enableSectionEditLinks' => false,
 460                         ] );
 461                 }
 462
 463                 if ( $isText ) {
 464                         // source view for textual content
 465                         $sourceView = Xml::element(
 466                                 'textarea',
 467                                 [
 468                                         'readonly' => 'readonly',
 469                                         'cols' => 80,
 470                                         'rows' => 25
 471                                 ],
 472                                 $content->getNativeData() . "\n"
 473                         );
 474
 475                         $previewButton = Xml::element( 'input', [
 476                                 'type' => 'submit',
 477                                 'name' => 'preview',
 478                                 'value' => $this->msg( 'showpreview' )->text()
 479                         ] );
 480                 } else {
 481                         $sourceView = '';
 482                         $previewButton = '';
 483                 }
 484
 485                 $diffButton = Xml::element( 'input', [
 486                         'name' => 'diff',
 487                         'type' => 'submit',
 488                         'value' => $this->msg( 'showdiff' )->text() ] );
 489
 490                 $out->addHTML(
 491                         $sourceView .
 492                                 Xml::openElement( 'div', [
 493                                         'style' => 'clear: both' ] ) .
 494                                 Xml::openElement( 'form', [
 495                                         'method' => 'post',
 496                                         'action' => $this->getPageTitle()->getLocalURL( [ 'action' => 'submit' ] ) ] ) .
 497                                 Xml::element( 'input', [
 498                                         'type' => 'hidden',
 499                                         'name' => 'target',
 500                                         'value' => $this->mTargetObj->getPrefixedDBkey() ] ) .
 501                                 Xml::element( 'input', [
 502                                         'type' => 'hidden',
 503                                         'name' => 'timestamp',
 504                                         'value' => $timestamp ] ) .
 505                                 Xml::element( 'input', [
 506                                         'type' => 'hidden',
 507                                         'name' => 'wpEditToken',
 508                                         'value' => $user->getEditToken() ] ) .
 509                                 $previewButton .
 510                                 $diffButton .
 511                                 Xml::closeElement( 'form' ) .
 512                                 Xml::closeElement( 'div' )
 513                 );
 514         }
 515
 516         /**
 517          * Build a diff display between this and the previous either deleted
 518          * or non-deleted edit.
 519          *
 520          * @param Revision $previousRev
 521          * @param Revision $currentRev
 522          * @return string HTML
 523          */
 524         function showDiff( $previousRev, $currentRev ) {
 525                 $diffContext = clone $this->getContext();
 526                 $diffContext->setTitle( $currentRev->getTitle() );
 527                 $diffContext->setWikiPage( WikiPage::factory( $currentRev->getTitle() ) );
 528
 529                 $diffEngine = $currentRev->getContentHandler()->createDifferenceEngine( $diffContext );
 530                 $diffEngine->showDiffStyle();
 531
 532                 $formattedDiff = $diffEngine->generateContentDiffBody(
 533                         $previousRev->getContent( Revision::FOR_THIS_USER, $this->getUser() ),
 534                         $currentRev->getContent( Revision::FOR_THIS_USER, $this->getUser() )
 535                 );
 536
 537                 $formattedDiff = $diffEngine->addHeader(
 538                         $formattedDiff,
 539                         $this->diffHeader( $previousRev, 'o' ),
 540                         $this->diffHeader( $currentRev, 'n' )
 541                 );
 542
 543                 $this->getOutput()->addHTML( "<div>$formattedDiff</div>\n" );
 544         }
 545
 546         /**
 547          * @param Revision $rev
 548          * @param string $prefix
 549          * @return string
 550          */
 551         private function diffHeader( $rev, $prefix ) {
 552                 $isDeleted = !( $rev->getId() && $rev->getTitle() );
 553                 if ( $isDeleted ) {
 554                         /// @todo FIXME: $rev->getTitle() is null for deleted revs...?
 555                         $targetPage = $this->getPageTitle();
 556                         $targetQuery = [
 557                                 'target' => $this->mTargetObj->getPrefixedText(),
 558                                 'timestamp' => wfTimestamp( TS_MW, $rev->getTimestamp() )
 559                         ];
 560                 } else {
 561                         /// @todo FIXME: getId() may return non-zero for deleted revs...
 562                         $targetPage = $rev->getTitle();
 563                         $targetQuery = [ 'oldid' => $rev->getId() ];
 564                 }
 565
 566                 // Add show/hide deletion links if available
 567                 $user = $this->getUser();
 568                 $lang = $this->getLanguage();
 569                 $rdel = Linker::getRevDeleteLink( $user, $rev, $this->mTargetObj );
 570
 571                 if ( $rdel ) {
 572                         $rdel = " $rdel";
 573                 }
 574
 575                 $minor = $rev->isMinor() ? ChangesList::flag( 'minor' ) : '';
 576
 577                 $tags = wfGetDB( DB_REPLICA )->selectField(
 578                         'tag_summary',
 579                         'ts_tags',
 580                         [ 'ts_rev_id' => $rev->getId() ],
 581                         __METHOD__
 582                 );
 583                 $tagSummary = ChangeTags::formatSummaryRow( $tags, 'deleteddiff', $this->getContext() );
 584
 585                 // FIXME This is reimplementing DifferenceEngine#getRevisionHeader
 586                 // and partially #showDiffPage, but worse
 587                 return '<div id="mw-diff-' . $prefix . 'title1"><strong>' .
 588                         $this->getLinkRenderer()->makeLink(
 589                                 $targetPage,
 590                                 $this->msg(
 591                                         'revisionasof',
 592                                         $lang->userTimeAndDate( $rev->getTimestamp(), $user ),
 593                                         $lang->userDate( $rev->getTimestamp(), $user ),
 594                                         $lang->userTime( $rev->getTimestamp(), $user )
 595                                 )->text(),
 596                                 [],
 597                                 $targetQuery
 598                         ) .
 599                         '</strong></div>' .
 600                         '<div id="mw-diff-' . $prefix . 'title2">' .
 601                         Linker::revUserTools( $rev ) . '<br />' .
 602                         '</div>' .
 603                         '<div id="mw-diff-' . $prefix . 'title3">' .
 604                         $minor . Linker::revComment( $rev ) . $rdel . '<br />' .
 605                         '</div>' .
 606                         '<div id="mw-diff-' . $prefix . 'title5">' .
 607                         $tagSummary[0] . '<br />' .
 608                         '</div>';
 609         }
 610
 611         /**
 612          * Show a form confirming whether a tokenless user really wants to see a file
 613          * @param string $key
 614          */
 615         private function showFileConfirmationForm( $key ) {
 616                 $out = $this->getOutput();
 617                 $lang = $this->getLanguage();
 618                 $user = $this->getUser();
 619                 $file = new ArchivedFile( $this->mTargetObj, '', $this->mFilename );
 620                 $out->addWikiMsg( 'undelete-show-file-confirm',
 621                         $this->mTargetObj->getText(),
 622                         $lang->userDate( $file->getTimestamp(), $user ),
 623                         $lang->userTime( $file->getTimestamp(), $user ) );
 624                 $out->addHTML(
 625                         Xml::openElement( 'form', [
 626                                         'method' => 'POST',
 627                                         'action' => $this->getPageTitle()->getLocalURL( [
 628                                                 'target' => $this->mTarget,
 629                                                 'file' => $key,
 630                                                 'token' => $user->getEditToken( $key ),
 631                                         ] ),
 632                                 ]
 633                         ) .
 634                                 Xml::submitButton( $this->msg( 'undelete-show-file-submit' )->text() ) .
 635                                 '</form>'
 636                 );
 637         }
 638
 639         /**
 640          * Show a deleted file version requested by the visitor.
 641          * @param string $key
 642          */
 643         private function showFile( $key ) {
 644                 $this->getOutput()->disable();
 645
 646                 # We mustn't allow the output to be CDN cached, otherwise
 647                 # if an admin previews a deleted image, and it's cached, then
 648                 # a user without appropriate permissions can toddle off and
 649                 # nab the image, and CDN will serve it
 650                 $response = $this->getRequest()->response();
 651                 $response->header( 'Expires: ' . gmdate( 'D, d M Y H:i:s', 0 ) . ' GMT' );
 652                 $response->header( 'Cache-Control: no-cache, no-store, max-age=0, must-revalidate' );
 653                 $response->header( 'Pragma: no-cache' );
 654
 655                 $repo = RepoGroup::singleton()->getLocalRepo();
 656                 $path = $repo->getZonePath( 'deleted' ) . '/' . $repo->getDeletedHashPath( $key ) . $key;
 657                 $repo->streamFile( $path );
 658         }
 659
 660         protected function showHistory() {
 661                 $this->checkReadOnly();
 662
 663                 $out = $this->getOutput();
 664                 if ( $this->mAllowed ) {
 665                         $out->addModules( 'mediawiki.special.undelete' );
 666                 }
 667                 $out->wrapWikiMsg(
 668                         "<div class='mw-undelete-pagetitle'>\n$1\n</div>\n",
 669                         [ 'undeletepagetitle', wfEscapeWikiText( $this->mTargetObj->getPrefixedText() ) ]
 670                 );
 671
 672                 $archive = new PageArchive( $this->mTargetObj, $this->getConfig() );
 673                 Hooks::run( 'UndeleteForm::showHistory', [ &$archive, $this->mTargetObj ] );
 674
 675                 $out->addHTML( '<div class="mw-undelete-history">' );
 676                 if ( $this->mAllowed ) {
 677                         $out->addWikiMsg( 'undeletehistory' );
 678                         $out->addWikiMsg( 'undeleterevdel' );
 679                 } else {
 680                         $out->addWikiMsg( 'undeletehistorynoadmin' );
 681                 }
 682                 $out->addHTML( '</div>' );
 683
 684                 # List all stored revisions
 685                 $revisions = $archive->listRevisions();
 686                 $files = $archive->listFiles();
 687
 688                 $haveRevisions = $revisions && $revisions->numRows() > 0;
 689                 $haveFiles = $files && $files->numRows() > 0;
 690
 691                 # Batch existence check on user and talk pages
 692                 if ( $haveRevisions ) {
 693                         $batch = new LinkBatch();
 694                         foreach ( $revisions as $row ) {
 695                                 $batch->addObj( Title::makeTitleSafe( NS_USER, $row->ar_user_text ) );
 696                                 $batch->addObj( Title::makeTitleSafe( NS_USER_TALK, $row->ar_user_text ) );
 697                         }
 698                         $batch->execute();
 699                         $revisions->seek( 0 );
 700                 }
 701                 if ( $haveFiles ) {
 702                         $batch = new LinkBatch();
 703                         foreach ( $files as $row ) {
 704                                 $batch->addObj( Title::makeTitleSafe( NS_USER, $row->fa_user_text ) );
 705                                 $batch->addObj( Title::makeTitleSafe( NS_USER_TALK, $row->fa_user_text ) );
 706                         }
 707                         $batch->execute();
 708                         $files->seek( 0 );
 709                 }
 710
 711                 if ( $this->mAllowed ) {
 712                         $out->enableOOUI();
 713
 714                         $action = $this->getPageTitle()->getLocalURL( [ 'action' => 'submit' ] );
 715                         # Start the form here
 716                         $form = new OOUI\FormLayout( [
 717                                 'method' => 'post',
 718                                 'action' => $action,
 719                                 'id' => 'undelete',
 720                         ] );
 721                 }
 722
 723                 # Show relevant lines from the deletion log:
 724                 $deleteLogPage = new LogPage( 'delete' );
 725                 $out->addHTML( Xml::element( 'h2', null, $deleteLogPage->getName()->text() ) . "\n" );
 726                 LogEventsList::showLogExtract( $out, 'delete', $this->mTargetObj );
 727                 # Show relevant lines from the suppression log:
 728                 $suppressLogPage = new LogPage( 'suppress' );
 729                 if ( $this->getUser()->isAllowed( 'suppressionlog' ) ) {
 730                         $out->addHTML( Xml::element( 'h2', null, $suppressLogPage->getName()->text() ) . "\n" );
 731                         LogEventsList::showLogExtract( $out, 'suppress', $this->mTargetObj );
 732                 }
 733
 734                 if ( $this->mAllowed && ( $haveRevisions || $haveFiles ) ) {
 735                         $fields[] = new OOUI\Layout( [
 736                                 'content' => new OOUI\HtmlSnippet( $this->msg( 'undeleteextrahelp' )->parseAsBlock() )
 737                         ] );
 738
 739                         $fields[] = new OOUI\FieldLayout(
 740                                 new OOUI\TextInputWidget( [
 741                                         'name' => 'wpComment',
 742                                         'inputId' => 'wpComment',
 743                                         'infusable' => true,
 744                                         'value' => $this->mComment,
 745                                         'autofocus' => true,
 746                                 ] ),
 747                                 [
 748                                         'label' => $this->msg( 'undeletecomment' )->text(),
 749                                         'align' => 'top',
 750                                 ]
 751                         );
 752
 753                         $fields[] = new OOUI\FieldLayout(
 754                                 new OOUI\Widget( [
 755                                         'content' => new OOUI\HorizontalLayout( [
 756                                                 'items' => [
 757                                                         new OOUI\ButtonInputWidget( [
 758                                                                 'name' => 'restore',
 759                                                                 'inputId' => 'mw-undelete-submit',
 760                                                                 'value' => '1',
 761                                                                 'label' => $this->msg( 'undeletebtn' )->text(),
 762                                                                 'flags' => [ 'primary', 'progressive' ],
 763                                                                 'type' => 'submit',
 764                                                         ] ),
 765                                                         new OOUI\ButtonInputWidget( [
 766                                                                 'name' => 'invert',
 767                                                                 'inputId' => 'mw-undelete-invert',
 768                                                                 'value' => '1',
 769                                                                 'label' => $this->msg( 'undeleteinvert' )->text()
 770                                                         ] ),
 771                                                 ]
 772                                         ] )
 773                                 ] )
 774                         );
 775
 776                         if ( $this->getUser()->isAllowed( 'suppressrevision' ) ) {
 777                                 $fields[] = new OOUI\FieldLayout(
 778                                         new OOUI\CheckboxInputWidget( [
 779                                                 'name' => 'wpUnsuppress',
 780                                                 'inputId' => 'mw-undelete-unsuppress',
 781                                                 'value' => '1',
 782                                         ] ),
 783                                         [
 784                                                 'label' => $this->msg( 'revdelete-unsuppress' )->text(),
 785                                                 'align' => 'inline',
 786                                         ]
 787                                 );
 788                         }
 789
 790                         $fieldset = new OOUI\FieldsetLayout( [
 791                                 'label' => $this->msg( 'undelete-fieldset-title' )->text(),
 792                                 'id' => 'mw-undelete-table',
 793                                 'items' => $fields,
 794                         ] );
 795
 796                         $form->appendContent(
 797                                 new OOUI\PanelLayout( [
 798                                         'expanded' => false,
 799                                         'padded' => true,
 800                                         'framed' => true,
 801                                         'content' => $fieldset,
 802                                 ] ),
 803                                 new OOUI\HtmlSnippet(
 804                                         Html::hidden( 'target', $this->mTarget ) .
 805                                         Html::hidden( 'wpEditToken', $this->getUser()->getEditToken() )
 806                                 )
 807                         );
 808                 }
 809
 810                 $history = '';
 811                 $history .= Xml::element( 'h2', null, $this->msg( 'history' )->text() ) . "\n";
 812
 813                 if ( $haveRevisions ) {
 814                         # Show the page's stored (deleted) history
 815
 816                         if ( $this->getUser()->isAllowed( 'deleterevision' ) ) {
 817                                 $history .= Html::element(
 818                                         'button',
 819                                         [
 820                                                 'name' => 'revdel',
 821                                                 'type' => 'submit',
 822                                                 'class' => 'deleterevision-log-submit mw-log-deleterevision-button'
 823                                         ],
 824                                         $this->msg( 'showhideselectedversions' )->text()
 825                                 ) . "\n";
 826                         }
 827
 828                         $history .= '<ul class="mw-undelete-revlist">';
 829                         $remaining = $revisions->numRows();
 830                         $earliestLiveTime = $this->mTargetObj->getEarliestRevTime();
 831
 832                         foreach ( $revisions as $row ) {
 833                                 $remaining--;
 834                                 $history .= $this->formatRevisionRow( $row, $earliestLiveTime, $remaining );
 835                         }
 836                         $revisions->free();
 837                         $history .= '</ul>';
 838                 } else {
 839                         $out->addWikiMsg( 'nohistory' );
 840                 }
 841
 842                 if ( $haveFiles ) {
 843                         $history .= Xml::element( 'h2', null, $this->msg( 'filehist' )->text() ) . "\n";
 844                         $history .= '<ul class="mw-undelete-revlist">';
 845                         foreach ( $files as $row ) {
 846                                 $history .= $this->formatFileRow( $row );
 847                         }
 848                         $files->free();
 849                         $history .= '</ul>';
 850                 }
 851
 852                 if ( $this->mAllowed ) {
 853                         # Slip in the hidden controls here
 854                         $misc = Html::hidden( 'target', $this->mTarget );
 855                         $misc .= Html::hidden( 'wpEditToken', $this->getUser()->getEditToken() );
 856                         $history .= $misc;
 857
 858                         $form->appendContent( new OOUI\HtmlSnippet( $history ) );
 859                         $out->addHTML( $form );
 860                 } else {
 861                         $out->addHTML( $history );
 862                 }
 863
 864                 return true;
 865         }
 866
 867         protected function formatRevisionRow( $row, $earliestLiveTime, $remaining ) {
 868                 $rev = Revision::newFromArchiveRow( $row,
 869                         [
 870                                 'title' => $this->mTargetObj
 871                         ] );
 872
 873                 $revTextSize = '';
 874                 $ts = wfTimestamp( TS_MW, $row->ar_timestamp );
 875                 // Build checkboxen...
 876                 if ( $this->mAllowed ) {
 877                         if ( $this->mInvert ) {
 878                                 if ( in_array( $ts, $this->mTargetTimestamp ) ) {
 879                                         $checkBox = Xml::check( "ts$ts" );
 880                                 } else {
 881                                         $checkBox = Xml::check( "ts$ts", true );
 882                                 }
 883                         } else {
 884                                 $checkBox = Xml::check( "ts$ts" );
 885                         }
 886                 } else {
 887                         $checkBox = '';
 888                 }
 889
 890                 // Build page & diff links...
 891                 $user = $this->getUser();
 892                 if ( $this->mCanView ) {
 893                         $titleObj = $this->getPageTitle();
 894                         # Last link
 895                         if ( !$rev->userCan( Revision::DELETED_TEXT, $this->getUser() ) ) {
 896                                 $pageLink = htmlspecialchars( $this->getLanguage()->userTimeAndDate( $ts, $user ) );
 897                                 $last = $this->msg( 'diff' )->escaped();
 898                         } elseif ( $remaining > 0 || ( $earliestLiveTime && $ts > $earliestLiveTime ) ) {
 899                                 $pageLink = $this->getPageLink( $rev, $titleObj, $ts );
 900                                 $last = $this->getLinkRenderer()->makeKnownLink(
 901                                         $titleObj,
 902                                         $this->msg( 'diff' )->text(),
 903                                         [],
 904                                         [
 905                                                 'target' => $this->mTargetObj->getPrefixedText(),
 906                                                 'timestamp' => $ts,
 907                                                 'diff' => 'prev'
 908                                         ]
 909                                 );
 910                         } else {
 911                                 $pageLink = $this->getPageLink( $rev, $titleObj, $ts );
 912                                 $last = $this->msg( 'diff' )->escaped();
 913                         }
 914                 } else {
 915                         $pageLink = htmlspecialchars( $this->getLanguage()->userTimeAndDate( $ts, $user ) );
 916                         $last = $this->msg( 'diff' )->escaped();
 917                 }
 918
 919                 // User links
 920                 $userLink = Linker::revUserTools( $rev );
 921
 922                 // Minor edit
 923                 $minor = $rev->isMinor() ? ChangesList::flag( 'minor' ) : '';
 924
 925                 // Revision text size
 926                 $size = $row->ar_len;
 927                 if ( !is_null( $size ) ) {
 928                         $revTextSize = Linker::formatRevisionSize( $size );
 929                 }
 930
 931                 // Edit summary
 932                 $comment = Linker::revComment( $rev );
 933
 934                 // Tags
 935                 $attribs = [];
 936                 list( $tagSummary, $classes ) = ChangeTags::formatSummaryRow(
 937                         $row->ts_tags,
 938                         'deletedhistory',
 939                         $this->getContext()
 940                 );
 941                 if ( $classes ) {
 942                         $attribs['class'] = implode( ' ', $classes );
 943                 }
 944
 945                 $revisionRow = $this->msg( 'undelete-revision-row2' )
 946                         ->rawParams(
 947                                 $checkBox,
 948                                 $last,
 949                                 $pageLink,
 950                                 $userLink,
 951                                 $minor,
 952                                 $revTextSize,
 953                                 $comment,
 954                                 $tagSummary
 955                         )
 956                         ->escaped();
 957
 958                 return Xml::tags( 'li', $attribs, $revisionRow ) . "\n";
 959         }
 960
 961         private function formatFileRow( $row ) {
 962                 $file = ArchivedFile::newFromRow( $row );
 963                 $ts = wfTimestamp( TS_MW, $row->fa_timestamp );
 964                 $user = $this->getUser();
 965
 966                 $checkBox = '';
 967                 if ( $this->mCanView && $row->fa_storage_key ) {
 968                         if ( $this->mAllowed ) {
 969                                 $checkBox = Xml::check( 'fileid' . $row->fa_id );
 970                         }
 971                         $key = urlencode( $row->fa_storage_key );
 972                         $pageLink = $this->getFileLink( $file, $this->getPageTitle(), $ts, $key );
 973                 } else {
 974                         $pageLink = htmlspecialchars( $this->getLanguage()->userTimeAndDate( $ts, $user ) );
 975                 }
 976                 $userLink = $this->getFileUser( $file );
 977                 $data = $this->msg( 'widthheight' )->numParams( $row->fa_width, $row->fa_height )->text();
 978                 $bytes = $this->msg( 'parentheses' )
 979                         ->plaintextParams( $this->msg( 'nbytes' )->numParams( $row->fa_size )->text() )
 980                         ->plain();
 981                 $data = htmlspecialchars( $data . ' ' . $bytes );
 982                 $comment = $this->getFileComment( $file );
 983
 984                 // Add show/hide deletion links if available
 985                 $canHide = $this->isAllowed( 'deleterevision' );
 986                 if ( $canHide || ( $file->getVisibility() && $this->isAllowed( 'deletedhistory' ) ) ) {
 987                         if ( !$file->userCan( File::DELETED_RESTRICTED, $user ) ) {
 988                                 // Revision was hidden from sysops
 989                                 $revdlink = Linker::revDeleteLinkDisabled( $canHide );
 990                         } else {
 991                                 $query = [
 992                                         'type' => 'filearchive',
 993                                         'target' => $this->mTargetObj->getPrefixedDBkey(),
 994                                         'ids' => $row->fa_id
 995                                 ];
 996                                 $revdlink = Linker::revDeleteLink( $query,
 997                                         $file->isDeleted( File::DELETED_RESTRICTED ), $canHide );
 998                         }
 999                 } else {
1000                         $revdlink = '';
1001                 }
1002
1003                 return "<li>$checkBox $revdlink $pageLink . . $userLink $data $comment</li>\n";
1004         }
1005
1006         /**
1007          * Fetch revision text link if it's available to all users
1008          *
1009          * @param Revision $rev
1010          * @param Title $titleObj
1011          * @param string $ts Timestamp
1012          * @return string
1013          */
1014         function getPageLink( $rev, $titleObj, $ts ) {
1015                 $user = $this->getUser();
1016                 $time = $this->getLanguage()->userTimeAndDate( $ts, $user );
1017
1018                 if ( !$rev->userCan( Revision::DELETED_TEXT, $user ) ) {
1019                         return '<span class="history-deleted">' . $time . '</span>';
1020                 }
1021
1022                 $link = $this->getLinkRenderer()->makeKnownLink(
1023                         $titleObj,
1024                         $time,
1025                         [],
1026                         [
1027                                 'target' => $this->mTargetObj->getPrefixedText(),
1028                                 'timestamp' => $ts
1029                         ]
1030                 );
1031
1032                 if ( $rev->isDeleted( Revision::DELETED_TEXT ) ) {
1033                         $link = '<span class="history-deleted">' . $link . '</span>';
1034                 }
1035
1036                 return $link;
1037         }
1038
1039         /**
1040          * Fetch image view link if it's available to all users
1041          *
1042          * @param File|ArchivedFile $file
1043          * @param Title $titleObj
1044          * @param string $ts A timestamp
1045          * @param string $key A storage key
1046          *
1047          * @return string HTML fragment
1048          */
1049         function getFileLink( $file, $titleObj, $ts, $key ) {
1050                 $user = $this->getUser();
1051                 $time = $this->getLanguage()->userTimeAndDate( $ts, $user );
1052
1053                 if ( !$file->userCan( File::DELETED_FILE, $user ) ) {
1054                         return '<span class="history-deleted">' . htmlspecialchars( $time ) . '</span>';
1055                 }
1056
1057                 $link = $this->getLinkRenderer()->makeKnownLink(
1058                         $titleObj,
1059                         $time,
1060                         [],
1061                         [
1062                                 'target' => $this->mTargetObj->getPrefixedText(),
1063                                 'file' => $key,
1064                                 'token' => $user->getEditToken( $key )
1065                         ]
1066                 );
1067
1068                 if ( $file->isDeleted( File::DELETED_FILE ) ) {
1069                         $link = '<span class="history-deleted">' . $link . '</span>';
1070                 }
1071
1072                 return $link;
1073         }
1074
1075         /**
1076          * Fetch file's user id if it's available to this user
1077          *
1078          * @param File|ArchivedFile $file
1079          * @return string HTML fragment
1080          */
1081         function getFileUser( $file ) {
1082                 if ( !$file->userCan( File::DELETED_USER, $this->getUser() ) ) {
1083                         return '<span class="history-deleted">' .
1084                                 $this->msg( 'rev-deleted-user' )->escaped() .
1085                                 '</span>';
1086                 }
1087
1088                 $link = Linker::userLink( $file->getRawUser(), $file->getRawUserText() ) .
1089                         Linker::userToolLinks( $file->getRawUser(), $file->getRawUserText() );
1090
1091                 if ( $file->isDeleted( File::DELETED_USER ) ) {
1092                         $link = '<span class="history-deleted">' . $link . '</span>';
1093                 }
1094
1095                 return $link;
1096         }
1097
1098         /**
1099          * Fetch file upload comment if it's available to this user
1100          *
1101          * @param File|ArchivedFile $file
1102          * @return string HTML fragment
1103          */
1104         function getFileComment( $file ) {
1105                 if ( !$file->userCan( File::DELETED_COMMENT, $this->getUser() ) ) {
1106                         return '<span class="history-deleted"><span class="comment">' .
1107                                 $this->msg( 'rev-deleted-comment' )->escaped() . '</span></span>';
1108                 }
1109
1110                 $link = Linker::commentBlock( $file->getRawDescription() );
1111
1112                 if ( $file->isDeleted( File::DELETED_COMMENT ) ) {
1113                         $link = '<span class="history-deleted">' . $link . '</span>';
1114                 }
1115
1116                 return $link;
1117         }
1118
1119         function undelete() {
1120                 if ( $this->getConfig()->get( 'UploadMaintenance' )
1121                         && $this->mTargetObj->getNamespace() == NS_FILE
1122                 ) {
1123                         throw new ErrorPageError( 'undelete-error', 'filedelete-maintenance' );
1124                 }
1125
1126                 $this->checkReadOnly();
1127
1128                 $out = $this->getOutput();
1129                 $archive = new PageArchive( $this->mTargetObj, $this->getConfig() );
1130                 Hooks::run( 'UndeleteForm::undelete', [ &$archive, $this->mTargetObj ] );
1131                 $ok = $archive->undelete(
1132                         $this->mTargetTimestamp,
1133                         $this->mComment,
1134                         $this->mFileVersions,
1135                         $this->mUnsuppress,
1136                         $this->getUser()
1137                 );
1138
1139                 if ( is_array( $ok ) ) {
1140                         if ( $ok[1] ) { // Undeleted file count
1141                                 Hooks::run( 'FileUndeleteComplete', [
1142                                         $this->mTargetObj, $this->mFileVersions,
1143                                         $this->getUser(), $this->mComment ] );
1144                         }
1145
1146                         $link = $this->getLinkRenderer()->makeKnownLink( $this->mTargetObj );
1147                         $out->addHTML( $this->msg( 'undeletedpage' )->rawParams( $link )->parse() );
1148                 } else {
1149                         $out->setPageTitle( $this->msg( 'undelete-error' ) );
1150                 }
1151
1152                 // Show revision undeletion warnings and errors
1153                 $status = $archive->getRevisionStatus();
1154                 if ( $status && !$status->isGood() ) {
1155                         $out->addWikiText( '<div class="error" id="mw-error-cannotundelete">' .
1156                                 $status->getWikiText(
1157                                         'cannotundelete',
1158                                         'cannotundelete'
1159                                 ) . '</div>'
1160                         );
1161                 }
1162
1163                 // Show file undeletion warnings and errors
1164                 $status = $archive->getFileStatus();
1165                 if ( $status && !$status->isGood() ) {
1166                         $out->addWikiText( '<div class="error">' .
1167                                 $status->getWikiText(
1168                                         'undelete-error-short',
1169                                         'undelete-error-long'
1170                                 ) . '</div>'
1171                         );
1172                 }
1173         }
1174
1175         /**
1176          * Return an array of subpages beginning with $search that this special page will accept.
1177          *
1178          * @param string $search Prefix to search for
1179          * @param int $limit Maximum number of results to return (usually 10)
1180          * @param int $offset Number of results to skip (usually 0)
1181          * @return string[] Matching subpages
1182          */
1183         public function prefixSearchSubpages( $search, $limit, $offset ) {
1184                 return $this->prefixSearchString( $search, $limit, $offset );
1185         }
1186
1187         protected function getGroupName() {
1188                 return 'pagetools';
1189         }
1190 }