]> scripts.mit.edu Git - autoinstallsdev/mediawiki.git/blobdiff - includes/api/ApiUnblock.php
MediaWiki 1.30.2
[autoinstallsdev/mediawiki.git] / includes / api / ApiUnblock.php
index 9216317ab7690526b0b9af31ee142e82f6967e85..887edaae8104d35043648c5e17c9eeabc90a48bc 100644 (file)
@@ -1,10 +1,10 @@
 <?php
-
-/*
+/**
+ *
+ *
  * Created on Sep 7, 2007
- * API for MediaWiki 1.8+
  *
- * Copyright (C) 2007 Roan Kattouw <Firstname>.<Lastname>@home.nl
+ * Copyright © 2007 Roan Kattouw "<Firstname>.<Lastname>@gmail.com"
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
  *
  * You should have received a copy of the GNU General Public License along
  * with this program; if not, write to the Free Software Foundation, Inc.,
- * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  * http://www.gnu.org/copyleft/gpl.html
+ *
+ * @file
  */
 
-if (!defined('MEDIAWIKI')) {
-       // Eclipse helper - will be ignored in production
-       require_once ("ApiBase.php");
-}
-
 /**
  * API module that facilitates the unblocking of users. Requires API write mode
  * to be enabled.
@@ -35,88 +32,106 @@ if (!defined('MEDIAWIKI')) {
  */
 class ApiUnblock extends ApiBase {
 
-       public function __construct($main, $action) {
-               parent :: __construct($main, $action);
-       }
-
        /**
         * Unblocks the specified user or provides the reason the unblock failed.
         */
        public function execute() {
-               global $wgUser;
+               $user = $this->getUser();
                $params = $this->extractRequestParams();
 
-               if($params['gettoken'])
-               {
-                       $res['unblocktoken'] = $wgUser->editToken();
-                       $this->getResult()->addValue(null, $this->getModuleName(), $res);
-                       return;
+               $this->requireOnlyOneParameter( $params, 'id', 'user', 'userid' );
+
+               if ( !$user->isAllowed( 'block' ) ) {
+                       $this->dieWithError( 'apierror-permissiondenied-unblock', 'permissiondenied' );
+               }
+               # T17810: blocked admins should have limited access here
+               if ( $user->isBlocked() ) {
+                       $status = SpecialBlock::checkUnblockSelf( $params['user'], $user );
+                       if ( $status !== true ) {
+                               $this->dieWithError(
+                                       $status,
+                                       null,
+                                       [ 'blockinfo' => ApiQueryUserInfo::getBlockInfo( $user->getBlock() ) ]
+                               );
+                       }
+               }
+
+               // Check if user can add tags
+               if ( !is_null( $params['tags'] ) ) {
+                       $ableToTag = ChangeTags::canAddTagsAccompanyingChange( $params['tags'], $user );
+                       if ( !$ableToTag->isOK() ) {
+                               $this->dieStatus( $ableToTag );
+                       }
                }
 
-               if(is_null($params['id']) && is_null($params['user']))
-                       $this->dieUsageMsg(array('unblock-notarget'));
-               if(!is_null($params['id']) && !is_null($params['user']))
-                       $this->dieUsageMsg(array('unblock-idanduser'));
-               if(is_null($params['token']))
-                       $this->dieUsageMsg(array('missingparam', 'token'));
-               if(!$wgUser->matchEditToken($params['token']))
-                       $this->dieUsageMsg(array('sessionfailure'));
-               if(!$wgUser->isAllowed('block'))
-                       $this->dieUsageMsg(array('cantunblock'));
+               if ( $params['userid'] !== null ) {
+                       $username = User::whoIs( $params['userid'] );
+
+                       if ( $username === false ) {
+                               $this->dieWithError( [ 'apierror-nosuchuserid', $params['userid'] ], 'nosuchuserid' );
+                       } else {
+                               $params['user'] = $username;
+                       }
+               }
 
-               $id = $params['id'];
-               $user = $params['user'];
-               $reason = (is_null($params['reason']) ? '' : $params['reason']);
-               $retval = IPUnblockForm::doUnblock($id, $user, $reason, $range);
-               if($retval)
-                       $this->dieUsageMsg($retval);
+               $data = [
+                       'Target' => is_null( $params['id'] ) ? $params['user'] : "#{$params['id']}",
+                       'Reason' => $params['reason'],
+                       'Tags' => $params['tags']
+               ];
+               $block = Block::newFromTarget( $data['Target'] );
+               $retval = SpecialUnblock::processUnblock( $data, $this->getContext() );
+               if ( $retval !== true ) {
+                       $this->dieStatus( $this->errorArrayToStatus( $retval ) );
+               }
 
-               $res['id'] = intval($id);
-               $res['user'] = $user;
-               $res['reason'] = $reason;
-               $this->getResult()->addValue(null, $this->getModuleName(), $res);
+               $res['id'] = $block->getId();
+               $target = $block->getType() == Block::TYPE_AUTO ? '' : $block->getTarget();
+               $res['user'] = $target instanceof User ? $target->getName() : $target;
+               $res['userid'] = $target instanceof User ? $target->getId() : 0;
+               $res['reason'] = $params['reason'];
+               $this->getResult()->addValue( null, $this->getModuleName(), $res );
        }
 
-       public function mustBePosted() { return true; }
+       public function mustBePosted() {
+               return true;
+       }
 
        public function isWriteMode() {
                return true;
        }
 
        public function getAllowedParams() {
-               return array (
-                       'id' => null,
+               return [
+                       'id' => [
+                               ApiBase::PARAM_TYPE => 'integer',
+                       ],
                        'user' => null,
-                       'token' => null,
-                       'gettoken' => false,
-                       'reason' => null,
-               );
-       }
-
-       public function getParamDescription() {
-               return array (
-                       'id' => 'ID of the block you want to unblock (obtained through list=blocks). Cannot be used together with user',
-                       'user' => 'Username, IP address or IP range you want to unblock. Cannot be used together with id',
-                       'token' => 'An unblock token previously obtained through the gettoken parameter or prop=info',
-                       'gettoken' => 'If set, an unblock token will be returned, and no other action will be taken',
-                       'reason' => 'Reason for unblock (optional)',
-               );
+                       'userid' => [
+                               ApiBase::PARAM_TYPE => 'integer'
+                       ],
+                       'reason' => '',
+                       'tags' => [
+                               ApiBase::PARAM_TYPE => 'tags',
+                               ApiBase::PARAM_ISMULTI => true,
+                       ],
+               ];
        }
 
-       public function getDescription() {
-               return array(
-                       'Unblock a user.'
-               );
+       public function needsToken() {
+               return 'csrf';
        }
 
-       protected function getExamples() {
-               return array (
-                       'api.php?action=unblock&id=105',
-                       'api.php?action=unblock&user=Bob&reason=Sorry%20Bob'
-               );
+       protected function getExamplesMessages() {
+               return [
+                       'action=unblock&id=105'
+                               => 'apihelp-unblock-example-id',
+                       'action=unblock&user=Bob&reason=Sorry%20Bob'
+                               => 'apihelp-unblock-example-user',
+               ];
        }
 
-       public function getVersion() {
-               return __CLASS__ . ': $Id: ApiUnblock.php 48091 2009-03-06 13:49:44Z catrope $';
+       public function getHelpUrls() {
+               return 'https://www.mediawiki.org/wiki/Special:MyLanguage/API:Block';
        }
 }