DatabaseBlock.php

Go to the documentation of this file.

<?php
namespace MediaWiki\Block;
 
use ActorMigration;
use AutoCommitUpdate;
use CommentStore;
use DeferredUpdates;
use Hooks;
use Html;
use IContextSource;
use IP;
use MediaWiki\Block\Restriction\NamespaceRestriction;
use MediaWiki\Block\Restriction\PageRestriction;
use MediaWiki\Block\Restriction\Restriction;
use MediaWiki\MediaWikiServices;
use MWException;
use RequestContext;
use stdClass;
use Title;
use User;
use WebResponse;
use Wikimedia\Rdbms\Database;
use Wikimedia\Rdbms\IDatabase;
 
class DatabaseBlock extends AbstractBlock {
    public $mAuto;
 
    public $mParentBlockId;
 
    private $mId;
 
    private $mFromMaster;
 
    private $forcedTargetID;
 
    private $isHardblock;
 
    private $isAutoblocking;
 
    private $restrictions;
 
    public function __construct( array $options = [] ) {
        parent::__construct( $options );
 
        $defaults = [
            'user'            => null,
            'auto'            => false,
            'expiry'          => '',
            'anonOnly'        => false,
            'createAccount'   => false,
            'enableAutoblock' => false,
            'blockEmail'      => false,
            'allowUsertalk'   => false,
            'sitewide'        => true,
        ];
 
        $options += $defaults;
 
        if ( $this->target instanceof User && $options['user'] ) {
            # Needed for foreign users
            $this->forcedTargetID = $options['user'];
        }
 
        $this->setExpiry( wfGetDB( DB_REPLICA )->decodeExpiry( $options['expiry'] ) );
 
        # Boolean settings
        $this->mAuto = (bool)$options['auto'];
        $this->isHardblock( !$options['anonOnly'] );
        $this->isAutoblocking( (bool)$options['enableAutoblock'] );
        $this->isSitewide( (bool)$options['sitewide'] );
        $this->isEmailBlocked( (bool)$options['blockEmail'] );
        $this->isCreateAccountBlocked( (bool)$options['createAccount'] );
        $this->isUsertalkEditAllowed( (bool)$options['allowUsertalk'] );
 
        $this->mFromMaster = false;
    }
 
    public static function newFromID( $id ) {
        $dbr = wfGetDB( DB_REPLICA );
        $blockQuery = self::getQueryInfo();
        $res = $dbr->selectRow(
            $blockQuery['tables'],
            $blockQuery['fields'],
            [ 'ipb_id' => $id ],
            __METHOD__,
            [],
            $blockQuery['joins']
        );
        if ( $res ) {
            return self::newFromRow( $res );
        } else {
            return null;
        }
    }
 
    public static function getQueryInfo() {
        $commentQuery = CommentStore::getStore()->getJoin( 'ipb_reason' );
        $actorQuery = ActorMigration::newMigration()->getJoin( 'ipb_by' );
        return [
            'tables' => [ 'ipblocks' ] + $commentQuery['tables'] + $actorQuery['tables'],
            'fields' => [
                'ipb_id',
                'ipb_address',
                'ipb_timestamp',
                'ipb_auto',
                'ipb_anon_only',
                'ipb_create_account',
                'ipb_enable_autoblock',
                'ipb_expiry',
                'ipb_deleted',
                'ipb_block_email',
                'ipb_allow_usertalk',
                'ipb_parent_block_id',
                'ipb_sitewide',
            ] + $commentQuery['fields'] + $actorQuery['fields'],
            'joins' => $commentQuery['joins'] + $actorQuery['joins'],
        ];
    }
 
    public function equals( DatabaseBlock $block ) {
        return (
            (string)$this->target == (string)$block->target
            && $this->type == $block->type
            && $this->mAuto == $block->mAuto
            && $this->isHardblock() == $block->isHardblock()
            && $this->isCreateAccountBlocked() == $block->isCreateAccountBlocked()
            && $this->getExpiry() == $block->getExpiry()
            && $this->isAutoblocking() == $block->isAutoblocking()
            && $this->getHideName() == $block->getHideName()
            && $this->isEmailBlocked() == $block->isEmailBlocked()
            && $this->isUsertalkEditAllowed() == $block->isUsertalkEditAllowed()
            && $this->getReason() == $block->getReason()
            && $this->isSitewide() == $block->isSitewide()
            // DatabaseBlock::getRestrictions() may perform a database query, so
            // keep it at the end.
            && $this->getBlockRestrictionStore()->equals(
                $this->getRestrictions(), $block->getRestrictions()
            )
        );
    }
 
    protected static function newLoad(
        $specificTarget,
        $specificType,
        $fromMaster,
        $vagueTarget = null
    ) {
        $db = wfGetDB( $fromMaster ? DB_MASTER : DB_REPLICA );
 
        if ( $specificType !== null ) {
            $conds = [
                'ipb_address' => [ (string)$specificTarget ],
            ];
        } else {
            $conds = [ 'ipb_address' => [] ];
        }
 
        # Be aware that the != '' check is explicit, since empty values will be
        # passed by some callers (T31116)
        if ( $vagueTarget != '' ) {
            list( $target, $type ) = self::parseTarget( $vagueTarget );
            switch ( $type ) {
                case self::TYPE_USER:
                    # Slightly weird, but who are we to argue?
                    $conds['ipb_address'][] = (string)$target;
                    break;
 
                case self::TYPE_IP:
                    $conds['ipb_address'][] = (string)$target;
                    $conds[] = self::getRangeCond( IP::toHex( $target ) );
                    $conds = $db->makeList( $conds, LIST_OR );
                    break;
 
                case self::TYPE_RANGE:
                    list( $start, $end ) = IP::parseRange( $target );
                    $conds['ipb_address'][] = (string)$target;
                    $conds[] = self::getRangeCond( $start, $end );
                    $conds = $db->makeList( $conds, LIST_OR );
                    break;
 
                default:
                    throw new MWException( "Tried to load block with invalid type" );
            }
        }
 
        $blockQuery = self::getQueryInfo();
        $res = $db->select(
            $blockQuery['tables'], $blockQuery['fields'], $conds, __METHOD__, [], $blockQuery['joins']
        );
 
        $blocks = [];
        $blockIds = [];
        $autoBlocks = [];
        foreach ( $res as $row ) {
            $block = self::newFromRow( $row );
 
            # Don't use expired blocks
            if ( $block->isExpired() ) {
                continue;
            }
 
            # Don't use anon only blocks on users
            if ( $specificType == self::TYPE_USER && !$block->isHardblock() ) {
                continue;
            }
 
            // Check for duplicate autoblocks
            if ( $block->getType() === self::TYPE_AUTO ) {
                $autoBlocks[] = $block;
            } else {
                $blocks[] = $block;
                $blockIds[] = $block->getId();
            }
        }
 
        // Only add autoblocks that aren't duplicates
        foreach ( $autoBlocks as $block ) {
            if ( !in_array( $block->mParentBlockId, $blockIds ) ) {
                $blocks[] = $block;
            }
        }
 
        return $blocks;
    }
 
    protected static function chooseMostSpecificBlock( array $blocks ) {
        if ( count( $blocks ) === 1 ) {
            return $blocks[0];
        }
 
        # This result could contain a block on the user, a block on the IP, and a russian-doll
        # set of rangeblocks.  We want to choose the most specific one, so keep a leader board.
        $bestBlock = null;
 
        # Lower will be better
        $bestBlockScore = 100;
        foreach ( $blocks as $block ) {
            if ( $block->getType() == self::TYPE_RANGE ) {
                # This is the number of bits that are allowed to vary in the block, give
                # or take some floating point errors
                $target = $block->getTarget();
                $max = IP::isIPv6( $target ) ? 128 : 32;
                list( $network, $bits ) = IP::parseCIDR( $target );
                $size = $max - $bits;
 
                # Rank a range block covering a single IP equally with a single-IP block
                $score = self::TYPE_RANGE - 1 + ( $size / $max );
 
            } else {
                $score = $block->getType();
            }
 
            if ( $score < $bestBlockScore ) {
                $bestBlockScore = $score;
                $bestBlock = $block;
            }
        }
 
        return $bestBlock;
    }
 
    public static function getRangeCond( $start, $end = null ) {
        if ( $end === null ) {
            $end = $start;
        }
        # Per T16634, we want to include relevant active rangeblocks; for
        # rangeblocks, we want to include larger ranges which enclose the given
        # range. We know that all blocks must be smaller than $wgBlockCIDRLimit,
        # so we can improve performance by filtering on a LIKE clause
        $chunk = self::getIpFragment( $start );
        $dbr = wfGetDB( DB_REPLICA );
        $like = $dbr->buildLike( $chunk, $dbr->anyString() );
 
        # Fairly hard to make a malicious SQL statement out of hex characters,
        # but stranger things have happened...
        $safeStart = $dbr->addQuotes( $start );
        $safeEnd = $dbr->addQuotes( $end );
 
        return $dbr->makeList(
            [
                "ipb_range_start $like",
                "ipb_range_start <= $safeStart",
                "ipb_range_end >= $safeEnd",
            ],
            LIST_AND
        );
    }
 
    protected static function getIpFragment( $hex ) {
        global $wgBlockCIDRLimit;
        if ( substr( $hex, 0, 3 ) == 'v6-' ) {
            return 'v6-' . substr( substr( $hex, 3 ), 0, floor( $wgBlockCIDRLimit['IPv6'] / 4 ) );
        } else {
            return substr( $hex, 0, floor( $wgBlockCIDRLimit['IPv4'] / 4 ) );
        }
    }
 
    protected function initFromRow( $row ) {
        $this->setTarget( $row->ipb_address );
        $this->setBlocker( User::newFromAnyId(
            $row->ipb_by, $row->ipb_by_text, $row->ipb_by_actor ?? null
        ) );
 
        $this->setTimestamp( wfTimestamp( TS_MW, $row->ipb_timestamp ) );
        $this->mAuto = $row->ipb_auto;
        $this->setHideName( $row->ipb_deleted );
        $this->mId = (int)$row->ipb_id;
        $this->mParentBlockId = $row->ipb_parent_block_id;
 
        // I wish I didn't have to do this
        $db = wfGetDB( DB_REPLICA );
        $this->setExpiry( $db->decodeExpiry( $row->ipb_expiry ) );
        $this->setReason(
            CommentStore::getStore()
            // Legacy because $row may have come from self::selectFields()
            ->getCommentLegacy( $db, 'ipb_reason', $row )->text
        );
 
        $this->isHardblock( !$row->ipb_anon_only );
        $this->isAutoblocking( $row->ipb_enable_autoblock );
        $this->isSitewide( (bool)$row->ipb_sitewide );
 
        $this->isCreateAccountBlocked( $row->ipb_create_account );
        $this->isEmailBlocked( $row->ipb_block_email );
        $this->isUsertalkEditAllowed( $row->ipb_allow_usertalk );
    }
 
    public static function newFromRow( $row ) {
        $block = new DatabaseBlock;
        $block->initFromRow( $row );
        return $block;
    }
 
    public function delete() {
        if ( wfReadOnly() ) {
            return false;
        }
 
        if ( !$this->getId() ) {
            throw new MWException(
                __METHOD__ . " requires that the mId member be filled\n"
            );
        }
 
        $dbw = wfGetDB( DB_MASTER );
 
        $this->getBlockRestrictionStore()->deleteByParentBlockId( $this->getId() );
        $dbw->delete( 'ipblocks', [ 'ipb_parent_block_id' => $this->getId() ], __METHOD__ );
 
        $this->getBlockRestrictionStore()->deleteByBlockId( $this->getId() );
        $dbw->delete( 'ipblocks', [ 'ipb_id' => $this->getId() ], __METHOD__ );
 
        return $dbw->affectedRows() > 0;
    }
 
    public function insert( IDatabase $dbw = null ) {
        global $wgBlockDisablesLogin;
 
        if ( !$this->getBlocker() || $this->getBlocker()->getName() === '' ) {
            throw new MWException( 'Cannot insert a block without a blocker set' );
        }
 
        wfDebug( __METHOD__ . "; timestamp {$this->mTimestamp}\n" );
 
        if ( $dbw === null ) {
            $dbw = wfGetDB( DB_MASTER );
        }
 
        self::purgeExpired();
 
        $row = $this->getDatabaseArray( $dbw );
 
        $dbw->insert( 'ipblocks', $row, __METHOD__, [ 'IGNORE' ] );
        $affected = $dbw->affectedRows();
        if ( $affected ) {
            $this->setId( $dbw->insertId() );
            if ( $this->restrictions ) {
                $this->getBlockRestrictionStore()->insert( $this->restrictions );
            }
        }
 
        # Don't collide with expired blocks.
        # Do this after trying to insert to avoid locking.
        if ( !$affected ) {
            # T96428: The ipb_address index uses a prefix on a field, so
            # use a standard SELECT + DELETE to avoid annoying gap locks.
            $ids = $dbw->selectFieldValues( 'ipblocks',
                'ipb_id',
                [
                    'ipb_address' => $row['ipb_address'],
                    'ipb_user' => $row['ipb_user'],
                    'ipb_expiry < ' . $dbw->addQuotes( $dbw->timestamp() )
                ],
                __METHOD__
            );
            if ( $ids ) {
                $dbw->delete( 'ipblocks', [ 'ipb_id' => $ids ], __METHOD__ );
                $this->getBlockRestrictionStore()->deleteByBlockId( $ids );
                $dbw->insert( 'ipblocks', $row, __METHOD__, [ 'IGNORE' ] );
                $affected = $dbw->affectedRows();
                $this->setId( $dbw->insertId() );
                if ( $this->restrictions ) {
                    $this->getBlockRestrictionStore()->insert( $this->restrictions );
                }
            }
        }
 
        if ( $affected ) {
            $auto_ipd_ids = $this->doRetroactiveAutoblock();
 
            if ( $wgBlockDisablesLogin && $this->target instanceof User ) {
                // Change user login token to force them to be logged out.
                $this->target->setToken();
                $this->target->saveSettings();
            }
 
            return [ 'id' => $this->mId, 'autoIds' => $auto_ipd_ids ];
        }
 
        return false;
    }
 
    public function update() {
        wfDebug( __METHOD__ . "; timestamp {$this->mTimestamp}\n" );
        $dbw = wfGetDB( DB_MASTER );
 
        $dbw->startAtomic( __METHOD__ );
 
        $result = $dbw->update(
            'ipblocks',
            $this->getDatabaseArray( $dbw ),
            [ 'ipb_id' => $this->getId() ],
            __METHOD__
        );
 
        // Only update the restrictions if they have been modified.
        if ( $this->restrictions !== null ) {
            // An empty array should remove all of the restrictions.
            if ( empty( $this->restrictions ) ) {
                $success = $this->getBlockRestrictionStore()->deleteByBlockId( $this->getId() );
            } else {
                $success = $this->getBlockRestrictionStore()->update( $this->restrictions );
            }
            // Update the result. The first false is the result, otherwise, true.
            $result = $result && $success;
        }
 
        if ( $this->isAutoblocking() ) {
            // update corresponding autoblock(s) (T50813)
            $dbw->update(
                'ipblocks',
                $this->getAutoblockUpdateArray( $dbw ),
                [ 'ipb_parent_block_id' => $this->getId() ],
                __METHOD__
            );
 
            // Only update the restrictions if they have been modified.
            if ( $this->restrictions !== null ) {
                $this->getBlockRestrictionStore()->updateByParentBlockId( $this->getId(), $this->restrictions );
            }
        } else {
            // autoblock no longer required, delete corresponding autoblock(s)
            $this->getBlockRestrictionStore()->deleteByParentBlockId( $this->getId() );
            $dbw->delete(
                'ipblocks',
                [ 'ipb_parent_block_id' => $this->getId() ],
                __METHOD__
            );
        }
 
        $dbw->endAtomic( __METHOD__ );
 
        if ( $result ) {
            $auto_ipd_ids = $this->doRetroactiveAutoblock();
            return [ 'id' => $this->mId, 'autoIds' => $auto_ipd_ids ];
        }
 
        return $result;
    }
 
    protected function getDatabaseArray( IDatabase $dbw ) {
        $expiry = $dbw->encodeExpiry( $this->getExpiry() );
 
        if ( $this->forcedTargetID ) {
            $uid = $this->forcedTargetID;
        } else {
            $uid = $this->target instanceof User ? $this->target->getId() : 0;
        }
 
        $a = [
            'ipb_address'          => (string)$this->target,
            'ipb_user'             => $uid,
            'ipb_timestamp'        => $dbw->timestamp( $this->getTimestamp() ),
            'ipb_auto'             => $this->mAuto,
            'ipb_anon_only'        => !$this->isHardblock(),
            'ipb_create_account'   => $this->isCreateAccountBlocked(),
            'ipb_enable_autoblock' => $this->isAutoblocking(),
            'ipb_expiry'           => $expiry,
            'ipb_range_start'      => $this->getRangeStart(),
            'ipb_range_end'        => $this->getRangeEnd(),
            'ipb_deleted'          => intval( $this->getHideName() ), // typecast required for SQLite
            'ipb_block_email'      => $this->isEmailBlocked(),
            'ipb_allow_usertalk'   => $this->isUsertalkEditAllowed(),
            'ipb_parent_block_id'  => $this->mParentBlockId,
            'ipb_sitewide'         => $this->isSitewide(),
        ] + CommentStore::getStore()->insert( $dbw, 'ipb_reason', $this->getReason() )
            + ActorMigration::newMigration()->getInsertValues( $dbw, 'ipb_by', $this->getBlocker() );
 
        return $a;
    }
 
    protected function getAutoblockUpdateArray( IDatabase $dbw ) {
        return [
            'ipb_create_account'   => $this->isCreateAccountBlocked(),
            'ipb_deleted'          => (int)$this->getHideName(), // typecast required for SQLite
            'ipb_allow_usertalk'   => $this->isUsertalkEditAllowed(),
            'ipb_sitewide'         => $this->isSitewide(),
        ] + CommentStore::getStore()->insert( $dbw, 'ipb_reason', $this->getReason() )
            + ActorMigration::newMigration()->getInsertValues( $dbw, 'ipb_by', $this->getBlocker() );
    }
 
    protected function doRetroactiveAutoblock() {
        $blockIds = [];
        # If autoblock is enabled, autoblock the LAST IP(s) used
        if ( $this->isAutoblocking() && $this->getType() == self::TYPE_USER ) {
            wfDebug( "Doing retroactive autoblocks for " . $this->getTarget() . "\n" );
 
            $continue = Hooks::run(
                'PerformRetroactiveAutoblock', [ $this, &$blockIds ] );
 
            if ( $continue ) {
                self::defaultRetroactiveAutoblock( $this, $blockIds );
            }
        }
        return $blockIds;
    }
 
    protected static function defaultRetroactiveAutoblock( DatabaseBlock $block, array &$blockIds ) {
        global $wgPutIPinRC;
 
        // No IPs are in recentchanges table, so nothing to select
        if ( !$wgPutIPinRC ) {
            return;
        }
 
        // Autoblocks only apply to TYPE_USER
        if ( $block->getType() !== self::TYPE_USER ) {
            return;
        }
        $target = $block->getTarget(); // TYPE_USER => always a User object
 
        $dbr = wfGetDB( DB_REPLICA );
        $rcQuery = ActorMigration::newMigration()->getWhere( $dbr, 'rc_user', $target, false );
 
        $options = [ 'ORDER BY' => 'rc_timestamp DESC' ];
 
        // Just the last IP used.
        $options['LIMIT'] = 1;
 
        $res = $dbr->select(
            [ 'recentchanges' ] + $rcQuery['tables'],
            [ 'rc_ip' ],
            $rcQuery['conds'],
            __METHOD__,
            $options,
            $rcQuery['joins']
        );
 
        if ( !$res->numRows() ) {
            # No results, don't autoblock anything
            wfDebug( "No IP found to retroactively autoblock\n" );
        } else {
            foreach ( $res as $row ) {
                if ( $row->rc_ip ) {
                    $id = $block->doAutoblock( $row->rc_ip );
                    if ( $id ) {
                        $blockIds[] = $id;
                    }
                }
            }
        }
    }
 
    public static function isWhitelistedFromAutoblocks( $ip ) {
        // Try to get the autoblock_whitelist from the cache, as it's faster
        // than getting the msg raw and explode()'ing it.
        $cache = MediaWikiServices::getInstance()->getMainWANObjectCache();
        $lines = $cache->getWithSetCallback(
            $cache->makeKey( 'ip-autoblock', 'whitelist' ),
            $cache::TTL_DAY,
            function ( $curValue, &$ttl, array &$setOpts ) {
                $setOpts += Database::getCacheSetOptions( wfGetDB( DB_REPLICA ) );
 
                return explode( "\n",
                    wfMessage( 'autoblock_whitelist' )->inContentLanguage()->plain() );
            }
        );
 
        wfDebug( "Checking the autoblock whitelist..\n" );
 
        foreach ( $lines as $line ) {
            # List items only
            if ( substr( $line, 0, 1 ) !== '*' ) {
                continue;
            }
 
            $wlEntry = substr( $line, 1 );
            $wlEntry = trim( $wlEntry );
 
            wfDebug( "Checking $ip against $wlEntry..." );
 
            # Is the IP in this range?
            if ( IP::isInRange( $ip, $wlEntry ) ) {
                wfDebug( " IP $ip matches $wlEntry, not autoblocking\n" );
                return true;
            } else {
                wfDebug( " No match\n" );
            }
        }
 
        return false;
    }
 
    public function doAutoblock( $autoblockIP ) {
        # If autoblocks are disabled, go away.
        if ( !$this->isAutoblocking() ) {
            return false;
        }
 
        # Check for presence on the autoblock whitelist.
        if ( self::isWhitelistedFromAutoblocks( $autoblockIP ) ) {
            return false;
        }
 
        // Avoid PHP 7.1 warning of passing $this by reference
        $block = $this;
        # Allow hooks to cancel the autoblock.
        if ( !Hooks::run( 'AbortAutoblock', [ $autoblockIP, &$block ] ) ) {
            wfDebug( "Autoblock aborted by hook.\n" );
            return false;
        }
 
        # It's okay to autoblock. Go ahead and insert/update the block...
 
        # Do not add a *new* block if the IP is already blocked.
        $ipblock = self::newFromTarget( $autoblockIP );
        if ( $ipblock ) {
            # Check if the block is an autoblock and would exceed the user block
            # if renewed. If so, do nothing, otherwise prolong the block time...
            if ( $ipblock->mAuto && // @todo Why not compare $ipblock->mExpiry?
                $this->getExpiry() > self::getAutoblockExpiry( $ipblock->getTimestamp() )
            ) {
                # Reset block timestamp to now and its expiry to
                # $wgAutoblockExpiry in the future
                $ipblock->updateTimestamp();
            }
            return false;
        }
 
        # Make a new block object with the desired properties.
        $autoblock = new DatabaseBlock;
        wfDebug( "Autoblocking {$this->getTarget()}@" . $autoblockIP . "\n" );
        $autoblock->setTarget( $autoblockIP );
        $autoblock->setBlocker( $this->getBlocker() );
        $autoblock->setReason(
            wfMessage( 'autoblocker', $this->getTarget(), $this->getReason() )
                ->inContentLanguage()->plain()
        );
        $timestamp = wfTimestampNow();
        $autoblock->setTimestamp( $timestamp );
        $autoblock->mAuto = 1;
        $autoblock->isCreateAccountBlocked( $this->isCreateAccountBlocked() );
        # Continue suppressing the name if needed
        $autoblock->setHideName( $this->getHideName() );
        $autoblock->isUsertalkEditAllowed( $this->isUsertalkEditAllowed() );
        $autoblock->mParentBlockId = $this->mId;
        $autoblock->isSitewide( $this->isSitewide() );
        $autoblock->setRestrictions( $this->getRestrictions() );
 
        if ( $this->getExpiry() == 'infinity' ) {
            # Original block was indefinite, start an autoblock now
            $autoblock->setExpiry( self::getAutoblockExpiry( $timestamp ) );
        } else {
            # If the user is already blocked with an expiry date, we don't
            # want to pile on top of that.
            $autoblock->setExpiry( min( $this->getExpiry(), self::getAutoblockExpiry( $timestamp ) ) );
        }
 
        # Insert the block...
        $status = $autoblock->insert();
        return $status
            ? $status['id']
            : false;
    }
 
    public function deleteIfExpired() {
        if ( $this->isExpired() ) {
            wfDebug( __METHOD__ . " -- deleting\n" );
            $this->delete();
            $retVal = true;
        } else {
            wfDebug( __METHOD__ . " -- not expired\n" );
            $retVal = false;
        }
 
        return $retVal;
    }
 
    public function isExpired() {
        $timestamp = wfTimestampNow();
        wfDebug( __METHOD__ . " checking current " . $timestamp . " vs $this->mExpiry\n" );
 
        if ( !$this->getExpiry() ) {
            return false;
        } else {
            return $timestamp > $this->getExpiry();
        }
    }
 
    public function isValid() {
        wfDeprecated( __METHOD__, '1.33' );
        return $this->getTarget() != null;
    }
 
    public function updateTimestamp() {
        if ( $this->mAuto ) {
            $this->setTimestamp( wfTimestamp() );
            $this->setExpiry( self::getAutoblockExpiry( $this->getTimestamp() ) );
 
            $dbw = wfGetDB( DB_MASTER );
            $dbw->update( 'ipblocks',
                [ /* SET */
                    'ipb_timestamp' => $dbw->timestamp( $this->getTimestamp() ),
                    'ipb_expiry' => $dbw->timestamp( $this->getExpiry() ),
                ],
                [ /* WHERE */
                    'ipb_id' => $this->getId(),
                ],
                __METHOD__
            );
        }
    }
 
    public function getRangeStart() {
        switch ( $this->type ) {
            case self::TYPE_USER:
                return '';
            case self::TYPE_IP:
                return IP::toHex( $this->target );
            case self::TYPE_RANGE:
                list( $start, /*...*/ ) = IP::parseRange( $this->target );
                return $start;
            default:
                throw new MWException( "Block with invalid type" );
        }
    }
 
    public function getRangeEnd() {
        switch ( $this->type ) {
            case self::TYPE_USER:
                return '';
            case self::TYPE_IP:
                return IP::toHex( $this->target );
            case self::TYPE_RANGE:
                list( /*...*/, $end ) = IP::parseRange( $this->target );
                return $end;
            default:
                throw new MWException( "Block with invalid type" );
        }
    }
 
    public function getId() {
        return $this->mId;
    }
 
    private function setId( $blockId ) {
        $this->mId = (int)$blockId;
 
        if ( is_array( $this->restrictions ) ) {
            $this->restrictions = $this->getBlockRestrictionStore()->setBlockId(
                $blockId, $this->restrictions
            );
        }
 
        return $this;
    }
 
    public function getParentBlockId() {
        return $this->mParentBlockId;
    }
 
    public function fromMaster( $x = null ) {
        return wfSetVar( $this->mFromMaster, $x );
    }
 
    public function isHardblock( $x = null ) {
        wfSetVar( $this->isHardblock, $x );
 
        # You can't *not* hardblock a user
        return $this->getType() == self::TYPE_USER
            ? true
            : $this->isHardblock;
    }
 
    public function isAutoblocking( $x = null ) {
        wfSetVar( $this->isAutoblocking, $x );
 
        # You can't put an autoblock on an IP or range as we don't have any history to
        # look over to get more IPs from
        return $this->getType() == self::TYPE_USER
            ? $this->isAutoblocking
            : false;
    }
 
    public function getRedactedName() {
        if ( $this->mAuto ) {
            return Html::element(
                'span',
                [ 'class' => 'mw-autoblockid' ],
                wfMessage( 'autoblockid', $this->mId )->text()
            );
        } else {
            return htmlspecialchars( $this->getTarget() );
        }
    }
 
    public static function getAutoblockExpiry( $timestamp ) {
        global $wgAutoblockExpiry;
 
        return wfTimestamp( TS_MW, wfTimestamp( TS_UNIX, $timestamp ) + $wgAutoblockExpiry );
    }
 
    public static function purgeExpired() {
        if ( wfReadOnly() ) {
            return;
        }
 
        DeferredUpdates::addUpdate( new AutoCommitUpdate(
            wfGetDB( DB_MASTER ),
            __METHOD__,
            function ( IDatabase $dbw, $fname ) {
                $ids = $dbw->selectFieldValues( 'ipblocks',
                    'ipb_id',
                    [ 'ipb_expiry < ' . $dbw->addQuotes( $dbw->timestamp() ) ],
                    $fname
                );
                if ( $ids ) {
                    $blockRestrictionStore = MediaWikiServices::getInstance()->getBlockRestrictionStore();
                    $blockRestrictionStore->deleteByBlockId( $ids );
 
                    $dbw->delete( 'ipblocks', [ 'ipb_id' => $ids ], $fname );
                }
            }
        ) );
    }
 
    public static function newFromTarget( $specificTarget, $vagueTarget = null, $fromMaster = false ) {
        $blocks = self::newListFromTarget( $specificTarget, $vagueTarget, $fromMaster );
        return self::chooseMostSpecificBlock( $blocks );
    }
 
    public static function newListFromTarget(
        $specificTarget,
        $vagueTarget = null,
        $fromMaster = false
    ) {
        list( $target, $type ) = self::parseTarget( $specificTarget );
        if ( $type == self::TYPE_ID || $type == self::TYPE_AUTO ) {
            $block = self::newFromID( $target );
            return $block ? [ $block ] : [];
        } elseif ( $target === null && $vagueTarget == '' ) {
            # We're not going to find anything useful here
            # Be aware that the == '' check is explicit, since empty values will be
            # passed by some callers (T31116)
            return [];
        } elseif ( in_array(
            $type,
            [ self::TYPE_USER, self::TYPE_IP, self::TYPE_RANGE, null ] )
        ) {
            return self::newLoad( $target, $type, $fromMaster, $vagueTarget );
        }
        return [];
    }
 
    public static function getBlocksForIPList( array $ipChain, $isAnon, $fromMaster = false ) {
        if ( $ipChain === [] ) {
            return [];
        }
 
        $conds = [];
        $proxyLookup = MediaWikiServices::getInstance()->getProxyLookup();
        foreach ( array_unique( $ipChain ) as $ipaddr ) {
            # Discard invalid IP addresses. Since XFF can be spoofed and we do not
            # necessarily trust the header given to us, make sure that we are only
            # checking for blocks on well-formatted IP addresses (IPv4 and IPv6).
            # Do not treat private IP spaces as special as it may be desirable for wikis
            # to block those IP ranges in order to stop misbehaving proxies that spoof XFF.
            if ( !IP::isValid( $ipaddr ) ) {
                continue;
            }
            # Don't check trusted IPs (includes local CDNs which will be in every request)
            if ( $proxyLookup->isTrustedProxy( $ipaddr ) ) {
                continue;
            }
            # Check both the original IP (to check against single blocks), as well as build
            # the clause to check for rangeblocks for the given IP.
            $conds['ipb_address'][] = $ipaddr;
            $conds[] = self::getRangeCond( IP::toHex( $ipaddr ) );
        }
 
        if ( $conds === [] ) {
            return [];
        }
 
        if ( $fromMaster ) {
            $db = wfGetDB( DB_MASTER );
        } else {
            $db = wfGetDB( DB_REPLICA );
        }
        $conds = $db->makeList( $conds, LIST_OR );
        if ( !$isAnon ) {
            $conds = [ $conds, 'ipb_anon_only' => 0 ];
        }
        $blockQuery = self::getQueryInfo();
        $rows = $db->select(
            $blockQuery['tables'],
            array_merge( [ 'ipb_range_start', 'ipb_range_end' ], $blockQuery['fields'] ),
            $conds,
            __METHOD__,
            [],
            $blockQuery['joins']
        );
 
        $blocks = [];
        foreach ( $rows as $row ) {
            $block = self::newFromRow( $row );
            if ( !$block->isExpired() ) {
                $blocks[] = $block;
            }
        }
 
        return $blocks;
    }
 
    public static function chooseBlock( array $blocks, array $ipChain ) {
        if ( $blocks === [] ) {
            return null;
        } elseif ( count( $blocks ) == 1 ) {
            return $blocks[0];
        }
 
        // Sort hard blocks before soft ones and secondarily sort blocks
        // that disable account creation before those that don't.
        usort( $blocks, function ( DatabaseBlock $a, DatabaseBlock $b ) {
            $aWeight = (int)$a->isHardblock() . (int)$a->appliesToRight( 'createaccount' );
            $bWeight = (int)$b->isHardblock() . (int)$b->appliesToRight( 'createaccount' );
            return strcmp( $bWeight, $aWeight ); // highest weight first
        } );
 
        $blocksListExact = [
            'hard' => false,
            'disable_create' => false,
            'other' => false,
            'auto' => false
        ];
        $blocksListRange = [
            'hard' => false,
            'disable_create' => false,
            'other' => false,
            'auto' => false
        ];
        $ipChain = array_reverse( $ipChain );
 
        foreach ( $blocks as $block ) {
            // Stop searching if we have already have a "better" block. This
            // is why the order of the blocks matters
            if ( !$block->isHardblock() && $blocksListExact['hard'] ) {
                break;
            } elseif ( !$block->appliesToRight( 'createaccount' ) && $blocksListExact['disable_create'] ) {
                break;
            }
 
            foreach ( $ipChain as $checkip ) {
                $checkipHex = IP::toHex( $checkip );
                if ( (string)$block->getTarget() === $checkip ) {
                    if ( $block->isHardblock() ) {
                        $blocksListExact['hard'] = $blocksListExact['hard'] ?: $block;
                    } elseif ( $block->appliesToRight( 'createaccount' ) ) {
                        $blocksListExact['disable_create'] = $blocksListExact['disable_create'] ?: $block;
                    } elseif ( $block->mAuto ) {
                        $blocksListExact['auto'] = $blocksListExact['auto'] ?: $block;
                    } else {
                        $blocksListExact['other'] = $blocksListExact['other'] ?: $block;
                    }
                    // We found closest exact match in the ip list, so go to the next block
                    break;
                } elseif ( array_filter( $blocksListExact ) == []
                    && $block->getRangeStart() <= $checkipHex
                    && $block->getRangeEnd() >= $checkipHex
                ) {
                    if ( $block->isHardblock() ) {
                        $blocksListRange['hard'] = $blocksListRange['hard'] ?: $block;
                    } elseif ( $block->appliesToRight( 'createaccount' ) ) {
                        $blocksListRange['disable_create'] = $blocksListRange['disable_create'] ?: $block;
                    } elseif ( $block->mAuto ) {
                        $blocksListRange['auto'] = $blocksListRange['auto'] ?: $block;
                    } else {
                        $blocksListRange['other'] = $blocksListRange['other'] ?: $block;
                    }
                    break;
                }
            }
        }
 
        if ( array_filter( $blocksListExact ) == [] ) {
            $blocksList = &$blocksListRange;
        } else {
            $blocksList = &$blocksListExact;
        }
 
        $chosenBlock = null;
        if ( $blocksList['hard'] ) {
            $chosenBlock = $blocksList['hard'];
        } elseif ( $blocksList['disable_create'] ) {
            $chosenBlock = $blocksList['disable_create'];
        } elseif ( $blocksList['other'] ) {
            $chosenBlock = $blocksList['other'];
        } elseif ( $blocksList['auto'] ) {
            $chosenBlock = $blocksList['auto'];
        } else {
            throw new MWException( "Proxy block found, but couldn't be classified." );
        }
 
        return $chosenBlock;
    }
 
    public function getType() {
        return $this->mAuto
            ? self::TYPE_AUTO
            : parent::getType();
    }
 
    public function setCookie( WebResponse $response ) {
        MediaWikiServices::getInstance()->getBlockManager()->setBlockCookie( $this, $response );
    }
 
    public static function clearCookie( WebResponse $response ) {
        MediaWikiServices::getInstance()->getBlockManager()->clearBlockCookie( $response );
    }
 
    public function getCookieValue() {
        return MediaWikiServices::getInstance()->getBlockManager()->getCookieValue( $this );
    }
 
    public static function getIdFromCookieValue( $cookieValue ) {
        return MediaWikiServices::getInstance()->getBlockManager()->getIdFromCookieValue( $cookieValue );
    }
 
    public function getPermissionsError( IContextSource $context ) {
        $params = $this->getBlockErrorParams( $context );
 
        $msg = 'blockedtext';
        if ( $this->mAuto ) {
            $msg = 'autoblockedtext';
        } elseif ( !$this->isSitewide() ) {
            $msg = 'blockedtext-partial';
        }
 
        array_unshift( $params, $msg );
 
        return $params;
    }
 
    public function getRestrictions() {
        if ( $this->restrictions === null ) {
            // If the block id has not been set, then do not attempt to load the
            // restrictions.
            if ( !$this->mId ) {
                return [];
            }
            $this->restrictions = $this->getBlockRestrictionStore()->loadByBlockId( $this->mId );
        }
 
        return $this->restrictions;
    }
 
    public function setRestrictions( array $restrictions ) {
        $this->restrictions = array_filter( $restrictions, function ( $restriction ) {
            return $restriction instanceof Restriction;
        } );
 
        return $this;
    }
 
    public function appliesToTitle( Title $title ) {
        if ( $this->isSitewide() ) {
            return true;
        }
 
        $restrictions = $this->getRestrictions();
        foreach ( $restrictions as $restriction ) {
            if ( $restriction->matches( $title ) ) {
                return true;
            }
        }
 
        return false;
    }
 
    public function appliesToNamespace( $ns ) {
        if ( $this->isSitewide() ) {
            return true;
        }
 
        // Blocks do not apply to virtual namespaces.
        if ( $ns < 0 ) {
            return false;
        }
 
        $restriction = $this->findRestriction( NamespaceRestriction::TYPE, $ns );
 
        return (bool)$restriction;
    }
 
    public function appliesToPage( $pageId ) {
        if ( $this->isSitewide() ) {
            return true;
        }
 
        // If the pageId is not over zero, the block cannot apply to it.
        if ( $pageId <= 0 ) {
            return false;
        }
 
        $restriction = $this->findRestriction( PageRestriction::TYPE, $pageId );
 
        return (bool)$restriction;
    }
 
    private function findRestriction( $type, $value ) {
        $restrictions = $this->getRestrictions();
        foreach ( $restrictions as $restriction ) {
            if ( $restriction->getType() !== $type ) {
                continue;
            }
 
            if ( $restriction->getValue() === $value ) {
                return $restriction;
            }
        }
 
        return null;
    }
 
    public function shouldTrackWithCookie( $isAnon ) {
        wfDeprecated( __METHOD__, '1.34' );
        $config = RequestContext::getMain()->getConfig();
        switch ( $this->getType() ) {
            case self::TYPE_IP:
            case self::TYPE_RANGE:
                return $isAnon && $config->get( 'CookieSetOnIpBlock' );
            case self::TYPE_USER:
                return !$isAnon && $config->get( 'CookieSetOnAutoblock' ) && $this->isAutoblocking();
            default:
                return false;
        }
    }
 
    private function getBlockRestrictionStore() : BlockRestrictionStore {
        return MediaWikiServices::getInstance()->getBlockRestrictionStore();
    }
}
 
class_alias( DatabaseBlock::class, 'Block' );