MediaWiki REL1_28
ApiQueryRevisions.php
Go to the documentation of this file.
1<?php
36
37 private $token = null;
38
39 public function __construct( ApiQuery $query, $moduleName ) {
40 parent::__construct( $query, $moduleName, 'rv' );
41 }
42
44
46 protected function getTokenFunctions() {
47 // tokenname => function
48 // function prototype is func($pageid, $title, $rev)
49 // should return token or false
50
51 // Don't call the hooks twice
52 if ( isset( $this->tokenFunctions ) ) {
54 }
55
56 // If we're in a mode that breaks the same-origin policy, no tokens can
57 // be obtained
58 if ( $this->lacksSameOriginSecurity() ) {
59 return [];
60 }
61
62 $this->tokenFunctions = [
63 'rollback' => [ 'ApiQueryRevisions', 'getRollbackToken' ]
64 ];
65 Hooks::run( 'APIQueryRevisionsTokens', [ &$this->tokenFunctions ] );
66
68 }
69
77 public static function getRollbackToken( $pageid, $title, $rev ) {
79 if ( !$wgUser->isAllowed( 'rollback' ) ) {
80 return false;
81 }
82
83 return $wgUser->getEditToken( 'rollback' );
84 }
85
86 protected function run( ApiPageSet $resultPageSet = null ) {
87 $params = $this->extractRequestParams( false );
88
89 // If any of those parameters are used, work in 'enumeration' mode.
90 // Enum mode can only be used when exactly one page is provided.
91 // Enumerating revisions on multiple pages make it extremely
92 // difficult to manage continuations and require additional SQL indexes
93 $enumRevMode = ( $params['user'] !== null || $params['excludeuser'] !== null ||
94 $params['limit'] !== null || $params['startid'] !== null ||
95 $params['endid'] !== null || $params['dir'] === 'newer' ||
96 $params['start'] !== null || $params['end'] !== null );
97
98 $pageSet = $this->getPageSet();
99 $pageCount = $pageSet->getGoodTitleCount();
100 $revCount = $pageSet->getRevisionCount();
101
102 // Optimization -- nothing to do
103 if ( $revCount === 0 && $pageCount === 0 ) {
104 // Nothing to do
105 return;
106 }
107 if ( $revCount > 0 && count( $pageSet->getLiveRevisionIDs() ) === 0 ) {
108 // We're in revisions mode but all given revisions are deleted
109 return;
110 }
111
112 if ( $revCount > 0 && $enumRevMode ) {
113 $this->dieUsage(
114 'The revids= parameter may not be used with the list options ' .
115 '(limit, startid, endid, dirNewer, start, end).',
116 'revids'
117 );
118 }
119
120 if ( $pageCount > 1 && $enumRevMode ) {
121 $this->dieUsage(
122 'titles, pageids or a generator was used to supply multiple pages, ' .
123 'but the limit, startid, endid, dirNewer, user, excludeuser, start ' .
124 'and end parameters may only be used on a single page.',
125 'multpages'
126 );
127 }
128
129 // In non-enum mode, rvlimit can't be directly used. Use the maximum
130 // allowed value.
131 if ( !$enumRevMode ) {
132 $this->setParsedLimit = false;
133 $params['limit'] = 'max';
134 }
135
136 $db = $this->getDB();
137 $this->addTables( [ 'revision', 'page' ] );
138 $this->addJoinConds(
139 [ 'page' => [ 'INNER JOIN', [ 'page_id = rev_page' ] ] ]
140 );
141
142 if ( $resultPageSet === null ) {
143 $this->parseParameters( $params );
144 $this->token = $params['token'];
146 if ( $this->token !== null || $pageCount > 0 ) {
148 }
149 } else {
150 $this->limit = $this->getParameter( 'limit' ) ?: 10;
151 $this->addFields( [ 'rev_id', 'rev_timestamp', 'rev_page' ] );
152 }
153
154 if ( $this->fld_tags ) {
155 $this->addTables( 'tag_summary' );
156 $this->addJoinConds(
157 [ 'tag_summary' => [ 'LEFT JOIN', [ 'rev_id=ts_rev_id' ] ] ]
158 );
159 $this->addFields( 'ts_tags' );
160 }
161
162 if ( $params['tag'] !== null ) {
163 $this->addTables( 'change_tag' );
164 $this->addJoinConds(
165 [ 'change_tag' => [ 'INNER JOIN', [ 'rev_id=ct_rev_id' ] ] ]
166 );
167 $this->addWhereFld( 'ct_tag', $params['tag'] );
168 }
169
170 if ( $this->fetchContent ) {
171 // For each page we will request, the user must have read rights for that page
172 $user = $this->getUser();
174 foreach ( $pageSet->getGoodTitles() as $title ) {
175 if ( !$title->userCan( 'read', $user ) ) {
176 $this->dieUsage(
177 'The current user is not allowed to read ' . $title->getPrefixedText(),
178 'accessdenied' );
179 }
180 }
181
182 $this->addTables( 'text' );
183 $this->addJoinConds(
184 [ 'text' => [ 'INNER JOIN', [ 'rev_text_id=old_id' ] ] ]
185 );
186 $this->addFields( 'old_id' );
188 }
189
190 // add user name, if needed
191 if ( $this->fld_user ) {
192 $this->addTables( 'user' );
193 $this->addJoinConds( [ 'user' => Revision::userJoinCond() ] );
195 }
196
197 if ( $enumRevMode ) {
198 // Indexes targeted:
199 // page_timestamp if we don't have rvuser
200 // page_user_timestamp if we have a logged-in rvuser
201 // page_timestamp or usertext_timestamp if we have an IP rvuser
202
203 // This is mostly to prevent parameter errors (and optimize SQL?)
204 if ( $params['startid'] !== null && $params['start'] !== null ) {
205 $this->dieUsage( 'start and startid cannot be used together', 'badparams' );
206 }
207
208 if ( $params['endid'] !== null && $params['end'] !== null ) {
209 $this->dieUsage( 'end and endid cannot be used together', 'badparams' );
210 }
211
212 if ( $params['user'] !== null && $params['excludeuser'] !== null ) {
213 $this->dieUsage( 'user and excludeuser cannot be used together', 'badparams' );
214 }
215
216 if ( $params['continue'] !== null ) {
217 $cont = explode( '|', $params['continue'] );
218 $this->dieContinueUsageIf( count( $cont ) != 2 );
219 $op = ( $params['dir'] === 'newer' ? '>' : '<' );
220 $continueTimestamp = $db->addQuotes( $db->timestamp( $cont[0] ) );
221 $continueId = (int)$cont[1];
222 $this->dieContinueUsageIf( $continueId != $cont[1] );
223 $this->addWhere( "rev_timestamp $op $continueTimestamp OR " .
224 "(rev_timestamp = $continueTimestamp AND " .
225 "rev_id $op= $continueId)"
226 );
227 }
228
229 $this->addTimestampWhereRange( 'rev_timestamp', $params['dir'],
230 $params['start'], $params['end'] );
231 $this->addWhereRange( 'rev_id', $params['dir'],
232 $params['startid'], $params['endid'] );
233
234 // There is only one ID, use it
235 $ids = array_keys( $pageSet->getGoodTitles() );
236 $this->addWhereFld( 'rev_page', reset( $ids ) );
237
238 if ( $params['user'] !== null ) {
239 $user = User::newFromName( $params['user'] );
240 if ( $user && $user->getId() > 0 ) {
241 $this->addWhereFld( 'rev_user', $user->getId() );
242 } else {
243 $this->addWhereFld( 'rev_user_text', $params['user'] );
244 }
245 } elseif ( $params['excludeuser'] !== null ) {
246 $user = User::newFromName( $params['excludeuser'] );
247 if ( $user && $user->getId() > 0 ) {
248 $this->addWhere( 'rev_user != ' . $user->getId() );
249 } else {
250 $this->addWhere( 'rev_user_text != ' .
251 $db->addQuotes( $params['excludeuser'] ) );
252 }
253 }
254 if ( $params['user'] !== null || $params['excludeuser'] !== null ) {
255 // Paranoia: avoid brute force searches (bug 17342)
256 if ( !$this->getUser()->isAllowed( 'deletedhistory' ) ) {
257 $bitmask = Revision::DELETED_USER;
258 } elseif ( !$this->getUser()->isAllowedAny( 'suppressrevision', 'viewsuppressed' ) ) {
260 } else {
261 $bitmask = 0;
262 }
263 if ( $bitmask ) {
264 $this->addWhere( $db->bitAnd( 'rev_deleted', $bitmask ) . " != $bitmask" );
265 }
266 }
267 } elseif ( $revCount > 0 ) {
268 // Always targets the PRIMARY index
269
270 $revs = $pageSet->getLiveRevisionIDs();
271
272 // Get all revision IDs
273 $this->addWhereFld( 'rev_id', array_keys( $revs ) );
274
275 if ( $params['continue'] !== null ) {
276 $this->addWhere( 'rev_id >= ' . intval( $params['continue'] ) );
277 }
278 $this->addOption( 'ORDER BY', 'rev_id' );
279 } elseif ( $pageCount > 0 ) {
280 // Always targets the rev_page_id index
281
282 $titles = $pageSet->getGoodTitles();
283
284 // When working in multi-page non-enumeration mode,
285 // limit to the latest revision only
286 $this->addWhere( 'page_latest=rev_id' );
287
288 // Get all page IDs
289 $this->addWhereFld( 'page_id', array_keys( $titles ) );
290 // Every time someone relies on equality propagation, god kills a kitten :)
291 $this->addWhereFld( 'rev_page', array_keys( $titles ) );
292
293 if ( $params['continue'] !== null ) {
294 $cont = explode( '|', $params['continue'] );
295 $this->dieContinueUsageIf( count( $cont ) != 2 );
296 $pageid = intval( $cont[0] );
297 $revid = intval( $cont[1] );
298 $this->addWhere(
299 "rev_page > $pageid OR " .
300 "(rev_page = $pageid AND " .
301 "rev_id >= $revid)"
302 );
303 }
304 $this->addOption( 'ORDER BY', [
305 'rev_page',
306 'rev_id'
307 ] );
308 } else {
309 ApiBase::dieDebug( __METHOD__, 'param validation?' );
310 }
311
312 $this->addOption( 'LIMIT', $this->limit + 1 );
313
314 $count = 0;
315 $generated = [];
316 $hookData = [];
317 $res = $this->select( __METHOD__, [], $hookData );
318
319 foreach ( $res as $row ) {
320 if ( ++$count > $this->limit ) {
321 // We've reached the one extra which shows that there are
322 // additional pages to be had. Stop here...
323 if ( $enumRevMode ) {
324 $this->setContinueEnumParameter( 'continue',
325 $row->rev_timestamp . '|' . intval( $row->rev_id ) );
326 } elseif ( $revCount > 0 ) {
327 $this->setContinueEnumParameter( 'continue', intval( $row->rev_id ) );
328 } else {
329 $this->setContinueEnumParameter( 'continue', intval( $row->rev_page ) .
330 '|' . intval( $row->rev_id ) );
331 }
332 break;
333 }
334
335 if ( $resultPageSet !== null ) {
336 $generated[] = $row->rev_id;
337 } else {
338 $revision = new Revision( $row );
339 $rev = $this->extractRevisionInfo( $revision, $row );
340
341 if ( $this->token !== null ) {
342 $title = $revision->getTitle();
344 foreach ( $this->token as $t ) {
345 $val = call_user_func( $tokenFunctions[$t], $title->getArticleID(), $title, $revision );
346 if ( $val === false ) {
347 $this->setWarning( "Action '$t' is not allowed for the current user" );
348 } else {
349 $rev[$t . 'token'] = $val;
350 }
351 }
352 }
353
354 $fit = $this->processRow( $row, $rev, $hookData ) &&
355 $this->addPageSubItem( $row->rev_page, $rev, 'rev' );
356 if ( !$fit ) {
357 if ( $enumRevMode ) {
358 $this->setContinueEnumParameter( 'continue',
359 $row->rev_timestamp . '|' . intval( $row->rev_id ) );
360 } elseif ( $revCount > 0 ) {
361 $this->setContinueEnumParameter( 'continue', intval( $row->rev_id ) );
362 } else {
363 $this->setContinueEnumParameter( 'continue', intval( $row->rev_page ) .
364 '|' . intval( $row->rev_id ) );
365 }
366 break;
367 }
368 }
369 }
370
371 if ( $resultPageSet !== null ) {
372 $resultPageSet->populateFromRevisionIDs( $generated );
373 }
374 }
375
376 public function getCacheMode( $params ) {
377 if ( isset( $params['token'] ) ) {
378 return 'private';
379 }
380 return parent::getCacheMode( $params );
381 }
382
383 public function getAllowedParams() {
384 $ret = parent::getAllowedParams() + [
385 'startid' => [
386 ApiBase::PARAM_TYPE => 'integer',
387 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
388 ],
389 'endid' => [
390 ApiBase::PARAM_TYPE => 'integer',
391 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
392 ],
393 'start' => [
394 ApiBase::PARAM_TYPE => 'timestamp',
395 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
396 ],
397 'end' => [
398 ApiBase::PARAM_TYPE => 'timestamp',
399 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
400 ],
401 'dir' => [
402 ApiBase::PARAM_DFLT => 'older',
404 'newer',
405 'older'
406 ],
407 ApiBase::PARAM_HELP_MSG => 'api-help-param-direction',
408 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
409 ],
410 'user' => [
411 ApiBase::PARAM_TYPE => 'user',
412 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
413 ],
414 'excludeuser' => [
415 ApiBase::PARAM_TYPE => 'user',
416 ApiBase::PARAM_HELP_MSG_INFO => [ [ 'singlepageonly' ] ],
417 ],
418 'tag' => null,
419 'token' => [
421 ApiBase::PARAM_TYPE => array_keys( $this->getTokenFunctions() ),
423 ],
424 'continue' => [
425 ApiBase::PARAM_HELP_MSG => 'api-help-param-continue',
426 ],
427 ];
428
429 $ret['limit'][ApiBase::PARAM_HELP_MSG_INFO] = [ [ 'singlepageonly' ] ];
430
431 return $ret;
432 }
433
434 protected function getExamplesMessages() {
435 return [
436 'action=query&prop=revisions&titles=API|Main%20Page&' .
437 'rvprop=timestamp|user|comment|content'
438 => 'apihelp-query+revisions-example-content',
439 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
440 'rvprop=timestamp|user|comment'
441 => 'apihelp-query+revisions-example-last5',
442 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
443 'rvprop=timestamp|user|comment&rvdir=newer'
444 => 'apihelp-query+revisions-example-first5',
445 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
446 'rvprop=timestamp|user|comment&rvdir=newer&rvstart=2006-05-01T00:00:00Z'
447 => 'apihelp-query+revisions-example-first5-after',
448 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
449 'rvprop=timestamp|user|comment&rvexcludeuser=127.0.0.1'
450 => 'apihelp-query+revisions-example-first5-not-localhost',
451 'action=query&prop=revisions&titles=Main%20Page&rvlimit=5&' .
452 'rvprop=timestamp|user|comment&rvuser=MediaWiki%20default'
453 => 'apihelp-query+revisions-example-first5-user',
454 ];
455 }
456
457 public function getHelpUrls() {
458 return 'https://www.mediawiki.org/wiki/API:Revisions';
459 }
460}
$wgUser
Definition Setup.php:806
const PARAM_DEPRECATED
(boolean) Is the parameter deprecated (will show a warning)?
Definition ApiBase.php:106
getParameter( $paramName, $parseLimit=true)
Get a value for the given parameter.
Definition ApiBase.php:709
dieContinueUsageIf( $condition)
Die with the $prefix.
Definition ApiBase.php:2240
static dieDebug( $method, $message)
Internal code errors should be reported with this method.
Definition ApiBase.php:2295
const PARAM_TYPE
(string|string[]) Either an array of allowed value strings, or a string type as described below.
Definition ApiBase.php:88
const PARAM_HELP_MSG_INFO
(array) Specify additional information tags for the parameter.
Definition ApiBase.php:142
const PARAM_DFLT
(null|boolean|integer|string) Default value of the parameter.
Definition ApiBase.php:50
extractRequestParams( $parseLimit=true)
Using getAllowedParams(), this function makes an array of the values provided by the user,...
Definition ApiBase.php:685
setWarning( $warning)
Set warning section for this module.
Definition ApiBase.php:1554
const PARAM_HELP_MSG
(string|array|Message) Specify an alternative i18n documentation message for this parameter.
Definition ApiBase.php:125
dieUsage( $description, $errorCode, $httpRespCode=0, $extradata=null)
Throw a UsageException, which will (if uncaught) call the main module's error handler and die with an...
Definition ApiBase.php:1585
const PARAM_ISMULTI
(boolean) Accept multiple pipe-separated values for this parameter (e.g.
Definition ApiBase.php:53
lacksSameOriginSecurity()
Returns true if the current request breaks the same-origin policy.
Definition ApiBase.php:512
This class contains a list of pages that the client has requested.
processRow( $row, array &$data, array &$hookData)
Call the ApiQueryBaseProcessRow hook.
addWhereRange( $field, $dir, $start, $end, $sort=true)
Add a WHERE clause corresponding to a range, and an ORDER BY clause to sort in the right direction.
addFields( $value)
Add a set of fields to select to the internal array.
addPageSubItem( $pageId, $item, $elemname=null)
Same as addPageSubItems(), but one element of $data at a time.
addOption( $name, $value=null)
Add an option such as LIMIT or USE INDEX.
addTables( $tables, $alias=null)
Add a set of tables to the internal array.
addTimestampWhereRange( $field, $dir, $start, $end, $sort=true)
Add a WHERE clause corresponding to a range, similar to addWhereRange, but converts $start and $end t...
getDB()
Get the Query database connection (read-only)
addJoinConds( $join_conds)
Add a set of JOIN conditions to the internal array.
addWhereFld( $field, $value)
Equivalent to addWhere(array($field => $value))
addWhere( $value)
Add a set of WHERE clauses to the internal array.
setContinueEnumParameter( $paramName, $paramValue)
Overridden to set the generator param if in generator mode.
getPageSet()
Get the PageSet object to work on.
A base class for functions common to producing a list of revisions.
parseParameters( $params)
Parse the parameters into the various instance fields.
extractRevisionInfo(Revision $revision, $row)
Extract information from the Revision.
A query action to enumerate revisions of a given page, or show top revisions of multiple pages.
__construct(ApiQuery $query, $moduleName)
getCacheMode( $params)
Get the cache mode for the data generated by this module.
getHelpUrls()
Return links to more detailed help pages about the module.
run(ApiPageSet $resultPageSet=null)
getAllowedParams()
Returns an array of allowed parameters (parameter name) => (default value) or (parameter name) => (ar...
static getRollbackToken( $pageid, $title, $rev)
getExamplesMessages()
Returns usage examples for this module.
This is the main query class.
Definition ApiQuery.php:38
getUser()
Get the User object.
static userJoinCond()
Return the value of a select() JOIN conds array for the user table.
Definition Revision.php:423
static selectTextFields()
Return the list of text fields that should be selected to read the revision text.
Definition Revision.php:504
static selectPageFields()
Return the list of page fields that should be selected from page table.
Definition Revision.php:515
static selectFields()
Return the list of revision fields that should be selected to create a new revision.
Definition Revision.php:442
static selectUserFields()
Return the list of user fields that should be selected from user table.
Definition Revision.php:530
const DELETED_USER
Definition Revision.php:87
const DELETED_RESTRICTED
Definition Revision.php:88
We use the convention $dbr for read and $dbw for write to help you keep track of whether the database object is a the world will explode Or to be a subsequent write query which succeeded on the master may fail when replicated to the slave due to a unique key collision Replication on the slave will stop and it may take hours to repair the database and get it back online Setting read_only in my cnf on the slave will avoid this but given the dire we prefer to have as many checks as possible We provide a but the wrapper functions like select() and insert() are usually more convenient. They take care of things like table prefixes and escaping for you. If you really need to make your own SQL
$res
Definition database.txt:21
when a variable name is used in a it is silently declared as a new local masking the global
Definition design.txt:95
This document is intended to provide useful advice for parties seeking to redistribute MediaWiki to end users It s targeted particularly at maintainers for Linux since it s been observed that distribution packages of MediaWiki often break We ve consistently had to recommend that users seeking support use official tarballs instead of their distribution s and this often solves whatever problem the user is having It would be nice if this could such as
please add to it if you re going to add events to the MediaWiki code where normally authentication against an external auth plugin would be creating a local account $user
Definition hooks.txt:249
namespace and then decline to actually register it file or subcat img or subcat $title
Definition hooks.txt:986
null means default in associative array with keys and values unescaped Should be merged with default with a value of false meaning to suppress the attribute in associative array with keys and values unescaped noclasses just before the function returns a value If you return true
Definition hooks.txt:1950
null means default in associative array with keys and values unescaped Should be merged with default with a value of false meaning to suppress the attribute in associative array with keys and values unescaped noclasses & $ret
Definition hooks.txt:1949
null for the local wiki Added should default to null in handler for backwards compatibility add a value to it if you want to add a cookie that have to vary cache options can modify $query
Definition hooks.txt:1595
presenting them properly to the user as errors is done by the caller return true use this to change the list i e etc $rev
Definition hooks.txt:1734
injection txt This is an overview of how MediaWiki makes use of dependency injection The design described here grew from the discussion of RFC T384 The term dependency this means that anything an object needs to operate should be injected from the the object itself should only know narrow no concrete implementation of the logic it relies on The requirement to inject everything typically results in an architecture that based on two main types of and essentially stateless service objects that use other service objects to operate on the value objects As of the beginning MediaWiki is only starting to use the DI approach Much of the code still relies on global state or direct resulting in a highly cyclical dependency which acts as the top level factory for services in MediaWiki which can be used to gain access to default instances of various services MediaWikiServices however also allows new services to be defined and default services to be redefined Services are defined or redefined by providing a callback the instantiator that will return a new instance of the service When it will create an instance of MediaWikiServices and populate it with the services defined in the files listed by thereby bootstrapping the DI framework Per $wgServiceWiringFiles lists includes ServiceWiring php
Definition injection.txt:37
linkcache txt The LinkCache class maintains a list of article titles and the information about whether or not the article exists in the database This is used to mark up links when displaying a page If the same link appears more than once on any page then it only has to be looked up once In most cases link lookups are done in batches with the LinkBatch class or the equivalent in so the link cache is mostly useful for short snippets of parsed and for links in the navigation areas of the skin The link cache was formerly used to track links used in a document for the purposes of updating the link tables This application is now deprecated To create a you can use the following $titles
Definition linkcache.txt:17
$params