MediaWiki REL1_31
|
Demo CAPTCHA (not for production usage) and base class for real CAPTCHAs. More...
Public Member Functions | |
addCaptchaAPI (&$resultArr) | |
addFormInformationToOutput (OutputPage $out, array $formInformation) | |
Processes the given $formInformation array and adds the options (see getFormInformation()) to the given OutputPage object. | |
addFormToOutput (OutputPage $out, $tabIndex=1) | |
Uses getFormInformation() to get the CAPTCHA form and adds it to the given OutputPage object. | |
APIGetAllowedParams (&$module, &$params, $flags) | |
buildRegexes ( $lines) | |
Build regex from whitelist. | |
captchaTriggers ( $title, $action) | |
clearCaptcha ( $index) | |
Clear out existing captcha info from the session, to ensure it can't be reused. | |
confirmEditMerged ( $context, $content, $status, $summary, $user, $minorEdit) | |
An efficient edit filter callback based on the text after section merging. | |
confirmEmailUser ( $from, $to, $subject, $text, &$error) | |
Check the captcha on Special:EmailUser. | |
createAuthenticationRequest () | |
describeCaptchaType () | |
Describes the captcha type for API clients. | |
editShowCaptcha ( $editPage) | |
Insert the captcha prompt into an edit form. | |
filterLink ( $url) | |
Filter callback function for URL whitelisting. | |
findLinks ( $title, $text) | |
Extract a list of all recognized HTTP links in the text. | |
getCaptcha () | |
Returns an array with 'question' and 'answer' keys. | |
getCaptchaInfo ( $captchaData, $id) | |
getError () | |
Return the error from the last passCaptcha* call. | |
getFormInformation ( $tabIndex=1) | |
Insert a captcha prompt into the edit form. | |
getLinksFromTracker ( $title) | |
Load external links from the externallinks table. | |
getMessage ( $action) | |
Show a message asking the user to enter a captcha on edit The result will be treated as wiki text. | |
increaseBadLoginCounter ( $username) | |
Increase bad login counter after a failed login. | |
injectEmailUser (&$form) | |
Inject whazawhoo @fixme if multiple thingies insert a header, could break. | |
isBadLoginPerUserTriggered ( $u) | |
Is the per-user captcha triggered? | |
isBadLoginTriggered () | |
Check if a bad login has already been registered for this IP address. | |
isIPWhitelisted () | |
Check if the current IP is allowed to skip captchas. | |
keyMatch ( $answer, $info) | |
Check if the submitted form matches the captcha session data provided by the plugin when the form was generated. | |
loadText ( $title, $section, $flags=Revision::READ_LATEST) | |
Retrieve the current version of the page or section being edited... | |
log ( $message) | |
Log the status and any triggering info for debugging or statistics. | |
needCreateAccountCaptcha (User $creatingUser=null) | |
Logic to check if we need to pass a captcha for the current user to create a new account, or not. | |
onAuthChangeFormFields (array $requests, array $fieldInfo, array &$formDescriptor, $action) | |
Modify the apprearance of the captcha field. | |
passCaptchaFromRequest (WebRequest $request, User $user) | |
Given a required captcha run, test form input for correct input on the open session. | |
passCaptchaLimited ( $index, $word, User $user) | |
Checks, if the user reached the amount of false CAPTCHAs and give him some vacation or run self::passCaptcha() and clear counter if correct. | |
passCaptchaLimitedFromRequest (WebRequest $request, User $user) | |
Checks, if the user reached the amount of false CAPTCHAs and give him some vacation or run self::passCaptcha() and clear counter if correct. | |
resetBadLoginCounter ( $username) | |
Reset bad login counter after a successful login. | |
retrieveCaptcha ( $index) | |
Fetch this session's captcha info. | |
setAction ( $action) | |
setTrigger ( $trigger) | |
shouldCheck (WikiPage $page, $content, $section, $context, $oldtext=null) | |
showEditFormFields (&$editPage, &$out) | |
Show error message for missing or incorrect captcha on EditPage. | |
showHelp () | |
Show a page explaining what this wacky thing is. | |
storeCaptcha ( $info) | |
Generate a captcha session ID and save the info in PHP's session storage. | |
triggersCaptcha ( $action, $title=null) | |
Checks, whether the passed action should trigger a CAPTCHA. | |
Protected Member Functions | |
getCaptchaParamsFromRequest (WebRequest $request) | |
isAPICaptchaModule ( $module) | |
passCaptcha ( $index, $word) | |
Given a required captcha run, test form input for correct input on the open session. | |
Protected Attributes | |
string | $action |
Used to select the right message. | |
string | $trigger |
Used in log messages. | |
Static Protected Attributes | |
static | $messagePrefix = 'captcha-' |
Private Member Functions | |
badLoginKey () | |
Internal cache key for badlogin checks. | |
badLoginPerUserKey ( $username) | |
Cache key for badloginPerUser checks. | |
buildValidIPs (array $input) | |
From a list of unvalidated input, get all the valid IP addresses and IP ranges from it. | |
doConfirmEdit (WikiPage $page, $newtext, $section, IContextSource $context) | |
Backend function for confirmEditMerged() | |
getWikiIPWhitelist (Message $msg) | |
Get the on-wiki IP whitelist stored in [[MediaWiki:Captcha-ip-whitelist]] page from cache if possible. | |
Private Attributes | |
boolean null | $captchaSolved = null |
Was the CAPTCHA already passed and if yes, with which result? | |
Demo CAPTCHA (not for production usage) and base class for real CAPTCHAs.
Definition at line 8 of file Captcha.php.
SimpleCaptcha::addCaptchaAPI | ( | & | $resultArr | ) |
array | &$resultArr |
Reimplemented in FancyCaptcha, MathCaptcha, QuestyCaptcha, ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 71 of file Captcha.php.
References describeCaptchaType(), getCaptcha(), and storeCaptcha().
Referenced by confirmEditMerged().
SimpleCaptcha::addFormInformationToOutput | ( | OutputPage | $out, |
array | $formInformation ) |
Processes the given $formInformation array and adds the options (see getFormInformation()) to the given OutputPage object.
OutputPage | $out | The OutputPage object to which the form should be added |
array | $formInformation |
Definition at line 160 of file Captcha.php.
References $out.
Referenced by addFormToOutput(), and injectEmailUser().
SimpleCaptcha::addFormToOutput | ( | OutputPage | $out, |
$tabIndex = 1 ) |
Uses getFormInformation() to get the CAPTCHA form and adds it to the given OutputPage object.
OutputPage | $out | The OutputPage object to which the form should be added |
int | $tabIndex | See self::getFormInformation |
Definition at line 149 of file Captcha.php.
References addFormInformationToOutput(), and getFormInformation().
Referenced by editShowCaptcha(), and showEditFormFields().
SimpleCaptcha::APIGetAllowedParams | ( | & | $module, |
& | $params, | ||
$flags ) |
ApiBase | &$module | |
array | &$params | |
int | $flags |
Reimplemented in ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 931 of file Captcha.php.
References $params, isAPICaptchaModule(), and ApiBase\PARAM_HELP_MSG.
|
private |
Internal cache key for badlogin checks.
Definition at line 431 of file Captcha.php.
References $wgRequest, and wfGlobalCacheKey().
Referenced by increaseBadLoginCounter().
|
private |
Cache key for badloginPerUser checks.
string | $username |
Definition at line 442 of file Captcha.php.
References $username, User\getCanonicalName(), and wfGlobalCacheKey().
Referenced by increaseBadLoginCounter(), and resetBadLoginCounter().
SimpleCaptcha::buildRegexes | ( | $lines | ) |
|
private |
From a list of unvalidated input, get all the valid IP addresses and IP ranges from it.
Note that only lines with just the IP address or IP range is considered as valid. Whitespace is allowed but if there is any other character on the line, it's not considered as a valid entry.
string[] | $input |
Definition at line 412 of file Captcha.php.
References $input.
Referenced by getWikiIPWhitelist().
SimpleCaptcha::captchaTriggers | ( | $title, | |
$action ) |
Title | $title | |
string | $action | (edit/create/addurl...) |
Definition at line 469 of file Captcha.php.
References triggersCaptcha().
SimpleCaptcha::clearCaptcha | ( | $index | ) |
Clear out existing captcha info from the session, to ensure it can't be reused.
string | $index |
Definition at line 1081 of file Captcha.php.
References CaptchaStore\get().
Referenced by passCaptcha().
SimpleCaptcha::confirmEditMerged | ( | $context, | |
$content, | |||
$status, | |||
$summary, | |||
$user, | |||
$minorEdit ) |
An efficient edit filter callback based on the text after section merging.
RequestContext | $context | |
Content | $content | |
Status | $status | |
string | $summary | |
User | $user | |
bool | $minorEdit |
Definition at line 815 of file Captcha.php.
References $context, addCaptchaAPI(), EditPage\AS_HOOK_ERROR_EXPECTED, doConfirmEdit(), and wfDebug().
SimpleCaptcha::confirmEmailUser | ( | $from, | |
$to, | |||
$subject, | |||
$text, | |||
& | $error ) |
Check the captcha on Special:EmailUser.
MailAddress | $from | |
MailAddress | $to | |
string | $subject | |
string | $text | |
string | &$error |
Definition at line 890 of file Captcha.php.
References $wgRequest, $wgUser, isIPWhitelisted(), passCaptchaLimitedFromRequest(), CaptchaTriggers\SENDEMAIL, triggersCaptcha(), and wfDebug().
SimpleCaptcha::createAuthenticationRequest | ( | ) |
Reimplemented in ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 1141 of file Captcha.php.
References getCaptcha(), and storeCaptcha().
SimpleCaptcha::describeCaptchaType | ( | ) |
Describes the captcha type for API clients.
Reimplemented in FancyCaptcha, MathCaptcha, QuestyCaptcha, ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 84 of file Captcha.php.
Referenced by addCaptchaAPI().
|
private |
Backend function for confirmEditMerged()
WikiPage | $page | |
string | $newtext | |
string | $section | |
IContextSource | $context |
Definition at line 783 of file Captcha.php.
References $context, $request, $section, $wgRequest, $wgUser, passCaptchaLimitedFromRequest(), shouldCheck(), and wfDebug().
Referenced by confirmEditMerged().
SimpleCaptcha::editShowCaptcha | ( | $editPage | ) |
Insert the captcha prompt into an edit form.
EditPage | $editPage |
Definition at line 209 of file Captcha.php.
References $context, $out, addFormToOutput(), getMessage(), and text.
SimpleCaptcha::filterLink | ( | $url | ) |
Filter callback function for URL whitelisting.
string | $url | string to check |
Definition at line 659 of file Captcha.php.
References $source, buildRegexes(), and wfMessage().
SimpleCaptcha::findLinks | ( | $title, | |
$text ) |
Extract a list of all recognized HTTP links in the text.
Title | $title | |
string | $text |
Definition at line 1116 of file Captcha.php.
References $options, $out, $wgParser, and $wgUser.
Referenced by shouldCheck().
SimpleCaptcha::getCaptcha | ( | ) |
Returns an array with 'question' and 'answer' keys.
Subclasses might use different structure. Since MW 1.27 all subclasses must implement this method.
Reimplemented in FancyCaptcha, MathCaptcha, QuestyCaptcha, ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 53 of file Captcha.php.
Referenced by addCaptchaAPI(), createAuthenticationRequest(), and getFormInformation().
SimpleCaptcha::getCaptchaInfo | ( | $captchaData, | |
$id ) |
array | $captchaData | Data given by getCaptcha |
string | $id | ID given by storeCaptcha |
Reimplemented in FancyCaptcha, MathCaptcha, QuestyCaptcha, ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 183 of file Captcha.php.
|
protected |
WebRequest | $request |
Reimplemented in ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 961 of file Captcha.php.
References $request.
Referenced by passCaptchaFromRequest(), and passCaptchaLimitedFromRequest().
SimpleCaptcha::getError | ( | ) |
Return the error from the last passCaptcha* call.
Not implemented but needed by some child classes.
Reimplemented in ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 43 of file Captcha.php.
SimpleCaptcha::getFormInformation | ( | $tabIndex = 1 | ) |
Insert a captcha prompt into the edit form.
This sample implementation generates a simple arithmetic operation; it would be easy to defeat by machine.
Override this!
It is not guaranteed that the CAPTCHA will load synchronously with the main page content. So you can not rely on registering handlers before page load. E.g.:
NOT SAFE: $( window ).on( 'load', handler ) SAFE: $( handler )
However, if the HTML is loaded dynamically via AJAX, the following order will be used.
headitems => modulestyles + modules => add main HTML to DOM when modulestyles + modules are ready.
int | $tabIndex | Tab index to start from |
Reimplemented in FancyCaptcha, MathCaptcha, QuestyCaptcha, ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 120 of file Captcha.php.
References getCaptcha(), and storeCaptcha().
Referenced by addFormToOutput(), and injectEmailUser().
SimpleCaptcha::getLinksFromTracker | ( | $title | ) |
Load external links from the externallinks table.
Title | $title |
Definition at line 763 of file Captcha.php.
References $dbr, $res, DB_REPLICA, and wfGetDB().
Referenced by shouldCheck().
SimpleCaptcha::getMessage | ( | $action | ) |
Show a message asking the user to enter a captcha on edit The result will be treated as wiki text.
string | $action | Action being performed |
Reimplemented in ReCaptchaNoCaptcha.
Definition at line 229 of file Captcha.php.
References $action, and wfMessage().
Referenced by editShowCaptcha(), FancyCaptcha\onAuthChangeFormFields(), and showEditFormFields().
|
private |
Get the on-wiki IP whitelist stored in [[MediaWiki:Captcha-ip-whitelist]] page from cache if possible.
Definition at line 378 of file Captcha.php.
References $cache, and buildValidIPs().
Referenced by isIPWhitelisted().
SimpleCaptcha::increaseBadLoginCounter | ( | $username | ) |
Increase bad login counter after a failed login.
The user might be required to solve a captcha if the count is high.
string | $username | TODO use Throttler |
Definition at line 273 of file Captcha.php.
References $cache, $username, CaptchaTriggers\BAD_LOGIN, CaptchaTriggers\BAD_LOGIN_PER_USER, badLoginKey(), badLoginPerUserKey(), and triggersCaptcha().
SimpleCaptcha::injectEmailUser | ( | & | $form | ) |
Inject whazawhoo @fixme if multiple thingies insert a header, could break.
HTMLForm | &$form |
Definition at line 245 of file Captcha.php.
References $out, addFormInformationToOutput(), getFormInformation(), CaptchaTriggers\SENDEMAIL, triggersCaptcha(), and wfDebug().
|
protected |
ApiBase | $module |
Definition at line 921 of file Captcha.php.
Referenced by ReCaptcha\APIGetAllowedParams(), ReCaptchaNoCaptcha\APIGetAllowedParams(), and APIGetAllowedParams().
SimpleCaptcha::isBadLoginPerUserTriggered | ( | $u | ) |
Is the per-user captcha triggered?
Definition at line 330 of file Captcha.php.
References $cache, CaptchaTriggers\BAD_LOGIN_PER_USER, and triggersCaptcha().
SimpleCaptcha::isBadLoginTriggered | ( | ) |
Check if a bad login has already been registered for this IP address.
If so, require a captcha.
Definition at line 316 of file Captcha.php.
References $cache, CaptchaTriggers\BAD_LOGIN, and triggersCaptcha().
SimpleCaptcha::isIPWhitelisted | ( | ) |
Check if the current IP is allowed to skip captchas.
This checks the whitelist from two sources. 1) From the server-side config array $wgCaptchaWhitelistIP 2) From the local [[MediaWiki:Captcha-ip-whitelist]] message
Definition at line 350 of file Captcha.php.
References $wgRequest, getWikiIPWhitelist(), and wfMessage().
Referenced by confirmEmailUser(), needCreateAccountCaptcha(), and shouldCheck().
SimpleCaptcha::keyMatch | ( | $answer, | |
$info ) |
Check if the submitted form matches the captcha session data provided by the plugin when the form was generated.
Override this!
string | $answer | |
array | $info |
Reimplemented in FancyCaptcha, MathCaptcha, and QuestyCaptcha.
Definition at line 457 of file Captcha.php.
Referenced by passCaptcha().
SimpleCaptcha::loadText | ( | $title, | |
$section, | |||
$flags = Revision::READ_LATEST ) |
Retrieve the current version of the page or section being edited...
Definition at line 1093 of file Captcha.php.
References $rev, $section, and $wgParser.
Referenced by shouldCheck().
SimpleCaptcha::log | ( | $message | ) |
Log the status and any triggering info for debugging or statistics.
string | $message |
Definition at line 1043 of file Captcha.php.
References wfDebugLog().
Referenced by passCaptcha(), and passCaptchaLimited().
SimpleCaptcha::needCreateAccountCaptcha | ( | User | $creatingUser = null | ) |
Logic to check if we need to pass a captcha for the current user to create a new account, or not.
User | null | $creatingUser |
Definition at line 864 of file Captcha.php.
References $wgUser, CaptchaTriggers\CREATE_ACCOUNT, isIPWhitelisted(), triggersCaptcha(), and wfDebug().
SimpleCaptcha::onAuthChangeFormFields | ( | array | $requests, |
array | $fieldInfo, | ||
array & | $formDescriptor, | ||
$action ) |
Modify the apprearance of the captcha field.
AuthenticationRequest[] | $requests | |
array | $fieldInfo | Field description as given by AuthenticationRequest::mergeFieldInfo |
array | &$formDescriptor | A form descriptor suitable for the HTMLForm constructor |
string | $action | One of the AuthManager::ACTION_* constants |
Reimplemented in FancyCaptcha, MathCaptcha, QuestyCaptcha, ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 1154 of file Captcha.php.
|
protected |
Given a required captcha run, test form input for correct input on the open session.
string | $index | Captcha idenitifier |
string | $word | Captcha solution |
Reimplemented in ReCaptchaNoCaptcha, ReCaptcha, and FancyCaptcha.
Definition at line 1013 of file Captcha.php.
References $captchaSolved, clearCaptcha(), keyMatch(), log(), and retrieveCaptcha().
Referenced by passCaptchaFromRequest(), and passCaptchaLimited().
SimpleCaptcha::passCaptchaFromRequest | ( | WebRequest | $request, |
User | $user ) |
Given a required captcha run, test form input for correct input on the open session.
WebRequest | $request | |
User | $user |
Definition at line 1001 of file Captcha.php.
References getCaptchaParamsFromRequest(), list, and passCaptcha().
SimpleCaptcha::passCaptchaLimited | ( | $index, | |
$word, | |||
User | $user ) |
Checks, if the user reached the amount of false CAPTCHAs and give him some vacation or run self::passCaptcha() and clear counter if correct.
string | $index | Captcha idenitifier |
string | $word | Captcha solution |
User | $user | User for throttling captcha solving attempts |
Definition at line 977 of file Captcha.php.
References log(), and passCaptcha().
Referenced by passCaptchaLimitedFromRequest().
SimpleCaptcha::passCaptchaLimitedFromRequest | ( | WebRequest | $request, |
User | $user ) |
Checks, if the user reached the amount of false CAPTCHAs and give him some vacation or run self::passCaptcha() and clear counter if correct.
WebRequest | $request | |
User | $user |
Definition at line 952 of file Captcha.php.
References getCaptchaParamsFromRequest(), list, and passCaptchaLimited().
Referenced by confirmEmailUser(), and doConfirmEdit().
SimpleCaptcha::resetBadLoginCounter | ( | $username | ) |
Reset bad login counter after a successful login.
string | $username |
Definition at line 303 of file Captcha.php.
References $cache, $username, CaptchaTriggers\BAD_LOGIN_PER_USER, badLoginPerUserKey(), and triggersCaptcha().
SimpleCaptcha::retrieveCaptcha | ( | $index | ) |
Fetch this session's captcha info.
string | $index |
Reimplemented in ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 1072 of file Captcha.php.
References CaptchaStore\get().
Referenced by FancyCaptcha\passCaptcha(), passCaptcha(), and FancyCaptcha\showImage().
SimpleCaptcha::setAction | ( | $action | ) |
SimpleCaptcha::setTrigger | ( | $trigger | ) |
SimpleCaptcha::shouldCheck | ( | WikiPage | $page, |
$content, | |||
$section, | |||
$context, | |||
$oldtext = null ) |
WikiPage | $page | |
Content | string | $content | |
string | $section | |
IContextSource | $context | |
string | null | $oldtext | The content of the revision prior to $content When null this will be loaded from the database. |
Definition at line 517 of file Captcha.php.
References $context, $request, $section, CONTENT_MODEL_WIKITEXT, findLinks(), getLinksFromTracker(), RequestContext\getMain(), WikiPage\getTitle(), isIPWhitelisted(), loadText(), WikiPage\prepareContentForEdit(), triggersCaptcha(), and wfDebug().
Referenced by doConfirmEdit().
SimpleCaptcha::showEditFormFields | ( | & | $editPage, |
& | $out ) |
Show error message for missing or incorrect captcha on EditPage.
EditPage | &$editPage | |
OutputPage | &$out |
Definition at line 192 of file Captcha.php.
References $out, addFormToOutput(), getMessage(), and text.
SimpleCaptcha::showHelp | ( | ) |
Show a page explaining what this wacky thing is.
Reimplemented in QuestyCaptcha.
Definition at line 1129 of file Captcha.php.
References $wgOut, CaptchaStore\get(), text, and wfMessage().
SimpleCaptcha::storeCaptcha | ( | $info | ) |
Generate a captcha session ID and save the info in PHP's session storage.
(Requires the user to have cookies enabled to get through the captcha.)
A random ID is used so legit users can make edits in multiple tabs or windows without being unnecessarily hobbled by a serial order requirement. Pass the returned id value into the edit form as wpCaptchaId.
array | $info | data to store |
Reimplemented in ReCaptcha, and ReCaptchaNoCaptcha.
Definition at line 1058 of file Captcha.php.
References CaptchaStore\get().
Referenced by FancyCaptcha\addCaptchaAPI(), MathCaptcha\addCaptchaAPI(), QuestyCaptcha\addCaptchaAPI(), addCaptchaAPI(), createAuthenticationRequest(), FancyCaptcha\getFormInformation(), MathCaptcha\getFormInformation(), QuestyCaptcha\getFormInformation(), getFormInformation(), and FancyCaptcha\showImage().
SimpleCaptcha::triggersCaptcha | ( | $action, | |
$title = null ) |
Checks, whether the passed action should trigger a CAPTCHA.
The optional $title parameter will be used to check namespace specific CAPTCHA triggers.
string | $action | The CAPTCHA trigger to check (see CaptchaTriggers for ConfirmEdit built-in triggers) |
Title | null | $title | An optional Title object, if the namespace specific triggers should be checked, too. |
Definition at line 483 of file Captcha.php.
References $action, $result, CaptchaTriggers\EXT_REG_ATTRIBUTE_NAME, and ExtensionRegistry\getInstance().
Referenced by captchaTriggers(), confirmEmailUser(), increaseBadLoginCounter(), injectEmailUser(), isBadLoginPerUserTriggered(), isBadLoginTriggered(), needCreateAccountCaptcha(), resetBadLoginCounter(), and shouldCheck().
|
protected |
Used to select the right message.
One of sendmail, createaccount, badlogin, edit, create, addurl.
Definition at line 19 of file Captcha.php.
Referenced by ReCaptchaNoCaptcha\getMessage(), getMessage(), FancyCaptcha\onAuthChangeFormFields(), setAction(), and triggersCaptcha().
|
private |
Was the CAPTCHA already passed and if yes, with which result?
Definition at line 12 of file Captcha.php.
Referenced by passCaptcha().
|
staticprotected |
Definition at line 9 of file Captcha.php.
|
protected |