ChangeTags.php

Go to the documentation of this file.

<?php
namespace MediaWiki\ChangeTags;
 
use MediaWiki\Context\IContextSource;
use MediaWiki\Context\RequestContext;
use MediaWiki\HookContainer\HookRunner;
use MediaWiki\Language\Language;
use MediaWiki\Language\MessageLocalizer;
use MediaWiki\Language\RawMessage;
use MediaWiki\Language\SimpleLocalizationContext;
use MediaWiki\Logging\ManualLogEntry;
use MediaWiki\MediaWikiServices;
use MediaWiki\Message\Message;
use MediaWiki\Permissions\Authority;
use MediaWiki\Permissions\PermissionStatus;
use MediaWiki\Permissions\UltimateAuthority;
use MediaWiki\RevisionDelete\RevDelLogList;
use MediaWiki\Skin\Skin;
use MediaWiki\SpecialPage\SpecialPage;
use MediaWiki\Status\Status;
use MediaWiki\Title\Title;
 
class ChangeTags {
    public const TAG_CONTENT_MODEL_CHANGE = 'mw-contentmodelchange';
    public const TAG_NEW_REDIRECT = 'mw-new-redirect';
    public const TAG_REMOVED_REDIRECT = 'mw-removed-redirect';
    public const TAG_CHANGED_REDIRECT_TARGET = 'mw-changed-redirect-target';
    public const TAG_BLANK = 'mw-blank';
    public const TAG_REPLACE = 'mw-replace';
    public const TAG_RECREATE = 'mw-recreated';
    public const TAG_ROLLBACK = 'mw-rollback';
    public const TAG_UNDO = 'mw-undo';
    public const TAG_MANUAL_REVERT = 'mw-manual-revert';
    public const TAG_REVERTED = 'mw-reverted';
    public const TAG_SERVER_SIDE_UPLOAD = 'mw-server-side-upload';
    public const TAG_IPBLOCK_APPEAL = 'mw-ipblock-appeal';
    public const TAG_EDITED_OTHER_USERS_JS = 'mw-edited-other-users-js';
    public const TAG_EDITED_OTHER_USERS_CSS = 'mw-edited-other-users-css';
 
    public const REVERT_TAGS = [ self::TAG_ROLLBACK, self::TAG_UNDO, self::TAG_MANUAL_REVERT ];
 
    public const BYPASS_MAX_USAGE_CHECK = 1;
 
    private const MAX_DELETE_USES = 5000;
 
    private const CHANGE_TAG = 'change_tag';
 
    public const DISPLAY_TABLE_ALIAS = 'changetagdisplay';
 
    public const TAG_SET_ACTIVE_ONLY = true;
    public const TAG_SET_ALL = false;
 
    public const USE_ALL_TAGS = true;
    public const USE_SOFTWARE_TAGS_ONLY = false;
 
    public static function formatSummaryRow( $tags, $unused, MessageLocalizer $localizer ) {
        wfDeprecated( __METHOD__, '1.47' );
        return MediaWikiServices::getInstance()->getChangeTagsFormatter()->formatTagsAsSummaryList(
            $tags,
            $localizer,
            RequestContext::getMain()->getAuthority()
        );
    }
 
    public static function tagShortDescriptionMessage( $tag, MessageLocalizer $context ) {
        wfDeprecated( __METHOD__, '1.47' );
        $msg = $context->msg( "tag-$tag" );
        if ( !$msg->exists() ) {
            // No such message
            // Pass through ->msg(), even though it seems redundant, to avoid requesting
            // the user's language from session-less entry points (T227233)
            return $context->msg( new RawMessage( '$1', [ Message::plaintextParam( $tag ) ] ) );
        }
        if ( $msg->isDisabled() ) {
            // The message exists but is disabled, hide the tag.
            return false;
        }
 
        // Message exists and isn't disabled, use it.
        return $msg;
    }
 
    public static function tagHelpLink( $tag, MessageLocalizer $context ) {
        wfDeprecated( __METHOD__, '1.47' );
        $msg = $context->msg( "tag-$tag-helppage" )->inContentLanguage();
        if ( !$msg->isDisabled() ) {
            return Skin::makeInternalOrExternalUrl( $msg->text() ) ?: null;
        }
        return null;
    }
 
    public static function tagDescription( $tag, MessageLocalizer $context ) {
        wfDeprecated( __METHOD__, '1.47' );
        $description = MediaWikiServices::getInstance()->getChangeTagsFormatter()->getTagDescription( $tag, $context );
        if ( $description === '' ) {
            return false;
        }
        return $description;
    }
 
    public static function tagLongDescriptionMessage( $tag, MessageLocalizer $context ) {
        wfDeprecated( __METHOD__, '1.47' );
        $msg = $context->msg( "tag-$tag-description" );
        return $msg->isDisabled() ? false : $msg;
    }
 
    protected static function restrictedTagError( $msgOne, $msgMulti, $tags ) {
        $tags = array_values( $tags );
        $count = count( $tags );
        $status = Status::newFatal( ( $count > 1 ) ? $msgMulti : $msgOne,
            Message::listParam( $tags ), $count );
        $status->value = $tags;
        return $status;
    }
 
    public static function canAddTagsAccompanyingChange(
        array $tags,
        ?Authority $performer = null,
        $checkBlock = true
    ) {
        $user = null;
        $services = MediaWikiServices::getInstance();
        if ( $performer !== null ) {
            if ( !$performer->isAllowed( 'applychangetags' ) ) {
                return Status::newFatal( 'tags-apply-no-permission' );
            }
 
            if ( $checkBlock && $performer->getBlock() && $performer->getBlock()->isSitewide() ) {
                return Status::newFatal(
                    'tags-apply-blocked',
                    $performer->getUser()->getName()
                );
            }
 
            // ChangeTagsAllowedAdd hook still needs a full User object
            $user = $services->getUserFactory()->newFromAuthority( $performer );
        }
 
        // to be applied, a tag has to be explicitly defined
        $allowedTags = $services->getChangeTagsStore()->listExplicitlyDefinedTags();
        ( new HookRunner( $services->getHookContainer() ) )->onChangeTagsAllowedAdd( $allowedTags, $tags, $user );
        $disallowedTags = array_diff( $tags, $allowedTags );
        if ( $disallowedTags ) {
            return self::restrictedTagError( 'tags-apply-not-allowed-one',
                'tags-apply-not-allowed-multi', $disallowedTags );
        }
 
        return Status::newGood();
    }
 
    public static function canUpdateTags(
        array $tagsToAdd,
        array $tagsToRemove,
        ?Authority $performer = null
    ) {
        wfDeprecated( __METHOD__, '1.47' );
        return self::canUpdateTagsInternal(
            $tagsToAdd,
            $tagsToRemove,
            $performer ?? new UltimateAuthority( RequestContext::getMain()->getUser() )
        );
    }
 
    private static function canUpdateTagsInternal(
        array $tagsToAdd,
        array $tagsToRemove,
        Authority $performer
    ): Status {
        if ( !$performer->isDefinitelyAllowed( 'changetags' ) ) {
            return Status::newFatal( 'tags-update-no-permission' );
        }
 
        if ( $performer->getBlock() && $performer->getBlock()->isSitewide() ) {
            return Status::newFatal(
                'tags-update-blocked',
                $performer->getUser()->getName()
            );
        }
 
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        if ( $tagsToAdd ) {
            // to be added, a tag has to be explicitly defined
            // @todo Allow extensions to define tags that can be applied by users...
            $explicitlyDefinedTags = $changeTagsStore->listExplicitlyDefinedTags();
            $diff = array_diff( $tagsToAdd, $explicitlyDefinedTags );
            if ( $diff ) {
                return self::restrictedTagError( 'tags-update-add-not-allowed-one',
                    'tags-update-add-not-allowed-multi', $diff );
            }
        }
 
        if ( $tagsToRemove ) {
            // Restricted tags can only be removed by users who can view the tag. We do this
            // separately so that private tags that are undefined cannot be removed from changes.
            $unviewableRestricted = array_filter(
                $tagsToRemove,
                static fn ( $tag ) => $changeTagsStore->isRestrictedTag( $tag )
                    && !$changeTagsStore->canViewTag( $tag, $performer )
            );
            if ( $unviewableRestricted ) {
                return self::restrictedTagError( 'tags-update-remove-not-allowed-one',
                    'tags-update-remove-not-allowed-multi', $unviewableRestricted );
            }
 
            // to be removed, a tag must not be defined by an extension, or equivalently it
            // has to be either explicitly defined or not defined at all
            // (assuming no edge case of a tag both explicitly-defined and extension-defined)
            $softwareDefinedTags = $changeTagsStore->listSoftwareDefinedTags();
            $intersect = array_intersect( $tagsToRemove, $softwareDefinedTags );
            if ( $intersect ) {
                return self::restrictedTagError( 'tags-update-remove-not-allowed-one',
                    'tags-update-remove-not-allowed-multi', $intersect );
            }
        }
 
        return Status::newGood();
    }
 
    public static function updateTagsWithChecks( $tagsToAdd, $tagsToRemove,
        $rc_id, $rev_id, $log_id, $params, string $reason, Authority $performer
    ) {
        if ( !$tagsToAdd && !$tagsToRemove ) {
            // no-op, don't bother
            return Status::newGood( (object)[
                'logId' => null,
                'addedTags' => [],
                'removedTags' => [],
            ] );
        }
 
        $tagsToAdd ??= [];
        $tagsToRemove ??= [];
 
        // are we allowed to do this?
        $result = self::canUpdateTagsInternal( $tagsToAdd, $tagsToRemove, $performer );
        if ( !$result->isOK() ) {
            $result->value = null;
            return $result;
        }
 
        // basic rate limiting
        $status = PermissionStatus::newEmpty();
        if ( !$performer->authorizeAction( 'changetags', $status ) ) {
            return Status::wrap( $status );
        }
 
        // do it!
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        [ $tagsAdded, $tagsRemoved, $initialTags ] = $changeTagsStore->updateTags( $tagsToAdd,
            $tagsToRemove, $rc_id, $rev_id, $log_id, $params, null, $performer->getUser() );
        if ( !$tagsAdded && !$tagsRemoved ) {
            // no-op, don't log it
            return Status::newGood( (object)[
                'logId' => null,
                'addedTags' => [],
                'removedTags' => [],
            ] );
        }
 
        // log it
        $logEntry = new ManualLogEntry( 'tag', 'update' );
        $logEntry->setPerformer( $performer->getUser() );
        $logEntry->setComment( $reason );
 
        // find the appropriate target page
        if ( $rev_id ) {
            $revisionRecord = MediaWikiServices::getInstance()
                ->getRevisionLookup()
                ->getRevisionById( $rev_id );
            if ( $revisionRecord ) {
                $logEntry->setTarget( $revisionRecord->getPageAsLinkTarget() );
            }
        } elseif ( $log_id ) {
            // This function is from revision deletion logic and has nothing to do with
            // change tags, but it appears to be the only other place in core where we
            // perform logged actions on log items.
            $logEntry->setTarget( RevDelLogList::suggestTarget( null, [ $log_id ] ) );
        }
 
        if ( !$logEntry->getTarget() ) {
            // target is required, so we have to set something
            $logEntry->setTarget( SpecialPage::getTitleFor( 'Tags' ) );
        }
 
        $logParams = [
            '4::revid' => $rev_id,
            '5::logid' => $log_id,
            '6:list:tagsAdded' => $tagsAdded,
            '7:number:tagsAddedCount' => count( $tagsAdded ),
            '8:list:tagsRemoved' => $tagsRemoved,
            '9:number:tagsRemovedCount' => count( $tagsRemoved ),
            'initialTags' => $initialTags,
        ];
        $logEntry->setParameters( $logParams );
        $logEntry->setRelations( [ 'Tag' => array_merge( $tagsAdded, $tagsRemoved ) ] );
 
        $dbw = MediaWikiServices::getInstance()->getConnectionProvider()->getPrimaryDatabase();
        $logId = $logEntry->insert( $dbw );
        // Only send this to UDP, not RC, similar to patrol events
        $logEntry->publish( $logId, 'udp' );
 
        return Status::newGood( (object)[
            'logId' => $logId,
            'addedTags' => $tagsAdded,
            'removedTags' => $tagsRemoved,
        ] );
    }
 
    public static function buildTagFilterSelector(
        $selected, $ooui, IContextSource $context,
        bool $activeOnly = self::TAG_SET_ACTIVE_ONLY,
        bool $useAllTags = self::USE_ALL_TAGS
    ) {
        wfDeprecated( __METHOD__, '1.47' );
        return MediaWikiServices::getInstance()->getChangeTagsFormatter()->buildTagFilter(
            $selected,
            $ooui ? 'ooui' : 'other',
            $context,
            $activeOnly,
            $useAllTags
        );
    }
 
    public static function canActivateTag( string $tag, ?Authority $performer = null ) {
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        if ( $performer !== null ) {
            if ( !$performer->isAllowed( 'managechangetags' ) ) {
                return Status::newFatal( 'tags-manage-no-permission' );
            }
            if ( $performer->getBlock() && $performer->getBlock()->isSitewide() ) {
                return Status::newFatal(
                    'tags-manage-blocked',
                    $performer->getUser()->getName()
                );
            }
            if ( $changeTagsStore->filterViewableTags( [ $tag ], $performer ) === [] ) {
                return Status::newFatal( 'tags-activate-not-found', $tag );
            }
        }
 
        // defined tags cannot be activated (a defined tag is either extension-
        // defined, in which case the extension chooses whether or not to active it;
        // or user-defined, in which case it is considered active)
        $definedTags = $changeTagsStore->listDefinedTags();
        if ( in_array( $tag, $definedTags ) ) {
            return Status::newFatal( 'tags-activate-not-allowed', $tag );
        }
 
        // non-existing tags cannot be activated
        if ( !isset( $changeTagsStore->tagUsageStatistics()[$tag] ) ) { // we already know the tag is undefined
            return Status::newFatal( 'tags-activate-not-found', $tag );
        }
 
        return Status::newGood();
    }
 
    public static function activateTagWithChecks( string $tag, string $reason, Authority $performer,
        bool $ignoreWarnings = false, array $logEntryTags = []
    ) {
        // are we allowed to do this?
        $result = self::canActivateTag( $tag, $performer );
        if ( $ignoreWarnings ? !$result->isOK() : !$result->isGood() ) {
            $result->value = null;
            return $result;
        }
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
 
        $changeTagsStore->defineTag( $tag );
 
        $logId = $changeTagsStore->logTagManagementAction( 'activate', $tag, $reason, $performer->getUser(),
            null, $logEntryTags );
 
        return Status::newGood( $logId );
    }
 
    public static function canDeactivateTag( string $tag, ?Authority $performer = null ) {
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        if ( $performer !== null ) {
            if ( !$performer->isAllowed( 'managechangetags' ) ) {
                return Status::newFatal( 'tags-manage-no-permission' );
            }
            if ( $performer->getBlock() && $performer->getBlock()->isSitewide() ) {
                return Status::newFatal(
                    'tags-manage-blocked',
                    $performer->getUser()->getName()
                );
            }
            if ( $changeTagsStore->filterViewableTags( [ $tag ], $performer ) === [] ) {
                return Status::newFatal( 'tags-deactivate-not-found', $tag );
            }
        }
 
        // only explicitly-defined tags can be deactivated
        $explicitlyDefinedTags = $changeTagsStore->listExplicitlyDefinedTags();
        if ( !in_array( $tag, $explicitlyDefinedTags ) ) {
            return Status::newFatal( 'tags-deactivate-not-allowed', $tag );
        }
        return Status::newGood();
    }
 
    public static function deactivateTagWithChecks( string $tag, string $reason, Authority $performer,
        bool $ignoreWarnings = false, array $logEntryTags = []
    ) {
        // are we allowed to do this?
        $result = self::canDeactivateTag( $tag, $performer );
        if ( $ignoreWarnings ? !$result->isOK() : !$result->isGood() ) {
            $result->value = null;
            return $result;
        }
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
 
        $changeTagsStore->undefineTag( $tag );
 
        $logId = $changeTagsStore->logTagManagementAction( 'deactivate', $tag, $reason,
            $performer->getUser(), null, $logEntryTags );
 
        return Status::newGood( $logId );
    }
 
    public static function isTagNameValid( $tag ) {
        // no empty tags
        if ( $tag === '' ) {
            return Status::newFatal( 'tags-create-no-name' );
        }
 
        // tags cannot contain commas (used to be used as a delimiter in tag_summary table),
        // pipe (used as a delimiter between multiple tags in
        // SpecialRecentchanges and friends), or slashes (would break tag description messages in
        // MediaWiki namespace)
        if ( str_contains( $tag, ',' ) || str_contains( $tag, '|' ) || str_contains( $tag, '/' ) ) {
            return Status::newFatal( 'tags-create-invalid-chars' );
        }
 
        // could the MediaWiki namespace description messages be created?
        $title = Title::makeTitleSafe( NS_MEDIAWIKI, "Tag-$tag-description" );
        if ( $title === null ) {
            return Status::newFatal( 'tags-create-invalid-title-chars' );
        }
 
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        if ( $changeTagsStore->isRestrictedTag( $tag ) ) {
            return Status::newFatal( 'tags-create-reserved-prefix', ChangeTagsStore::PRIVATE_TAG_PREFIX );
        }
 
        return Status::newGood();
    }
 
    public static function canCreateTag( $tag, ?Authority $performer = null ) {
        $user = null;
        $services = MediaWikiServices::getInstance();
        if ( $performer !== null ) {
            if ( !$performer->isAllowed( 'managechangetags' ) ) {
                return Status::newFatal( 'tags-manage-no-permission' );
            }
            if ( $performer->getBlock() && $performer->getBlock()->isSitewide() ) {
                return Status::newFatal(
                    'tags-manage-blocked',
                    $performer->getUser()->getName()
                );
            }
            // ChangeTagCanCreate hook still needs a full User object
            $user = $services->getUserFactory()->newFromAuthority( $performer );
        }
 
        $status = self::isTagNameValid( $tag );
        if ( !$status->isGood() ) {
            return $status;
        }
 
        // does the tag already exist?
        $changeTagsStore = $services->getChangeTagsStore();
        if (
            isset( $changeTagsStore->tagUsageStatistics()[$tag] ) ||
            in_array( $tag, $changeTagsStore->listDefinedTags() )
        ) {
            return Status::newFatal( 'tags-create-already-exists', $tag );
        }
 
        // check with hooks
        $canCreateResult = Status::newGood();
        ( new HookRunner( $services->getHookContainer() ) )->onChangeTagCanCreate( $tag, $user, $canCreateResult );
        return $canCreateResult;
    }
 
    public static function createTagWithChecks( string $tag, string $reason, Authority $performer,
        bool $ignoreWarnings = false, array $logEntryTags = []
    ) {
        // are we allowed to do this?
        $result = self::canCreateTag( $tag, $performer );
        if ( $ignoreWarnings ? !$result->isOK() : !$result->isGood() ) {
            $result->value = null;
            return $result;
        }
 
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        $changeTagsStore->defineTag( $tag );
        $logId = $changeTagsStore->logTagManagementAction( 'create', $tag, $reason,
            $performer->getUser(), null, $logEntryTags );
 
        return Status::newGood( $logId );
    }
 
    public static function canDeleteTag( string $tag, ?Authority $performer = null, int $flags = 0 ) {
        $user = null;
        $services = MediaWikiServices::getInstance();
        $changeTagsStore = $services->getChangeTagsStore();
        if ( $performer !== null ) {
            if ( !$performer->isAllowed( 'deletechangetags' ) ) {
                return Status::newFatal( 'tags-delete-no-permission' );
            }
            if ( $performer->getBlock() && $performer->getBlock()->isSitewide() ) {
                return Status::newFatal(
                    'tags-manage-blocked',
                    $performer->getUser()->getName()
                );
            }
            if ( $changeTagsStore->filterViewableTags( [ $tag ], $performer ) === [] ) {
                return Status::newFatal( 'tags-delete-not-found', $tag );
            }
            // ChangeTagCanDelete hook still needs a full User object
            $user = $services->getUserFactory()->newFromAuthority( $performer );
        }
 
        $tagUsage = $changeTagsStore->tagUsageStatistics();
        if (
            !isset( $tagUsage[$tag] ) &&
            !in_array( $tag, $changeTagsStore->listDefinedTags() )
        ) {
            return Status::newFatal( 'tags-delete-not-found', $tag );
        }
 
        if ( $flags !== self::BYPASS_MAX_USAGE_CHECK &&
            isset( $tagUsage[$tag] ) &&
            $tagUsage[$tag] > self::MAX_DELETE_USES
        ) {
            return Status::newFatal( 'tags-delete-too-many-uses', $tag, self::MAX_DELETE_USES );
        }
 
        $softwareDefined = $changeTagsStore->listSoftwareDefinedTags();
        if ( in_array( $tag, $softwareDefined ) ) {
            // extension-defined tags can't be deleted unless the extension
            // specifically allows it
            $status = Status::newFatal( 'tags-delete-not-allowed' );
        } else {
            // user-defined tags are deletable unless otherwise specified
            $status = Status::newGood();
        }
 
        ( new HookRunner( $services->getHookContainer() ) )->onChangeTagCanDelete( $tag, $user, $status );
        return $status;
    }
 
    public static function deleteTagWithChecks( string $tag, string $reason, Authority $performer,
        bool $ignoreWarnings = false, array $logEntryTags = []
    ) {
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        // are we allowed to do this?
        $result = self::canDeleteTag( $tag, $performer );
        if ( $ignoreWarnings ? !$result->isOK() : !$result->isGood() ) {
            $result->value = null;
            return $result;
        }
 
        // store the tag usage statistics
        $hitcount = $changeTagsStore->tagUsageStatistics()[$tag] ?? 0;
 
        // do it!
        $deleteResult = $changeTagsStore->deleteTagEverywhere( $tag );
        if ( !$deleteResult->isOK() ) {
            return $deleteResult;
        }
 
        // log it
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        $logId = $changeTagsStore->logTagManagementAction( 'delete', $tag, $reason, $performer->getUser(),
            $hitcount, $logEntryTags );
 
        $deleteResult->value = $logId;
        return $deleteResult;
    }
 
    public static function getChangeTagListSummary(
        MessageLocalizer $localizer,
        Language $lang,
        bool $activeOnly = self::TAG_SET_ACTIVE_ONLY,
        bool $useAllTags = self::USE_ALL_TAGS
    ) {
        wfDeprecated( __METHOD__, '1.47' );
        return MediaWikiServices::getInstance()->getChangeTagsFormatter()->getChangeTagListSummary(
            new SimpleLocalizationContext( $localizer, $lang ),
            ( $localizer instanceof IContextSource ? $localizer : RequestContext::getMain() )->getAuthority(),
            $activeOnly,
            $useAllTags
        );
    }
 
    public static function getChangeTagList(
        MessageLocalizer $localizer, Language $lang,
        bool $activeOnly = self::TAG_SET_ACTIVE_ONLY, bool $useAllTags = self::USE_ALL_TAGS,
        $labelsOnly = false
    ) {
        wfDeprecated( __METHOD__, '1.47' );
        return MediaWikiServices::getInstance()->getChangeTagsFormatter()->getChangeTagList(
            new SimpleLocalizationContext( $localizer, $lang ),
            ( $localizer instanceof IContextSource ? $localizer : RequestContext::getMain() )->getAuthority(),
            $activeOnly,
            $useAllTags,
            $labelsOnly
        );
    }
 
    public static function showTagEditingUI( Authority $performer ) {
        $changeTagsStore = MediaWikiServices::getInstance()->getChangeTagsStore();
        return $performer->isAllowed( 'changetags' ) && (bool)$changeTagsStore->listExplicitlyDefinedTags();
    }
}
 
class_alias( ChangeTags::class, 'ChangeTags' );