mOverrideRequest = $request; } /** * Loader */ function load() { global $wgAuth, $wgHiddenPrefs, $wgEnableEmail, $wgRedirectOnLogin; if ( $this->mLoaded ) { return; } $this->mLoaded = true; if ( $this->mOverrideRequest === null ) { $request = $this->getRequest(); } else { $request = $this->mOverrideRequest; } $this->mType = $request->getText( 'type' ); $this->mUsername = $request->getText( 'wpName' ); $this->mPassword = $request->getText( 'wpPassword' ); $this->mRetype = $request->getText( 'wpRetype' ); $this->mDomain = $request->getText( 'wpDomain' ); $this->mReason = $request->getText( 'wpReason' ); $this->mReturnTo = $request->getVal( 'returnto' ); $this->mReturnToQuery = $request->getVal( 'returntoquery' ); $this->mCookieCheck = $request->getVal( 'wpCookieCheck' ); $this->mPosted = $request->wasPosted(); $this->mCreateaccount = $request->getCheck( 'wpCreateaccount' ); $this->mCreateaccountMail = $request->getCheck( 'wpCreateaccountMail' ) && $wgEnableEmail; $this->mLoginattempt = $request->getCheck( 'wpLoginattempt' ); $this->mAction = $request->getVal( 'action' ); $this->mRemember = $request->getCheck( 'wpRemember' ); $this->mStickHTTPS = $request->getCheck( 'wpStickHTTPS' ); $this->mLanguage = $request->getText( 'uselang' ); $this->mSkipCookieCheck = $request->getCheck( 'wpSkipCookieCheck' ); $this->mToken = ( $this->mType == 'signup' ) ? $request->getVal( 'wpCreateaccountToken' ) : $request->getVal( 'wpLoginToken' ); if ( $wgRedirectOnLogin ) { $this->mReturnTo = $wgRedirectOnLogin; $this->mReturnToQuery = ''; } if( $wgEnableEmail ) { $this->mEmail = $request->getText( 'wpEmail' ); } else { $this->mEmail = ''; } if( !in_array( 'realname', $wgHiddenPrefs ) ) { $this->mRealName = $request->getText( 'wpRealName' ); } else { $this->mRealName = ''; } if( !$wgAuth->validDomain( $this->mDomain ) ) { if ( isset( $_SESSION['wsDomain'] ) ) { $this->mDomain = $_SESSION['wsDomain']; } else { $this->mDomain = 'invaliddomain'; } } $wgAuth->setDomain( $this->mDomain ); # When switching accounts, it sucks to get automatically logged out $returnToTitle = Title::newFromText( $this->mReturnTo ); if( is_object( $returnToTitle ) && $returnToTitle->isSpecial( 'Userlogout' ) ) { $this->mReturnTo = ''; $this->mReturnToQuery = ''; } } function getDescription() { return $this->msg( $this->getUser()->isAllowed( 'createaccount' ) ? 'userlogin' : 'userloginnocreate' )->text(); } public function execute( $par ) { if ( session_id() == '' ) { wfSetupSession(); } $this->load(); $this->setHeaders(); if ( $par == 'signup' ) { # Check for [[Special:Userlogin/signup]] $this->mType = 'signup'; } if ( !is_null( $this->mCookieCheck ) ) { $this->onCookieRedirectCheck( $this->mCookieCheck ); return; } elseif( $this->mPosted ) { if( $this->mCreateaccount ) { return $this->addNewAccount(); } elseif ( $this->mCreateaccountMail ) { return $this->addNewAccountMailPassword(); } elseif ( ( 'submitlogin' == $this->mAction ) || $this->mLoginattempt ) { return $this->processLogin(); } } $this->mainLoginForm( '' ); } /** * @private */ function addNewAccountMailPassword() { if ( $this->mEmail == '' ) { $this->mainLoginForm( $this->msg( 'noemailcreate' )->escaped() ); return; } $u = $this->addNewaccountInternal(); if ( $u == null ) { return; } // Wipe the initial password and mail a temporary one $u->setPassword( null ); $u->saveSettings(); $result = $this->mailPasswordInternal( $u, false, 'createaccount-title', 'createaccount-text' ); wfRunHooks( 'AddNewAccount', array( $u, true ) ); $u->addNewUserLogEntry( true, $this->mReason ); $out = $this->getOutput(); $out->setPageTitle( $this->msg( 'accmailtitle' ) ); if( !$result->isGood() ) { $this->mainLoginForm( $this->msg( 'mailerror', $result->getWikiText() )->text() ); } else { $out->addWikiMsg( 'accmailtext', $u->getName(), $u->getEmail() ); $out->returnToMain( false ); } } /** * @private */ function addNewAccount() { global $wgUser, $wgEmailAuthentication, $wgLoginLanguageSelector; # Create the account and abort if there's a problem doing so $u = $this->addNewAccountInternal(); if( $u == null ) { return; } # If we showed up language selection links, and one was in use, be # smart (and sensible) and save that language as the user's preference if( $wgLoginLanguageSelector && $this->mLanguage ) { $u->setOption( 'language', $this->mLanguage ); } $out = $this->getOutput(); # Send out an email authentication message if needed if( $wgEmailAuthentication && Sanitizer::validateEmail( $u->getEmail() ) ) { $status = $u->sendConfirmationMail(); if( $status->isGood() ) { $out->addWikiMsg( 'confirmemail_oncreate' ); } else { $out->addWikiText( $status->getWikiText( 'confirmemail_sendfailed' ) ); } } # Save settings (including confirmation token) $u->saveSettings(); # If not logged in, assume the new account as the current one and set # session cookies then show a "welcome" message or a "need cookies" # message as needed if( $this->getUser()->isAnon() ) { $u->setCookies(); $wgUser = $u; // This should set it for OutputPage and the Skin // which is needed or the personal links will be // wrong. $this->getContext()->setUser( $u ); wfRunHooks( 'AddNewAccount', array( $u, false ) ); $u->addNewUserLogEntry(); if( $this->hasSessionCookie() ) { return $this->successfulCreation(); } else { return $this->cookieRedirectCheck( 'new' ); } } else { # Confirm that the account was created $out->setPageTitle( $this->msg( 'accountcreated' ) ); $out->addWikiMsg( 'accountcreatedtext', $u->getName() ); $out->returnToMain( false, $this->getTitle() ); wfRunHooks( 'AddNewAccount', array( $u, false ) ); $u->addNewUserLogEntry( false, $this->mReason ); return true; } } /** * @private */ function addNewAccountInternal() { global $wgAuth, $wgMemc, $wgAccountCreationThrottle, $wgMinimalPasswordLength, $wgEmailConfirmToEdit; // If the user passes an invalid domain, something is fishy if( !$wgAuth->validDomain( $this->mDomain ) ) { $this->mainLoginForm( $this->msg( 'wrongpassword' )->text() ); return false; } // If we are not allowing users to login locally, we should be checking // to see if the user is actually able to authenticate to the authenti- // cation server before they create an account (otherwise, they can // create a local account and login as any domain user). We only need // to check this for domains that aren't local. if( 'local' != $this->mDomain && $this->mDomain != '' ) { if( !$wgAuth->canCreateAccounts() && ( !$wgAuth->userExists( $this->mUsername ) || !$wgAuth->authenticate( $this->mUsername, $this->mPassword ) ) ) { $this->mainLoginForm( $this->msg( 'wrongpassword' )->text() ); return false; } } if ( wfReadOnly() ) { throw new ReadOnlyError; } # Request forgery checks. if ( !self::getCreateaccountToken() ) { self::setCreateaccountToken(); $this->mainLoginForm( $this->msg( 'nocookiesfornew' )->parse() ); return false; } # The user didn't pass a createaccount token if ( !$this->mToken ) { $this->mainLoginForm( $this->msg( 'sessionfailure' )->text() ); return false; } # Validate the createaccount token if ( $this->mToken !== self::getCreateaccountToken() ) { $this->mainLoginForm( $this->msg( 'sessionfailure' )->text() ); return false; } # Check permissions $currentUser = $this->getUser(); if ( !$currentUser->isAllowed( 'createaccount' ) ) { throw new PermissionsError( 'createaccount' ); } elseif ( $currentUser->isBlockedFromCreateAccount() ) { $this->userBlockedMessage( $currentUser->isBlockedFromCreateAccount() ); return false; } $ip = $this->getRequest()->getIP(); if ( $currentUser->isDnsBlacklisted( $ip, true /* check $wgProxyWhitelist */ ) ) { $this->mainLoginForm( $this->msg( 'sorbs_create_account_reason' )->text() . ' (' . htmlspecialchars( $ip ) . ')' ); return false; } # Now create a dummy user ($u) and check if it is valid $name = trim( $this->mUsername ); $u = User::newFromName( $name, 'creatable' ); if ( !is_object( $u ) ) { $this->mainLoginForm( $this->msg( 'noname' )->text() ); return false; } if ( 0 != $u->idForName() ) { $this->mainLoginForm( $this->msg( 'userexists' )->text() ); return false; } if ( 0 != strcmp( $this->mPassword, $this->mRetype ) ) { $this->mainLoginForm( $this->msg( 'badretype' )->text() ); return false; } # check for minimal password length $valid = $u->getPasswordValidity( $this->mPassword ); if ( $valid !== true ) { if ( !$this->mCreateaccountMail ) { if ( is_array( $valid ) ) { $message = array_shift( $valid ); $params = $valid; } else { $message = $valid; $params = array( $wgMinimalPasswordLength ); } $this->mainLoginForm( $this->msg( $message, $params )->text() ); return false; } else { # do not force a password for account creation by email # set invalid password, it will be replaced later by a random generated password $this->mPassword = null; } } # if you need a confirmed email address to edit, then obviously you # need an email address. if ( $wgEmailConfirmToEdit && empty( $this->mEmail ) ) { $this->mainLoginForm( $this->msg( 'noemailtitle' )->text() ); return false; } if( !empty( $this->mEmail ) && !Sanitizer::validateEmail( $this->mEmail ) ) { $this->mainLoginForm( $this->msg( 'invalidemailaddress' )->text() ); return false; } # Set some additional data so the AbortNewAccount hook can be used for # more than just username validation $u->setEmail( $this->mEmail ); $u->setRealName( $this->mRealName ); $abortError = ''; if( !wfRunHooks( 'AbortNewAccount', array( $u, &$abortError ) ) ) { // Hook point to add extra creation throttles and blocks wfDebug( "LoginForm::addNewAccountInternal: a hook blocked creation\n" ); $this->mainLoginForm( $abortError ); return false; } // Hook point to check for exempt from account creation throttle if ( !wfRunHooks( 'ExemptFromAccountCreationThrottle', array( $ip ) ) ) { wfDebug( "LoginForm::exemptFromAccountCreationThrottle: a hook allowed account creation w/o throttle\n" ); } else { if ( ( $wgAccountCreationThrottle && $currentUser->isPingLimitable() ) ) { $key = wfMemcKey( 'acctcreate', 'ip', $ip ); $value = $wgMemc->get( $key ); if ( !$value ) { $wgMemc->set( $key, 0, 86400 ); } if ( $value >= $wgAccountCreationThrottle ) { $this->throttleHit( $wgAccountCreationThrottle ); return false; } $wgMemc->incr( $key ); } } if( !$wgAuth->addUser( $u, $this->mPassword, $this->mEmail, $this->mRealName ) ) { $this->mainLoginForm( $this->msg( 'externaldberror' )->text() ); return false; } self::clearCreateaccountToken(); return $this->initUser( $u, false ); } /** * Actually add a user to the database. * Give it a User object that has been initialised with a name. * * @param $u User object. * @param $autocreate boolean -- true if this is an autocreation via auth plugin * @return User object. * @private */ function initUser( $u, $autocreate ) { global $wgAuth; $u->addToDatabase(); if ( $wgAuth->allowPasswordChange() ) { $u->setPassword( $this->mPassword ); } $u->setEmail( $this->mEmail ); $u->setRealName( $this->mRealName ); $u->setToken(); $wgAuth->initUser( $u, $autocreate ); if ( $this->mExtUser ) { $this->mExtUser->linkToLocal( $u->getId() ); $email = $this->mExtUser->getPref( 'emailaddress' ); if ( $email && !$this->mEmail ) { $u->setEmail( $email ); } } $u->setOption( 'rememberpassword', $this->mRemember ? 1 : 0 ); $u->saveSettings(); # Update user count $ssUpdate = new SiteStatsUpdate( 0, 0, 0, 0, 1 ); $ssUpdate->doUpdate(); return $u; } /** * Internally authenticate the login request. * * This may create a local account as a side effect if the * authentication plugin allows transparent local account * creation. */ public function authenticateUserData() { global $wgUser, $wgAuth; $this->load(); if ( $this->mUsername == '' ) { return self::NO_NAME; } // We require a login token to prevent login CSRF // Handle part of this before incrementing the throttle so // token-less login attempts don't count towards the throttle // but wrong-token attempts do. // If the user doesn't have a login token yet, set one. if ( !self::getLoginToken() ) { self::setLoginToken(); return self::NEED_TOKEN; } // If the user didn't pass a login token, tell them we need one if ( !$this->mToken ) { return self::NEED_TOKEN; } $throttleCount = self::incLoginThrottle( $this->mUsername ); if ( $throttleCount === true ) { return self::THROTTLED; } // Validate the login token if ( $this->mToken !== self::getLoginToken() ) { return self::WRONG_TOKEN; } // Load the current user now, and check to see if we're logging in as // the same name. This is necessary because loading the current user // (say by calling getName()) calls the UserLoadFromSession hook, which // potentially creates the user in the database. Until we load $wgUser, // checking for user existence using User::newFromName($name)->getId() below // will effectively be using stale data. if ( $this->getUser()->getName() === $this->mUsername ) { wfDebug( __METHOD__ . ": already logged in as {$this->mUsername}\n" ); return self::SUCCESS; } $this->mExtUser = ExternalUser::newFromName( $this->mUsername ); # TODO: Allow some magic here for invalid external names, e.g., let the # user choose a different wiki name. $u = User::newFromName( $this->mUsername ); if( !( $u instanceof User ) || !User::isUsableName( $u->getName() ) ) { return self::ILLEGAL; } $isAutoCreated = false; if ( 0 == $u->getID() ) { $status = $this->attemptAutoCreate( $u ); if ( $status !== self::SUCCESS ) { return $status; } else { $isAutoCreated = true; } } else { global $wgExternalAuthType, $wgAutocreatePolicy; if ( $wgExternalAuthType && $wgAutocreatePolicy != 'never' && is_object( $this->mExtUser ) && $this->mExtUser->authenticate( $this->mPassword ) ) { # The external user and local user have the same name and # password, so we assume they're the same. $this->mExtUser->linkToLocal( $u->getID() ); } $u->load(); } // Give general extensions, such as a captcha, a chance to abort logins $abort = self::ABORTED; if( !wfRunHooks( 'AbortLogin', array( $u, $this->mPassword, &$abort, &$this->mAbortLoginErrorMsg ) ) ) { return $abort; } global $wgBlockDisablesLogin; if ( !$u->checkPassword( $this->mPassword ) ) { if( $u->checkTemporaryPassword( $this->mPassword ) ) { // The e-mailed temporary password should not be used for actu- // al logins; that's a very sloppy habit, and insecure if an // attacker has a few seconds to click "search" on someone's o- // pen mail reader. // // Allow it to be used only to reset the password a single time // to a new value, which won't be in the user's e-mail ar- // chives. // // For backwards compatibility, we'll still recognize it at the // login form to minimize surprises for people who have been // logging in with a temporary password for some time. // // As a side-effect, we can authenticate the user's e-mail ad- // dress if it's not already done, since the temporary password // was sent via e-mail. if( !$u->isEmailConfirmed() ) { $u->confirmEmail(); $u->saveSettings(); } // At this point we just return an appropriate code/ indicating // that the UI should show a password reset form; bot inter- // faces etc will probably just fail cleanly here. $retval = self::RESET_PASS; } else { $retval = ( $this->mPassword == '' ) ? self::EMPTY_PASS : self::WRONG_PASS; } } elseif ( $wgBlockDisablesLogin && $u->isBlocked() ) { // If we've enabled it, make it so that a blocked user cannot login $retval = self::USER_BLOCKED; } else { $wgAuth->updateUser( $u ); $wgUser = $u; // This should set it for OutputPage and the Skin // which is needed or the personal links will be // wrong. $this->getContext()->setUser( $u ); // Please reset throttle for successful logins, thanks! if ( $throttleCount ) { self::clearLoginThrottle( $this->mUsername ); } if ( $isAutoCreated ) { // Must be run after $wgUser is set, for correct new user log wfRunHooks( 'AuthPluginAutoCreate', array( $u ) ); } $retval = self::SUCCESS; } wfRunHooks( 'LoginAuthenticateAudit', array( $u, $this->mPassword, $retval ) ); return $retval; } /** * Increment the login attempt throttle hit count for the (username,current IP) * tuple unless the throttle was already reached. * @param $username string The user name * @return Bool|Integer The integer hit count or True if it is already at the limit */ public static function incLoginThrottle( $username ) { global $wgPasswordAttemptThrottle, $wgMemc, $wgRequest; $username = trim( $username ); // sanity $throttleCount = 0; if ( is_array( $wgPasswordAttemptThrottle ) ) { $throttleKey = wfMemcKey( 'password-throttle', $wgRequest->getIP(), md5( $username ) ); $count = $wgPasswordAttemptThrottle['count']; $period = $wgPasswordAttemptThrottle['seconds']; $throttleCount = $wgMemc->get( $throttleKey ); if ( !$throttleCount ) { $wgMemc->add( $throttleKey, 1, $period ); // start counter } elseif ( $throttleCount < $count ) { $wgMemc->incr( $throttleKey ); } elseif ( $throttleCount >= $count ) { return true; } } return $throttleCount; } /** * Clear the login attempt throttle hit count for the (username,current IP) tuple. * @param $username string The user name * @return void */ public static function clearLoginThrottle( $username ) { global $wgMemc, $wgRequest; $username = trim( $username ); // sanity $throttleKey = wfMemcKey( 'password-throttle', $wgRequest->getIP(), md5( $username ) ); $wgMemc->delete( $throttleKey ); } /** * Attempt to automatically create a user on login. Only succeeds if there * is an external authentication method which allows it. * * @param $user User * * @return integer Status code */ function attemptAutoCreate( $user ) { global $wgAuth, $wgAutocreatePolicy; if ( $this->getUser()->isBlockedFromCreateAccount() ) { wfDebug( __METHOD__ . ": user is blocked from account creation\n" ); return self::CREATE_BLOCKED; } /** * If the external authentication plugin allows it, automatically cre- * ate a new account for users that are externally defined but have not * yet logged in. */ if ( $this->mExtUser ) { # mExtUser is neither null nor false, so use the new ExternalAuth # system. if ( $wgAutocreatePolicy == 'never' ) { return self::NOT_EXISTS; } if ( !$this->mExtUser->authenticate( $this->mPassword ) ) { return self::WRONG_PLUGIN_PASS; } } else { # Old AuthPlugin. if ( !$wgAuth->autoCreate() ) { return self::NOT_EXISTS; } if ( !$wgAuth->userExists( $user->getName() ) ) { wfDebug( __METHOD__ . ": user does not exist\n" ); return self::NOT_EXISTS; } if ( !$wgAuth->authenticate( $user->getName(), $this->mPassword ) ) { wfDebug( __METHOD__ . ": \$wgAuth->authenticate() returned false, aborting\n" ); return self::WRONG_PLUGIN_PASS; } } $abortError = ''; if( !wfRunHooks( 'AbortAutoAccount', array( $user, &$abortError ) ) ) { // Hook point to add extra creation throttles and blocks wfDebug( "LoginForm::attemptAutoCreate: a hook blocked creation: $abortError\n" ); $this->mAbortLoginErrorMsg = $abortError; return self::ABORTED; } wfDebug( __METHOD__ . ": creating account\n" ); $this->initUser( $user, true ); return self::SUCCESS; } function processLogin() { global $wgMemc, $wgLang; switch ( $this->authenticateUserData() ) { case self::SUCCESS: # We've verified now, update the real record $user = $this->getUser(); if( (bool)$this->mRemember != (bool)$user->getOption( 'rememberpassword' ) ) { $user->setOption( 'rememberpassword', $this->mRemember ? 1 : 0 ); $user->saveSettings(); } else { $user->invalidateCache(); } $user->setCookies(); self::clearLoginToken(); // Reset the throttle $request = $this->getRequest(); $key = wfMemcKey( 'password-throttle', $request->getIP(), md5( $this->mUsername ) ); $wgMemc->delete( $key ); if( $this->hasSessionCookie() || $this->mSkipCookieCheck ) { /* Replace the language object to provide user interface in * correct language immediately on this first page load. */ $code = $request->getVal( 'uselang', $user->getOption( 'language' ) ); $userLang = Language::factory( $code ); $wgLang = $userLang; $this->getContext()->setLanguage( $userLang ); return $this->successfulLogin(); } else { return $this->cookieRedirectCheck( 'login' ); } break; case self::NEED_TOKEN: $this->mainLoginForm( $this->msg( 'nocookiesforlogin' )->parse() ); break; case self::WRONG_TOKEN: $this->mainLoginForm( $this->msg( 'sessionfailure' )->text() ); break; case self::NO_NAME: case self::ILLEGAL: $this->mainLoginForm( $this->msg( 'noname' )->text() ); break; case self::WRONG_PLUGIN_PASS: $this->mainLoginForm( $this->msg( 'wrongpassword' )->text() ); break; case self::NOT_EXISTS: if( $this->getUser()->isAllowed( 'createaccount' ) ) { $this->mainLoginForm( $this->msg( 'nosuchuser', wfEscapeWikiText( $this->mUsername ) )->parse() ); } else { $this->mainLoginForm( $this->msg( 'nosuchusershort', wfEscapeWikiText( $this->mUsername ) )->text() ); } break; case self::WRONG_PASS: $this->mainLoginForm( $this->msg( 'wrongpassword' )->text() ); break; case self::EMPTY_PASS: $this->mainLoginForm( $this->msg( 'wrongpasswordempty' )->text() ); break; case self::RESET_PASS: $this->resetLoginForm( $this->msg( 'resetpass_announce' )->text() ); break; case self::CREATE_BLOCKED: $this->userBlockedMessage( $this->getUser()->mBlock ); break; case self::THROTTLED: $this->mainLoginForm( $this->msg( 'login-throttled' )->text() ); break; case self::USER_BLOCKED: $this->mainLoginForm( $this->msg( 'login-userblocked', $this->mUsername )->escaped() ); break; case self::ABORTED: $this->mainLoginForm( $this->msg( $this->mAbortLoginErrorMsg )->text() ); break; default: throw new MWException( 'Unhandled case value' ); } } function resetLoginForm( $error ) { $this->getOutput()->addHTML( Xml::element('p', array( 'class' => 'error' ), $error ) ); $reset = new SpecialChangePassword(); $reset->setContext( $this->getContext() ); $reset->execute( null ); } /** * @param $u User object * @param $throttle Boolean * @param $emailTitle String: message name of email title * @param $emailText String: message name of email text * @return Status object */ function mailPasswordInternal( $u, $throttle = true, $emailTitle = 'passwordremindertitle', $emailText = 'passwordremindertext' ) { global $wgServer, $wgScript, $wgNewPasswordExpiry; if ( $u->getEmail() == '' ) { return Status::newFatal( 'noemail', $u->getName() ); } $ip = $this->getRequest()->getIP(); if( !$ip ) { return Status::newFatal( 'badipaddress' ); } $currentUser = $this->getUser(); wfRunHooks( 'User::mailPasswordInternal', array( &$currentUser, &$ip, &$u ) ); $np = $u->randomPassword(); $u->setNewpassword( $np, $throttle ); $u->saveSettings(); $userLanguage = $u->getOption( 'language' ); $m = $this->msg( $emailText, $ip, $u->getName(), $np, $wgServer . $wgScript, round( $wgNewPasswordExpiry / 86400 ) )->inLanguage( $userLanguage )->text(); $result = $u->sendMail( $this->msg( $emailTitle )->inLanguage( $userLanguage )->text(), $m ); return $result; } /** * Run any hooks registered for logins, then HTTP redirect to * $this->mReturnTo (or Main Page if that's undefined). Formerly we had a * nice message here, but that's really not as useful as just being sent to * wherever you logged in from. It should be clear that the action was * successful, given the lack of error messages plus the appearance of your * name in the upper right. * * @private */ function successfulLogin() { # Run any hooks; display injected HTML if any, else redirect $currentUser = $this->getUser(); $injected_html = ''; wfRunHooks( 'UserLoginComplete', array( &$currentUser, &$injected_html ) ); if( $injected_html !== '' ) { $this->displaySuccessfulLogin( 'loginsuccess', $injected_html ); } else { $titleObj = Title::newFromText( $this->mReturnTo ); if ( !$titleObj instanceof Title ) { $titleObj = Title::newMainPage(); } $redirectUrl = $titleObj->getFullURL( $this->mReturnToQuery ); global $wgSecureLogin; if( $wgSecureLogin && !$this->mStickHTTPS ) { $redirectUrl = preg_replace( '/^https:/', 'http:', $redirectUrl ); } $this->getOutput()->redirect( $redirectUrl ); } } /** * Run any hooks registered for logins, then display a message welcoming * the user. * * @private */ function successfulCreation() { # Run any hooks; display injected HTML $currentUser = $this->getUser(); $injected_html = ''; $welcome_creation_msg = 'welcomecreation'; wfRunHooks( 'UserLoginComplete', array( &$currentUser, &$injected_html ) ); /** * Let any extensions change what message is shown. * @see https://www.mediawiki.org/wiki/Manual:Hooks/BeforeWelcomeCreation * @since 1.18 */ wfRunHooks( 'BeforeWelcomeCreation', array( &$welcome_creation_msg, &$injected_html ) ); $this->displaySuccessfulLogin( $welcome_creation_msg, $injected_html ); } /** * Display a "login successful" page. */ private function displaySuccessfulLogin( $msgname, $injected_html ) { $out = $this->getOutput(); $out->setPageTitle( $this->msg( 'loginsuccesstitle' ) ); if( $msgname ){ $out->addWikiMsg( $msgname, wfEscapeWikiText( $this->getUser()->getName() ) ); } $out->addHTML( $injected_html ); if ( !empty( $this->mReturnTo ) ) { $out->returnToMain( null, $this->mReturnTo, $this->mReturnToQuery ); } else { $out->returnToMain( null ); } } /** * Output a message that informs the user that they cannot create an account because * there is a block on them or their IP which prevents account creation. Note that * User::isBlockedFromCreateAccount(), which gets this block, ignores the 'hardblock' * setting on blocks (bug 13611). * @param $block Block the block causing this error */ function userBlockedMessage( Block $block ) { # Let's be nice about this, it's likely that this feature will be used # for blocking large numbers of innocent people, e.g. range blocks on # schools. Don't blame it on the user. There's a small chance that it # really is the user's fault, i.e. the username is blocked and they # haven't bothered to log out before trying to create an account to # evade it, but we'll leave that to their guilty conscience to figure # out. $out = $this->getOutput(); $out->setPageTitle( $this->msg( 'cantcreateaccounttitle' ) ); $block_reason = $block->mReason; if ( strval( $block_reason ) === '' ) { $block_reason = $this->msg( 'blockednoreason' )->text(); } $out->addWikiMsg( 'cantcreateaccount-text', $block->getTarget(), $block_reason, $block->getByName() ); $out->returnToMain( false ); } /** * @private */ function mainLoginForm( $msg, $msgtype = 'error' ) { global $wgEnableEmail, $wgEnableUserEmail; global $wgHiddenPrefs, $wgLoginLanguageSelector; global $wgAuth, $wgEmailConfirmToEdit, $wgCookieExpiration; global $wgSecureLogin, $wgPasswordResetRoutes; $titleObj = $this->getTitle(); $user = $this->getUser(); if ( $this->mType == 'signup' ) { // Block signup here if in readonly. Keeps user from // going through the process (filling out data, etc) // and being informed later. $permErrors = $titleObj->getUserPermissionsErrors( 'createaccount', $user, true ); if ( count( $permErrors ) ) { throw new PermissionsError( 'createaccount', $permErrors ); } elseif ( $user->isBlockedFromCreateAccount() ) { $this->userBlockedMessage( $user->isBlockedFromCreateAccount() ); return; } elseif ( wfReadOnly() ) { throw new ReadOnlyError; } } if ( $this->mUsername == '' ) { if ( $user->isLoggedIn() ) { $this->mUsername = $user->getName(); } else { $this->mUsername = $this->getRequest()->getCookie( 'UserName' ); } } if ( $this->mType == 'signup' ) { $template = new UsercreateTemplate(); $q = 'action=submitlogin&type=signup'; $linkq = 'type=login'; $linkmsg = 'gotaccount'; } else { $template = new UserloginTemplate(); $q = 'action=submitlogin&type=login'; $linkq = 'type=signup'; $linkmsg = 'nologin'; } if ( !empty( $this->mReturnTo ) ) { $returnto = '&returnto=' . wfUrlencode( $this->mReturnTo ); if ( !empty( $this->mReturnToQuery ) ) { $returnto .= '&returntoquery=' . wfUrlencode( $this->mReturnToQuery ); } $q .= $returnto; $linkq .= $returnto; } # Don't show a "create account" link if the user can't if( $this->showCreateOrLoginLink( $user ) ) { # Pass any language selection on to the mode switch link if( $wgLoginLanguageSelector && $this->mLanguage ) { $linkq .= '&uselang=' . $this->mLanguage; } $link = Html::element( 'a', array( 'href' => $titleObj->getLocalURL( $linkq ) ), $this->msg( $linkmsg . 'link' )->text() ); # Calling either 'gotaccountlink' or 'nologinlink' $template->set( 'link', $this->msg( $linkmsg )->rawParams( $link )->parse() ); } else { $template->set( 'link', '' ); } $resetLink = $this->mType == 'signup' ? null : is_array( $wgPasswordResetRoutes ) && in_array( true, array_values( $wgPasswordResetRoutes ) ); $template->set( 'header', '' ); $template->set( 'name', $this->mUsername ); $template->set( 'password', $this->mPassword ); $template->set( 'retype', $this->mRetype ); $template->set( 'email', $this->mEmail ); $template->set( 'realname', $this->mRealName ); $template->set( 'domain', $this->mDomain ); $template->set( 'reason', $this->mReason ); $template->set( 'action', $titleObj->getLocalURL( $q ) ); $template->set( 'message', $msg ); $template->set( 'messagetype', $msgtype ); $template->set( 'createemail', $wgEnableEmail && $user->isLoggedIn() ); $template->set( 'userealname', !in_array( 'realname', $wgHiddenPrefs ) ); $template->set( 'useemail', $wgEnableEmail ); $template->set( 'emailrequired', $wgEmailConfirmToEdit ); $template->set( 'emailothers', $wgEnableUserEmail ); $template->set( 'canreset', $wgAuth->allowPasswordChange() ); $template->set( 'resetlink', $resetLink ); $template->set( 'canremember', ( $wgCookieExpiration > 0 ) ); $template->set( 'usereason', $user->isLoggedIn() ); $template->set( 'remember', $user->getOption( 'rememberpassword' ) || $this->mRemember ); $template->set( 'cansecurelogin', ( $wgSecureLogin === true ) ); $template->set( 'stickHTTPS', $this->mStickHTTPS ); if ( $this->mType == 'signup' ) { if ( !self::getCreateaccountToken() ) { self::setCreateaccountToken(); } $template->set( 'token', self::getCreateaccountToken() ); } else { if ( !self::getLoginToken() ) { self::setLoginToken(); } $template->set( 'token', self::getLoginToken() ); } # Prepare language selection links as needed if( $wgLoginLanguageSelector ) { $template->set( 'languages', $this->makeLanguageSelector() ); if( $this->mLanguage ) { $template->set( 'uselang', $this->mLanguage ); } } // Use loginend-https for HTTPS requests if it's not blank, loginend otherwise // Ditto for signupend $usingHTTPS = WebRequest::detectProtocol() == 'https'; $loginendHTTPS = $this->msg( 'loginend-https' ); $signupendHTTPS = $this->msg( 'signupend-https' ); if ( $usingHTTPS && !$loginendHTTPS->isBlank() ) { $template->set( 'loginend', $loginendHTTPS->parse() ); } else { $template->set( 'loginend', $this->msg( 'loginend' )->parse() ); } if ( $usingHTTPS && !$signupendHTTPS->isBlank() ) { $template->set( 'signupend', $signupendHTTPS->parse() ); } else { $template->set( 'signupend', $this->msg( 'signupend' )->parse() ); } // Give authentication and captcha plugins a chance to modify the form $wgAuth->modifyUITemplate( $template, $this->mType ); if ( $this->mType == 'signup' ) { wfRunHooks( 'UserCreateForm', array( &$template ) ); } else { wfRunHooks( 'UserLoginForm', array( &$template ) ); } $out = $this->getOutput(); $out->disallowUserJs(); // just in case... $out->addTemplate( $template ); } /** * @private * * @param $user User * * @return Boolean */ function showCreateOrLoginLink( &$user ) { if( $this->mType == 'signup' ) { return true; } elseif( $user->isAllowed( 'createaccount' ) ) { return true; } else { return false; } } /** * Check if a session cookie is present. * * This will not pick up a cookie set during _this_ request, but is meant * to ensure that the client is returning the cookie which was set on a * previous pass through the system. * * @private */ function hasSessionCookie() { global $wgDisableCookieCheck; return $wgDisableCookieCheck ? true : $this->getRequest()->checkSessionCookie(); } /** * Get the login token from the current session */ public static function getLoginToken() { global $wgRequest; return $wgRequest->getSessionData( 'wsLoginToken' ); } /** * Randomly generate a new login token and attach it to the current session */ public static function setLoginToken() { global $wgRequest; // Generate a token directly instead of using $user->editToken() // because the latter reuses $_SESSION['wsEditToken'] $wgRequest->setSessionData( 'wsLoginToken', MWCryptRand::generateHex( 32 ) ); } /** * Remove any login token attached to the current session */ public static function clearLoginToken() { global $wgRequest; $wgRequest->setSessionData( 'wsLoginToken', null ); } /** * Get the createaccount token from the current session */ public static function getCreateaccountToken() { global $wgRequest; return $wgRequest->getSessionData( 'wsCreateaccountToken' ); } /** * Randomly generate a new createaccount token and attach it to the current session */ public static function setCreateaccountToken() { global $wgRequest; $wgRequest->setSessionData( 'wsCreateaccountToken', MWCryptRand::generateHex( 32 ) ); } /** * Remove any createaccount token attached to the current session */ public static function clearCreateaccountToken() { global $wgRequest; $wgRequest->setSessionData( 'wsCreateaccountToken', null ); } /** * @private */ function cookieRedirectCheck( $type ) { $titleObj = SpecialPage::getTitleFor( 'Userlogin' ); $query = array( 'wpCookieCheck' => $type ); if ( $this->mReturnTo ) { $query['returnto'] = $this->mReturnTo; } $check = $titleObj->getFullURL( $query ); return $this->getOutput()->redirect( $check ); } /** * @private */ function onCookieRedirectCheck( $type ) { if ( !$this->hasSessionCookie() ) { if ( $type == 'new' ) { return $this->mainLoginForm( $this->msg( 'nocookiesnew' )->parse() ); } elseif ( $type == 'login' ) { return $this->mainLoginForm( $this->msg( 'nocookieslogin' )->parse() ); } else { # shouldn't happen return $this->mainLoginForm( $this->msg( 'error' )->text() ); } } else { return $this->successfulLogin(); } } /** * @private */ function throttleHit( $limit ) { $this->mainLoginForm( $this->msg( 'acct_creation_throttle_hit' )->numParams( $limit )->parse() ); } /** * Produce a bar of links which allow the user to select another language * during login/registration but retain "returnto" * * @return string */ function makeLanguageSelector() { $msg = $this->msg( 'loginlanguagelinks' )->inContentLanguage(); if( !$msg->isBlank() ) { $langs = explode( "\n", $msg->text() ); $links = array(); foreach( $langs as $lang ) { $lang = trim( $lang, '* ' ); $parts = explode( '|', $lang ); if ( count( $parts ) >= 2 ) { $links[] = $this->makeLanguageSelectorLink( $parts[0], trim( $parts[1] ) ); } } return count( $links ) > 0 ? $this->msg( 'loginlanguagelabel' )->rawParams( $this->getLanguage()->pipeList( $links ) )->escaped() : ''; } else { return ''; } } /** * Create a language selector link for a particular language * Links back to this page preserving type and returnto * * @param $text Link text * @param $lang Language code */ function makeLanguageSelectorLink( $text, $lang ) { $attr = array( 'uselang' => $lang ); if( $this->mType == 'signup' ) { $attr['type'] = 'signup'; } if( $this->mReturnTo ) { $attr['returnto'] = $this->mReturnTo; } return Linker::linkKnown( $this->getTitle(), htmlspecialchars( $text ), array(), $attr ); } }