| Server IP : 167.235.224.122 / Your IP : 216.73.216.110 Web Server : Apache/2.4.58 (Ubuntu) System : Linux newplayground 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:33:11 UTC 2026 aarch64 User : deploy ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/html/wiki/includes/api/ |
Upload File : |
<?php
/**
* Copyright © 2007 Roan Kattouw <roan.kattouw@gmail.com>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* http://www.gnu.org/copyleft/gpl.html
*
* @file
*/
namespace MediaWiki\Api;
use MediaWiki\Block\Block;
use MediaWiki\Block\BlockPermissionCheckerFactory;
use MediaWiki\Block\BlockTargetFactory;
use MediaWiki\Block\DatabaseBlockStore;
use MediaWiki\Block\UnblockUserFactory;
use MediaWiki\MainConfigNames;
use MediaWiki\ParamValidator\TypeDef\UserDef;
use MediaWiki\Title\Title;
use MediaWiki\User\Options\UserOptionsLookup;
use MediaWiki\User\UserIdentityLookup;
use MediaWiki\Watchlist\WatchedItemStoreInterface;
use MediaWiki\Watchlist\WatchlistManager;
use RuntimeException;
use Wikimedia\ParamValidator\ParamValidator;
use Wikimedia\ParamValidator\TypeDef\ExpiryDef;
/**
* API module that facilitates the unblocking of users. Requires API write mode
* to be enabled.
*
* @ingroup API
*/
class ApiUnblock extends ApiBase {
use ApiBlockInfoTrait;
use ApiWatchlistTrait;
private BlockPermissionCheckerFactory $permissionCheckerFactory;
private UnblockUserFactory $unblockUserFactory;
private UserIdentityLookup $userIdentityLookup;
private WatchedItemStoreInterface $watchedItemStore;
private DatabaseBlockStore $blockStore;
private BlockTargetFactory $blockTargetFactory;
public function __construct(
ApiMain $main,
string $action,
BlockPermissionCheckerFactory $permissionCheckerFactory,
UnblockUserFactory $unblockUserFactory,
UserIdentityLookup $userIdentityLookup,
WatchedItemStoreInterface $watchedItemStore,
WatchlistManager $watchlistManager,
UserOptionsLookup $userOptionsLookup,
DatabaseBlockStore $blockStore,
BlockTargetFactory $blockTargetFactory
) {
parent::__construct( $main, $action );
$this->permissionCheckerFactory = $permissionCheckerFactory;
$this->unblockUserFactory = $unblockUserFactory;
$this->userIdentityLookup = $userIdentityLookup;
$this->watchedItemStore = $watchedItemStore;
// Variables needed in ApiWatchlistTrait trait
$this->watchlistExpiryEnabled = $this->getConfig()->get( MainConfigNames::WatchlistExpiry );
$this->watchlistMaxDuration =
$this->getConfig()->get( MainConfigNames::WatchlistExpiryMaxDuration );
$this->watchlistManager = $watchlistManager;
$this->userOptionsLookup = $userOptionsLookup;
$this->blockStore = $blockStore;
$this->blockTargetFactory = $blockTargetFactory;
}
/**
* Unblocks the specified user or provides the reason the unblock failed.
*/
public function execute() {
$performer = $this->getUser();
$params = $this->extractRequestParams();
$this->requireOnlyOneParameter( $params, 'id', 'user', 'userid' );
if ( !$this->getAuthority()->isAllowed( 'block' ) ) {
$this->dieWithError( 'apierror-permissiondenied-unblock', 'permissiondenied' );
}
if ( $params['userid'] !== null ) {
$identity = $this->userIdentityLookup->getUserIdentityByUserId( $params['userid'] );
if ( !$identity ) {
$this->dieWithError( [ 'apierror-nosuchuserid', $params['userid'] ], 'nosuchuserid' );
}
$params['user'] = $identity;
}
$blockToRemove = null;
if ( $params['id'] !== null ) {
$blockToRemove = $this->blockStore->newFromID( $params['id'], true );
if ( !$blockToRemove ) {
$this->dieWithError(
[ 'apierror-nosuchblockid', $params['id'] ],
'nosuchblockid' );
}
$target = $blockToRemove->getRedactedTarget();
if ( !$target ) {
throw new RuntimeException( 'Block has no target' );
}
} else {
$target = $this->blockTargetFactory->newFromUser( $params['user'] );
}
# T17810: blocked admins should have limited access here
$status = $this->permissionCheckerFactory
->newChecker(
$this->getAuthority()
)->checkBlockPermissions( $target );
if ( $status !== true ) {
$this->dieWithError(
$status,
null,
// @phan-suppress-next-line PhanTypeMismatchArgumentNullable Block is checked and not null
[ 'blockinfo' => $this->getBlockDetails( $performer->getBlock() ) ]
);
}
if ( $blockToRemove !== null ) {
$status = $this->unblockUserFactory->newRemoveBlock(
$blockToRemove,
$this->getAuthority(),
$params['reason'],
$params['tags'] ?? []
)->unblock();
} else {
$status = $this->unblockUserFactory->newUnblockUser(
$target,
$this->getAuthority(),
$params['reason'],
$params['tags'] ?? []
)->unblock();
}
if ( !$status->isOK() ) {
$this->dieStatus( $status );
}
$block = $status->getValue();
$targetType = $block->getType();
$targetName = $targetType === Block::TYPE_AUTO ? '' : $block->getTargetName();
$targetUserId = $block->getTargetUserIdentity() ? $block->getTargetUserIdentity()->getId() : 0;
$watchlistExpiry = $this->getExpiryFromParams( $params );
$watchuser = $params['watchuser'];
$userPage = Title::makeTitle( NS_USER, $targetName );
if ( $watchuser && $targetType !== Block::TYPE_RANGE && $targetType !== Block::TYPE_AUTO ) {
$this->setWatch( 'watch', $userPage, $this->getUser(), null, $watchlistExpiry );
} else {
$watchuser = false;
$watchlistExpiry = null;
}
$res = [
'id' => $block->getId(),
'user' => $targetName,
'userid' => $targetUserId,
'reason' => $params['reason'],
'watchuser' => $watchuser,
];
if ( $watchlistExpiry !== null ) {
$res['watchlistexpiry'] = $this->getWatchlistExpiry(
$this->watchedItemStore,
$userPage,
$this->getUser()
);
}
$this->getResult()->addValue( null, $this->getModuleName(), $res );
}
public function mustBePosted() {
return true;
}
public function isWriteMode() {
return true;
}
public function getAllowedParams() {
$params = [
'id' => [
ParamValidator::PARAM_TYPE => 'integer',
],
'user' => [
ParamValidator::PARAM_TYPE => 'user',
UserDef::PARAM_ALLOWED_USER_TYPES => [ 'name', 'ip', 'temp', 'cidr', 'id' ],
UserDef::PARAM_RETURN_OBJECT => true,
],
'userid' => [
ParamValidator::PARAM_TYPE => 'integer',
ParamValidator::PARAM_DEPRECATED => true,
],
'reason' => '',
'tags' => [
ParamValidator::PARAM_TYPE => 'tags',
ParamValidator::PARAM_ISMULTI => true,
],
'watchuser' => false,
];
// Params appear in the docs in the order they are defined,
// which is why this is here and not at the bottom.
// @todo Find better way to support insertion at arbitrary position
if ( $this->watchlistExpiryEnabled ) {
$params += [
'watchlistexpiry' => [
ParamValidator::PARAM_TYPE => 'expiry',
ExpiryDef::PARAM_MAX => $this->watchlistMaxDuration,
ExpiryDef::PARAM_USE_MAX => true,
]
];
}
return $params;
}
public function needsToken() {
return 'csrf';
}
protected function getExamplesMessages() {
return [
'action=unblock&id=105'
=> 'apihelp-unblock-example-id',
'action=unblock&user=Bob&reason=Sorry%20Bob'
=> 'apihelp-unblock-example-user',
];
}
public function getHelpUrls() {
return 'https://www.mediawiki.org/wiki/Special:MyLanguage/API:Block';
}
}
/** @deprecated class alias since 1.43 */
class_alias( ApiUnblock::class, 'ApiUnblock' );