Extension:UserSnoop
From MediaWiki.org
 |
WARNING: The code or configuration described here poses a major security risk.
Site administrators: You are advised against using it until this security issue is resolved. Problem: Vulnerable to Cross-site scripting attacks, because it passes user input directly to the browser. This may lead to user accounts being hijacked, among other things. Solution: strictly validate user input and/or apply escaping to all characters that have a special meaning in HTML |
 |
This extension stores its source code on a wiki page. Please be aware that this code may be unreviewed or maliciously altered. They may contain security holes, outdated interfaces that are no longer compatible etc. Note: No localisation updates are provided for this extension by translatewiki.net. |
 Release status: beta |
|||
|---|---|---|---|
 |
|||
| Implementation | Page action, Special page, Database | ||
| Description | Tracks user page hits and snoops on users | ||
| Author(s) | Kimon Andreou (Kimontalk) | ||
| Latest version | 1.0.0 (2007-11-16) | ||
| MediaWiki | Tested on 1.10 | ||
| Database changes | yes | ||
| License | GPL | ||
| Download | See below | ||
|
|||
|
|||
|
Translate the UserSnoop extension if possible |
|||
| Check usage and version matrix; code metrics | |||
Contents
Description[edit | edit source]
The UserSnoop MediaWiki extension/special page
This extension creates a new special page through which a user with the appropriate permissions ('usersnoop' and 'sysop') can view and manipulate users.
The main section is display of user information:
- internal user id
- username
- real name
- email address
- whether the user has new talk or not
- date of registration
- number of edits
- whether the user is blocked or not
- block reason (if blocked)
- list of *effective* groups
- last update of user profile
- user's signature
If the calling user is a member of the 'bureaucrat' group then they also can:
- user's last login
- force the user logout (boot user)
- block the user
- spread the block on the user to all of his/her ip addresses
- unblock the user
The actions on information that can be called on the target user:
- page views
- page name
- number of visits
- last visit
- watchlist
- page name
- last visit
- last edit by user
- last edit by any user
- new pages
- page name
- create date
- last edit by user
- last edit by any user
Installation[edit | edit source]
- Run UserPageViews.sql on your wiki db
- Run UserPageHits.sql on your wiki db
- Copy and paste the source code from UserSnoop.php and put it in your extensions folder
- Edit your LocalSettings.php to append:
#UserSnoop require_once("$IP/extensions/UserSnoop.php"); $wgGroupPermissions['usersnoop' ]['usersnoop'] = true; $wgGroupPermissions['sysop' ]['usersnoop'] = true; $wgGroupPermissions['bureaucrat' ]['usersnoop'] = true;
Source code[edit | edit source]
UserPageViews.sql[edit | edit source]
replace "wiki_" with the relevant prefix (if any) used for your database.
CREATE TABLE `wiki_user_page_views` ( `user_id` INT(5) UNSIGNED NOT NULL, `page_id` INT(8) UNSIGNED NOT NULL, `hits` INT(10) UNSIGNED NOT NULL, `last` CHAR(14) DEFAULT NULL, PRIMARY KEY (`user_id`,`page_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
UserPageHits.sql[edit | edit source]
replace "wiki_" (4 instances) with the relevant prefix (if any) used for your database.
CREATE VIEW `wiki_user_page_hits` AS SELECT `u`.`user_name` AS `user_name`, `u`.`user_real_name` AS `user_real_name`, `p`.`page_namespace` AS `page_namespace`, `p`.`page_title` AS `page_title`, `v`.`hits` AS `hits`, `v`.`last` AS `last` FROM ((`wiki_user` `u` JOIN `wiki_page` `p`) JOIN `wiki_user_page_views` `v`) WHERE ((`u`.`user_id` = `v`.`user_id`) AND (`p`.`page_id` = `v`.`page_id`)) ORDER BY `u`.`user_id`,`v`.`hits` DESC;
UserSnoop.php[edit | edit source]
<?php # The UserSnoop MediaWiki extension/special page # # This extension creates a new special page through which # a user with the appropriate permissions ('usersnoop' and 'sysop') # can view and manipulate users. # # The main section is display of user information: # - internal user id # - username # - real name # - email address # - whether the user has new talk or not # - date of registration # - number of edits # - whether the user is blocked or not # - block reason (if blocked) # - list of *effective* groups # - last update of user profile # - user's signature # # If the calling user is a member of the 'bureaucrat' group then they also can: # - user's last login # - force the user logout (boot user) # - block the user # - spread the block on the user to all of his/her ip addresses # - unblock the user # # The actions on information that can be called on the target user: # - page views # : page name # : number of visits # : last visit # - watchlist # : page name # : last visit # : last edit by user # : last edit by any user # - new pages # : page name # : create date # : last edit by user # : last edit by any user # @addtogroup Extensions # @author Kimon Andreou # @copyright 2007 by Kimon Andreou # @licence GNU General Public Licence 2.0 or later if ( !defined( 'MEDIAWIKI' ) ) { die( 'This file is a MediaWiki extension, it is not a valid entry point' ); } #check to see if we've been loaded already if (!defined('USER_SNOOP')) { #add tracking extension first #credit the extension $wgExtensionCredits['parserhook'][] = array( 'name'=>'UserSnoop', 'url'=>'http://www.mediawiki.org/wiki/Extension:UserSnoop', 'author'=>'Kimon Andreou', 'description'=>'View all user information', ); #register with a hook $wgHooks['ParserAfterTidy'][] = 'wfUserPageViewTracker'; #function that updates the table containing the hits function wfUserPageViewTracker(&$parser, &$text) { global $wgDBprefix, $wgDBname, $wgUser, $wgOut; $title = $parser->getTitle(); $artID = $title->getArticleID(); $db = &wfGetDB(DB_SLAVE); #check to see if the user has visited this page before $query = "SELECT hits, last FROM ".$wgDBprefix."user_page_views WHERE user_id = ".$wgUser->getID(); $query .= " AND page_id = $artID"; if($result = $db->doQuery($query)) { $row = $db->fetchRow($result); $last = $row["last"]; #due to multiple calls, don't double count if we've been here within the last 5 seconds if($last < (wfTimestampNow() - 5)) { $hits = $row["hits"]; if($hits > 0) { $query = "UPDATE ".$wgDBprefix."user_page_views "; $query .= "SET hits = ".($hits + 1); $query .= ", last='".wfTimestampNow()."'"; $query .= " WHERE user_id = ".$wgUser->getID(); $query .= " AND page_id = ".$artID; } else { #looks like this is our first visit, create the record $query = "INSERT INTO ".$wgDBprefix."user_page_views(user_id, page_id, hits, last)"; $query .= " VALUES(".$wgUser->getID().",".$artID.",1,'".wfTimestampNow()."')"; } $db->doQuery($query); } } return true; } #ok, set the check for this extension define ('USER_SNOOP', 0); #add our special page to the list $wgSpecialPages['UserSnoop'] = 'UserSnoop'; $wgHooks['LoadAllMessages'][] = 'UserSnoop::loadAllMessages'; $wgHooks['LanguageGetSpecialPageAliases'][] = 'UserSnoop::loadLocalizedName'; $wgExtensionCredits['specialpage'][] = array( 'name' => 'User Snoop', 'description' => 'View all user information', 'url' => 'http://www.mediawiki.org/wiki/Extension:UserSnoop', 'author' => 'Kimon Andreou'); #bring in the special page stuff require_once("$IP/includes/SpecialPage.php"); #our special page class class UserSnoop extends SpecialPage { #constructor function UserSnoop() { #add message to message cache global $wgMessageCache; self::loadAllMessages(); #create new special page with the 'usersnoop' permission required SpecialPage::SpecialPage('UserSnoop', 'usersnoop'); } #do your stuff function execute( $par = null ) { global $wgRequest, $wgOut, $wgUser; if( !$wgUser->isAllowed( 'usersnoop' ) ) { $wgOut->permissionRequired( 'usersnoop' ); return; } $wgOut->setPageTitle('User snoop'); list( $limit, $offset ) = wfCheckLimits(); #initialize our victim user and get his/her id $this->targetUser = isset($par) ? $par : $wgRequest->getVal( 'username' ); if($this->targetUser) { if($wgRequest->getVal('userid') && $wgRequest->getVal('useraction')) { $this->uid = $wgRequest->getVal('userid'); } else { $dbr = wfGetDB(DB_SLAVE); $this->uid = $dbr->selectField('user','user_id',array('user_name'=>$this->targetUser),__METHOD__); } #and now create a user object for the victim $this->newUser = User::newFromId($this->uid); $this->newUser->load(); $this->targetUser = $this->newUser->getName(); } #we don't always want to display details, e.g. when we don't a have a user $ignore=false; #ok, do stuff for when we have a valid user if($this->uid >0 ) { $this->action = $wgRequest->getVal('action'); $this->userAction = $wgRequest->getVal('useraction'); #these are the main actions switch($this->action) { case 'pageviews': $up = new UserSnoopPagerPageviews($uid); break; case 'watchlist': $up = new UserSnoopPagerWatchlist($uid); break; case 'newpages': $up = new UserSnoopPagerNewpages($uid); break; default: $ignore = true; $up = new UserSnoopPager($uid); break; } #these are the 'bureaucrat' only actions #but first, let's make sure nobody's cheating global $wgUser; if(in_array('bureaucrat', $wgUser->getEffectiveGroups())) { switch($this->userAction) { case 'logout': $this->newUser->logout(); break; case 'block': $this->blockUser($this->uid); break ; case 'spreadblock': if($this->newUser->isBlocked()) { $this->blockUser($this->uid); } $this->newUser->spreadBlock(); break; case 'unblock': $this->unblockUser($this->uid); break; default: break; } } } else { $ignore = true; } #get the master page header $s = $this->getPageHeader(); #if we're ignoring the body or we have an invalid uid, don't try to generate anything if (!$ignore && ($this->uid > 0)) { $usersbody = $up->getBody(); if( $usersbody) { $s .= $up->getPageHeader(); $s .= $up->getNavigationBar(); $s .= $up->getBodyHeader(); $s .= $usersbody; $s .= $up->getBodyFooter(); $s .= $up->getNavigationBar() ; } } #print what we've got! $wgOut->addHTML( $s ); } #Creates the page header and if a user is selected already through the 'username' variable, process # #@return string function getPageHeader() { global $wgServer, $wgScript, $wgContLang, $wgRequest, $wgUser; $out = '<form name="usersnoop" id="usersnoop" method="post">'; $out .= wfMsg('usersnoopusername').': <input type="text" name="username" value="'.$this->targetUser.'">'; $out .= ' '.wfMsg('usersnoopaction').': <select name="action">'; $out .= '<option>'.wfMsg('usersnoopnone').'</option>'; $out .= '<option value="pageviews"'.($wgRequest->getVal('action')=='pageviews'?' selected':''). '>'.wfMsg('usersnooppageviews').'</option>'; $out .= '<option value="watchlist"'.($wgRequest->getVal('action')=='watchlist'?' selected':''). '>'.wfMsg('usersnoopwatchlist').'</option>'; $out .= '<option value="newpages"'.($wgRequest->getVal('action')=='newpages'?' selected':''). '>'.wfMsg('usersnoopnewpages').'</option>'; $out .= '</select>'; $out .= '<input type="submit" value="'.wfMsg('usersnoopsubmit').'">'; $out .= "</form>\n<hr>\n"; if($this->targetUser != "") { $out .= '<table class="wikitable" width="100%" cellpadding="0" cellspacing="0">'; $out .= '<tr><th>'.wfMsg('usersnoopid').'</th><th>'.wfMsg('usersnoopusername'). '</th><th>'.wfMsg('usersnooprealname').'</th><th>'.wfMsg('email').'</th>'; $out .= '<th>'.wfMsg('usersnoopnewtalk').'</th><th>'.wfMsg('usersnoopregistered'). '</th><th>'.wfMsg('usersnoopedits').'</th></tr>'; $dbr = wfGetDB(DB_SLAVE); #in 1.11 the User object has a getRegistration() method - need to upgrade but, this works too $reg = $dbr->selectField('user', "concat(substr(user_registration, 1, 4), '-',substr(user_registration,5,2), '-',substr(user_registration,7,2), ' ',substr(user_registration,9,2), ':',substr(user_registration,11,2), ':',substr(user_registration,13,2))", array('user_name' => $this->targetUser),__METHOD__); $out .= '<tr><td align="right">'.$this->uid.'</td>'; $out .= '<td align="center">'.$this->sandboxParse('[[{{ns:user}}:'.$this->targetUser.'|'.$this->targetUser.']]').'</td>'; $out .= '<td align="center">'.$this->newUser->getRealName().'</td>'; $mt = $this->newUser->getEmail(); $out .= '<td align="center">'; $out .= "<a href=\"mailto:$mt\" class= \"external text\" title=\"mailto:$mt\" rel=\"nofollow\">"; $out .= "$mt</a></td>"; $out .= '<td align="center">'; if($this->newUser->getNewTalk()) { $out .= '<a href="'.$wgScript.'?title='.$wgContLang->GetNsText(NS_USER_TALK); $out .= ':'.$this->targetUser.'&diff=cur">'.wfMsg('usernsoopyes').'</a>'; } else { $out .= wfMsg('usersnoopno'); } $out .= '</td><td align="center">'.$reg.'</td><td align="right">'; $out .= $this->sandboxParse('[[{{ns:special}}:Contributions/'.$this->targetUser.'|'. $wgContLang->formatNum($this->newUser->getEditCount()).']]'); $out .= "</td></tr>"; $out .= '<tr><th>'.wfMsg('usersnoopblk').'</th><th colspan="2">'.wfMsg('usersnoopblockreason'). '</th><th colspan="2">'.wfMsg('usersnoopgroups').'</th>'; $out .= '<th>'.wfMsg('usersnooplastupdated').'</th>'; $out .= '<th>'.wfMsg('usersnoopsignature').'</th></tr>'; $out .= '<tr><td>'.($this->newUser->isBlocked()==1?wfMsg('usersnoopyes'):wfMsg('usersnoopno')).'</td>'; $out .= '<td colspan="2">'.$this->newUser->blockedFor().'</td>'; $out .= '<td colspan="2">'; $ok = false; $grps = $this->newUser->getEffectiveGroups(); sort($grps); foreach($grps as $grp) { if($ok) $out .= ', '; $out .= $grp; $ok = true; } $out .= '</td>'; $pc = $dbr->selectField('user', "concat(substr(user_touched, 1, 4), '-',substr(user_touched,5,2), '-',substr(user_touched,7,2), ' ',substr(user_touched,9,2), ':',substr(user_touched,11,2), ':',substr(user_touched,13,2))", array('user_name' => $this->targetUser),__METHOD__); $out .= '<td align="center">'.$pc.'</td>'; $sig = $this->sandboxParse($this->newUser->getOption('nickname')); if(!$sig) { $sig = $this->sandboxParse('[[{{ns:user}}:'.$this->targetUser.'|'.$this->targetUser.']]'); } $out .= '<td>'.$sig.'</td>'; $out .= '</tr>'; #these are the "special" areas, restricted to bureaucrats only if(in_array('bureaucrat', $wgUser->getEffectiveGroups())) { $out .= '<tr>'; $out .= '<th colspan="2">'.wfMsg('usersnooplastlogin').'</th>'; $out .= '<th rowspan="2" valign="center" align="center"><form name="userlogout" id="userlogout" method="post">'; $out .= '<input type="hidden" name="useraction" value="logout">'; $out .= '<input type="hidden" name="userid" value="'.$this->uid.'">'; $out .= '<input type="hidden" name="username" value="'.$this->targetUser.'">'; $out .= '<input type="hidden" name="action" value="'.$this->action.'">'; $out .= '<input type="submit" value="'.wfMsg('usersnoopforcelogout').'"></form></th>'; $out .= '<th rowspan="2" valign="center" align="center"><form name="userblock" id="userblock" method="post">'; $out .= '<input type="hidden" name="useraction" value="block">'; $out .= '<input type="hidden" name="userid" value="'.$this->uid.'">'; $out .= '<input type="hidden" name="username" value="'.$this->targetUser.'">'; $out .= '<input type="hidden" name="action" value="'.$this->action.'">'; $out .= '<input type="submit" value="'.wfMsg('usersnoopblock').'"></form></th>'; $out .= '<th rowspan="2" valign="center" align="center"><form name="userspreadblock" id="userspreadblock" method="post">'; $out .= '<input type="hidden" name="useraction" value="spreadblock">'; $out .= '<input type="hidden" name="userid" value="'.$this->uid.'">'; $out .= '<input type="hidden" name="username" value="'.$this->targetUser.'">'; $out .= '<input type="hidden" name="action" value="'.$this->action.'">'; $out .= '<input type="submit" value="'.wfMsg('usersnoopspreadblock').'"></form></th>'; $out .= '<th rowspan="2" valign="center" align="center"><form name="userunblock" id="userunblock" method="post">'; $out .= '<input type="hidden" name="useraction" value="unblock">'; $out .= '<input type="hidden" name="userid" value="'.$this->uid.'">'; $out .= '<input type="hidden" name="username" value="'.$this->targetUser.'">'; $out .= '<input type="hidden" name="action" value="'.$this->action.'">'; $out .= '<input type="submit" value="'.wfMsg('usersnoopunblock').'"></form></th>'; $out .= '<th rowspan="2"> </th>'; $out .= '</tr>'; $pc = $dbr->selectField('user_page_views', "concat(substr(max(last), 1, 4), '-',substr(max(last),5,2), '-',substr(max(last),7,2), ' ',substr(max(last),9,2), ':',substr(max(last),11,2), ':',substr(max(last),13,2))", array('user_id' => $this->uid),__METHOD__); $out .= '<tr>'; $out .= '<td align="center" colspan="2">'.$pc.'</td>'; $out .= '</tr>'; } $out .= "</table>\n<hr>\n"; } return $out; } function sandboxParse($wikiText) { global $wgTitle, $wgUser; $myParser = new Parser(); $myParserOptions = new ParserOptions(); $myParserOptions->initialiseFromUser($wgUser); $result = $myParser->parse($wikiText, $wgTitle, $myParserOptions); return $result->getText(); } function blockUser($user_id = 0) { global $wgUser; if($user_id == 0) { $user_id = $this->uid; } $blk = new Block($this->targetUser, $user_id, $wgUser->getID(), wfMsg('usersnoopblockmessage'), wfTimestamp(), 0, Block::infinity(), 0, 1, 0, 0, 1); if($blk->insert()) { $log = new LogPage('block'); $log->addEntry('block', Title::makeTitle( NS_USER, $this->targetUser ), 'Blocked through Special:UserSnoop', array('infinite', 'nocreate')); } } function unblockUser($user_id = 0) { global $wgUser; if($user_id == 0) { $user_id = $this->uid; } $dbr = wfGetDB(DB_SLAVE); $ipb_id = $dbr->selectField('ipblocks', 'ipb_id', array('ipb_user'=>$user_id), __METHOD__); $blk = Block::newFromId($ipb_id); if($blk->delete()) { $log = new LogPage('block'); $log->addEntry('unblock', Title::makeTitle(NS_USER, $this->targetUser), wfMsg('usersnoopunblockmessage')); } } function loadAllMessages() { static $messagesLoaded = false; if(!$messagesLoaded) { global $wgMessageCache; #todo: add more languages $wgMessageCache->addMessages( array('usersnoop' => 'User snoop', 'usersnoopusername' => 'Username', 'usersnoopaction' => 'Action', 'usersnoopnone' => '(none)', 'usersnooppageviews' => 'Page views', 'usersnoopwatchlist' => 'Watchlist', 'usersnoopnewpages' => 'New pages', 'usersnoopsubmit' => 'Submit', 'usersnoopid' => 'ID', 'usersnooprealname' => 'Real name', 'usersnoopnewtalk' => 'New talk', 'usersnoopregistered' => 'Registered', 'usersnoopedits' => 'Edits', 'usersnoopyes' => 'Yes', 'usersnoopno' => 'No', 'usersnoopblk' => 'Blk', 'usersnoopblockreason' => 'Block reason', 'usersnoopgroups' => 'Groups', 'usersnooplastupdated' => 'Last updated', 'usersnoopsignature' => 'Signature', 'usersnooplastlogin' => 'Last login', 'usersnoopforcelogout' => 'Force logout', 'usersnoopblock' => 'Block', 'usersnoopspreadblock' => 'Spread block', 'usersnoopunblock' => 'Unblock', 'usersnoopblockmessage' => 'Blocked through Special:UserSnoop', 'usersnoopunblockmessage' => 'Unblocked through Special:UserSnoop', 'usersnooppage' => 'Page', 'usersnoophits' => 'Hits', 'usersnooplast' => 'Last', 'usersnooplastvisit' => 'Last visit', 'usersnooplasteditedbythisuser' => 'Last edited<br />by this user', 'usersnooplasteditedbyanyuser' => 'Last edited<br />by any user', 'usersnoopcreated' => 'Created') ,'en'); $messagesLoaded = true; } return true; } function loadLocalizedName(&$specialPageArray, $code) { self::loadAllMessages(); $text = wfMsg('usersnoop'); $title = Title::newFromText($text); $specialPageArray['UserSnoop'][] = $title->getDBKey(); return true; } } #include the pager class require_once("$IP/includes/Pager.php"); #create a custom pager for our extension #all other pagers will inherit this one class UserSnoopPager extends AlphabeticPager { protected $targetUser = ""; //our victim protected $uid = 0; //our victim's uid #constructor - also inilizes "stuff" function __construct($uid=0) { if($uid > 0) { $this->uid = $uid; $dbr = wfGetDB(DB_SLAVE); $this->targetUser = $dbr->selectField('user','user_name',array('user_id'=>$this->uid),__METHOD__); } else { global $wgRequest; $this->targetUser = $wgRequest->getVal( 'username' ); if($this->targetUser != "") { $dbr = wfGetDB(DB_SLAVE); $this->uid = $dbr->selectField('user','user_id',array('user_name'=>$this->targetUser),__METHOD__); } } parent::__construct(); } function getBodyHeader() { } function getBodyFooter() { } function getBody() { if (!$this->mQueryDone) { $this->doQuery(); } $batch = new LinkBatch; $db = $this->mDb; $this->mResult->rewind(); $batch->execute(); $this->mResult->rewind(); return parent::getBody(); } function formatRow($row) { } function getQueryInfo() { } function getIndexField() { } function getPageHeader() { } function getDefaultQuery() { global $wgRequest; $query = parent::getDefaultQuery(); if($this->targetUser != '') { $query['username'] = $this->targetUser; } $query['action'] = $wgRequest->getVal('action'); return $query; } function sandboxParse($wikiText) { global $wgTitle, $wgUser; $myParser = new Parser(); $myParserOptions = new ParserOptions(); $myParserOptions->initialiseFromUser($wgUser); $result = $myParser->parse($wikiText, $wgTitle, $myParserOptions); return $result->getText(); } } #pager class used for user page views class UserSnoopPagerPageviews extends UserSnoopPager{ function UserSnoopPagerPageviews($uid=0) { parent::__construct($uid); } function getIndexField() { return "rownum"; } function getBodyHeader() { $s = '<table class="wikitable" width="100%" cellspacing="0" cellpadding="0">'; $s .= '<tr><th>#</th><th>'.wfMsg('usersnooppage').'</th><th>'.wfMsg('usersnoophits').'</th>'; $s .= '<th>'.wfMsg('usersnooplast').'</th></tr>'; return $s; } function getBodyFooter() { $s = "</table>"; return $s; } function getQueryInfo() { global $wgDBprefix; list ($userpagehits) = wfGetDB(DB_SLAVE)->tableNamesN($wgDBprefix.'user_page_hits'); $conds = array(); $table = "(select @rownum:=@rownum+1 as rownum,"; $table .= "user_name, user_real_name, page_namespace, page_title,hits, last "; $table .= "from (select @rownum:=0) r, "; $table .= "(select user_name, user_real_name, page_namespace, page_title,hits,"; $table .= "last from ".$wgDBprefix."user_page_hits) p"; if($this->targetUser) { $table .= " where user_name = "; $table .= wfGetDB(DB_SLAVE)->addQuotes($this->targetUser); } $table .= ") results"; return array( 'tables' => " $table ", 'fields' => array( 'rownum', 'user_name', 'user_real_name', 'page_namespace', 'page_title', 'hits', "concat(substr(last, 1, 4),'-',substr(last,5,2),'-',substr(last,7,2),' ',substr(last,9,2),':',substr(last,11,2),':',substr(last,13,2)) AS last"), 'conds' => $conds ); } function formatRow( $row ) { $userPage = Title::makeTitle( NS_USER, $row->user_name ); $name = $this->getSkin()->makeLinkObj( $userPage, htmlspecialchars( $userPage->getText() ) ); $pageTitle = Title::makeTitle( $row->page_namespace, $row->page_title ); if($row->page_namespace > 0) { $pageFullName = $pageTitle->getNsText().":".htmlspecialchars($pageTitle->getText() ); } else { $pageFullName = htmlspecialchars( $pageTitle->getText()); } $page = $this->getSkin()->makeLinkObj( $pageTitle, $pageFullName ); $res = '<tr>'; $res .= "<td style=\"text-align:center\">$row->rownum</td>"; $res .= "<td>$page</td>"; $res .= "<td style=\"text-align:right\">$row->hits</td>"; $res .= "<td style=\"text-align:center\">$row->last</td>"; $res .= "</tr>\n"; return $res; } } #used for the watchlist data class UserSnoopPagerWatchlist extends UserSnoopPager { function getIndexField() { return "rownum"; } function getBodyHeader() { $s = '<table class="wikitable" width="100%" cellspacing="0" cellpadding="0">'; $s .= '<tr><th>#</th><th>'.wfMsg('usersnooppage').'</th><th>'.wfMsg('usersnooplastvisit'). '</th><th>'.wfMsg('usersnooplasteditedbythisuser').'</th>'; $s .= '<th>'.wfMsg('usersnooplasteditedbyanyuser').'</th></tr>'; return $s; } function getBodyFooter() { $s = "</table>"; return $s; } function getQueryInfo() { global $wgDBprefix; $conds = array(); $table = "(select @rownum:=@rownum+1 as rownum, wl_user userid, wl_namespace namespace, wl_title title, `last` lastview, lastedit, lastuseredit"; $table .= " from ".$wgDBprefix."page, ".$wgDBprefix."watchlist, ".$wgDBprefix."user_page_views,"; $table .= " (select @rownum:=0) r,"; $table .= " (select rev_page, max(rev_timestamp) lastedit from ".$wgDBprefix."revision group by rev_page) rev1,"; $table .= " (select rev_user, rev_page, max(rev_timestamp) lastuseredit from ".$wgDBprefix."revision group by rev_user, rev_page) rev2"; $table .= " where ".$wgDBprefix."page.page_namespace = wl_namespace and ".$wgDBprefix."page.page_title = wl_title"; $table .= " and rev1.rev_page = ".$wgDBprefix."page.page_id"; $table .= " and rev2.rev_user = wl_user"; $table .= " and rev2.rev_page = ".$wgDBprefix."page.page_id"; $table .= " and ".$wgDBprefix."user_page_views.user_id = wl_user"; $table .= " and ".$wgDBprefix."user_page_views.page_id = ".$wgDBprefix."page.page_id"; if($this->targetUser) { $table .= " and wl_user = ".$this->uid; } $table .= ") result"; return array( 'tables' => " $table ", 'fields' => array( 'rownum', 'namespace', 'title', "concat(substr(lastview, 1, 4),'-',substr(lastview,5,2),'-',substr(lastview,7,2),' ',substr(lastview,9,2),':',substr(lastview,11,2),':',substr(lastview,13,2)) AS lastview", "concat(substr(lastedit, 1, 4),'-',substr(lastedit,5,2),'-',substr(lastedit,7,2),' ',substr(lastedit,9,2),':',substr(lastedit,11,2),':',substr(lastedit,13,2)) AS lastedit", "concat(substr(lastuseredit, 1, 4),'-',substr(lastuseredit,5,2),'-',substr(lastuseredit,7,2),' ',substr(lastuseredit,9,2),':',substr(lastuseredit,11,2),':',substr(lastuseredit,13,2)) AS lastuseredit" ), 'conds' => $conds ); } function formatRow( $row ) { $pageTitle = Title::makeTitle( $row->namespace, $row->title ); if($row->namespace > 0) { $pageFullName = $pageTitle->getNsText().":".htmlspecialchars($pageTitle->getText() ); } else { $pageFullName = htmlspecialchars( $pageTitle->getText()); } $page = $this->getSkin()->makeLinkObj( $pageTitle, $pageFullName ); $res = '<tr>'; $res .= "<td style=\"text-align:center\">$row->rownum</td>"; $res .= "<td>$page</td>"; $res .= "<td style=\"text-align:center\">$row->lastview</td>"; $res .= "<td style=\"text-align:center\">$row->lastuseredit</td>"; $res .= "<td style=\"text-align:center\">$row->lastedit</td>"; $res .= "</tr>\n"; return $res; } } #used for the newpage listing class UserSnoopPagerNewPages extends UserSnoopPager { function getIndexField() { return "rownum"; } function getBodyHeader() { $s = '<table class="wikitable" width="100%" cellspacing="0" cellpadding="0">'; $s .= '<tr><th>#</th><th>'.wfMsg('usersnooppage').'</th><th>'.wfMsg('usersnoopcreated'). '</th><th>'.wfMsg('usersnooplasteditedbythisuser').'</th>'; $s .= '<th>'.wfMsg('usersnooplasteditedbyanyuser').'</th></tr>'; return $s; } function getBodyFooter() { $s = "</table>"; return $s; } function getQueryInfo() { global $wgDBprefix; list ($userpagehits) = wfGetDB(DB_SLAVE)->tableNamesN($wgDBprefix.'user_page_hits'); $conds = array(); $table = "(select @rownum:=@rownum+1 as rownum, ".$wgDBprefix."revision.rev_user user_id, namespace, title, created, lastuseredit, lastedit"; $table .= " from ".$wgDBprefix."revision, (select @rownum:=0) r,"; $table .= " (SELECT page_namespace namespace, page_title title, page_id pageid, min(rev_timestamp) created"; $table .= " FROM ".$wgDBprefix."revision, ".$wgDBprefix."page"; $table .= " where ".$wgDBprefix."page.page_id = ".$wgDBprefix."revision.rev_page"; $table .= " group by namespace, title, pageid) revs,"; $table .= " (select rev_page, max(rev_timestamp) lastedit from ".$wgDBprefix."revision group by rev_page) lastedit,"; $table .= " (select rev_page, rev_user, max(rev_timestamp) lastuseredit from ".$wgDBprefix."revision group by rev_page,"; $table .= " rev_user) lastuseredit"; $table .= " where ".$wgDBprefix."revision.rev_page = revs.pageid"; $table .= " and ".$wgDBprefix."revision.rev_timestamp = revs.created"; $table .= " and lastedit.rev_page = revs.pageid"; $table .= " and lastuseredit.rev_page = revs.pageid"; $table .= " and lastuseredit.rev_user = ".$wgDBprefix."revision.rev_user"; if($this->targetUser) { $table .= " and ".$wgDBprefix."revision.rev_user = ".$this->uid; } $table .= ") res"; return array( 'tables' => " $table ", 'fields' => array( 'rownum', 'namespace', 'title', "concat(substr(created, 1, 4),'-',substr(created,5,2),'-',substr(created,7,2),' ',substr(created,9,2),':',substr(created,11,2),':',substr(created,13,2)) AS created", "concat(substr(lastuseredit, 1, 4),'-',substr(lastuseredit,5,2),'-',substr(lastuseredit,7,2),' ',substr(lastuseredit,9,2),':',substr(lastuseredit,11,2),':',substr(lastuseredit,13,2)) AS lastuseredit", "concat(substr(lastedit, 1, 4),'-',substr(lastedit,5,2),'-',substr(lastedit,7,2),' ',substr(lastedit,9,2),':',substr(lastedit,11,2),':',substr(lastedit,13,2)) AS lastedit", ), 'conds' => $conds ); } function formatRow( $row ) { $pageTitle = Title::makeTitle( $row->namespace, $row->title ); if($row->namespace > 0) { $pageFullName = $pageTitle->getNsText().":".htmlspecialchars($pageTitle->getText() ); } else { $pageFullName = htmlspecialchars( $pageTitle->getText()); } $page = $this->getSkin()->makeLinkObj( $pageTitle, $pageFullName ); $res = '<tr>'; $res .= "<td style=\"text-align:center\">$row->rownum</td>"; $res .= "<td>$page</td>"; $res .= "<td style=\"text-align:center\">$row->created</td>"; $res .= "<td style=\"text-align:center\">$row->lastuseredit</td>"; $res .= "<td style=\"text-align:center\">$row->lastedit</td>"; $res .= "</tr>\n"; return $res; } } } //if !defined('USER_SNOOP')
Note[edit | edit source]
This extension duplicates some of the functionality of Extension:UserPageViewTracker
