fixed potential XSS vulnerability
[mediawiki.git] / includes / SpecialWhatlinkshere.php
blobac1dec0e1115478ecc932511fb5c13c0f50305c9
1 <?php
2 /**
4 * @package MediaWiki
5 * @subpackage SpecialPage
6 */
8 /**
9 * Entry point
10 * @param string $par An article name ??
12 function wfSpecialWhatlinkshere($par = NULL) {
13 global $wgUser, $wgOut, $wgRequest;
14 $fname = 'wfSpecialWhatlinkshere';
16 $target = isset($par) ? $par : $wgRequest->getVal( 'target' );
17 list( $limit, $offset ) = $wgRequest->getLimitOffset();
19 if (is_null($target)) {
20 $wgOut->errorpage( 'notargettitle', 'notargettext' );
21 return;
24 $nt = Title::newFromURL( $target );
25 if( !$nt ) {
26 $wgOut->errorpage( 'notargettitle', 'notargettext' );
27 return;
29 $wgOut->setPagetitle( $nt->getPrefixedText() );
30 $wgOut->setSubtitle( wfMsg( 'linklistsub' ) );
32 $id = $nt->getArticleID();
33 $sk = $wgUser->getSkin();
34 $isredir = ' (' . wfMsg( 'isredirect' ) . ")\n";
36 $wgOut->addHTML('&lt; '.$sk->makeKnownLinkObj($nt, '', 'redirect=no' )."<br />\n");
38 $specialTitle = Title::makeTitle( NS_SPECIAL, 'Whatlinkshere' );
39 $wgOut->addHTML( wfViewPrevNext( $offset, $limit, $specialTitle, 'target=' . urlencode( $target ) ) );
41 $dbr =& wfGetDB( DB_SLAVE );
42 extract( $dbr->tableNames( 'page', 'brokenlinks', 'links' ) );
44 if ( 0 == $id ) {
45 $sql = "SELECT page_id,page_namespace,page_title,page_is_redirect FROM $brokenlinks,$page WHERE bl_to='" .
46 $dbr->strencode( $nt->getPrefixedDBkey() ) . "' AND bl_from=page_id " .
47 $dbr->limitResult( $limit, $offset );
48 $res = $dbr->query( $sql, $fname );
50 if ( 0 == $dbr->numRows( $res ) ) {
51 $wgOut->addHTML( wfMsg( 'nolinkshere' ) );
52 } else {
53 $wgOut->addHTML( wfMsg( 'linkshere' ) );
54 $wgOut->addHTML( "\n<ul>" );
56 while ( $row = $dbr->fetchObject( $res ) ) {
57 $nt = Title::makeTitle( $row->page_namespace, $row->page_title );
58 if( !$nt ) {
59 continue;
61 $link = $sk->makeKnownLinkObj( $nt, '', 'redirect=no' );
62 $wgOut->addHTML( "<li>{$link}" );
64 if ( $row->page_is_redirect ) {
65 $wgOut->addHTML( $isredir );
66 wfShowIndirectLinks( 1, $row->page_id, 500 );
68 $wgOut->addHTML( "</li>\n" );
70 $wgOut->addHTML( "</ul>\n" );
71 $dbr->freeResult( $res );
73 } else {
74 wfShowIndirectLinks( 0, $id, $limit, $offset );
76 $wgOut->addHTML( wfViewPrevNext( $offset, $limit, $specialTitle, 'target=' . urlencode( $target ) ) );
79 /**
82 function wfShowIndirectLinks( $level, $lid, $limit, $offset = 0 ) {
83 global $wgOut, $wgUser;
84 $fname = 'wfShowIndirectLinks';
86 $dbr =& wfGetDB( DB_READ );
87 extract( $dbr->tableNames( 'links','page' ) );
89 if ( $level == 0 ) {
90 $limitSql = $dbr->limitResult( $limit, $offset );
91 } else {
92 $limitSql = "LIMIT $limit";
95 $sql = "SELECT page_id,page_namespace,page_title,page_is_redirect FROM $links,$page WHERE l_to={$lid} AND l_from=page_id $limitSql";
96 $res = $dbr->query( $sql, $fname );
98 if ( 0 == $dbr->numRows( $res ) ) {
99 if ( 0 == $level ) {
100 $wgOut->addHTML( wfMsg( 'nolinkshere' ) );
102 return;
104 if ( 0 == $level ) {
105 $wgOut->addHTML( wfMsg( 'linkshere' ) );
107 $sk = $wgUser->getSkin();
108 $isredir = ' (' . wfMsg( 'isredirect' ) . ")\n";
110 $wgOut->addHTML( '<ul>' );
111 while ( $row = $dbr->fetchObject( $res ) ) {
112 $nt = Title::makeTitle( $row->page_namespace, $row->page_title );
113 if( !$nt ) {
114 $wgOut->addHTML( '<!-- bad backlink: ' . htmlspecialchars( $row->l_from ) . " -->\n" );
115 continue;
118 if ( $row->page_is_redirect ) {
119 $extra = 'redirect=no';
120 } else {
121 $extra = '';
124 $link = $sk->makeKnownLinkObj( $nt, '', $extra );
125 $wgOut->addHTML( '<li>'.$link );
127 if ( $row->page_is_redirect ) {
128 $wgOut->addHTML( $isredir );
129 if ( $level < 2 ) {
130 wfShowIndirectLinks( $level + 1, $row->page_id, 500 );
133 $wgOut->addHTML( "</li>\n" );
135 $wgOut->addHTML( "</ul>\n" );