Roan Kattouw
69381c912e
API: Make output containing private or user-specific data uncacheable for logged-in users by setting Vary: Cookie or Cache-Control: private, whichever is appropriate. Fixes instances in core and WMF-deployed extensions only. Without this change, the output of requests like ?action=query&list=recentchanges&rcprop=patrolled&smaxage=3600 would be cached in Squid and viewable for anyone using the same URL, even if they don't have patrol rights. Other, more serious exploits are also possible. Also avoid using $wgUser in one place, kill some unused global $wgUser; instances and tweak a comment.
2010-07-14 19:00:54 +00:00
Andrew Garrett
fe39e38282
AbuseFilter: Introduce hiding of abuse log entries, controlled by abusefilter-hidden-log and abusefilter-hide-log rights.
2010-06-25 20:04:55 +00:00
Sam Reed
42e226f39d
Correct the address of the FSF in extension GPL headers
...
59 Temple Place -> 51 Franklin Street
2010-06-21 13:45:17 +00:00
Sam Reed
2b8ecad3d9
Minor fixup to api/ApiThreadAction.php
...
Add getPossibleErrors to CentralAuth and AbuseFilter
2010-02-16 22:56:08 +00:00
Siebrand Mazeland
b274606879
Update code formatting, run stylize.php, whitespace updates
2010-02-13 14:10:36 +00:00
Jack Phoenix
e2a16fe755
AbuseFilter: big commit - coding style & spacing cleanup; also marked SpecialPages' construct() and execute() functions as public and capitalized some SQL keywords
2009-10-07 13:57:06 +00:00
Roan Kattouw
0a47a37762
AbuseFilter: Update API module for r49057
2009-03-31 15:24:51 +00:00
Roan Kattouw
09f3306a2d
AbuseFilter API modules:
...
* Use the 'new' way of adding results (adding them one at a time and stopping when addValue() returns false)
* Use intval() on results that are really integers
* Use an implicit join in ApiAbuseLog
* Use dieUsageMsg() for an invalid title
* Move some things up and down in ApiAbuseLog so related things are grouped together
2009-03-30 12:19:41 +00:00
Alex Z.
778bf0d363
add option to see IP addresses in list=abuselog if user has 'abusefilter-private' right
2009-03-29 04:29:15 +00:00
Alex Z.
79360d48a4
add option to search by filter ID to be consistent with UI, and change param descriptions to be less ambiguous
2009-03-29 00:12:40 +00:00
Alex Z.
2e9bd6dd80
(bug 18063) Add API module for abuse log (list=abuselog)
2009-03-28 23:40:27 +00:00
