<?php

/**
 * UntrustedLinksLogger MediaWiki extension.
 *
 * @author Laird Shaw based on code by James Paige
 *
 * Requirements: the TrustedLinks MediaWiki extension.
 *
 * Description:
 *
 * Logs to a file and/or sends an email on each attempted insertion of a URL or
 * URL-like text into an article by a user lacking the 'postlink' right. Details
 * logged or emailed are: IP address, username, article title and attempted
 * links.
 *
 * Installation:
 *
 * Create an "UntrustedLinksLogger" directory under the "extensions" directory
 * in your MediaWiki root and copy this file and the accompanying
 * UntrustedLinksLogger.i18n.php file into that directory. Copy the following
 * text verbatim into your LocalSettings.php file and edit it per the comments:

require_once("$IP/extensions/UntrustedLinksLogger/UntrustedLinksLogger.php");

# Uncomment this if you wish to log failed link insertion attempts. Replace the
# path with an appropriate one. Do not include a path under your web root unless
# you wish the file to be publicly visible.
#$wgUntrustedLinkAttemptsLogFile = '/path/to/a/writable/log-file.log';

# Uncomment this if you wish to be notified by email of every failed link
# insertion attempt. Replace the email address with an email address of your
# choice, or even multiple addresses separated by commas.
#$wgUntrustedLinkAttemptEmail = 'you@example.com';

# Uncomment this and edit the quoted text to customise the default subject of
# the notification emails.
#$wgUntrustedLinkAttemptEmailSubject = 'Untrusted link insertion attempt';

## End UntrustedLinksLogger entries in LocalSettings.php

 *
 */

$wgHooks['UntrustedLinkAttempt'][] = 'UntrustedLinksLogger::OnUntrustedLinkAttempt';
$wgExtensionMessagesFiles['UntrustedLinksLogger'] = dirname(__FILE__).'/UntrustedLinksLogger.i18n.php';
$wgExtensionCredits['other']['UntrustedLinksLogger'] = array(
	'path' => __FILE__,
	'name' => 'UntrustedLinksLogger',
	'author' => 'James Paige and Laird Shaw',
	'url' => 'https://www.mediawiki.org/wiki/Extension:NotEvil',
	'descriptionmsg' => 'untrustedlinkslogger-desc',
	'version' => '1.0',
);

class UntrustedLinksLogger {
	static function OnUntrustedLinkAttempt($EditPage, $addedUrls, $newText, &$errorMessage) {
		global $wgUser, $wgRequest, $wgUntrustedLinkAttemptsLogFile, $wgUntrustedLinkAttemptEmail, $wgUntrustedLinkAttemptEmailSubject;

		$doLog = !empty($wgUntrustedLinkAttemptsLogFile) &&
		         (is_writable($wgUntrustedLinkAttemptsLogFile) ||
		          touch($wgUntrustedLinkAttemptsLogFile) &&
		          is_writable($wgUntrustedLinkAttemptsLogFile));
		$doEmail = !empty($wgUntrustedLinkAttemptEmail) &&
		           filter_var($wgUntrustedLinkAttemptEmail, FILTER_VALIDATE_EMAIL);

		if ($doLog || $doEmail) {
			if (function_exists('wfGetIP')) $ip_address = wfGetIP();
			else {
				$request = method_exists($wgUser, 'getRequest') ? $wgUser->getRequest() : $wgRequest;
				$ip_address = method_exists($request, 'getIP') ? $request>getIP() : $_SERVER['REMOTE_ADDR'];
			}
			$userName = $wgUser->getName();
			$timestamp = date('Y-m-d H:i:s');
			$titleText = $EditPage->getArticle()->getTitle()->getText();
			$urlsStr = implode(' ', $addedUrls);
		}

		if ($doLog) {
			$fh = fopen($wgUntrustedLinkAttemptsLogFile, 'a');
			if ($fh !== false) {
				fwrite($fh, "$timestamp\t$ip_address\t$userName\t$titleText\t$urlsStr\n");
				fclose($fh);
			}
		}

		if ($doEmail) {
			if (isset($wgUntrustedLinkAttemptEmailSubject)) {
				$subject = $wgUntrustedLinkAttemptEmailSubject;
			} else {
				if (function_exists('wfLoadExtensionMessages')) {
					wfLoadExtensionMessages('UntrustedLinksLogger');
				}
				$wfMsgFunc = function_exists('wfMessage') ? 'wfMessage' : 'wfMsg';
				$subject = $wfMsgFunc('untrustedlinkslogger-default-email-subject');
			}
			mail($wgUntrustedLinkAttemptEmail, $subject, "IP: $ip_address\nUsername: $userName\nArticle: $titleText\nAttempted URLs: $urlsStr\n");
		}

		return true;
	}
}

?>