jenkins-bot has submitted this change and it was merged. Change subject: SpecialRunJobs: Use Config instead of global ......................................................................
SpecialRunJobs: Use Config instead of global Remove use of global and use Config object submitted as a new second paremeter to SpecialRunJobs::getQuerySignature. Bug: 69187 Change-Id: Idfd48e36275651c8ee1d926355fc32a7ba84883a --- M includes/MediaWiki.php M includes/specials/SpecialRunJobs.php 2 files changed, 6 insertions(+), 6 deletions(-) Approvals: Legoktm: Looks good to me, approved jenkins-bot: Verified diff --git a/includes/MediaWiki.php b/includes/MediaWiki.php index da4af2f..0424633 100644 --- a/includes/MediaWiki.php +++ b/includes/MediaWiki.php @@ -682,7 +682,8 @@ $query = array( 'title' => 'Special:RunJobs', 'tasks' => 'jobs', 'maxjobs' => $n, 'sigexpiry' => time() + 5 ); - $query['signature'] = SpecialRunJobs::getQuerySignature( $query ); + $query['signature'] = SpecialRunJobs::getQuerySignature( + $query, $this->config->get( 'SecretKey' ) ); $errno = $errstr = null; $info = wfParseUrl( $this->config->get( 'Server' ) ); diff --git a/includes/specials/SpecialRunJobs.php b/includes/specials/SpecialRunJobs.php index 54f224a..d4a06eb 100644 --- a/includes/specials/SpecialRunJobs.php +++ b/includes/specials/SpecialRunJobs.php @@ -61,7 +61,7 @@ $squery = $params; unset( $squery['signature'] ); - $cSig = self::getQuerySignature( $squery ); // correct signature + $cSig = self::getQuerySignature( $squery, $this->getConfig()->get( 'SecretKey' ) ); // correct signature $rSig = $params['signature']; // provided signature $verified = is_string( $rSig ) && hash_equals( $cSig, $rSig ); @@ -102,12 +102,11 @@ /** * @param array $query + * @param string $secretKey * @return string */ - public static function getQuerySignature( array $query ) { - global $wgSecretKey; - + public static function getQuerySignature( array $query, $secretKey ) { ksort( $query ); // stable order - return hash_hmac( 'sha1', wfArrayToCgi( $query ), $wgSecretKey ); + return hash_hmac( 'sha1', wfArrayToCgi( $query ), $secretKey ); } } -- To view, visit https://gerrit.wikimedia.org/r/152114 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: Idfd48e36275651c8ee1d926355fc32a7ba84883a Gerrit-PatchSet: 8 Gerrit-Project: mediawiki/core Gerrit-Branch: master Gerrit-Owner: Florianschmidtwelzow <florian.schmidt.wel...@t-online.de> Gerrit-Reviewer: Aaron Schulz <asch...@wikimedia.org> Gerrit-Reviewer: Addshore <addshorew...@gmail.com> Gerrit-Reviewer: Florianschmidtwelzow <florian.schmidt.wel...@t-online.de> Gerrit-Reviewer: Legoktm <legoktm.wikipe...@gmail.com> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits