Extension:DatabaseFetchHook.php

<?

1. Add a hook into DatabaseXXX::fetchObject()
2. - Licenced under LGPL (http://www.gnu.org/copyleft/lesser.html)
3. - Needs apache's mod-rewrite for security on images, see code comments below

1. Create a new secureLoadBalancer class by extending the existing one

$LoadBalancer = get_class($wgLoadBalancer); $secureLoadBalancer = "secure$LoadBalancer"; eval('class '.$secureLoadBalancer.' extends '.$LoadBalancer.' {

# Override the getConnection method to return a secureDatabase connection function &getConnection($i, $fail = true, $groups = array()) { $db =& parent::getConnection($i,$fail,$groups);

# Create a secure subclass of the database class with extended fetchObject method $dbClass = get_class($db); $dbSecure = "secure$dbClass"; if (!class_exists($dbSecure)) { eval(\'class \'.$dbSecure.\' extends \'.$dbClass.\' { function fetchObject($res) { $row = parent::fetchObject($res); wfRunHooks("DatabaseFetchObject", array(&$this,&$row)); return $row; } }\'); }

# Replace the DatabaseXXX connection with an identical secureDatabaseXXX connection $sdb = new $dbSecure; foreach(array_keys(get_class_vars($dbClass)) as $k) $sdb->$k = $db->$k; unset($db);

return $sdb; }

}');

1. Replace the global LoadBalancer object with an identical secureLoadBalancer

$oldLoadBalancer = $wgLoadBalancer; $wgLoadBalancer = new $secureLoadBalancer; foreach(array_keys(get_class_vars($LoadBalancer)) as $k) $wgLoadBalancer->$k = $oldLoadBalancer->$k;

1. Test the hook

$wgHooks['DatabaseFetchObject'][] = 'hookDatabaseFetchObject'; function hookDatabaseFetchObject(&$row) { if (is_object($row)) msg(join(',',array_keys(get_object_vars($row)))); return true; } ?>