mirror of
https://framagit.org/hubzilla/core.git
synced 2026-06-26 02:58:32 -04:00
cbd208eea3
The NULL_DATE constant is defined conditionally in the DBA static class. This causes issues with static analyzing tools like PHPStan, because they can not really know if the constant is defined or not. We could make PHPStan ignore this, but since there already is a `get_null_date()` method on the `dba_driver` class, this patch changes the code to use this method instead. We could also use the public static attribute `$null_date` on the DBA class directly, but using a method feels cleaner, and allows for making the attribute private, or even removing it completely at some later time. I'm not removing the NULL_DATE constant for now, in case it is in use by any extensions.
5830 lines
172 KiB
PHP
5830 lines
172 KiB
PHP
<?php
|
|
/**
|
|
* @file include/items.php
|
|
* @brief Items related functions.
|
|
*/
|
|
|
|
use DBA;
|
|
use Zotlabs\Lib\Config;
|
|
use Zotlabs\Lib\Crypto;
|
|
use Zotlabs\Lib\Enotify;
|
|
use Zotlabs\Lib\MarkdownSoap;
|
|
use Zotlabs\Lib\MessageFilter;
|
|
use Zotlabs\Lib\ThreadListener;
|
|
use Zotlabs\Lib\ObjCache;
|
|
use Zotlabs\Lib\IConfig;
|
|
use Zotlabs\Lib\PConfig;
|
|
use Zotlabs\Lib\Activity;
|
|
use Zotlabs\Lib\Libsync;
|
|
use Zotlabs\Lib\Libzot;
|
|
use Zotlabs\Lib\ActivityStreams;
|
|
use Zotlabs\Access\PermissionLimits;
|
|
use Zotlabs\Access\PermissionRoles;
|
|
use Zotlabs\Lib\AccessList;
|
|
use Zotlabs\Daemon\Master;
|
|
|
|
require_once('include/bbcode.php');
|
|
require_once('include/oembed.php');
|
|
require_once('include/crypto.php');
|
|
require_once('include/feedutils.php');
|
|
require_once('include/photo/photo_driver.php');
|
|
require_once('include/permissions.php');
|
|
|
|
/**
|
|
* @brief Collects recipients.
|
|
*
|
|
* @param array $item
|
|
* @param[out] boolean $private_envelope
|
|
* @param boolean $include_groups
|
|
* @return array containing the recipients
|
|
*/
|
|
function collect_recipients($item, &$private_envelope, $include_groups = true) {
|
|
|
|
$private_envelope = ((intval($item['item_private'])) ? true : false);
|
|
$recipients = [];
|
|
|
|
if($item['allow_cid'] || $item['allow_gid'] || $item['deny_cid'] || $item['deny_gid']) {
|
|
|
|
// it is private
|
|
|
|
$allow_people = expand_acl($item['allow_cid']);
|
|
|
|
if($include_groups) {
|
|
$allow_groups = AccessList::expand(expand_acl($item['allow_gid']));
|
|
}
|
|
else {
|
|
$allow_groups = [];
|
|
}
|
|
|
|
$recipients = array_unique(array_merge($allow_people, $allow_groups));
|
|
|
|
if ($recipients) {
|
|
// deliverable_abook_xchans() will return all deliverable xchans
|
|
// if passed an empty array as 2nd argument (no filtering).
|
|
// Hence only call it if we do actually have any recipients.
|
|
$recipients = deliverable_abook_xchans($item['uid'], $recipients);
|
|
}
|
|
|
|
|
|
// if you specifically deny somebody but haven't allowed anybody, we'll allow everybody in your
|
|
// address book minus the denied connections. The post is still private and can't be seen publicly
|
|
// as that would allow the denied person to see the post by logging out.
|
|
|
|
if(!$item['allow_cid'] && !$item['allow_gid']) {
|
|
$recipients = deliverable_abook_xchans($item['uid']);
|
|
}
|
|
|
|
$deny_people = expand_acl($item['deny_cid']);
|
|
$deny_groups = AccessList::expand(expand_acl($item['deny_gid']));
|
|
|
|
$deny = array_unique(array_merge($deny_people, $deny_groups));
|
|
|
|
// Don't deny anybody if nobody was allowed (e.g. they were all filtered out)
|
|
// That would lead to array_diff doing the wrong thing.
|
|
// This will result in a private post that won't be delivered to anybody.
|
|
|
|
if($recipients && $deny)
|
|
$recipients = array_diff($recipients, $deny);
|
|
|
|
$private_envelope = true;
|
|
}
|
|
else {
|
|
|
|
// if the post is marked private but there are no recipients and public_policy/scope = self,
|
|
// only add the author and owner as recipients. The ACL for the post may live on the hub of
|
|
// a different clone. We need to get the post to that hub.
|
|
|
|
// The post may be private by virtue of not being visible to anybody on the internet,
|
|
// but there are no envelope recipients, so set this to false. Delivery is controlled
|
|
// by the directives in $item['public_policy'].
|
|
|
|
$private_envelope = false;
|
|
require_once('include/channel.php');
|
|
|
|
if(array_key_exists('public_policy',$item) && $item['public_policy'] !== 'self') {
|
|
|
|
$hookinfo = [
|
|
'recipients' => [],
|
|
'item' => $item,
|
|
'private_envelope' => $private_envelope,
|
|
'include_groups' => $include_groups
|
|
];
|
|
|
|
call_hooks('collect_public_recipients',$hookinfo);
|
|
|
|
if ($hookinfo['recipients']) {
|
|
$r = $hookinfo['recipients'];
|
|
} else {
|
|
$r = deliverable_abook_xchans($item['uid'], [], false);
|
|
}
|
|
|
|
if($r) {
|
|
|
|
// filter out restrictive public_policy settings from remote networks
|
|
// which don't have this concept and will treat them as public.
|
|
|
|
$policy = substr($item['public_policy'],0,3);
|
|
foreach($r as $rr) {
|
|
switch($policy) {
|
|
case 'net':
|
|
case 'aut':
|
|
case 'sit':
|
|
case 'any':
|
|
case 'con':
|
|
if($rr['xchan_network'] !== 'zot6')
|
|
break;
|
|
case 'pub':
|
|
case '':
|
|
default:
|
|
$recipients[] = $rr['abook_xchan'];
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
// Forward to thread listeners and pubstream (sys channel),
|
|
// *unless* there is even a remote hint that the item might have some privacy attached.
|
|
|
|
if(!intval($item['item_private'])) {
|
|
$sys = get_sys_channel();
|
|
$recipients[] = $sys['xchan_hash'];
|
|
|
|
$r = ThreadListener::fetch_by_target($item['parent_mid']);
|
|
if($r) {
|
|
foreach($r as $rv) {
|
|
if (!in_array($rv['portable_id'], $recipients)) {
|
|
$recipients[] = $rv['portable_id'];
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
// Add the authors of any posts in this thread, if they are known to us.
|
|
// This is specifically designed to forward wall-to-wall posts to the original author,
|
|
// in case they aren't a connection but have permission to write on our wall.
|
|
// This is important for issue tracker channels. It should be a no-op for most channels.
|
|
// Whether or not they will accept the delivery is not determined here, but should
|
|
// be taken into account by zot:process_delivery()
|
|
|
|
$r = q("select author_xchan from item where parent = %d",
|
|
intval($item['parent'])
|
|
);
|
|
if ($r) {
|
|
foreach($r as $rv) {
|
|
if (!in_array($rv['author_xchan'], $recipients)) {
|
|
$recipients[] = $rv['author_xchan'];
|
|
}
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
// This is a somewhat expensive operation but important.
|
|
// Don't send this item to anybody who isn't allowed to see it
|
|
|
|
$recipients = check_list_permissions($item['uid'], $recipients, 'view_stream');
|
|
|
|
// remove any upstream recipients from our list.
|
|
// If it is ourself we'll add it back in a second.
|
|
// This should prevent complex delivery chains from getting overly complex by not
|
|
// sending to anybody who is on our list of those who sent it to us.
|
|
|
|
if($item['route']) {
|
|
$route = explode(',', $item['route']);
|
|
if(count($route)) {
|
|
$route = array_unique($route);
|
|
$recipients = array_diff($recipients,$route);
|
|
}
|
|
}
|
|
|
|
// add ourself just in case we have nomadic clones that need to get a copy.
|
|
|
|
if (!in_array($item['author_xchan'], $recipients)) {
|
|
// $recipients[] = $item['author_xchan'];
|
|
}
|
|
|
|
if($item['owner_xchan'] !== $item['author_xchan'] && !in_array($item['owner_xchan'], $recipients)) {
|
|
$recipients[] = $item['owner_xchan'];
|
|
}
|
|
|
|
return $recipients;
|
|
}
|
|
|
|
function comments_are_now_closed($item) {
|
|
|
|
$x = [
|
|
'item' => $item,
|
|
'closed' => 'unset'
|
|
];
|
|
|
|
/**
|
|
* @hooks comments_are_now_closed
|
|
* Called to determine whether commenting should be closed
|
|
* * \e array \b item
|
|
* * \e boolean \b closed - return value
|
|
*/
|
|
|
|
call_hooks('comments_are_now_closed', $x);
|
|
|
|
if ($x['closed'] != 'unset') {
|
|
return $x['closed'];
|
|
}
|
|
|
|
if($item['comments_closed'] > DBA::$dba->get_null_date()) {
|
|
$d = datetime_convert();
|
|
if($d > $item['comments_closed'])
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
function item_normal($profile_uid = null, $prefix = 'item', $type = ITEM_TYPE_POST) {
|
|
if ($profile_uid === null) {
|
|
$profile_uid = App::$profile['profile_uid'] ?? App::$profile_uid ?? null;
|
|
}
|
|
|
|
$uid = local_channel();
|
|
$is_owner = ($uid && intval($profile_uid) === $uid);
|
|
|
|
$sql = " and $prefix.item_hidden = 0 and $prefix.item_type = $type and $prefix.item_deleted = 0
|
|
and $prefix.item_unpublished = 0 and $prefix.item_pending_remove = 0";
|
|
|
|
if ($is_owner) {
|
|
$sql .= " and $prefix.item_blocked IN (0, " . intval(ITEM_MODERATED) . ") and $prefix.item_delayed IN (0, 1) ";
|
|
}
|
|
else {
|
|
$sql .= " and $prefix.item_blocked = 0 and $prefix.item_delayed = 0 ";
|
|
}
|
|
|
|
return $sql;
|
|
}
|
|
|
|
function item_forwardable($item) {
|
|
if (intval($item['item_unpublished']) ||
|
|
intval($item['item_delayed']) ||
|
|
intval($item['item_blocked']) ||
|
|
intval($item['item_hidden']) ||
|
|
intval($item['item_restrict']) || // this might change in the future
|
|
// internal follow/unfollow thread
|
|
in_array($item['verb'], ['Follow', 'Ignore', ACTIVITY_FOLLOW, ACTIVITY_UNFOLLOW]) ||
|
|
str_contains($item['postopts'], 'nodeliver') ||
|
|
// actor not fetchable
|
|
(isset($item['author']['xchan_network']) && in_array($item['author']['xchan_network'], ['rss', 'anon', 'token']))
|
|
) {
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
function item_normal_search() {
|
|
return " and item.item_hidden = 0 and item.item_type in (0,3,6,7) and item.item_deleted = 0
|
|
and item.item_unpublished = 0 and item.item_delayed = 0 and item.item_pending_remove = 0
|
|
and item.item_blocked = 0 ";
|
|
}
|
|
|
|
function item_normal_update() {
|
|
return " and item.item_hidden = 0 and item.item_type = 0
|
|
and item.item_unpublished = 0 and item.item_delayed = 0 and item.item_pending_remove = 0
|
|
and item.item_blocked = 0 ";
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief
|
|
*
|
|
* This is a compatibility function primarily for plugins, because
|
|
* in earlier DB schemas this was a much simpler single integer compare
|
|
*
|
|
* @param array $item
|
|
*/
|
|
function is_item_normal($item) {
|
|
|
|
if(intval($item['item_hidden']) || intval($item['item_type']) || intval($item['item_deleted'])
|
|
|| intval($item['item_unpublished']) || intval($item['item_delayed']) || intval($item['item_pending_remove'])
|
|
|| intval($item['item_blocked']))
|
|
return false;
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* @brief Decide if current observer has sufficient privileges to comment on item.
|
|
*
|
|
* This function examines the comment_policy attached to an item and decides if the current observer has
|
|
* sufficient privileges to comment. This will normally be called on a remote site where perm_is_allowed()
|
|
* will not be suitable because the post owner does not have a local channel_id.
|
|
* Generally we should look at the item - in particular the author['abook_flags'] and see if ABOOK_FLAG_SELF is set.
|
|
* If it is, you should be able to use perm_is_allowed( ... 'post_comments'), and if it isn't you need to call
|
|
* can_comment_on_post()
|
|
* We also check the comments_closed date/time on the item if this is set.
|
|
*
|
|
* @param string $observer_xchan
|
|
* @param array $item
|
|
* @return boolean
|
|
*/
|
|
function can_comment_on_post($observer_xchan, $item) {
|
|
|
|
// logger('Comment_policy: ' . $item['comment_policy'], LOGGER_DEBUG);
|
|
|
|
$x = [
|
|
'observer_hash' => $observer_xchan,
|
|
'item' => $item,
|
|
'allowed' => 'unset'
|
|
];
|
|
|
|
/**
|
|
* @hooks can_comment_on_post
|
|
* Called when deciding whether or not to present a comment box for a post.
|
|
* * \e string \b observer_hash
|
|
* * \e array \b item
|
|
* * \e boolean \b allowed - return value
|
|
*/
|
|
|
|
call_hooks('can_comment_on_post', $x);
|
|
|
|
if($x['allowed'] !== 'unset') {
|
|
return $x['allowed'];
|
|
}
|
|
|
|
if(! $observer_xchan) {
|
|
return false;
|
|
}
|
|
|
|
if($item['comment_policy'] === 'none') {
|
|
return false;
|
|
}
|
|
|
|
if(comments_are_now_closed($item)) {
|
|
return false;
|
|
}
|
|
|
|
if($observer_xchan === $item['author_xchan'] || $observer_xchan === $item['owner_xchan']) {
|
|
return true;
|
|
}
|
|
|
|
switch($item['comment_policy']) {
|
|
case 'self':
|
|
if($observer_xchan === $item['author_xchan'] || $observer_xchan === $item['owner_xchan']) {
|
|
return true;
|
|
}
|
|
break;
|
|
case 'public':
|
|
case 'authenticated':
|
|
// We don't really allow or support public comments yet, but anonymous
|
|
// folks won't ever reach this point (as $observer_xchan will be empty).
|
|
// This means the viewer has an xchan and we can identify them.
|
|
return true;
|
|
break;
|
|
case 'any connections':
|
|
case 'specific':
|
|
case 'contacts':
|
|
case '':
|
|
if(local_channel() && get_abconfig(local_channel(), $item['owner_xchan'], 'their_perms', 'post_comments')) {
|
|
return true;
|
|
}
|
|
if(intval($item['item_wall']) && perm_is_allowed($item['uid'],$observer_xchan,'post_comments')) {
|
|
return true;
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
break;
|
|
}
|
|
if(strstr($item['comment_policy'],'network:') && strstr($item['comment_policy'],'red')) {
|
|
return true;
|
|
}
|
|
if(strstr($item['comment_policy'],'site:') && strstr($item['comment_policy'],App::get_hostname())) {
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @brief Adds $hash to the item source route specified by $iid.
|
|
*
|
|
* $item['route'] contains a comma-separated list of xchans that sent the current message,
|
|
* somewhat analogous to the * Received: header line in email. We can use this to perform
|
|
* loop detection and to avoid sending a particular item to any "upstream" sender (they
|
|
* already have a copy because they sent it to us).
|
|
*
|
|
* Modifies item in the database pointed to by $iid.
|
|
*
|
|
* @param integer $iid
|
|
* item['id'] of target item
|
|
* @param string $hash
|
|
* xchan_hash of the channel that sent the item
|
|
*/
|
|
function add_source_route($iid, $hash) {
|
|
// logger('add_source_route ' . $iid . ' ' . $hash, LOGGER_DEBUG);
|
|
|
|
if((! $iid) || (! $hash))
|
|
return;
|
|
|
|
$r = q("select route from item where id = %d limit 1",
|
|
intval($iid)
|
|
);
|
|
if($r) {
|
|
$new_route = (($r[0]['route']) ? $r[0]['route'] . ',' : '') . $hash;
|
|
q("update item set route = '%s' where id = %d",
|
|
(dbesc($new_route)),
|
|
intval($iid)
|
|
);
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief Post an activity.
|
|
*
|
|
* In its simplest form one needs only to set $arr['body'] to post a note to the logged in channel's wall.
|
|
* Much more complex activities can be created. Permissions are checked. No filtering, tag expansion
|
|
* or other processing is performed.
|
|
*
|
|
* @param array $arr
|
|
* @param boolean $allow_code (optional) default false
|
|
* @param boolean $deliver (optional) default true
|
|
* @returns array
|
|
* * \e boolean \b success true or false
|
|
* * \e array \b activity the resulting activity if successful
|
|
*/
|
|
|
|
|
|
function post_activity_item($arr, $allow_code = false, $deliver = true, $channel = null, $observer = null, $addAndSync = true) {
|
|
$ret = array('success' => false);
|
|
|
|
$is_comment = false;
|
|
if((isset($arr['parent'], $arr['id']) && intval($arr['parent']) !== intval($arr['id'])) || (isset($arr['parent_mid'], $arr['mid']) && $arr['parent_mid'] !== $arr['mid']))
|
|
$is_comment = true;
|
|
|
|
if(! array_key_exists('item_origin',$arr))
|
|
$arr['item_origin'] = 1;
|
|
if(! array_key_exists('item_wall',$arr) && (! $is_comment))
|
|
$arr['item_wall'] = 0;
|
|
if(! array_key_exists('item_thread_top',$arr) && (! $is_comment))
|
|
$arr['item_thread_top'] = 1;
|
|
|
|
if (!$channel) {
|
|
$channel = App::get_channel();
|
|
}
|
|
|
|
if (!$observer) {
|
|
$observer = App::get_observer();
|
|
}
|
|
|
|
$arr['aid'] = ((!empty($arr['aid'])) ? $arr['aid'] : $channel['channel_account_id']);
|
|
$arr['uid'] = ((!empty($arr['uid'])) ? $arr['uid'] : $channel['channel_id']);
|
|
|
|
if(! perm_is_allowed($arr['uid'],$observer['xchan_hash'],(($is_comment) ? 'post_comments' : 'post_wall'))) {
|
|
$ret['message'] = t('Permission denied');
|
|
return $ret;
|
|
}
|
|
|
|
$arr['public_policy'] = ((array_key_exists('public_policy',$arr)) ? escape_tags($arr['public_policy']) : map_scope(PermissionLimits::Get($channel['channel_id'],'view_stream'),true));
|
|
|
|
if($arr['public_policy'])
|
|
$arr['item_private'] = 1;
|
|
|
|
if(! array_key_exists('mimetype',$arr))
|
|
$arr['mimetype'] = 'text/bbcode';
|
|
|
|
|
|
if(empty($arr['mid'])) {
|
|
$arr['uuid'] = ((!empty($arr['uuid'])) ? $arr['uuid'] : new_uuid());
|
|
}
|
|
$arr['mid'] = ((!empty($arr['mid'])) ? $arr['mid'] : z_root() . '/item/' . $arr['uuid']);
|
|
$arr['parent_mid'] = ((!empty($arr['parent_mid'])) ? $arr['parent_mid'] : $arr['mid']);
|
|
$arr['thr_parent'] = ((!empty($arr['thr_parent'])) ? $arr['thr_parent'] : $arr['mid']);
|
|
|
|
$arr['owner_xchan'] = ((!empty($arr['owner_xchan'])) ? $arr['owner_xchan'] : $channel['channel_hash']);
|
|
$arr['author_xchan'] = ((!empty($arr['author_xchan'])) ? $arr['author_xchan'] : $observer['xchan_hash']);
|
|
|
|
$arr['verb'] = ((!empty($arr['verb'])) ? $arr['verb'] : 'Create');
|
|
$arr['obj_type'] = ((!empty($arr['obj_type'])) ? $arr['obj_type'] : 'Note');
|
|
|
|
if(! ( array_key_exists('allow_cid',$arr) || array_key_exists('allow_gid',$arr)
|
|
|| array_key_exists('deny_cid',$arr) || array_key_exists('deny_gid',$arr))) {
|
|
$arr['allow_cid'] = $channel['channel_allow_cid'];
|
|
$arr['allow_gid'] = $channel['channel_allow_gid'];
|
|
$arr['deny_cid'] = $channel['channel_deny_cid'];
|
|
$arr['deny_gid'] = $channel['channel_deny_gid'];
|
|
}
|
|
|
|
$arr['comment_policy'] = map_scope(PermissionLimits::Get($channel['channel_id'],'post_comments'));
|
|
|
|
if (empty($arr['plink']) && (intval($arr['item_thread_top']))) {
|
|
$arr['plink'] = $arr['mid'];
|
|
}
|
|
|
|
if (!$arr['target']) {
|
|
$arr['target'] = [
|
|
'id' => str_replace('/item/', '/conversation/', $arr['parent_mid']),
|
|
'type' => 'Collection',
|
|
'attributedTo' => z_root() . '/channel/' . $channel['channel_address'],
|
|
];
|
|
$arr['tgt_type'] = 'Collection';
|
|
}
|
|
|
|
// for the benefit of plugins, we will behave as if this is an API call rather than a normal online post
|
|
|
|
$_REQUEST['api_source'] = 1;
|
|
|
|
/**
|
|
* @hooks post_local
|
|
* Called when an item has been posted on this machine via mod/item.php (also via API).
|
|
*/
|
|
call_hooks('post_local', $arr);
|
|
|
|
if (!empty($arr['cancel'])) {
|
|
logger('Post cancelled by plugin.');
|
|
return $ret;
|
|
}
|
|
|
|
$post = item_store($arr, $allow_code, $deliver, $addAndSync);
|
|
|
|
if (!$post['success']) {
|
|
return $ret;
|
|
}
|
|
|
|
$post_id = $post['item_id'];
|
|
$ret['success'] = true;
|
|
$ret['item_id'] = $post_id;
|
|
$ret['activity'] = $post['item'];
|
|
|
|
/**
|
|
* @hooks post_local_end
|
|
* Called after a local post operation has completed.
|
|
* * \e array - the item returned from item_store()
|
|
*/
|
|
call_hooks('post_local_end', $ret['activity']);
|
|
|
|
if($post_id && $deliver) {
|
|
Master::Summon(['Notifier', 'activity', $post_id]);
|
|
if (!empty($post['approval_id'])) {
|
|
Master::Summon(['Notifier', 'activity', $post['approval_id']]);
|
|
}
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
function validate_item_elements($message,$arr) {
|
|
|
|
$result = array('success' => false);
|
|
|
|
if(! array_key_exists('created',$arr))
|
|
$result['message'] = 'missing created, possible author/owner lookup failure';
|
|
|
|
if((! $arr['mid']) || (! $arr['parent_mid']))
|
|
$result['message'] = 'missing message-id or parent message-id';
|
|
|
|
if(array_key_exists('flags',$message) && in_array('relay',$message['flags']) && $arr['mid'] === $arr['parent_mid'])
|
|
$result['message'] = 'relay set on top level post';
|
|
|
|
if(! $result['message'])
|
|
$result['success'] = true;
|
|
|
|
return $result;
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief Limit length on imported system messages.
|
|
*
|
|
* The purpose of this function is to apply system message length limits to
|
|
* imported messages without including any embedded photos in the length.
|
|
*
|
|
* @param string $body
|
|
* @return string
|
|
*/
|
|
function limit_body_size($body) {
|
|
|
|
$maxlen = get_max_import_size();
|
|
|
|
// If the length of the body, including the embedded images, is smaller
|
|
// than the maximum, then don't waste time looking for the images
|
|
if($maxlen && (strlen($body) > $maxlen)) {
|
|
|
|
$orig_body = $body;
|
|
$new_body = '';
|
|
$textlen = 0;
|
|
|
|
$img_start = strpos($orig_body, '[img');
|
|
$img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
|
|
$img_end = ($img_start !== false ? strpos(substr($orig_body, $img_start), '[/img]') : false);
|
|
while(($img_st_close !== false) && ($img_end !== false)) {
|
|
|
|
$img_st_close++; // make it point to AFTER the closing bracket
|
|
$img_end += $img_start;
|
|
$img_end += strlen('[/img]');
|
|
|
|
if(! strcmp(substr($orig_body, $img_start + $img_st_close, 5), 'data:')) {
|
|
// This is an embedded image
|
|
|
|
if( ($textlen + $img_start) > $maxlen ) {
|
|
if($textlen < $maxlen) {
|
|
logger('The limit happens before an embedded image', LOGGER_DEBUG);
|
|
$new_body = $new_body . substr($orig_body, 0, $maxlen - $textlen);
|
|
$textlen = $maxlen;
|
|
}
|
|
}
|
|
else {
|
|
$new_body = $new_body . substr($orig_body, 0, $img_start);
|
|
$textlen += $img_start;
|
|
}
|
|
|
|
$new_body = $new_body . substr($orig_body, $img_start, $img_end - $img_start);
|
|
}
|
|
else {
|
|
if( ($textlen + $img_end) > $maxlen ) {
|
|
if($textlen < $maxlen) {
|
|
$new_body = $new_body . substr($orig_body, 0, $maxlen - $textlen);
|
|
$textlen = $maxlen;
|
|
}
|
|
}
|
|
else {
|
|
$new_body = $new_body . substr($orig_body, 0, $img_end);
|
|
$textlen += $img_end;
|
|
}
|
|
}
|
|
$orig_body = substr($orig_body, $img_end);
|
|
|
|
if($orig_body === false) // in case the body ends on a closing image tag
|
|
$orig_body = '';
|
|
|
|
$img_start = strpos($orig_body, '[img');
|
|
$img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
|
|
$img_end = ($img_start !== false ? strpos(substr($orig_body, $img_start), '[/img]') : false);
|
|
}
|
|
|
|
if( ($textlen + strlen($orig_body)) > $maxlen) {
|
|
if($textlen < $maxlen) {
|
|
$new_body = $new_body . substr($orig_body, 0, $maxlen - $textlen);
|
|
$textlen = $maxlen;
|
|
}
|
|
}
|
|
else {
|
|
$new_body = $new_body . $orig_body;
|
|
$textlen += strlen($orig_body);
|
|
}
|
|
|
|
return $new_body;
|
|
}
|
|
else
|
|
return $body;
|
|
}
|
|
|
|
function title_is_body($title, $body) {
|
|
|
|
$title = strip_tags($title);
|
|
$title = trim($title);
|
|
$title = str_replace(array("\n", "\r", "\t", " "), array("","","",""), $title);
|
|
|
|
$body = strip_tags($body);
|
|
$body = trim($body);
|
|
$body = str_replace(array("\n", "\r", "\t", " "), array("","","",""), $body);
|
|
|
|
if (strlen($title) < strlen($body))
|
|
$body = substr($body, 0, strlen($title));
|
|
|
|
if (($title != $body) and (substr($title, -3) == "...")) {
|
|
$pos = strrpos($title, "...");
|
|
if ($pos > 0) {
|
|
$title = substr($title, 0, $pos);
|
|
$body = substr($body, 0, $pos);
|
|
}
|
|
}
|
|
|
|
return($title == $body);
|
|
}
|
|
|
|
|
|
function get_item_elements($x,$allow_code = false) {
|
|
|
|
$arr = array();
|
|
|
|
$arr['body'] = $x['body'];
|
|
$arr['summary'] = $x['summary'];
|
|
|
|
$maxlen = get_max_import_size();
|
|
|
|
if($maxlen && mb_strlen($arr['body']) > $maxlen) {
|
|
$arr['body'] = mb_substr($arr['body'],0,$maxlen,'UTF-8');
|
|
logger('get_item_elements: message length exceeds max_import_size: truncated');
|
|
}
|
|
|
|
if($maxlen && mb_strlen($arr['summary']) > $maxlen) {
|
|
$arr['summary'] = mb_substr($arr['summary'],0,$maxlen,'UTF-8');
|
|
logger('get_item_elements: message summary length exceeds max_import_size: truncated');
|
|
}
|
|
|
|
$arr['created'] = datetime_convert('UTC','UTC',$x['created']);
|
|
$arr['edited'] = datetime_convert('UTC','UTC',$x['edited']);
|
|
|
|
if($arr['edited'] > datetime_convert())
|
|
$arr['edited'] = datetime_convert();
|
|
|
|
$arr['expires'] = ((!empty($x['expires']) && $x['expires'])
|
|
? datetime_convert('UTC','UTC',$x['expires'])
|
|
: DBA::$dba->get_null_date());
|
|
|
|
$arr['commented'] = ((!empty($x['commented']) && $x['commented'])
|
|
? datetime_convert('UTC','UTC',$x['commented'])
|
|
: $arr['created']);
|
|
$arr['comments_closed'] = ((!empty($x['comments_closed']) && $x['comments_closed'])
|
|
? datetime_convert('UTC','UTC',$x['comments_closed'])
|
|
: DBA::$dba->get_null_date());
|
|
|
|
$arr['title'] = (($x['title']) ? htmlspecialchars($x['title'], ENT_COMPAT,'UTF-8',false) : '');
|
|
|
|
if(mb_strlen($arr['title']) > 255)
|
|
$arr['title'] = mb_substr($arr['title'],0,255);
|
|
|
|
$arr['uuid'] = (($x['uuid']) ? htmlspecialchars($x['uuid'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['app'] = (($x['app']) ? htmlspecialchars($x['app'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['route'] = (($x['route']) ? htmlspecialchars($x['route'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['mid'] = (($x['message_id']) ? htmlspecialchars($x['message_id'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['parent_mid'] = (($x['message_top']) ? htmlspecialchars($x['message_top'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['thr_parent'] = (($x['message_parent']) ? htmlspecialchars($x['message_parent'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['plink'] = (($x['permalink']) ? htmlspecialchars($x['permalink'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['location'] = (($x['location']) ? htmlspecialchars($x['location'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['coord'] = (($x['longlat']) ? htmlspecialchars($x['longlat'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['verb'] = (($x['verb']) ? htmlspecialchars($x['verb'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['mimetype'] = (($x['mimetype']) ? htmlspecialchars($x['mimetype'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['obj_type'] = (($x['object_type']) ? htmlspecialchars($x['object_type'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['tgt_type'] = (($x['target_type']) ? htmlspecialchars($x['target_type'], ENT_COMPAT,'UTF-8',false) : '');
|
|
|
|
$arr['public_policy'] = (($x['public_scope']) ? htmlspecialchars($x['public_scope'], ENT_COMPAT,'UTF-8',false) : '');
|
|
if($arr['public_policy'] === 'public')
|
|
$arr['public_policy'] = '';
|
|
|
|
$arr['comment_policy'] = (($x['comment_scope']) ? htmlspecialchars($x['comment_scope'], ENT_COMPAT,'UTF-8',false) : 'contacts');
|
|
|
|
$arr['sig'] = ((!empty($x['signature'])) ? htmlspecialchars($x['signature'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['obj'] = ((!empty($x['object'])) ? activity_sanitise($x['object']) : '');
|
|
$arr['target'] = ((!empty($x['target'])) ? activity_sanitise($x['target']) : '');
|
|
$arr['attach'] = ((!empty($x['attach'])) ? activity_sanitise($x['attach']) : '');
|
|
$arr['term'] = ((!empty($x['tags'])) ? decode_tags($x['tags']) : '');
|
|
$arr['iconfig'] = ((!empty($x['meta'])) ? decode_item_meta($x['meta']) : '');
|
|
$arr['item_flags'] = 0;
|
|
|
|
if(array_key_exists('flags',$x)) {
|
|
|
|
if(in_array('consensus',$x['flags']))
|
|
$arr['item_consensus'] = 1;
|
|
|
|
if(in_array('deleted',$x['flags']))
|
|
$arr['item_deleted'] = 1;
|
|
|
|
if(in_array('notshown',$x['flags']))
|
|
$arr['item_notshown'] = 1;
|
|
|
|
if(in_array('obscured',$x['flags']))
|
|
$arr['item_obscured'] = 1;
|
|
|
|
// hidden item are no longer propagated - notshown may be a suitable alternative
|
|
|
|
if(in_array('hidden',$x['flags']))
|
|
$arr['item_hidden'] = 1;
|
|
|
|
if(in_array('private', $x['flags']))
|
|
$arr['item_private'] = 1;
|
|
|
|
if(in_array('private', $x['flags']) && in_array('direct', $x['flags']))
|
|
$arr['item_private'] = 2;
|
|
|
|
}
|
|
|
|
// Here's the deal - the site might be down or whatever but if there's a new person you've never
|
|
// seen before sending stuff to your stream, we MUST be able to look them up and import their data from their
|
|
// hub and verify that they are legit - or else we're going to toss the post. We only need to do this
|
|
// once, and after that your hub knows them. Sure some info is in the post, but it's only a transit identifier
|
|
// and not enough info to be able to look you up from your hash - which is the only thing stored with the post.
|
|
|
|
$xchan_hash = import_author_xchan($x['author']);
|
|
if($xchan_hash)
|
|
$arr['author_xchan'] = $xchan_hash;
|
|
else
|
|
return [];
|
|
|
|
$xchan_hash = import_author_xchan($x['owner']);
|
|
if($xchan_hash) {
|
|
$arr['owner_xchan'] = $xchan_hash;
|
|
}
|
|
else {
|
|
return [];
|
|
}
|
|
|
|
// Check signature on the body text received.
|
|
// This presents an issue that we aren't verifying the text that is actually displayed
|
|
// on this site. We are however verifying the received text was exactly as received.
|
|
// We have every right to strip content that poses a security risk. You are welcome to
|
|
// create a plugin to verify the content after filtering if this offends you.
|
|
|
|
if($arr['sig']) {
|
|
|
|
// check the supplied signature against the supplied content.
|
|
// Note that we will purify the content which could change it.
|
|
|
|
$r = q("SELECT xchan_pubkey FROM xchan WHERE xchan_hash = '%s' LIMIT 1",
|
|
dbesc($arr['author_xchan'])
|
|
);
|
|
if ($r) {
|
|
if ($r[0]['xchan_pubkey']) {
|
|
if (Libzot::verify($x['body'], $arr['sig'], $r[0]['xchan_pubkey'])) {
|
|
$arr['item_verified'] = 1;
|
|
}
|
|
else {
|
|
logger('get_item_elements: message verification failed.');
|
|
}
|
|
}
|
|
else {
|
|
|
|
// If we don't have a public key, strip the signature so it won't show as invalid.
|
|
// This won't happen in normal use, but could happen if import_author_xchan()
|
|
// failed to load the zot-info packet due to a server failure and had
|
|
// to create an alternate xchan with network 'unknown'
|
|
|
|
unset($arr['sig']);
|
|
}
|
|
}
|
|
}
|
|
|
|
// if the input is markdown, remove one level of html escaping.
|
|
// It will be re-applied in item_store() and/or item_store_update().
|
|
// Do this after signature checking as the original signature
|
|
// was generated on the escaped content.
|
|
|
|
if($arr['mimetype'] === 'text/markdown') {
|
|
$arr['summary'] = MarkdownSoap::unescape($arr['summary']);
|
|
$arr['body'] = MarkdownSoap::unescape($arr['body']);
|
|
}
|
|
if(array_key_exists('revision',$x)) {
|
|
|
|
// extended export encoding
|
|
|
|
$arr['revision'] = $x['revision'];
|
|
$arr['allow_cid'] = $x['allow_cid'];
|
|
$arr['allow_gid'] = $x['allow_gid'];
|
|
$arr['deny_cid'] = $x['deny_cid'];
|
|
$arr['deny_gid'] = $x['deny_gid'];
|
|
$arr['layout_mid'] = $x['layout_mid'];
|
|
$arr['postopts'] = $x['postopts'];
|
|
$arr['resource_id'] = $x['resource_id'];
|
|
$arr['resource_type'] = $x['resource_type'];
|
|
$arr['attach'] = $x['attach'];
|
|
$arr['item_origin'] = $x['item_origin'];
|
|
$arr['item_unseen'] = $x['item_unseen'];
|
|
$arr['item_starred'] = $x['item_starred'];
|
|
$arr['item_uplink'] = $x['item_uplink'];
|
|
$arr['item_consensus'] = $x['item_consensus'];
|
|
$arr['item_wall'] = $x['item_wall'];
|
|
$arr['item_thread_top'] = $x['item_thread_top'];
|
|
$arr['item_notshown'] = $x['item_notshown'];
|
|
$arr['item_nsfw'] = $x['item_nsfw'];
|
|
// local only $arr['item_relay'] = $x['item_relay'];
|
|
$arr['item_mentionsme'] = $x['item_mentionsme'];
|
|
$arr['item_nocomment'] = $x['item_nocomment'];
|
|
$arr['item_obscured'] = $x['item_obscured'];
|
|
// local only $arr['item_verified'] = $x['item_verified'];
|
|
$arr['item_retained'] = $x['item_retained'];
|
|
$arr['item_rss'] = $x['item_rss'];
|
|
$arr['item_deleted'] = $x['item_deleted'];
|
|
$arr['item_type'] = $x['item_type'];
|
|
$arr['item_hidden'] = $x['item_hidden'];
|
|
$arr['item_unpublished'] = $x['item_unpublished'];
|
|
$arr['item_delayed'] = $x['item_delayed'];
|
|
$arr['item_pending_remove'] = $x['item_pending_remove'];
|
|
$arr['item_blocked'] = $x['item_blocked'];
|
|
if(array_key_exists('item_flags',$x)) {
|
|
if($x['item_flags'] & 0x0004)
|
|
$arr['item_starred'] = 1;
|
|
if($x['item_flags'] & 0x0008)
|
|
$arr['item_uplink'] = 1;
|
|
if($x['item_flags'] & 0x0010)
|
|
$arr['item_consensus'] = 1;
|
|
if($x['item_flags'] & 0x0020)
|
|
$arr['item_wall'] = 1;
|
|
if($x['item_flags'] & 0x0040)
|
|
$arr['item_thread_top'] = 1;
|
|
if($x['item_flags'] & 0x0080)
|
|
$arr['item_notshown'] = 1;
|
|
if($x['item_flags'] & 0x0100)
|
|
$arr['item_nsfw'] = 1;
|
|
if($x['item_flags'] & 0x0400)
|
|
$arr['item_mentionsme'] = 1;
|
|
if($x['item_flags'] & 0x0800)
|
|
$arr['item_nocomment'] = 1;
|
|
if($x['item_flags'] & 0x4000)
|
|
$arr['item_retained'] = 1;
|
|
if($x['item_flags'] & 0x8000)
|
|
$arr['item_rss'] = 1;
|
|
|
|
}
|
|
if(array_key_exists('item_restrict',$x)) {
|
|
if($x['item_restrict'] & 0x0001)
|
|
$arr['item_hidden'] = 1;
|
|
if($x['item_restrict'] & 0x0002)
|
|
$arr['item_blocked'] = 1;
|
|
if($x['item_restrict'] & 0x0010)
|
|
$arr['item_deleted'] = 1;
|
|
if($x['item_restrict'] & 0x0020)
|
|
$arr['item_unpublished'] = 1;
|
|
if($x['item_restrict'] & 0x0040)
|
|
$arr['item_type'] = ITEM_TYPE_WEBPAGE;
|
|
if($x['item_restrict'] & 0x0080)
|
|
$arr['item_delayed'] = 1;
|
|
if($x['item_restrict'] & 0x0100)
|
|
$arr['item_type'] = ITEM_TYPE_BLOCK;
|
|
if($x['item_restrict'] & 0x0200)
|
|
$arr['item_type'] = ITEM_TYPE_PDL;
|
|
if($x['item_restrict'] & 0x0400)
|
|
$arr['item_type'] = ITEM_TYPE_BUG;
|
|
if($x['item_restrict'] & 0x0800)
|
|
$arr['item_pending_remove'] = 1;
|
|
if($x['item_restrict'] & 0x1000)
|
|
$arr['item_type'] = ITEM_TYPE_DOC;
|
|
}
|
|
}
|
|
|
|
return $arr;
|
|
}
|
|
|
|
|
|
function import_author_xchan($x) {
|
|
|
|
if (!$x) {
|
|
return false;
|
|
}
|
|
|
|
$y = false;
|
|
|
|
if (!array_key_exists('network', $x) || $x['network'] === 'zot6') {
|
|
$y = Libzot::import_author_zot($x);
|
|
}
|
|
|
|
// if we were told that it's a zot connection, don't probe/import anything else
|
|
if (array_key_exists('network', $x) && $x['network'] === 'zot6')
|
|
return $y;
|
|
|
|
$hookinfo = [
|
|
'xchan' => $x,
|
|
'xchan_hash' => ''
|
|
];
|
|
|
|
/**
|
|
* @hooks import_author_xchan
|
|
* Called when looking up an author of a post by xchan_hash to ensure they have an xchan record on our site.
|
|
* * \e array \b xchan
|
|
* * \e string \b xchan_hash - Thre returned value
|
|
*/
|
|
call_hooks('import_author_xchan', $hookinfo);
|
|
if($hookinfo['xchan_hash']) {
|
|
return $hookinfo['xchan_hash'];
|
|
}
|
|
|
|
if(!$y && array_key_exists('network', $x) && $x['network'] === 'rss') {
|
|
$y = import_author_rss($x);
|
|
}
|
|
|
|
if(! $y) {
|
|
$y = import_author_unknown($x);
|
|
}
|
|
|
|
return $y;
|
|
}
|
|
|
|
/**
|
|
* @brief Imports an author from a RSS feed.
|
|
*
|
|
* @param array $x an associative array with
|
|
* * \e string \b url
|
|
* * \e string \b name
|
|
* * \e string \b guid
|
|
* @return boolean|string
|
|
*/
|
|
function import_author_rss($x) {
|
|
if(! $x['url'])
|
|
return false;
|
|
|
|
$r = q("select xchan_hash from xchan where xchan_network = 'rss' and xchan_url = '%s' limit 1",
|
|
dbesc($x['url'])
|
|
);
|
|
if($r) {
|
|
logger('In cache' , LOGGER_DEBUG);
|
|
return $r[0]['xchan_hash'];
|
|
}
|
|
$name = trim($x['name']);
|
|
|
|
$r = xchan_store_lowlevel(
|
|
[
|
|
'xchan_hash' => $x['guid'] ?? '',
|
|
'xchan_guid' => $x['guid'] ?? '',
|
|
'xchan_url' => $x['url'] ?? '',
|
|
'xchan_name' => $name ?? '(Unknown)',
|
|
'xchan_name_date' => datetime_convert(),
|
|
'xchan_network' => 'rss'
|
|
]
|
|
);
|
|
|
|
if($r && $x['photo']) {
|
|
|
|
$photos = import_xchan_photo($x['photo']['src'],$x['url']);
|
|
|
|
if($photos) {
|
|
$r = q("update xchan set xchan_photo_date = '%s', xchan_photo_l = '%s', xchan_photo_m = '%s', xchan_photo_s = '%s', xchan_photo_mimetype = '%s' where xchan_url = '%s' and xchan_network = 'rss'",
|
|
dbesc(datetime_convert()),
|
|
dbesc($photos[0]),
|
|
dbesc($photos[1]),
|
|
dbesc($photos[2]),
|
|
dbesc($photos[3]),
|
|
dbesc($x['url'])
|
|
);
|
|
if($r)
|
|
return $x['url'];
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
function import_author_unknown($x) {
|
|
|
|
$arr = [
|
|
'author' => $x,
|
|
'result' => false
|
|
];
|
|
/**
|
|
* @hooks import_author
|
|
* * \e array \b author
|
|
* * \e boolean|string \b result - Return value, default false
|
|
*/
|
|
call_hooks('import_author', $arr);
|
|
if($arr['result'])
|
|
return $arr['result'];
|
|
|
|
if(! $x['url'])
|
|
return false;
|
|
|
|
$r = q("select xchan_hash from xchan where xchan_network = 'unknown' and xchan_url = '%s' limit 1",
|
|
dbesc($x['url'])
|
|
);
|
|
if($r) {
|
|
logger('In cache' , LOGGER_DEBUG);
|
|
return $r[0]['xchan_hash'];
|
|
}
|
|
|
|
$name = ((isset($x['name'])) ? trim($x['name']) : 'Unknown');
|
|
|
|
$r = xchan_store_lowlevel(
|
|
[
|
|
'xchan_hash' => $x['url'],
|
|
'xchan_guid' => $x['url'],
|
|
'xchan_url' => $x['url'],
|
|
'xchan_name' => $name,
|
|
'xchan_name_date' => datetime_convert(),
|
|
'xchan_network' => 'unknown'
|
|
]
|
|
);
|
|
|
|
if($r && isset($x['photo']) && $x['photo']) {
|
|
|
|
$photos = import_xchan_photo($x['photo']['src'],$x['url']);
|
|
|
|
if($photos) {
|
|
$r = q("update xchan set xchan_photo_date = '%s', xchan_photo_l = '%s', xchan_photo_m = '%s', xchan_photo_s = '%s', xchan_photo_mimetype = '%s' where xchan_hash = '%s' and xchan_network = 'unknown'",
|
|
dbesc(datetime_convert()),
|
|
dbesc($photos[0]),
|
|
dbesc($photos[1]),
|
|
dbesc($photos[2]),
|
|
dbesc($photos[3]),
|
|
dbesc($x['url'])
|
|
);
|
|
if($r)
|
|
return $x['url'];
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
function empty_acl($item) {
|
|
return (($item['allow_cid'] === EMPTY_STR && $item['allow_gid'] === EMPTY_STR && $item['deny_cid'] === EMPTY_STR && $item['deny_gid'] === EMPTY_STR) ? true : false);
|
|
}
|
|
|
|
function encode_item($item,$mirror = false,$zap_compat = false) {
|
|
$x = [];
|
|
$x['type'] = 'activity';
|
|
$x['encoding'] = 'zot';
|
|
|
|
$key = Config::Get('system','prvkey');
|
|
|
|
// If we're trying to backup an item so that it's recoverable or for export/imprt,
|
|
// add all the attributes we need to recover it
|
|
|
|
if($mirror) {
|
|
$x['id'] = $item['id'];
|
|
$x['parent'] = $item['parent'];
|
|
$x['uid'] = $item['uid'];
|
|
$x['allow_cid'] = $item['allow_cid'];
|
|
$x['allow_gid'] = $item['allow_gid'];
|
|
$x['deny_cid'] = $item['deny_cid'];
|
|
$x['deny_gid'] = $item['deny_gid'];
|
|
$x['revision'] = $item['revision'];
|
|
$x['layout_mid'] = $item['layout_mid'];
|
|
$x['postopts'] = $item['postopts'];
|
|
$x['resource_id'] = $item['resource_id'];
|
|
$x['resource_type'] = $item['resource_type'];
|
|
$x['attach'] = $item['attach'];
|
|
$x['item_origin'] = $item['item_origin'];
|
|
$x['item_unseen'] = $item['item_unseen'];
|
|
$x['item_starred'] = $item['item_starred'];
|
|
$x['item_uplink'] = $item['item_uplink'];
|
|
$x['item_consensus'] = $item['item_consensus'];
|
|
$x['item_wall'] = $item['item_wall'];
|
|
$x['item_thread_top'] = $item['item_thread_top'];
|
|
$x['item_notshown'] = $item['item_notshown'];
|
|
$x['item_nsfw'] = $item['item_nsfw'];
|
|
$x['item_relay'] = $item['item_relay'];
|
|
$x['item_mentionsme'] = $item['item_mentionsme'];
|
|
$x['item_nocomment'] = $item['item_nocomment'];
|
|
$x['item_obscured'] = $item['item_obscured'];
|
|
$x['item_verified'] = $item['item_verified'];
|
|
$x['item_retained'] = $item['item_retained'];
|
|
$x['item_rss'] = $item['item_rss'];
|
|
$x['item_deleted'] = $item['item_deleted'];
|
|
$x['item_type'] = $item['item_type'];
|
|
$x['item_hidden'] = $item['item_hidden'];
|
|
$x['item_unpublished'] = $item['item_unpublished'];
|
|
$x['item_delayed'] = $item['item_delayed'];
|
|
$x['item_pending_remove'] = $item['item_pending_remove'];
|
|
$x['item_blocked'] = $item['item_blocked'];
|
|
}
|
|
|
|
$x['uuid'] = $item['uuid'];
|
|
$x['message_id'] = $item['mid'];
|
|
$x['message_top'] = $item['parent_mid'];
|
|
$x['message_parent'] = $item['thr_parent'];
|
|
$x['created'] = $item['created'];
|
|
$x['edited'] = $item['edited'];
|
|
// always send 0's over the wire
|
|
$x['expires'] = (($item['expires'] == '0001-01-01 00:00:00') ? '0000-00-00 00:00:00' : $item['expires']);
|
|
$x['commented'] = $item['commented'];
|
|
$x['mimetype'] = $item['mimetype'];
|
|
$x['title'] = $item['title'];
|
|
$x['summary'] = $item['summary'];
|
|
$x['body'] = $item['body'];
|
|
$x['app'] = $item['app'];
|
|
$x['verb'] = (($zap_compat) ? Activity::activity_mapper($item['verb']) : $item['verb']);
|
|
$x['object_type'] = (($zap_compat && $item['obj_type']) ? Activity::activity_obj_mapper($item['obj_type']) : $item['obj_type']);
|
|
$x['target_type'] = (($zap_compat && $item['tgt_type']) ? Activity::activity_obj_mapper($item['tgt_type']) : $item['tgt_type']);
|
|
$x['permalink'] = $item['plink'];
|
|
$x['location'] = $item['location'];
|
|
$x['longlat'] = $item['coord'];
|
|
$x['signature'] = $item['sig'];
|
|
$x['route'] = $item['route'];
|
|
$x['owner'] = encode_item_xchan($item['owner']);
|
|
$x['author'] = encode_item_xchan($item['author']);
|
|
|
|
if ($zap_compat) {
|
|
$x['object'] = Activity::encode_item_object($item,'obj');
|
|
}
|
|
else {
|
|
if ($item['obj']) {
|
|
$x['object'] = json_decode($item['obj'],true);
|
|
}
|
|
}
|
|
|
|
if($item['target'])
|
|
$x['target'] = (($zap_compat)
|
|
? Activity::encode_item_object($item,'target')
|
|
: json_decode($item['target'],true)) ;
|
|
if($item['attach'])
|
|
$x['attach'] = json_decode($item['attach'],true);
|
|
if($y = encode_item_flags($item))
|
|
$x['flags'] = $y;
|
|
|
|
if($item['comments_closed'] > DBA::$dba->get_null_date())
|
|
$x['comments_closed'] = $item['comments_closed'];
|
|
|
|
$x['public_scope'] = $item['public_policy'];
|
|
$x['comment_scope'] = $item['comment_policy'];
|
|
|
|
if(! empty($item['term']))
|
|
$x['tags'] = encode_item_terms($item['term'],$mirror);
|
|
|
|
if(! empty($item['iconfig'])) {
|
|
if ($zap_compat) {
|
|
for ($y = 0; $y < count($item['iconfig']); $y ++) {
|
|
if (preg_match('|^a:[0-9]+:{.*}$|s', $item['iconfig'][$y]['v'])) {
|
|
$item['iconfig'][$y]['v'] = json_serialize(unserialize($item['iconfig'][$y]['v']));
|
|
}
|
|
}
|
|
}
|
|
$x['meta'] = encode_item_meta($item['iconfig'],$mirror);
|
|
}
|
|
|
|
logger('encode_item: ' . print_r($x,true), LOGGER_DATA);
|
|
|
|
return $x;
|
|
}
|
|
|
|
/**
|
|
* @brief
|
|
*
|
|
* @param int $scope
|
|
* @param boolean $strip (optional) default false
|
|
* @return string
|
|
*/
|
|
function map_scope($scope, $strip = false) {
|
|
switch($scope) {
|
|
case 0:
|
|
return 'self';
|
|
case PERMS_PUBLIC:
|
|
if($strip)
|
|
return '';
|
|
return 'public';
|
|
case PERMS_NETWORK:
|
|
return 'network: red';
|
|
case PERMS_AUTHED:
|
|
return 'authenticated';
|
|
case PERMS_SITE:
|
|
return 'site: ' . App::get_hostname();
|
|
case PERMS_PENDING:
|
|
return 'any connections';
|
|
// uncomment after Hubzilla version 7.0 is running on the majority of active hubs
|
|
// case PERMS_SPECIFIC:
|
|
// return 'specific';
|
|
case PERMS_CONTACTS:
|
|
default:
|
|
return 'contacts';
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @brief Returns a descriptive text for a given $scope.
|
|
*
|
|
* @param string $scope
|
|
* @return string translated string describing the scope
|
|
*/
|
|
function translate_scope($scope): string {
|
|
if(! $scope || $scope === 'public')
|
|
return t('Visible to anybody on the internet.');
|
|
if(strpos($scope,'self') === 0)
|
|
return t('Visible to you only.');
|
|
if(strpos($scope,'network:') === 0)
|
|
return t('Visible to anybody in this network.');
|
|
if(strpos($scope,'authenticated') === 0)
|
|
return t('Visible to anybody authenticated.');
|
|
if(strpos($scope,'site:') === 0)
|
|
return sprintf( t('Visible to anybody on %s.'), strip_tags(substr($scope,6)));
|
|
if(strpos($scope,'any connections') === 0)
|
|
return t('Visible to all connections.');
|
|
if(strpos($scope,'contacts') === 0)
|
|
return t('Visible to approved connections.');
|
|
if(strpos($scope,'specific') === 0)
|
|
return t('Visible to specific connections.');
|
|
|
|
// Fall through and return untranslated scope
|
|
return $scope;
|
|
}
|
|
|
|
/**
|
|
* @brief
|
|
*
|
|
* @param array $xchan
|
|
* @return array an associative array
|
|
*/
|
|
function encode_item_xchan($xchan) {
|
|
$ret = [];
|
|
|
|
$ret['name'] = $xchan['xchan_name'];
|
|
$ret['address'] = $xchan['xchan_addr'];
|
|
$ret['url'] = $xchan['xchan_url'];
|
|
$ret['network'] = $xchan['xchan_network'];
|
|
$ret['photo'] = [ 'mimetype' => $xchan['xchan_photo_mimetype'], 'src' => $xchan['xchan_photo_m'] ];
|
|
$ret['id'] = $xchan['xchan_guid'];
|
|
$ret['id_sig'] = $xchan['xchan_guid_sig'];
|
|
$ret['key'] = $xchan['xchan_pubkey'];
|
|
|
|
$hookdata = [
|
|
'encoded_xchan' => $ret
|
|
];
|
|
|
|
call_hooks('encode_item_xchan', $hookdata);
|
|
|
|
return $hookdata['encoded_xchan'];
|
|
}
|
|
|
|
function encode_item_terms($terms,$mirror = false) {
|
|
$ret = array();
|
|
|
|
$allowed_export_terms = array( TERM_UNKNOWN, TERM_HASHTAG, TERM_MENTION, TERM_CATEGORY, TERM_BOOKMARK, TERM_COMMUNITYTAG, TERM_FORUM );
|
|
|
|
if($mirror) {
|
|
$allowed_export_terms[] = TERM_PCATEGORY;
|
|
$allowed_export_terms[] = TERM_FILE;
|
|
}
|
|
|
|
if($terms) {
|
|
foreach($terms as $term) {
|
|
if(in_array($term['ttype'],$allowed_export_terms))
|
|
$ret[] = array('tag' => $term['term'], 'url' => $term['url'], 'type' => termtype($term['ttype']));
|
|
}
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
function encode_item_meta($meta,$mirror = false) {
|
|
$ret = array();
|
|
|
|
if($meta) {
|
|
foreach($meta as $m) {
|
|
if($m['sharing'] || $mirror)
|
|
$ret[] = array('family' => $m['cat'], 'key' => $m['k'], 'value' => $m['v'], 'sharing' => intval($m['sharing']));
|
|
}
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
function decode_item_meta($meta) {
|
|
$ret = array();
|
|
|
|
if(is_array($meta) && $meta) {
|
|
foreach($meta as $m) {
|
|
$ret[] = array('cat' => escape_tags($m['family']),'k' => escape_tags($m['key']),'v' => $m['value'],'sharing' => $m['sharing']);
|
|
}
|
|
}
|
|
return $ret;
|
|
}
|
|
|
|
/**
|
|
* @brief
|
|
*
|
|
* @param int $t
|
|
* @return string
|
|
*/
|
|
function termtype($t) {
|
|
$types = array('unknown','hashtag','mention','category','private_category','file','search','thing','bookmark', 'hierarchy', 'communitytag', 'forum');
|
|
|
|
return(($types[$t]) ? $types[$t] : 'unknown');
|
|
}
|
|
|
|
/**
|
|
* @brief
|
|
*
|
|
* @param array $t
|
|
* @return array|string empty string or array containing associative arrays with
|
|
* * \e string \b term
|
|
* * \e string \b url
|
|
* * \e int \b type
|
|
*/
|
|
function decode_tags($t) {
|
|
if($t) {
|
|
$ret = array();
|
|
foreach($t as $x) {
|
|
$tag = array();
|
|
$tag['term'] = htmlspecialchars($x['tag'], ENT_COMPAT, 'UTF-8', false);
|
|
$tag['url'] = htmlspecialchars($x['url'], ENT_COMPAT, 'UTF-8', false);
|
|
switch($x['type']) {
|
|
case 'hashtag':
|
|
$tag['ttype'] = TERM_HASHTAG;
|
|
break;
|
|
case 'mention':
|
|
$tag['ttype'] = TERM_MENTION;
|
|
break;
|
|
case 'category':
|
|
$tag['ttype'] = TERM_CATEGORY;
|
|
break;
|
|
case 'private_category':
|
|
$tag['ttype'] = TERM_PCATEGORY;
|
|
break;
|
|
case 'file':
|
|
$tag['ttype'] = TERM_FILE;
|
|
break;
|
|
case 'search':
|
|
$tag['ttype'] = TERM_SAVEDSEARCH;
|
|
break;
|
|
case 'thing':
|
|
$tag['ttype'] = TERM_THING;
|
|
break;
|
|
case 'bookmark':
|
|
$tag['ttype'] = TERM_BOOKMARK;
|
|
break;
|
|
case 'communitytag':
|
|
$tag['ttype'] = TERM_COMMUNITYTAG;
|
|
break;
|
|
case 'forum':
|
|
$tag['ttype'] = TERM_FORUM;
|
|
break;
|
|
default:
|
|
case 'unknown':
|
|
$tag['ttype'] = TERM_UNKNOWN;
|
|
break;
|
|
}
|
|
$ret[] = $tag;
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
return '';
|
|
}
|
|
|
|
|
|
function purify_imported_object($obj) {
|
|
$ret = null;
|
|
if (is_array($obj)) {
|
|
foreach ( $obj as $k => $v ) {
|
|
if (is_array($v)) {
|
|
$ret[$k] = purify_imported_object($v);
|
|
}
|
|
elseif (is_string($v)) {
|
|
$ret[$k] = purify_html($v);
|
|
}
|
|
}
|
|
}
|
|
elseif (is_string($obj)) {
|
|
$ret = purify_html($obj);
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
* @brief Santise a potentially complex array.
|
|
*
|
|
* @param array $arr
|
|
* @return array|string
|
|
*/
|
|
function activity_sanitise($arr) {
|
|
if($arr) {
|
|
if(is_array($arr)) {
|
|
$ret = array();
|
|
foreach($arr as $k => $x) {
|
|
if (in_array($k, [ 'content', 'summary', 'contentMap', 'summaryMap' ])) {
|
|
$ret[$k] = purify_imported_object($arr[$k]);
|
|
continue;
|
|
}
|
|
if(is_array($x))
|
|
$ret[$k] = activity_sanitise($x);
|
|
else
|
|
$ret[$k] = htmlspecialchars((string)$x, ENT_COMPAT, 'UTF-8', false);
|
|
}
|
|
return $ret;
|
|
}
|
|
else {
|
|
return htmlspecialchars($arr, ENT_COMPAT, 'UTF-8', false);
|
|
}
|
|
}
|
|
|
|
return '';
|
|
}
|
|
|
|
/**
|
|
* @brief Sanitise a simple linear array.
|
|
*
|
|
* @param array $arr
|
|
* @return array|string
|
|
*/
|
|
function array_sanitise($arr) {
|
|
if($arr) {
|
|
$ret = array();
|
|
foreach($arr as $x) {
|
|
$ret[] = htmlspecialchars($x, ENT_COMPAT,'UTF-8',false);
|
|
}
|
|
return $ret;
|
|
}
|
|
|
|
return '';
|
|
}
|
|
|
|
function encode_item_flags($item) {
|
|
|
|
// most of item_flags and item_restrict are local settings which don't apply when transmitted.
|
|
// We may need those for the case of syncing other hub locations which you are attached to.
|
|
|
|
$ret = array();
|
|
|
|
if(intval($item['item_deleted']))
|
|
$ret[] = 'deleted';
|
|
if(intval($item['item_hidden']))
|
|
$ret[] = 'hidden';
|
|
if(intval($item['item_notshown']))
|
|
$ret[] = 'notshown';
|
|
if(intval($item['item_thread_top']))
|
|
$ret[] = 'thread_parent';
|
|
if(intval($item['item_nsfw']))
|
|
$ret[] = 'nsfw';
|
|
if(intval($item['item_consensus']))
|
|
$ret[] = 'consensus';
|
|
if(intval($item['item_obscured']))
|
|
$ret[] = 'obscured';
|
|
if(intval($item['item_private']))
|
|
$ret[] = 'private';
|
|
if(intval($item['item_private']) === 2)
|
|
$ret[] = 'direct';
|
|
|
|
return $ret;
|
|
}
|
|
|
|
function get_profile_elements($x) {
|
|
|
|
$arr = array();
|
|
|
|
if(($xchan_hash = import_author_xchan($x['from'])) !== false)
|
|
$arr['xprof_hash'] = $xchan_hash;
|
|
else
|
|
return array();
|
|
|
|
$arr['desc'] = (($x['title']) ? htmlspecialchars($x['title'],ENT_COMPAT,'UTF-8',false) : '');
|
|
|
|
$arr['dob'] = datetime_convert('UTC','UTC',$x['birthday'],'Y-m-d');
|
|
$arr['age'] = (($x['age']) ? intval($x['age']) : 0);
|
|
|
|
$arr['gender'] = (($x['gender']) ? htmlspecialchars($x['gender'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['marital'] = (($x['marital']) ? htmlspecialchars($x['marital'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['sexual'] = (($x['sexual']) ? htmlspecialchars($x['sexual'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['locale'] = (($x['locale']) ? htmlspecialchars($x['locale'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['region'] = (($x['region']) ? htmlspecialchars($x['region'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['postcode'] = (($x['postcode']) ? htmlspecialchars($x['postcode'], ENT_COMPAT,'UTF-8',false) : '');
|
|
$arr['country'] = (($x['country']) ? htmlspecialchars($x['country'], ENT_COMPAT,'UTF-8',false) : '');
|
|
|
|
$arr['keywords'] = (($x['keywords'] && is_array($x['keywords'])) ? array_sanitise($x['keywords']) : array());
|
|
|
|
return $arr;
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief Signs an item body.
|
|
*
|
|
* @param[in,out] array $item
|
|
*/
|
|
function item_sign(&$item) {
|
|
|
|
if(array_key_exists('sig',$item) && $item['sig'])
|
|
return;
|
|
|
|
$r = q("select * from channel where channel_id = %d and channel_hash = '%s' ",
|
|
intval($item['uid']),
|
|
dbesc($item['author_xchan'])
|
|
);
|
|
if(! $r)
|
|
return;
|
|
|
|
$item['sig'] = Libzot::sign($item['body'], $r[0]['channel_prvkey']);
|
|
$item['item_verified'] = 1;
|
|
}
|
|
|
|
/**
|
|
* @brief packs json data for storage.
|
|
* if it is a string, check if it is already json encoded.
|
|
* Otherwise, json encode it
|
|
* If it is an array, sanitise it and then json_encode it.
|
|
*
|
|
* @param array $arr
|
|
* @param string | intval $k
|
|
*
|
|
* @return string | null
|
|
*/
|
|
|
|
function item_json_encapsulate($arr, $k) {
|
|
$retval = null;
|
|
|
|
if (isset($arr[$k])) {
|
|
if (is_string($arr[$k])) {
|
|
// determine if it is json encoded already
|
|
$test = json_decode($arr[$k]);
|
|
// assume it is json encoded already
|
|
$retval = $arr[$k];
|
|
if ($test === NULL) {
|
|
$retval = json_encode($arr[$k], JSON_UNESCAPED_SLASHES);
|
|
}
|
|
}
|
|
else {
|
|
activity_sanitise($arr[$k]);
|
|
$retval = json_encode($arr[$k], JSON_UNESCAPED_SLASHES);
|
|
}
|
|
}
|
|
|
|
return $retval;
|
|
}
|
|
|
|
/**
|
|
* @brief Stores an item type record.
|
|
*
|
|
* @param array $arr
|
|
* @param boolean $allow_exec (optional) default false
|
|
* @param boolean $deliver (optional) default true
|
|
*
|
|
* @return array
|
|
* * \e boolean \b success
|
|
* * \e int \b item_id
|
|
*/
|
|
function item_store($arr, $allow_exec = false, $deliver = true, $addAndSync = true) {
|
|
|
|
$d = [
|
|
'item' => $arr,
|
|
'allow_exec' => $allow_exec
|
|
];
|
|
|
|
/**
|
|
* @hooks item_store
|
|
* Called when item_store() stores a record of type item.
|
|
* * \e array \b item
|
|
* * \e boolean \b allow_exec
|
|
*/
|
|
call_hooks('item_store_before', $d);
|
|
|
|
$arr = $d['item'];
|
|
$allow_exec = $d['allow_exec'];
|
|
|
|
$ret = array('success' => false, 'item_id' => 0);
|
|
|
|
if(array_key_exists('cancel',$arr) && $arr['cancel']) {
|
|
logger('cancelled by plugin');
|
|
return $ret;
|
|
}
|
|
|
|
if(! $arr['uid']) {
|
|
logger('item_store: no uid');
|
|
$ret['message'] = 'No uid.';
|
|
return $ret;
|
|
}
|
|
|
|
//$uplinked_comment = false;
|
|
|
|
// If a page layout is provided, ensure it exists and belongs to us.
|
|
|
|
if(array_key_exists('layout_mid',$arr) && $arr['layout_mid']) {
|
|
$l = q("select item_type from item where mid = '%s' and uid = %d limit 1",
|
|
dbesc($arr['layout_mid']),
|
|
intval($arr['uid'])
|
|
);
|
|
if((! $l) || ($l[0]['item_type'] != ITEM_TYPE_PDL))
|
|
unset($arr['layout_mid']);
|
|
}
|
|
|
|
// Don't let anybody set these, either intentionally or accidentally
|
|
|
|
if(array_key_exists('id',$arr))
|
|
unset($arr['id']);
|
|
if(array_key_exists('parent',$arr))
|
|
unset($arr['parent']);
|
|
|
|
$arr['mimetype'] = ((!empty($arr['mimetype'])) ? notags(trim($arr['mimetype'])) : 'text/bbcode');
|
|
|
|
if(($arr['mimetype'] == 'application/x-php') && (! $allow_exec)) {
|
|
logger('item_store: php mimetype but allow_exec is denied.');
|
|
$ret['message'] = 'exec denied.';
|
|
return $ret;
|
|
}
|
|
|
|
$arr['title'] = ((array_key_exists('title',$arr) && $arr['title']) ? trim($arr['title']) : '');
|
|
$arr['summary'] = ((array_key_exists('summary',$arr) && $arr['summary']) ? trim($arr['summary']) : '');
|
|
$arr['body'] = ((array_key_exists('body',$arr) && $arr['body']) ? trim($arr['body']) : '');
|
|
|
|
$arr['allow_cid'] = ((!empty($arr['allow_cid'])) ? trim($arr['allow_cid']) : '');
|
|
$arr['allow_gid'] = ((!empty($arr['allow_gid'])) ? trim($arr['allow_gid']) : '');
|
|
$arr['deny_cid'] = ((!empty($arr['deny_cid'])) ? trim($arr['deny_cid']) : '');
|
|
$arr['deny_gid'] = ((!empty($arr['deny_gid'])) ? trim($arr['deny_gid']) : '');
|
|
$arr['postopts'] = ((!empty($arr['postopts'])) ? trim($arr['postopts']) : '');
|
|
$arr['route'] = ((!empty($arr['route'])) ? trim($arr['route']) : '');
|
|
$arr['uuid'] = ((!empty($arr['uuid'])) ? trim($arr['uuid']) : '');
|
|
$arr['item_private'] = ((!empty($arr['item_private'])) ? intval($arr['item_private']) : 0 );
|
|
$arr['item_wall'] = ((!empty($arr['item_wall'])) ? intval($arr['item_wall']) : 0 );
|
|
$arr['item_type'] = ((!empty($arr['item_type'])) ? intval($arr['item_type']) : 0 );
|
|
|
|
// obsolete, but needed so as not to throw not-null constraints on some database driveres
|
|
$arr['item_flags'] = ((!empty($arr['item_flags'])) ? intval($arr['item_flags']) : 0 );
|
|
|
|
|
|
$arr['lang'] = detect_language($arr['body']);
|
|
|
|
// apply the input filter here
|
|
|
|
$arr['summary'] = trim(z_input_filter($arr['summary'],$arr['mimetype'],$allow_exec));
|
|
$arr['body'] = trim(z_input_filter($arr['body'],$arr['mimetype'],$allow_exec));
|
|
|
|
item_sign($arr);
|
|
|
|
if(! array_key_exists('sig',$arr))
|
|
$arr['sig'] = '';
|
|
|
|
$allowed_languages = get_pconfig($arr['uid'],'system','allowed_languages');
|
|
|
|
if((is_array($allowed_languages)) && ($arr['lang']) && (! array_key_exists($arr['lang'],$allowed_languages))) {
|
|
$translate = [
|
|
'item' => $arr,
|
|
'from' => $arr['lang'],
|
|
'to' => $allowed_languages,
|
|
'translated' => false
|
|
];
|
|
/**
|
|
* @hooks item_translate
|
|
* Called from item_store and item_store_update after the post language has been autodetected.
|
|
* * \e array \b item
|
|
* * \e string \b from
|
|
* * \e string \b to
|
|
* * \e boolean \b translated
|
|
*/
|
|
call_hooks('item_translate', $translate);
|
|
if((! $translate['translated']) && (intval(get_pconfig($arr['uid'],'system','reject_disallowed_languages')))) {
|
|
logger('language ' . $arr['lang'] . ' not accepted for uid ' . $arr['uid']);
|
|
$ret['message'] = 'language not accepted';
|
|
return $ret;
|
|
}
|
|
$arr = $translate['item'];
|
|
}
|
|
|
|
if((!empty($arr['obj'])) && is_array($arr['obj'])) {
|
|
activity_sanitise($arr['obj']);
|
|
$arr['obj'] = json_encode($arr['obj']);
|
|
}
|
|
|
|
if((!empty($arr['target'])) && is_array($arr['target'])) {
|
|
activity_sanitise($arr['target']);
|
|
$arr['target'] = json_encode($arr['target']);
|
|
}
|
|
|
|
if((!empty($arr['attach'])) && is_array($arr['attach'])) {
|
|
activity_sanitise($arr['attach']);
|
|
$arr['attach'] = json_encode($arr['attach']);
|
|
}
|
|
|
|
$arr['aid'] = ((!empty($arr['aid'])) ? intval($arr['aid']) : 0);
|
|
$arr['mid'] = ((!empty($arr['mid'])) ? notags(trim($arr['mid'])) : random_string());
|
|
$arr['revision'] = ((!empty($arr['revision']) && intval($arr['revision']) > 0) ? intval($arr['revision']) : 0);
|
|
|
|
$arr['author_xchan'] = ((!empty($arr['author_xchan'])) ? notags(trim($arr['author_xchan'])) : '');
|
|
$arr['owner_xchan'] = ((!empty($arr['owner_xchan'])) ? notags(trim($arr['owner_xchan'])) : '');
|
|
$arr['created'] = ((!empty($arr['created']) !== false) ? datetime_convert('UTC','UTC',$arr['created']) : datetime_convert());
|
|
$arr['edited'] = ((!empty($arr['edited']) !== false) ? datetime_convert('UTC','UTC',$arr['edited']) : datetime_convert());
|
|
$arr['expires'] = ((!empty($arr['expires']) !== false) ? datetime_convert('UTC','UTC',$arr['expires']) : DBA::$dba->get_null_date());
|
|
$arr['commented'] = ((!empty($arr['commented']) !== false) ? datetime_convert('UTC','UTC',$arr['commented']) : datetime_convert());
|
|
$arr['comments_closed'] = ((!empty($arr['comments_closed']) !== false) ? datetime_convert('UTC','UTC',$arr['comments_closed']) : DBA::$dba->get_null_date());
|
|
$arr['html'] = ((array_key_exists('html',$arr)) ? $arr['html'] : '');
|
|
|
|
if($deliver) {
|
|
$arr['received'] = datetime_convert();
|
|
$arr['changed'] = datetime_convert();
|
|
}
|
|
else {
|
|
|
|
// When deliver flag is false, we are *probably* performing an import or bulk migration.
|
|
// If one updates the changed timestamp it will be made available to zotfeed and delivery
|
|
// will still take place through backdoor methods. Since these fields are rarely used
|
|
// otherwise, just preserve the original timestamp.
|
|
|
|
$arr['received'] = ((!empty($arr['received']) !== false) ? datetime_convert('UTC','UTC',$arr['received']) : datetime_convert());
|
|
$arr['changed'] = ((!empty($arr['changed']) !== false) ? datetime_convert('UTC','UTC',$arr['changed']) : datetime_convert());
|
|
}
|
|
|
|
$arr['location'] = ((!empty($arr['location'])) ? notags(trim($arr['location'])) : '');
|
|
$arr['coord'] = ((!empty($arr['coord'])) ? notags(trim($arr['coord'])) : '');
|
|
$arr['parent_mid'] = ((!empty($arr['parent_mid'])) ? notags(trim($arr['parent_mid'])) : '');
|
|
$arr['thr_parent'] = ((!empty($arr['thr_parent'])) ? notags(trim($arr['thr_parent'])) : $arr['parent_mid']);
|
|
$arr['verb'] = ((!empty($arr['verb'])) ? notags(trim($arr['verb'])) : 'Create');
|
|
$arr['obj_type'] = ((!empty($arr['obj_type'])) ? notags(trim($arr['obj_type'])) : 'Note');
|
|
$arr['obj'] = ((!empty($arr['obj'])) ? trim($arr['obj']) : '');
|
|
$arr['tgt_type'] = ((!empty($arr['tgt_type'])) ? notags(trim($arr['tgt_type'])) : '');
|
|
$arr['target'] = ((!empty($arr['target'])) ? trim($arr['target']) : '');
|
|
$arr['plink'] = ((!empty($arr['plink'])) ? notags(trim($arr['plink'])) : '');
|
|
$arr['attach'] = ((!empty($arr['attach'])) ? notags(trim($arr['attach'])) : '');
|
|
$arr['app'] = ((!empty($arr['app'])) ? notags(trim($arr['app'])) : '');
|
|
|
|
$arr['public_policy'] = ((!empty($arr['public_policy'])) ? notags(trim($arr['public_policy'])) : '' );
|
|
|
|
$arr['comment_policy'] = ((!empty($arr['comment_policy'])) ? notags(trim($arr['comment_policy'])) : 'contacts' );
|
|
|
|
if(! array_key_exists('item_unseen',$arr))
|
|
$arr['item_unseen'] = 1;
|
|
|
|
if((! array_key_exists('item_nocomment',$arr)) && ($arr['comment_policy'] == 'none'))
|
|
$arr['item_nocomment'] = 1;
|
|
|
|
if(empty($arr['llink'])) {
|
|
$arr['llink'] = z_root() . '/display/' . $arr['uuid'];
|
|
}
|
|
|
|
if(empty($arr['plink'])) {
|
|
$arr['plink'] = $arr['llink'];
|
|
}
|
|
|
|
if($arr['parent_mid'] === $arr['mid']) {
|
|
$parent_id = 0;
|
|
$parent_deleted = 0;
|
|
$allow_cid = $arr['allow_cid'];
|
|
$allow_gid = $arr['allow_gid'];
|
|
$deny_cid = $arr['deny_cid'];
|
|
$deny_gid = $arr['deny_gid'];
|
|
$public_policy = $arr['public_policy'];
|
|
$comments_closed = $arr['comments_closed'];
|
|
$arr['item_thread_top'] = 1;
|
|
}
|
|
else {
|
|
|
|
// find the parent and snarf the item id and ACL's
|
|
// and anything else we need to inherit
|
|
|
|
$r = q("SELECT * FROM item WHERE mid = '%s' AND uid = %d ORDER BY id ASC LIMIT 1",
|
|
dbesc($arr['parent_mid']),
|
|
intval($arr['uid'])
|
|
);
|
|
|
|
if($r) {
|
|
|
|
// in case item_store was killed before the parent's parent attribute got set,
|
|
// set it now. This happens with some regularity on Dreamhost. This will keep
|
|
// us from getting notifications for threads that exist but which we can't see.
|
|
|
|
if(($r[0]['mid'] === $r[0]['parent_mid']) && (! intval($r[0]['parent']))) {
|
|
q("update item set parent = id where id = %d",
|
|
intval($r[0]['id'])
|
|
);
|
|
}
|
|
|
|
if(comments_are_now_closed($r[0]) && !in_array($arr['verb'], ['Add', 'Remove'])) {
|
|
logger('item_store: comments closed');
|
|
$ret['message'] = 'Comments closed.';
|
|
return $ret;
|
|
}
|
|
|
|
// is the new message multi-level threaded?
|
|
// even though we don't support it now, preserve the info
|
|
// and re-attach to the conversation parent.
|
|
|
|
if($r[0]['mid'] != $r[0]['parent_mid']) {
|
|
$arr['parent_mid'] = $r[0]['parent_mid'];
|
|
$z = q("SELECT * FROM item WHERE mid = '%s' AND parent_mid = '%s' AND uid = %d
|
|
ORDER BY id ASC LIMIT 1",
|
|
dbesc($r[0]['parent_mid']),
|
|
dbesc($r[0]['parent_mid']),
|
|
intval($arr['uid'])
|
|
);
|
|
if($z)
|
|
$r = $z;
|
|
}
|
|
|
|
$parent_id = $r[0]['id'];
|
|
$parent_deleted = $r[0]['item_deleted'];
|
|
$allow_cid = $r[0]['allow_cid'];
|
|
$allow_gid = $r[0]['allow_gid'];
|
|
$deny_cid = $r[0]['deny_cid'];
|
|
$deny_gid = $r[0]['deny_gid'];
|
|
$public_policy = $r[0]['public_policy'];
|
|
$comments_closed = $r[0]['comments_closed'];
|
|
|
|
if(intval($r[0]['item_wall']))
|
|
$arr['item_wall'] = 1;
|
|
|
|
// An uplinked comment might arrive with a downstream owner.
|
|
// Fix it.
|
|
|
|
if($r[0]['owner_xchan'] !== $arr['owner_xchan']) {
|
|
$arr['owner_xchan'] = $r[0]['owner_xchan'];
|
|
// $uplinked_comment = true;
|
|
}
|
|
|
|
// if the parent is private, force privacy for the entire conversation
|
|
|
|
if($r[0]['item_private'])
|
|
$arr['item_private'] = $r[0]['item_private'];
|
|
|
|
// Edge case. We host a public forum that was originally posted to privately.
|
|
// The original author commented, but as this is a comment, the permissions
|
|
// weren't fixed up so it will still show the comment as private unless we fix it here.
|
|
|
|
if(intval($r[0]['item_uplink']) && (! $r[0]['item_private']))
|
|
$arr['item_private'] = 0;
|
|
|
|
if(in_array($arr['obj_type'], ['Note','Answer']) && $r[0]['obj_type'] === 'Question' && intval($r[0]['item_wall'])) {
|
|
Activity::update_poll($r[0], $arr);
|
|
}
|
|
|
|
}
|
|
else {
|
|
logger('item_store: item parent was not found - ignoring item');
|
|
$ret['message'] = 'parent not found.';
|
|
return $ret;
|
|
}
|
|
}
|
|
|
|
if($parent_deleted)
|
|
$arr['item_deleted'] = 1;
|
|
|
|
$r = q("SELECT id FROM item WHERE uuid = '%s' AND uid = %d and revision = %d LIMIT 1",
|
|
dbesc($arr['uuid']),
|
|
intval($arr['uid']),
|
|
intval($arr['revision'])
|
|
);
|
|
|
|
if($r) {
|
|
logger('duplicate item ignored. ' . print_r($arr,true));
|
|
$ret['message'] = 'duplicate post.';
|
|
return $ret;
|
|
}
|
|
|
|
/**
|
|
* @hooks item_store
|
|
* Called when item_store() stores a record of type item.
|
|
*/
|
|
call_hooks('item_store', $arr);
|
|
|
|
|
|
/**
|
|
* @hooks post_remote
|
|
* Called when an activity arrives from another site.
|
|
* This hook remains for backward compatibility.
|
|
*/
|
|
call_hooks('post_remote', $arr);
|
|
|
|
if(!empty($arr['cancel'])) {
|
|
logger('Post cancelled by plugin.');
|
|
$ret['message'] = 'cancelled.';
|
|
return $ret;
|
|
}
|
|
|
|
// pull out all the taxonomy stuff for separate storage
|
|
|
|
$terms = null;
|
|
if(array_key_exists('term',$arr)) {
|
|
$terms = $arr['term'];
|
|
unset($arr['term']);
|
|
}
|
|
|
|
$meta = null;
|
|
if(array_key_exists('iconfig',$arr)) {
|
|
$meta = $arr['iconfig'];
|
|
unset($arr['iconfig']);
|
|
}
|
|
|
|
$private = intval($arr['item_private']);
|
|
if (! $private) {
|
|
if (strlen($allow_cid) || strlen($allow_gid) || strlen($deny_cid) || strlen($deny_gid)) {
|
|
$private = 1;
|
|
}
|
|
}
|
|
|
|
$arr['parent'] = $parent_id;
|
|
$arr['allow_cid'] = $allow_cid;
|
|
$arr['allow_gid'] = $allow_gid;
|
|
$arr['deny_cid'] = $deny_cid;
|
|
$arr['deny_gid'] = $deny_gid;
|
|
$arr['public_policy'] = $public_policy;
|
|
$arr['item_private'] = $private;
|
|
$arr['comments_closed'] = $comments_closed;
|
|
|
|
logger('item_store: ' . print_r($arr,true), LOGGER_DATA);
|
|
|
|
|
|
create_table_from_array('item',$arr);
|
|
|
|
// find the item we just created
|
|
|
|
$r = q("SELECT item.*, tp.uuid AS thr_parent_uuid FROM item
|
|
LEFT JOIN item tp ON item.thr_parent = tp.mid AND item.uid = tp.uid
|
|
WHERE item.mid = '%s' AND item.uid = %d and item.revision = %d ORDER BY item.id ASC ",
|
|
dbesc($arr['mid']),
|
|
intval($arr['uid']),
|
|
intval($arr['revision'])
|
|
);
|
|
|
|
if($r) {
|
|
// This will gives us a fresh copy of what's now in the DB and undo the db escaping,
|
|
// which really messes up the notifications
|
|
|
|
$current_post = $r[0]['id'];
|
|
$arr = $r[0];
|
|
logger('item_store: created item ' . $current_post, LOGGER_DEBUG);
|
|
}
|
|
else {
|
|
logger('item_store: could not locate stored item');
|
|
$ret['message'] = 'unable to retrieve.';
|
|
return $ret;
|
|
}
|
|
if(count($r) > 1) {
|
|
logger('item_store: duplicated post occurred. Removing duplicates.');
|
|
q("DELETE FROM item WHERE mid = '%s' AND uid = %d AND id != %d ",
|
|
dbesc($arr['mid']),
|
|
intval($arr['uid']),
|
|
intval($current_post)
|
|
);
|
|
}
|
|
|
|
$arr['id'] = $current_post;
|
|
|
|
if(! intval($r[0]['parent'])) {
|
|
$x = q("update item set parent = id where id = %d",
|
|
intval($r[0]['id'])
|
|
);
|
|
$arr['parent'] = $r[0]['id'];
|
|
}
|
|
|
|
|
|
// Store taxonomy
|
|
|
|
if(($terms) && (is_array($terms))) {
|
|
foreach($terms as $t) {
|
|
q("insert into term (uid,oid,otype,ttype,term,url,imgurl)
|
|
values(%d,%d,%d,%d,'%s','%s','%s') ",
|
|
intval($arr['uid']),
|
|
intval($current_post),
|
|
intval(TERM_OBJ_POST),
|
|
intval($t['ttype']),
|
|
dbesc($t['term']),
|
|
dbesc($t['url']),
|
|
dbesc($t['imgurl'] ?? ''),
|
|
);
|
|
}
|
|
|
|
$arr['term'] = $terms;
|
|
}
|
|
|
|
if($meta) {
|
|
foreach($meta as $m) {
|
|
set_iconfig($current_post,$m['cat'],$m['k'],$m['v'],$m['sharing']);
|
|
}
|
|
$arr['iconfig'] = $meta;
|
|
}
|
|
|
|
|
|
$ret['item'] = $arr;
|
|
|
|
/**
|
|
* @hooks post_remote_end
|
|
* Called after processing a remote post.
|
|
*/
|
|
call_hooks('post_remote_end', $arr);
|
|
|
|
/**
|
|
* @hooks item_stored
|
|
* Called after new item is stored in the database.
|
|
* (By this time we have an item_id and other frequently needed info.)
|
|
*/
|
|
call_hooks('item_stored',$arr);
|
|
|
|
item_update_parent_commented($arr);
|
|
|
|
if (str_contains($arr['body'], '[/embed]') || str_contains($arr['body'], '[/img]') || str_contains($arr['body'], '[/zmg]')) {
|
|
Master::Summon(['Cache_embeds', $arr['uuid']]);
|
|
}
|
|
|
|
$ret['success'] = true;
|
|
$ret['item_id'] = $current_post;
|
|
|
|
if ($addAndSync) {
|
|
$ret = addToCollectionAndSync($ret);
|
|
}
|
|
|
|
// If _creating_ a deleted item, don't propagate it further or send out notifications.
|
|
// We need to store the item details just in case the delete came in before the original post,
|
|
// so that we have an item in the DB that's marked deleted and won't store a fresh post
|
|
// that isn't aware that we were already told to delete it.
|
|
|
|
if(($deliver) && (! intval($arr['item_deleted']))) {
|
|
send_status_notifications($current_post,$arr);
|
|
tag_deliver($arr['uid'],$current_post);
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief Update a stored item.
|
|
*
|
|
* @param array $arr an item
|
|
* @param boolean $allow_exec (optional) default false
|
|
* @param boolean $deliver (optional) default true
|
|
* @return array
|
|
*/
|
|
function item_store_update($arr, $allow_exec = false, $deliver = true, $addAndSync = true) {
|
|
|
|
$d = [
|
|
'item' => $arr,
|
|
'allow_exec' => $allow_exec
|
|
];
|
|
|
|
/**
|
|
* @hooks item_store_update
|
|
* Called when item_store_update() is called to update a stored item. It
|
|
* overwrites the function's parameters $arr and $allow_exec.
|
|
* * \e array \b item
|
|
* * \e boolean \b allow_exec
|
|
*/
|
|
call_hooks('item_store_update_before', $d);
|
|
$arr = $d['item'];
|
|
$allow_exec = $d['allow_exec'];
|
|
|
|
$ret = array('success' => false, 'item_id' => 0);
|
|
|
|
if(array_key_exists('cancel',$arr) && $arr['cancel']) {
|
|
logger('cancelled by plugin');
|
|
return $ret;
|
|
}
|
|
|
|
if(! intval($arr['uid'])) {
|
|
logger('no uid');
|
|
$ret['message'] = 'no uid.';
|
|
return $ret;
|
|
}
|
|
if(! intval($arr['id'])) {
|
|
logger('no id');
|
|
$ret['message'] = 'no id.';
|
|
return $ret;
|
|
}
|
|
|
|
$orig_post_id = $arr['id'];
|
|
$uid = $arr['uid'];
|
|
|
|
$orig = q("select * from item where id = %d and uid = %d limit 1",
|
|
intval($orig_post_id),
|
|
intval($uid)
|
|
);
|
|
if(! $orig) {
|
|
logger('Original post not found: ' . $orig_post_id);
|
|
$ret['message'] = 'no original';
|
|
return $ret;
|
|
}
|
|
|
|
|
|
// override the unseen flag with the original
|
|
|
|
$arr['item_unseen'] = $orig[0]['item_unseen'];
|
|
|
|
|
|
if(array_key_exists('edit',$arr))
|
|
unset($arr['edit']);
|
|
|
|
$arr['mimetype'] = ((!empty($arr['mimetype'])) ? notags(trim($arr['mimetype'])) : 'text/bbcode');
|
|
|
|
if(($arr['mimetype'] == 'application/x-php') && (! $allow_exec)) {
|
|
logger('item_store: php mimetype but allow_exec is denied.');
|
|
$ret['message'] = 'exec denied.';
|
|
return $ret;
|
|
}
|
|
|
|
$arr['lang'] = detect_language($arr['body']);
|
|
|
|
// apply the input filter here
|
|
|
|
$arr['summary'] = ((isset($arr['summary'])) ? trim(z_input_filter($arr['summary'],$arr['mimetype'],$allow_exec)) : '');
|
|
$arr['body'] = ((isset($arr['body'])) ? trim(z_input_filter($arr['body'],$arr['mimetype'],$allow_exec)) : '');
|
|
|
|
item_sign($arr);
|
|
|
|
$allowed_languages = get_pconfig($arr['uid'],'system','allowed_languages');
|
|
|
|
if((is_array($allowed_languages)) && ($arr['lang']) && (! array_key_exists($arr['lang'],$allowed_languages))) {
|
|
$translate = [
|
|
'item' => $arr,
|
|
'from' => $arr['lang'],
|
|
'to' => $allowed_languages,
|
|
'translated' => false
|
|
];
|
|
/**
|
|
* @hooks item_translate
|
|
* Called from item_store() and item_store_update() after the post language has been autodetected.
|
|
* * \e array \b item - returned value
|
|
* * \e string \b from
|
|
* * \e string \b to
|
|
* * \e boolean \b translated - default false, set true if hook translated it and provide it in item
|
|
*/
|
|
call_hooks('item_translate', $translate);
|
|
if((! $translate['translated']) && (intval(get_pconfig($arr['uid'],'system','reject_disallowed_languages')))) {
|
|
logger('item_store: language ' . $arr['lang'] . ' not accepted for uid ' . $arr['uid']);
|
|
$ret['message'] = 'language not accepted';
|
|
return $ret;
|
|
}
|
|
$arr = $translate['item'];
|
|
}
|
|
|
|
if((array_key_exists('obj',$arr)) && is_array($arr['obj'])) {
|
|
activity_sanitise($arr['obj']);
|
|
$arr['obj'] = json_encode($arr['obj']);
|
|
}
|
|
|
|
if((array_key_exists('target',$arr)) && is_array($arr['target'])) {
|
|
activity_sanitise($arr['target']);
|
|
$arr['target'] = json_encode($arr['target']);
|
|
}
|
|
|
|
if((array_key_exists('attach',$arr)) && is_array($arr['attach'])) {
|
|
activity_sanitise($arr['attach']);
|
|
$arr['attach'] = json_encode($arr['attach']);
|
|
}
|
|
|
|
unset($arr['id']);
|
|
unset($arr['uid']);
|
|
unset($arr['aid']);
|
|
unset($arr['mid']);
|
|
unset($arr['parent']);
|
|
unset($arr['parent_mid']);
|
|
unset($arr['created']);
|
|
unset($arr['author_xchan']);
|
|
unset($arr['owner_xchan']);
|
|
unset($arr['source_xchan']);
|
|
unset($arr['thr_parent']);
|
|
unset($arr['llink']);
|
|
|
|
$arr['edited'] = ((!empty($arr['edited'])) ? datetime_convert('UTC','UTC',$arr['edited']) : datetime_convert());
|
|
$arr['expires'] = ((!empty($arr['expires'])) ? datetime_convert('UTC','UTC',$arr['expires']) : $orig[0]['expires']);
|
|
|
|
$arr['revision'] = ((!empty($arr['revision'])) ? intval($arr['revision']) : 0);
|
|
|
|
if(array_key_exists('comments_closed',$arr))
|
|
$arr['comments_closed'] = datetime_convert('UTC','UTC',$arr['comments_closed']);
|
|
else
|
|
$arr['comments_closed'] = $orig[0]['comments_closed'];
|
|
|
|
$arr['commented'] = $orig[0]['commented'];
|
|
|
|
$arr['received'] = $orig[0]['received'];
|
|
$arr['changed'] = $orig[0]['changed'];
|
|
|
|
$arr['route'] = ((array_key_exists('route',$arr)) ? trim($arr['route']) : $orig[0]['route']);
|
|
|
|
$arr['location'] = ((!empty($arr['location'])) ? notags(trim($arr['location'])) : $orig[0]['location']);
|
|
$arr['uuid'] = ((!empty($arr['uuid'])) ? notags(trim($arr['uuid'])) : $orig[0]['uuid']);
|
|
$arr['coord'] = ((!empty($arr['coord'])) ? notags(trim($arr['coord'])) : $orig[0]['coord']);
|
|
$arr['verb'] = ((!empty($arr['verb'])) ? notags(trim($arr['verb'])) : $orig[0]['verb']);
|
|
$arr['obj_type'] = ((!empty($arr['obj_type'])) ? notags(trim($arr['obj_type'])) : $orig[0]['obj_type']);
|
|
$arr['obj'] = ((!empty($arr['obj'])) ? trim($arr['obj']) : $orig[0]['obj']);
|
|
$arr['tgt_type'] = ((!empty($arr['tgt_type'])) ? notags(trim($arr['tgt_type'])) : $orig[0]['tgt_type']);
|
|
$arr['target'] = ((!empty($arr['target'])) ? trim($arr['target']) : $orig[0]['target']);
|
|
$arr['plink'] = ((!empty($arr['plink'])) ? notags(trim($arr['plink'])) : $orig[0]['plink']);
|
|
|
|
$arr['allow_cid'] = ((array_key_exists('allow_cid',$arr)) ? trim($arr['allow_cid']) : $orig[0]['allow_cid']);
|
|
$arr['allow_gid'] = ((array_key_exists('allow_gid',$arr)) ? trim($arr['allow_gid']) : $orig[0]['allow_gid']);
|
|
$arr['deny_cid'] = ((array_key_exists('deny_cid',$arr)) ? trim($arr['deny_cid']) : $orig[0]['deny_cid']);
|
|
$arr['deny_gid'] = ((array_key_exists('deny_gid',$arr)) ? trim($arr['deny_gid']) : $orig[0]['deny_gid']);
|
|
$arr['item_private'] = ((array_key_exists('item_private',$arr)) ? intval($arr['item_private']) : $orig[0]['item_private']);
|
|
|
|
$arr['title'] = ((array_key_exists('title',$arr) && $arr['title']) ? trim($arr['title']) : '');
|
|
$arr['body'] = ((array_key_exists('body',$arr) && $arr['body']) ? trim($arr['body']) : '');
|
|
$arr['html'] = ((array_key_exists('html',$arr) && $arr['html']) ? trim($arr['html']) : '');
|
|
|
|
$arr['attach'] = ((array_key_exists('attach',$arr)) ? notags(trim($arr['attach'])) : $orig[0]['attach']);
|
|
$arr['app'] = ((array_key_exists('app',$arr)) ? notags(trim($arr['app'])) : $orig[0]['app']);
|
|
|
|
$arr['item_origin'] = ((array_key_exists('item_origin',$arr)) ? intval($arr['item_origin']) : $orig[0]['item_origin'] );
|
|
$arr['item_unseen'] = ((array_key_exists('item_unseen',$arr)) ? intval($arr['item_unseen']) : $orig[0]['item_unseen'] );
|
|
$arr['item_starred'] = ((array_key_exists('item_starred',$arr)) ? intval($arr['item_starred']) : $orig[0]['item_starred'] );
|
|
$arr['item_uplink'] = ((array_key_exists('item_uplink',$arr)) ? intval($arr['item_uplink']) : $orig[0]['item_uplink'] );
|
|
$arr['item_consensus'] = ((array_key_exists('item_consensus',$arr)) ? intval($arr['item_consensus']) : $orig[0]['item_consensus'] );
|
|
$arr['item_wall'] = ((array_key_exists('item_wall',$arr)) ? intval($arr['item_wall']) : $orig[0]['item_wall'] );
|
|
$arr['item_thread_top'] = ((array_key_exists('item_thread_top',$arr)) ? intval($arr['item_thread_top']) : $orig[0]['item_thread_top'] );
|
|
$arr['item_notshown'] = ((array_key_exists('item_notshown',$arr)) ? intval($arr['item_notshown']) : $orig[0]['item_notshown'] );
|
|
$arr['item_nsfw'] = ((array_key_exists('item_nsfw',$arr)) ? intval($arr['item_nsfw']) : $orig[0]['item_nsfw'] );
|
|
$arr['item_relay'] = ((array_key_exists('item_relay',$arr)) ? intval($arr['item_relay']) : $orig[0]['item_relay'] );
|
|
$arr['item_mentionsme'] = ((array_key_exists('item_mentionsme',$arr)) ? intval($arr['item_mentionsme']) : $orig[0]['item_mentionsme'] );
|
|
$arr['item_nocomment'] = ((array_key_exists('item_nocomment',$arr)) ? intval($arr['item_nocomment']) : $orig[0]['item_nocomment'] );
|
|
$arr['item_obscured'] = ((array_key_exists('item_obscured',$arr)) ? intval($arr['item_obscured']) : $orig[0]['item_obscured'] );
|
|
$arr['item_verified'] = ((array_key_exists('item_verified',$arr)) ? intval($arr['item_verified']) : $orig[0]['item_verified'] );
|
|
$arr['item_retained'] = ((array_key_exists('item_retained',$arr)) ? intval($arr['item_retained']) : $orig[0]['item_retained'] );
|
|
$arr['item_rss'] = ((array_key_exists('item_rss',$arr)) ? intval($arr['item_rss']) : $orig[0]['item_rss'] );
|
|
$arr['item_deleted'] = ((array_key_exists('item_deleted',$arr)) ? intval($arr['item_deleted']) : $orig[0]['item_deleted'] );
|
|
$arr['item_type'] = ((array_key_exists('item_type',$arr)) ? intval($arr['item_type']) : $orig[0]['item_type'] );
|
|
$arr['item_hidden'] = ((array_key_exists('item_hidden',$arr)) ? intval($arr['item_hidden']) : $orig[0]['item_hidden'] );
|
|
$arr['item_unpublished'] = ((array_key_exists('item_unpublished',$arr)) ? intval($arr['item_unpublished']) : $orig[0]['item_unpublished'] );
|
|
$arr['item_delayed'] = ((array_key_exists('item_delayed',$arr)) ? intval($arr['item_delayed']) : $orig[0]['item_delayed'] );
|
|
$arr['item_pending_remove'] = ((array_key_exists('item_pending_remove',$arr)) ? intval($arr['item_pending_remove']) : $orig[0]['item_pending_remove'] );
|
|
$arr['item_blocked'] = ((array_key_exists('item_blocked',$arr)) ? intval($arr['item_blocked']) : $orig[0]['item_blocked'] );
|
|
|
|
$arr['sig'] = ((!empty($arr['sig'])) ? $arr['sig'] : '');
|
|
$arr['layout_mid'] = ((array_key_exists('layout_mid',$arr)) ? dbesc($arr['layout_mid']) : $orig[0]['layout_mid'] );
|
|
|
|
$arr['public_policy'] = ((!empty($arr['public_policy'])) ? notags(trim($arr['public_policy'])) : $orig[0]['public_policy'] );
|
|
$arr['comment_policy'] = ((!empty($arr['comment_policy'])) ? notags(trim($arr['comment_policy'])) : $orig[0]['comment_policy'] );
|
|
|
|
/**
|
|
* @hooks post_remote_update
|
|
* Called when processing a remote post that involved an edit or update.
|
|
*/
|
|
call_hooks('post_remote_update', $arr);
|
|
|
|
if(!empty($arr['cancel'])) {
|
|
logger('Post cancelled by plugin.');
|
|
$ret['message'] = 'cancelled.';
|
|
return $ret;
|
|
}
|
|
|
|
// pull out all the taxonomy stuff for separate storage
|
|
|
|
$terms = null;
|
|
if(array_key_exists('term',$arr)) {
|
|
$terms = $arr['term'];
|
|
unset($arr['term']);
|
|
}
|
|
|
|
$meta = null;
|
|
if(array_key_exists('iconfig',$arr)) {
|
|
$meta = $arr['iconfig'];
|
|
unset($arr['iconfig']);
|
|
}
|
|
|
|
|
|
if(! dbesc_array($arr)) {
|
|
$ret['message'] = 'DB array malformed';
|
|
return $ret;
|
|
}
|
|
|
|
logger('item_store_update: ' . print_r($arr,true), LOGGER_DATA);
|
|
|
|
$columns = db_columns('item');
|
|
$str = '';
|
|
foreach ($arr as $k => $v) {
|
|
if (!in_array($k, $columns)) {
|
|
continue;
|
|
}
|
|
|
|
if ($str)
|
|
$str .= ",";
|
|
$str .= " " . TQUOT . $k . TQUOT . " = '" . $v . "' ";
|
|
}
|
|
|
|
$r = dbq("update item set " . $str . " where id = " . $orig_post_id );
|
|
|
|
if($r)
|
|
logger('Updated item ' . $orig_post_id, LOGGER_DEBUG);
|
|
else {
|
|
logger('Could not update item');
|
|
$ret['message'] = 'DB update failed.';
|
|
return $ret;
|
|
}
|
|
|
|
// fetch an unescaped complete copy of the stored item
|
|
|
|
$r = q("SELECT item.*, tp.uuid AS thr_parent_uuid FROM item
|
|
LEFT JOIN item tp ON item.thr_parent = tp.mid AND item.uid = tp.uid
|
|
WHERE item.id = %d",
|
|
intval($orig_post_id)
|
|
);
|
|
if($r)
|
|
$arr = $r[0];
|
|
|
|
|
|
$r = q("delete from term where oid = %d and otype = %d",
|
|
intval($orig_post_id),
|
|
intval(TERM_OBJ_POST)
|
|
);
|
|
|
|
if(is_array($terms)) {
|
|
foreach($terms as $t) {
|
|
q("insert into term (uid, oid, otype, ttype, term, url, imgurl)
|
|
values (%d, %d, %d, %d, '%s', '%s', '%s')",
|
|
intval($uid),
|
|
intval($orig_post_id),
|
|
intval(TERM_OBJ_POST),
|
|
intval($t['ttype']),
|
|
dbesc($t['term']),
|
|
dbesc($t['url']),
|
|
dbesc($t['imgurl'] ?? ''),
|
|
);
|
|
}
|
|
$arr['term'] = $terms;
|
|
}
|
|
|
|
$r = q("delete from iconfig where iid = %d",
|
|
intval($orig_post_id)
|
|
);
|
|
|
|
if($meta) {
|
|
foreach($meta as $m) {
|
|
set_iconfig($orig_post_id,$m['cat'],$m['k'],$m['v'],$m['sharing']);
|
|
}
|
|
$arr['iconfig'] = $meta;
|
|
}
|
|
|
|
$ret['item'] = $arr;
|
|
|
|
/**
|
|
* @hooks post_remote_update_end
|
|
* Called after processing a remote post that involved an edit or update.
|
|
*/
|
|
call_hooks('post_remote_update_end', $arr);
|
|
|
|
/**
|
|
* @hooks item_stored_update
|
|
* Called after updated item is stored in the database.
|
|
*/
|
|
call_hooks('item_stored_update',$arr);
|
|
|
|
if (str_contains($arr['body'], '[/embed]') || str_contains($arr['body'], '[/img]') || str_contains($arr['body'], '[/zmg]')) {
|
|
Master::Summon(['Cache_embeds', $arr['uuid']]);
|
|
}
|
|
|
|
$ret['success'] = true;
|
|
$ret['item_id'] = $orig_post_id;
|
|
|
|
if ($addAndSync) {
|
|
$ret = addToCollectionAndSync($ret);
|
|
}
|
|
|
|
if($deliver) {
|
|
// don't send notify_comment for edits
|
|
// send_status_notifications($orig_post_id,$arr);
|
|
tag_deliver($uid,$orig_post_id);
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
function item_update_parent_commented($item) {
|
|
|
|
|
|
$update_parent = true;
|
|
|
|
// update the commented timestamp on the parent
|
|
// - unless this is a moderated comment or a potential clone of an older item
|
|
// which we don't wish to bring to the surface. As the queue only holds deliveries
|
|
// for 3 days, it's suspected of being an older cloned item if the creation time
|
|
//is older than that.
|
|
|
|
if(intval($item['item_blocked']) === ITEM_MODERATED)
|
|
$update_parent = false;
|
|
|
|
if($item['created'] < datetime_convert('','','now - 4 days'))
|
|
$update_parent = false;
|
|
|
|
if($update_parent) {
|
|
$z = q("select max(created) as commented from item where parent_mid = '%s' and uid = %d and item_delayed = 0 ",
|
|
dbesc($item['parent_mid']),
|
|
intval($item['uid'])
|
|
);
|
|
|
|
q("UPDATE item set commented = '%s', changed = '%s' WHERE id = %d",
|
|
dbesc(($z[0]['commented']) ? $z[0]['commented'] : datetime_convert()),
|
|
dbesc(datetime_convert()),
|
|
intval($item['parent'])
|
|
);
|
|
}
|
|
}
|
|
|
|
|
|
function send_status_notifications($post_id,$item) {
|
|
|
|
// only send notifications for comments
|
|
|
|
if($item['mid'] == $item['parent_mid'])
|
|
return;
|
|
|
|
$notify = false;
|
|
$unfollowed = false;
|
|
|
|
$parent = 0;
|
|
$is_reaction = false;
|
|
$thr_parent_id = null;
|
|
$thr_parent_uuid = null;
|
|
|
|
$type = ((intval($item['item_private']) === 2) ? NOTIFY_MAIL : NOTIFY_COMMENT);
|
|
|
|
if(array_key_exists('verb',$item) && activity_match($item['verb'], ['Like', 'Dislike', ACTIVITY_LIKE, ACTIVITY_DISLIKE, 'Announce'])) {
|
|
|
|
$type = NOTIFY_LIKE;
|
|
|
|
$r = q("select id, uuid from item where mid = '%s' and uid = %d limit 1",
|
|
dbesc($item['thr_parent']),
|
|
intval($item['uid'])
|
|
);
|
|
|
|
if ($r) {
|
|
$thr_parent_id = $r[0]['id'];
|
|
$thr_parent_uuid = $r[0]['uuid'];
|
|
}
|
|
|
|
}
|
|
|
|
$r = q("select channel_hash from channel where channel_id = %d limit 1",
|
|
intval($item['uid'])
|
|
);
|
|
|
|
if(!$r)
|
|
return;
|
|
|
|
// my own post - no notification needed
|
|
if(isset($item['author_xchan']) && $item['author_xchan'] === $r[0]['channel_hash'])
|
|
return;
|
|
|
|
// I'm the owner - notify me
|
|
if(isset($item['owner_hash']) && $item['owner_hash'] === $r[0]['channel_hash'])
|
|
$notify = true;
|
|
|
|
// Was I involved in this conversation?
|
|
$x = q("select * from item where parent_mid = '%s' and uid = %d",
|
|
dbesc($item['parent_mid']),
|
|
intval($item['uid'])
|
|
);
|
|
|
|
if($x) {
|
|
foreach($x as $xx) {
|
|
if($xx['author_xchan'] === $r[0]['channel_hash']) {
|
|
|
|
$notify = true;
|
|
|
|
// check for an unfollow thread activity - we should probably decode the obj and check the id
|
|
// but it will be extremely rare for this to be wrong.
|
|
|
|
if((in_array($xx['verb'], ['Ignore', ACTIVITY_UNFOLLOW]))
|
|
&& (in_array($xx['obj_type'], ['Note', 'Image', ACTIVITY_OBJ_NOTE, ACTIVITY_OBJ_PHOTO]))
|
|
&& ($xx['parent'] != $xx['id']))
|
|
$unfollowed = true;
|
|
}
|
|
if($xx['id'] == $xx['parent']) {
|
|
$parent = $xx['parent'];
|
|
}
|
|
}
|
|
}
|
|
|
|
if($unfollowed)
|
|
return;
|
|
|
|
$link = z_root() . '/display/' . $item['uuid'];
|
|
|
|
$y = q("select id from notify where link = '%s' and uid = %d limit 1",
|
|
dbesc($link),
|
|
intval($item['uid'])
|
|
);
|
|
|
|
if($y)
|
|
$notify = false;
|
|
|
|
if(! $notify)
|
|
return;
|
|
|
|
Enotify::submit(array(
|
|
'type' => $type,
|
|
'from_xchan' => $item['author_xchan'],
|
|
'to_xchan' => $r[0]['channel_hash'],
|
|
'item' => $item,
|
|
'link' => $link,
|
|
'verb' => $item['verb'],
|
|
'otype' => 'item',
|
|
'parent' => $thr_parent_id ?? $parent,
|
|
'parent_mid' => $thr_parent_id ? $item['thr_parent'] : $item['parent_mid']
|
|
));
|
|
}
|
|
|
|
|
|
function get_item_contact($item,$contacts) {
|
|
if(! count($contacts) || (! is_array($item)))
|
|
return false;
|
|
|
|
foreach($contacts as $contact) {
|
|
if($contact['id'] == $item['contact-id']) {
|
|
return $contact;
|
|
break; // NOTREACHED
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @brief Called when we deliver things that might be tagged in ways that require delivery processing.
|
|
*
|
|
* Handles community tagging of posts and also look for mention tags and sets up
|
|
* a second delivery chain if appropriate.
|
|
*
|
|
* @param int $uid
|
|
* @param int $item_id
|
|
*/
|
|
function tag_deliver($uid, $item_id) {
|
|
|
|
$is_group = get_pconfig($uid, 'system', 'group_actor');
|
|
$mention = false;
|
|
|
|
/*
|
|
* Fetch stuff we need - a channel and an item
|
|
*/
|
|
|
|
$u = q("select * from channel left join xchan on channel_hash = xchan_hash where channel_id = %d limit 1",
|
|
intval($uid)
|
|
);
|
|
|
|
if (!$u) {
|
|
return;
|
|
}
|
|
|
|
$i = q("select * from item where id = %d and uid = %d and item_type = %d",
|
|
intval($item_id),
|
|
intval($uid),
|
|
intval(ITEM_TYPE_POST)
|
|
);
|
|
|
|
if (!$i) {
|
|
return;
|
|
}
|
|
|
|
xchan_query($i,true);
|
|
$i = fetch_post_tags($i);
|
|
|
|
$item = $i[0];
|
|
|
|
if(intval($item['item_uplink']) && $item['source_xchan']
|
|
&& intval($item['item_thread_top']) && ($item['edited'] != $item['created'])) {
|
|
|
|
// this is an update (edit) to a post which was already processed by us and has a second delivery chain
|
|
// Just start the second delivery chain to deliver the updated post
|
|
// after resetting ownership and permission bits
|
|
logger('updating edited tag_deliver post for ' . $u[0]['channel_address']);
|
|
start_delivery_chain($u[0], $item, $item_id, 0, false, true);
|
|
return;
|
|
}
|
|
|
|
if ($is_group && intval($item['item_private']) === 2 && intval($item['item_thread_top'])) {
|
|
// do not turn the groups own direkt messages into group items
|
|
if($item['item_wall'] && $item['author_xchan'] === $u[0]['channel_hash'])
|
|
return;
|
|
|
|
// group delivery via DM
|
|
if(perm_is_allowed($uid,$item['owner_xchan'],'post_wall')) {
|
|
logger('group DM delivery for ' . $u[0]['channel_address']);
|
|
start_delivery_chain($u[0], $item, $item_id, 0, true, (($item['edited'] != $item['created']) || $item['item_deleted']));
|
|
q("update item set item_blocked = %d where id = %d",
|
|
intval(ITEM_HIDDEN),
|
|
intval($item_id)
|
|
);
|
|
}
|
|
return;
|
|
}
|
|
|
|
if ($is_group && intval($item['item_thread_top']) && intval($item['item_wall']) && $item['author_xchan'] !== $item['owner_xchan']) {
|
|
|
|
if($item['resource_type'] === 'group_item') {
|
|
logger('resource_type group_item: already shared');
|
|
return;
|
|
}
|
|
|
|
// group delivery via W2W
|
|
logger('rewriting W2W post for ' . $u[0]['channel_address']);
|
|
start_delivery_chain($u[0], $item, $item_id, 0, true, (($item['edited'] != $item['created']) || $item['item_deleted']));
|
|
q("update item set item_wall = 0 where id = %d",
|
|
intval($item_id)
|
|
);
|
|
return;
|
|
}
|
|
|
|
/*
|
|
* Do community tagging
|
|
*/
|
|
|
|
if($item['obj_type'] === ACTIVITY_OBJ_TAGTERM) {
|
|
item_community_tag($u[0],$item);
|
|
}
|
|
|
|
/*
|
|
* A "union" is a message which our channel has sourced from another channel.
|
|
* This sets up a second delivery chain just like forum tags do.
|
|
* Find out if this is a source-able post.
|
|
*/
|
|
|
|
$union = check_item_source($uid,$item);
|
|
if($union)
|
|
logger('check_item_source returns true');
|
|
|
|
|
|
// This might be a followup (e.g. comment) by the original post author to a tagged forum
|
|
// If so setup a second delivery chain
|
|
|
|
if( ! intval($item['item_thread_top'])) {
|
|
$x = q("select * from item where id = parent and parent = %d and uid = %d limit 1",
|
|
intval($item['parent']),
|
|
intval($uid)
|
|
);
|
|
|
|
if ($x) {
|
|
|
|
// group comments don't normally require a second delivery chain
|
|
// but we create a linked Announce so they will show up in the home timeline
|
|
// on microblog platforms and this creates a second delivery chain
|
|
|
|
if ($is_group && intval($x[0]['item_wall'])) {
|
|
// don't let the forked delivery chain recurse
|
|
if ($item['verb'] === 'Announce' && $item['author_xchan'] === $u[0]['channel_hash']) {
|
|
return;
|
|
}
|
|
|
|
// don't announce moderated content until it has been approved
|
|
if (intval($item['item_blocked']) === ITEM_MODERATED) {
|
|
return;
|
|
}
|
|
|
|
// don't boost likes and other response activities as it is likely that
|
|
// few platforms will handle this in an elegant way
|
|
|
|
if (ActivityStreams::is_response_activity($item['verb'])) {
|
|
return;
|
|
}
|
|
logger('group_comment');
|
|
start_delivery_chain($u[0], $item, $item_id, $x[0], true, (($item['edited'] != $item['created']) || $item['item_deleted']));
|
|
|
|
}
|
|
elseif (intval($x[0]['item_uplink'])) {
|
|
start_delivery_chain($u[0], $item, $item_id, $x[0]);
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
|
|
/*
|
|
* Now we've got those out of the way. Let's see if this is a post that's tagged for re-delivery
|
|
*/
|
|
|
|
$terms = [];
|
|
if (array_key_exists('term', $item)) {
|
|
$terms = array_merge(get_terms_oftype($item['term'],TERM_MENTION),get_terms_oftype($item['term'],TERM_FORUM));
|
|
logger('Post mentions: ' . print_r($terms,true), LOGGER_DATA);
|
|
}
|
|
|
|
$max_forums = Config::Get('system','max_tagged_forums',2);
|
|
$matched_forums = 0;
|
|
|
|
|
|
$link = normalise_link($u[0]['xchan_url']);
|
|
|
|
|
|
if(count($terms) > 0) {
|
|
foreach($terms as $term) {
|
|
if(! link_compare($term['url'],$link)) {
|
|
continue;
|
|
}
|
|
|
|
$mention = true;
|
|
|
|
logger('Mention found for ' . $u[0]['channel_name']);
|
|
|
|
$r = q("update item set item_mentionsme = 1 where id = %d",
|
|
intval($item_id)
|
|
);
|
|
|
|
// At this point we've determined that the person receiving this post was mentioned in it or it is a union.
|
|
// Now let's check if this mention was inside a reshare so we don't spam a forum
|
|
|
|
$body = preg_replace('/\[share(.*?)\[\/share\]/','',$item['body']);
|
|
|
|
$tagged = false;
|
|
$plustagged = false;
|
|
$matches = array();
|
|
|
|
$pattern = '/[\!@]\!?\[[uz]rl\=' . preg_quote($term['url'],'/') . '\](.*?)\[\/[uz]rl\]/';
|
|
if(preg_match($pattern,$body,$matches))
|
|
$tagged = true;
|
|
|
|
$pattern = '/\[url\=' . preg_quote($term['url'],'/') . '\]\@(.*?)\[\/url\]/';
|
|
if(preg_match($pattern,$body,$matches))
|
|
$tagged = true;
|
|
|
|
|
|
// standard forum tagging sequence !forumname
|
|
/*
|
|
$forumpattern = '/\!\!?\[[uz]rl\=([^\]]*?)\]((?:.(?!\[[uz]rl\=))*?)\[\/[uz]rl\]/';
|
|
|
|
$forumpattern2 = '/\[[uz]rl\=([^\]]*?)\]\!((?:.(?!\[[uz]rl\=))*?)\[\/[uz]rl\]/';
|
|
|
|
|
|
$matches = array();
|
|
|
|
if(preg_match_all($forumpattern,$body,$matches,PREG_SET_ORDER)) {
|
|
foreach($matches as $match) {
|
|
$matched_forums ++;
|
|
if($term['url'] === $match[1] && intval($term['ttype']) === TERM_FORUM) {
|
|
if($matched_forums <= $max_forums) {
|
|
$plustagged = true;
|
|
break;
|
|
}
|
|
logger('forum ' . $term['term'] . ' exceeded max_tagged_forums - ignoring');
|
|
}
|
|
}
|
|
}
|
|
|
|
if(preg_match_all($forumpattern2,$body,$matches,PREG_SET_ORDER)) {
|
|
foreach($matches as $match) {
|
|
$matched_forums ++;
|
|
if($term['url'] === $match[1] && intval($term['ttype']) === TERM_FORUM) {
|
|
if($matched_forums <= $max_forums) {
|
|
$plustagged = true;
|
|
break;
|
|
}
|
|
logger('forum ' . $term['term'] . ' exceeded max_tagged_forums - ignoring');
|
|
}
|
|
}
|
|
}
|
|
|
|
*/
|
|
|
|
if(! ($tagged || $plustagged)) {
|
|
logger('Mention was in a reshare or exceeded max_tagged_forums - ignoring');
|
|
continue;
|
|
}
|
|
|
|
$arr = [
|
|
'channel_id' => $uid,
|
|
'item' => $item,
|
|
'body' => $body
|
|
];
|
|
/**
|
|
* @hooks tagged
|
|
* Called when a delivery is processed which results in you being tagged.
|
|
* * \e number \b channel_id
|
|
* * \e array \b item
|
|
* * \e string \b body
|
|
*/
|
|
call_hooks('tagged', $arr);
|
|
|
|
/*
|
|
* Kill two birds with one stone. As long as we're here, send a mention notification.
|
|
*/
|
|
|
|
Enotify::submit(array(
|
|
'to_xchan' => $u[0]['channel_hash'],
|
|
'from_xchan' => $item['author_xchan'],
|
|
'type' => NOTIFY_TAGSELF,
|
|
'item' => $item,
|
|
'link' => $item['llink'],
|
|
'verb' => $item['verb'],
|
|
'otype' => 'item'
|
|
));
|
|
|
|
// Just a normal tag?
|
|
|
|
if(! $plustagged) {
|
|
logger('Not a plus tag', LOGGER_DEBUG);
|
|
continue;
|
|
}
|
|
|
|
// plustagged - keep going, next check permissions
|
|
|
|
if(! perm_is_allowed($uid,$item['author_xchan'],'tag_deliver')) {
|
|
logger('tag_delivery denied for uid ' . $uid . ' and xchan ' . $item['author_xchan']);
|
|
continue;
|
|
}
|
|
|
|
|
|
if(! $mention) {
|
|
logger('No mention for ' . $u[0]['channel_name']);
|
|
continue;
|
|
}
|
|
|
|
// tgroup delivery - setup a second delivery chain
|
|
// prevent delivery looping - only proceed
|
|
// if the message originated elsewhere and is a top-level post
|
|
|
|
|
|
if(intval($item['item_wall']) || intval($item['item_origin']) || (! intval($item['item_thread_top'])) || ($item['id'] != $item['parent'])) {
|
|
logger('Item was local or a comment. rejected.');
|
|
continue;
|
|
}
|
|
|
|
logger('Creating second delivery chain.');
|
|
start_delivery_chain($u[0],$item,$item_id,null);
|
|
|
|
}
|
|
}
|
|
|
|
if($union) {
|
|
if(intval($item['item_wall']) || intval($item['item_origin']) || (! intval($item['item_thread_top'])) || ($item['id'] != $item['parent'])) {
|
|
logger('Item was local or a comment. rejected.');
|
|
return;
|
|
}
|
|
|
|
logger('Creating second delivery chain.');
|
|
start_delivery_chain($u[0],$item,$item_id,null);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
function item_community_tag($channel,$item) {
|
|
|
|
|
|
// We received a community tag activity for a post.
|
|
// See if we are the owner of the parent item and have given permission to tag our posts.
|
|
// If so tag the parent post.
|
|
|
|
logger('tag_deliver: community tag activity received: channel: ' . $channel['channel_name']);
|
|
|
|
$tag_the_post = false;
|
|
$p = null;
|
|
|
|
$j_obj = json_decode($item['obj'],true);
|
|
$j_tgt = json_decode($item['target'],true);
|
|
if($j_tgt && $j_tgt['id']) {
|
|
$p = q("select * from item where mid = '%s' and uid = %d limit 1",
|
|
dbesc($j_tgt['id']),
|
|
intval($channel['channel_id'])
|
|
);
|
|
}
|
|
if($p) {
|
|
xchan_query($p);
|
|
$items = fetch_post_tags($p,true);
|
|
$pitem = $items[0];
|
|
$auth = get_iconfig($item,'system','communitytagauth');
|
|
if($auth) {
|
|
if(Crypto::verify('tagauth.' . $item['mid'],base64url_decode($auth),$pitem['owner']['xchan_pubkey']) || Crypto::verify('tagauth.' . $item['mid'],base64url_decode($auth),$pitem['author']['xchan_pubkey'])) {
|
|
logger('tag_deliver: tagging the post: ' . $channel['channel_name']);
|
|
$tag_the_post = true;
|
|
}
|
|
}
|
|
else {
|
|
if(($pitem['owner_xchan'] === $channel['channel_hash']) && (! intval(get_pconfig($channel['channel_id'],'system','blocktags')))) {
|
|
logger('tag_deliver: community tag recipient: ' . $channel['channel_name']);
|
|
$tag_the_post = true;
|
|
$sig = Crypto::sign('tagauth.' . $item['mid'],$channel['channel_prvkey']);
|
|
logger('tag_deliver: setting iconfig for ' . $item['id']);
|
|
set_iconfig($item['id'],'system','communitytagauth',base64url_encode($sig),1);
|
|
}
|
|
}
|
|
|
|
if($tag_the_post) {
|
|
store_item_tag($channel['channel_id'],$pitem['id'],TERM_OBJ_POST,TERM_COMMUNITYTAG,$j_obj['title'],$j_obj['id']);
|
|
}
|
|
else {
|
|
logger('Tag permission denied for ' . $channel['channel_address']);
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
* @brief This function is called pre-deliver to see if a post matches the criteria to be tag delivered.
|
|
*
|
|
* We don't actually do anything except check that it matches the criteria.
|
|
* This is so that the channel with tag_delivery enabled can receive the post even if they turn off
|
|
* permissions for the sender to send their stream. tag_deliver() can't be called until the post is actually stored.
|
|
* By then it would be too late to reject it.
|
|
*
|
|
* @param number $uid A chnnel_id
|
|
* @param array $item
|
|
* @return boolean
|
|
*/
|
|
function tgroup_check($uid, $item) {
|
|
|
|
$is_group = get_pconfig($uid, 'system', 'group_actor');
|
|
$mention = false;
|
|
|
|
// check that the message originated elsewhere and is a top-level post
|
|
// or is a followup and we have already accepted the top level post as an uplink
|
|
|
|
if($item['mid'] != $item['parent_mid']) {
|
|
$r = q("select id from item where mid = '%s' and uid = %d and item_uplink = 1 limit 1",
|
|
dbesc($item['parent_mid']),
|
|
intval($uid)
|
|
);
|
|
if($r)
|
|
return true;
|
|
|
|
return false;
|
|
}
|
|
|
|
// post to group via DM
|
|
|
|
if ($is_group) {
|
|
if (intval($item['item_private']) === 2 && $item['mid'] === $item['parent_mid'] && perm_is_allowed($uid, $item['owner_xchan'], 'post_wall')) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
// see if we already have this item. Maybe it is being updated.
|
|
|
|
$r = q("select id from item where mid = '%s' and uid = %d limit 1",
|
|
dbesc($item['mid']),
|
|
intval($uid)
|
|
);
|
|
|
|
if ($r) {
|
|
return true;
|
|
}
|
|
|
|
$u = channelx_by_n($uid);
|
|
|
|
if (!$u) {
|
|
return false;
|
|
}
|
|
|
|
$max_forums = Config::Get('system','max_tagged_forums',2);
|
|
$matched_forums = 0;
|
|
|
|
$link = normalise_link($u['xchan_url']);
|
|
|
|
$terms = [];
|
|
|
|
if (isset($item['terms']) && $item['terms']) {
|
|
$terms = array_merge(get_terms_oftype($item['term'],TERM_MENTION),get_terms_oftype($item['term'],TERM_FORUM));
|
|
}
|
|
|
|
if($terms) {
|
|
logger('tgroup_check: post mentions: ' . print_r($terms,true), LOGGER_DATA);
|
|
|
|
foreach($terms as $term) {
|
|
if(! link_compare($term['url'],$link)) {
|
|
continue;
|
|
}
|
|
|
|
$mention = true;
|
|
logger('tgroup_check: mention found for ' . $u['channel_name']);
|
|
|
|
// At this point we've determined that the person receiving this post was mentioned in it.
|
|
// Now let's check if this mention was inside a reshare so we don't spam a forum
|
|
// note: $term has been set to the matching term
|
|
|
|
|
|
$body = preg_replace('/\[share(.*?)\[\/share\]/','',$item['body']);
|
|
|
|
/*
|
|
$forumpattern = '/\!\!?\[zrl\=([^\]]*?)\]((?:.(?!\[zrl\=))*?)\[\/zrl\]/';
|
|
|
|
$forumpattern2 = '/\[zrl\=([^\]]*?)\]\!((?:.(?!\[zrl\=))*?)\[\/zrl\]/';
|
|
|
|
|
|
$found = false;
|
|
|
|
$matches = array();
|
|
|
|
if(preg_match_all($forumpattern,$body,$matches,PREG_SET_ORDER)) {
|
|
foreach($matches as $match) {
|
|
$matched_forums ++;
|
|
if($term['url'] === $match[1] && intval($term['ttype']) === TERM_FORUM) {
|
|
if($matched_forums <= $max_forums) {
|
|
$found = true;
|
|
break;
|
|
}
|
|
logger('forum ' . $term['term'] . ' exceeded max_tagged_forums - ignoring');
|
|
}
|
|
}
|
|
}
|
|
|
|
if(preg_match_all($forumpattern2,$body,$matches,PREG_SET_ORDER)) {
|
|
foreach($matches as $match) {
|
|
$matched_forums ++;
|
|
if($term['url'] === $match[1] && intval($term['ttype']) === TERM_FORUM) {
|
|
if($matched_forums <= $max_forums) {
|
|
$found = true;
|
|
break;
|
|
}
|
|
logger('forum ' . $term['term'] . ' exceeded max_tagged_forums - ignoring');
|
|
}
|
|
}
|
|
}
|
|
|
|
if(! $found) {
|
|
logger('tgroup_check: mention was in a reshare or exceeded max_tagged_forums - ignoring');
|
|
continue;
|
|
}
|
|
*/
|
|
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
function i_am_mentioned($channel, $item, $check_groups = false) {
|
|
|
|
$link = z_root() . '/channel/' . $channel['channel_address'];
|
|
|
|
$body = preg_replace('/\[share(.*?)\[\/share]/','',$item['body']);
|
|
|
|
$tagged = false;
|
|
$matches = [];
|
|
$tagtype = $check_groups ? TERM_FORUM : TERM_MENTION;
|
|
$terms = ((isset($item['term'])) ? get_terms_oftype($item['term'], $tagtype) : false);
|
|
|
|
if ($terms) {
|
|
foreach ($terms as $term) {
|
|
if ($link === $term['url']) {
|
|
$pattern = '/[!@]!?\[[uz]rl=' . preg_quote($term['url'],'/') . '](.*?)\[\/[uz]rl]/';
|
|
if (preg_match($pattern,$body,$matches)) {
|
|
$tagged = true;
|
|
}
|
|
$pattern = '/\[[uz]rl=' . preg_quote($term['url'],'/') . '][!@](.*?)\[\/[uz]rl]/';
|
|
if (preg_match($pattern,$body,$matches)) {
|
|
$tagged = true;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
$unless = intval(get_pconfig($channel['channel_id'], 'system', 'unless_mention_count', Config::Get('system', 'unless_mention_count', 20)));
|
|
if ($unless && $terms && count($terms) > $unless) {
|
|
$tagged = false;
|
|
}
|
|
return $tagged;
|
|
}
|
|
|
|
|
|
/**
|
|
* Sourced and tag-delivered posts are re-targetted for delivery to the connections of the channel
|
|
* receiving the post. This starts the second delivery chain, by resetting permissions and ensuring
|
|
* that ITEM_UPLINK is set on the parent post, and storing the current owner_xchan as the source_xchan.
|
|
* We'll become the new owner. If called without $parent, this *is* the parent post.
|
|
*
|
|
* @param array $channel
|
|
* @param array $item
|
|
* @param int $item_id
|
|
* @param array $parent
|
|
* @param boolean $edit (optional) default false
|
|
* @return void
|
|
*/
|
|
function start_delivery_chain($channel, $item, $item_id, $parent, $group = false, $edit = false) {
|
|
|
|
if ($item['item_type'] !== ITEM_TYPE_POST) {
|
|
logger('undeliverable item type: ' . $item['item_type']);
|
|
return;
|
|
}
|
|
|
|
if ($item['author_xchan'] === $channel['channel_hash'] && in_array($item['verb'], ['Add', 'Remove'])) {
|
|
logger('delivery chain already started');
|
|
return;
|
|
}
|
|
|
|
$sourced = check_item_source($channel['channel_id'],$item);
|
|
|
|
if($sourced) {
|
|
$r = q("select * from source where src_channel_id = %d and ( src_xchan = '%s' or src_xchan = '*' ) limit 1",
|
|
intval($channel['channel_id']),
|
|
dbesc(($item['source_xchan']) ? $item['source_xchan'] : $item['owner_xchan'])
|
|
);
|
|
if($r && ! $edit) {
|
|
$t = trim($r[0]['src_tag']);
|
|
if($t) {
|
|
$tags = explode(',',$t);
|
|
if($tags) {
|
|
foreach($tags as $tt) {
|
|
$tt = trim($tt);
|
|
if($tt) {
|
|
q("insert into term (uid,oid,otype,ttype,term,url)
|
|
values(%d,%d,%d,%d,'%s','%s') ",
|
|
intval($channel['channel_id']),
|
|
intval($item_id),
|
|
intval(TERM_OBJ_POST),
|
|
intval(TERM_CATEGORY),
|
|
dbesc($tt),
|
|
dbesc(z_root() . '/channel/' . $channel['channel_address'] . '?f=&cat=' . urlencode($tt))
|
|
);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// This will change the author to the post owner. Useful for RSS feeds which are to be syndicated
|
|
// to federated platforms which can't verify the identity of the author.
|
|
// This MAY cause you to run afoul of copyright law.
|
|
|
|
$rewrite_author = intval(get_abconfig($channel['channel_id'],$item['owner_xchan'],'system','rself'));
|
|
|
|
if($rewrite_author) {
|
|
$item['author_xchan'] = $channel['channel_hash'];
|
|
|
|
//if it's a toplevel rss item we will also rewrite the mid to something fetchable
|
|
if($item['item_rss'] && $item['item_thread_top']) {
|
|
$item['mid'] = z_root() . '/item/' . $item['uuid'];
|
|
$item['parent_mid'] = $item['mid'];
|
|
$item['thr_parent'] = $item['mid'];
|
|
$item['llink'] = z_root() . '/display/' . $item['uuid'];
|
|
$item['target'] = json_encode([
|
|
'id' => str_replace('/item/', '/conversation/', $item['mid']),
|
|
'type' => 'Collection',
|
|
'attributedTo' => z_root() . '/channel/' . $channel['channel_address']
|
|
]);
|
|
$item['tgt_type'] = 'Collection';
|
|
}
|
|
}
|
|
|
|
$private = (($channel['channel_allow_cid'] || $channel['channel_allow_gid']
|
|
|| $channel['channel_deny_cid'] || $channel['channel_deny_gid']) ? 1 : 0);
|
|
|
|
$new_public_policy = map_scope(PermissionLimits::Get($channel['channel_id'],'view_stream'),true);
|
|
|
|
if((! $private) && $new_public_policy)
|
|
$private = 1;
|
|
|
|
$item_wall = 1;
|
|
$item_origin = (($item['item_deleted']) ? 0 : 1); // item_origin for deleted items is set to 0 in delete_imported_item() to prevent looping. In this case we probably should not set it back to 1 here.
|
|
$item_uplink = 0;
|
|
$item_nocomment = 0;
|
|
|
|
$flag_bits = $item['item_flags'];
|
|
|
|
// maintain the original source, which will be the original item owner and was stored in source_xchan
|
|
// when we created the delivery fork
|
|
|
|
if($parent) {
|
|
$r = q("update item set source_xchan = '%s' where id = %d",
|
|
dbesc($parent['source_xchan']),
|
|
intval($item_id)
|
|
);
|
|
}
|
|
else {
|
|
$item_uplink = (($item['item_rss']) ? 0 : 1); // Do not set item_uplink for rss items - we can not send anything to them.
|
|
|
|
// if this is an edit, item_store_update() will have already updated the item
|
|
// with the correct value for source_xchan (by ignoring it). We cannot set to owner_xchan
|
|
// in this case because owner_xchan will point to the parent of this chain
|
|
// and not the original sender.
|
|
|
|
if(!$edit) {
|
|
$r = q("update item set source_xchan = owner_xchan where id = %d",
|
|
intval($item_id)
|
|
);
|
|
}
|
|
}
|
|
|
|
// this will not work with item_store_update()
|
|
|
|
$r = q("update item set item_uplink = %d, item_nocomment = %d, item_flags = %d, owner_xchan = '%s', allow_cid = '%s', allow_gid = '%s',
|
|
deny_cid = '%s', deny_gid = '%s', item_private = %d, public_policy = '%s', comment_policy = '%s', title = '%s', body = '%s', item_wall = %d, item_origin = %d,
|
|
author_xchan = '%s', mid = '%s', parent_mid = '%s', thr_parent = '%s', llink = '%s', target = '%s', tgt_type = '%s' where id = %d",
|
|
intval($item_uplink),
|
|
intval($item_nocomment),
|
|
intval($flag_bits),
|
|
dbesc($channel['channel_hash']),
|
|
dbesc($channel['channel_allow_cid']),
|
|
dbesc($channel['channel_allow_gid']),
|
|
dbesc($channel['channel_deny_cid']),
|
|
dbesc($channel['channel_deny_gid']),
|
|
intval($private),
|
|
dbesc($new_public_policy),
|
|
dbesc(map_scope(PermissionLimits::Get($channel['channel_id'],'post_comments'))),
|
|
dbesc($item['title']),
|
|
dbesc($item['body']),
|
|
intval($item_wall),
|
|
intval($item_origin),
|
|
dbesc($item['author_xchan']),
|
|
dbesc($item['mid']),
|
|
dbesc($item['parent_mid']),
|
|
dbesc($item['thr_parent']),
|
|
dbesc($item['llink']),
|
|
dbesc($item['target']),
|
|
dbesc($item['tgt_type']),
|
|
intval($item_id)
|
|
);
|
|
|
|
if($r) {
|
|
$rr = q("select * from item where id = %d",
|
|
intval($item_id)
|
|
);
|
|
|
|
if ($rr) {
|
|
|
|
// this is hackish but since we can not use item_store_update() here,
|
|
// we will prepare a similar output to feed to addToCollectionAndSync()
|
|
$ret['success'] = 1;
|
|
$ret['item_id'] = $rr[0]['id'];
|
|
$ret['item'] = $rr[0];
|
|
|
|
$result = addToCollectionAndSync($ret);
|
|
|
|
Master::Summon(['Notifier', 'tgroup', $result['item_id']]);
|
|
if ($result['approval_id']) {
|
|
Master::Summon(['Notifier', 'tgroup', $result['approval_id']]);
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
logger('start_delivery_chain: failed to update item');
|
|
// reset the source xchan to prevent loops
|
|
$r = q("update item set source_xchan = '' where id = %d",
|
|
intval($item_id)
|
|
);
|
|
}
|
|
return;
|
|
}
|
|
|
|
if ($group && (! $parent)) {
|
|
|
|
$arr = [];
|
|
|
|
q("update item set item_hidden = 1 where id = %d",
|
|
intval($item_id)
|
|
);
|
|
|
|
if ($edit) {
|
|
|
|
// process edit or delete action
|
|
$r = q("select * from item where uid = %d and resource_id = '%s' and source_xchan = '%s' and resource_type = 'group_item' limit 1",
|
|
intval($channel['channel_id']),
|
|
dbesc($item['mid']),
|
|
dbesc($item['author_xchan'])
|
|
);
|
|
|
|
if ($r) {
|
|
if (intval($item['item_deleted'])) {
|
|
drop_item($r[0]['id'], DROPITEM_PHASE1, uid: $r[0]['uid']);
|
|
Master::Summon(['Notifier', 'drop' ,$r[0]['id']]);
|
|
return;
|
|
}
|
|
$arr['id'] = intval($r[0]['id']);
|
|
$arr['parent'] = intval($r[0]['parent']);
|
|
$arr['uuid'] = $r[0]['uuid'];
|
|
$arr['mid'] = $r[0]['mid'];
|
|
$arr['parent_mid'] = $r[0]['parent_mid'];
|
|
$arr['edited'] = datetime_convert();
|
|
}
|
|
else {
|
|
logger('unable to locate original group post ' . $item['mid']);
|
|
return;
|
|
}
|
|
|
|
}
|
|
else {
|
|
// To prevent duplicates from possible clones of the forum/group,
|
|
// we will create a v5 UUID of the source item mid.
|
|
// Add some extra entropy to prevent duplicate UUIDs with items where we already
|
|
// created an UUID from the mid (activities which do not provide an UUID field).
|
|
$arr['uuid'] = uuid_from_url($item['mid'] . '#group_item');
|
|
$arr['mid'] = z_root() . '/item/' . $arr['uuid'];
|
|
$arr['parent_mid'] = $arr['mid'];
|
|
$arr['plink'] = $arr['mid'];
|
|
}
|
|
|
|
$arr['aid'] = $channel['channel_account_id'];
|
|
$arr['uid'] = $channel['channel_id'];
|
|
|
|
// WARNING: the presence of both source_xchan and non-zero item_uplink here will cause a delivery loop
|
|
|
|
$arr['item_uplink'] = 0;
|
|
$arr['source_xchan'] = $item['owner_xchan'];
|
|
|
|
$arr['resource_id'] = $item['mid'];
|
|
$arr['resource_type'] = 'group_item';
|
|
|
|
$arr['item_private'] = (($channel['channel_allow_cid'] || $channel['channel_allow_gid']
|
|
|| $channel['channel_deny_cid'] || $channel['channel_deny_gid']) ? 1 : 0);
|
|
|
|
if ($channel['channel_allow_cid'] && empty($channel['channel_allow_gid'])) {
|
|
$arr['item_private'] = 2;
|
|
}
|
|
|
|
$arr['item_origin'] = 1;
|
|
$arr['item_wall'] = 1;
|
|
$arr['item_thread_top'] = 1;
|
|
|
|
$bb = "[share author='" . urlencode($item['author']['xchan_name']).
|
|
"' profile='" . $item['author']['xchan_url'] .
|
|
"' portable_id='" . $item['author']['xchan_hash'] .
|
|
"' avatar='" . $item['author']['xchan_photo_s'] .
|
|
"' link='" . $item['plink'] .
|
|
"' auth='" . (($item['author']['xchan_network'] === 'zot6') ? 'true' : 'false') .
|
|
"' posted='" . $item['created'] .
|
|
"' message_id='" . $item['mid'] .
|
|
"']";
|
|
if($item['title'])
|
|
$bb .= '[h3][b]'.$item['title'].'[/b][/h3]'."\r\n";
|
|
$bb .= $item['body'];
|
|
$bb .= "[/share]";
|
|
|
|
$arr['body'] = $bb;
|
|
// Conversational objects shouldn't be copied, but other objects should.
|
|
if (in_array($item['obj_type'], [ 'Image', 'Event', 'Question' ])) {
|
|
$arr['obj'] = $item['obj'];
|
|
$t = json_decode($arr['obj'],true);
|
|
|
|
if ($t !== NULL) {
|
|
$arr['obj'] = $t;
|
|
}
|
|
$arr['obj']['content'] = bbcode($bb);
|
|
$arr['obj']['source']['content'] = $bb;
|
|
$arr['obj']['id'] = $arr['mid'];
|
|
|
|
if (! array_path_exists('obj/source/mediaType',$arr)) {
|
|
$arr['obj']['source']['mediaType'] = 'text/bbcode';
|
|
}
|
|
|
|
$arr['obj']['directMessage'] = (intval($arr['item_private']) === 2);
|
|
|
|
}
|
|
|
|
$arr['title'] = $item['title'];
|
|
// $arr['tgt_type'] = $item['tgt_type'];
|
|
// $arr['target'] = $item['target'];
|
|
|
|
$arr['tgt_type'] = 'Collection';
|
|
$arr['target'] = [
|
|
'id' => str_replace('/item/', '/conversation/', $arr['parent_mid']),
|
|
'type' => 'Collection',
|
|
'attributedTo' => channel_url($channel)
|
|
];
|
|
|
|
$arr['term'] = $item['term'];
|
|
|
|
$arr['author_xchan'] = $channel['channel_hash'];
|
|
$arr['owner_xchan'] = $channel['channel_hash'];
|
|
|
|
$arr['obj_type'] = $item['obj_type'];
|
|
$arr['verb'] = 'Create';
|
|
|
|
$arr['allow_cid'] = $channel['channel_allow_cid'];
|
|
$arr['allow_gid'] = $channel['channel_allow_gid'];
|
|
$arr['deny_cid'] = $channel['channel_deny_cid'];
|
|
$arr['deny_gid'] = $channel['channel_deny_gid'];
|
|
$arr['comment_policy'] = map_scope(PermissionLimits::Get($channel['channel_id'],'post_comments'));
|
|
|
|
if ($arr['id']) {
|
|
$post = item_store_update($arr);
|
|
}
|
|
else {
|
|
$post = item_store($arr);
|
|
}
|
|
|
|
$post_id = $post['item_id'] ?? 0;
|
|
$approval_id = $post['approval_id'] ?? 0;
|
|
|
|
if($post_id) {
|
|
Master::Summon([ 'Notifier','tgroup',$post_id ]);
|
|
if ($approval_id) {
|
|
Master::Summon(['Notifier', 'tgroup', $approval_id]);
|
|
}
|
|
}
|
|
return;
|
|
}
|
|
|
|
|
|
if ($group && $parent) {
|
|
logger('comment arrived in group', LOGGER_DEBUG);
|
|
$arr = [];
|
|
|
|
// don't let this recurse. We checked for this before calling, but this ensures
|
|
// it doesn't sneak through another way because recursion is nasty.
|
|
|
|
if ($item['verb'] === 'Announce' && $item['author_xchan'] === $channel['channel_hash']) {
|
|
return;
|
|
}
|
|
|
|
// Don't send Announce activities for poll responses.
|
|
|
|
if ($item['obj_type'] === 'Answer') {
|
|
return;
|
|
}
|
|
|
|
if ($edit) {
|
|
if (intval($item['item_deleted'])) {
|
|
drop_item($item['id'], DROPITEM_PHASE1, uid: $item['uid']);
|
|
Master::Summon(['Notifier', 'drop', $item['id']]);
|
|
return;
|
|
}
|
|
return;
|
|
}
|
|
else {
|
|
$arr['uuid'] = uuid_from_url($item['mid']);
|
|
$arr['mid'] = z_root() . '/activity/' . $arr['uuid'];
|
|
$arr['parent_mid'] = $item['parent_mid'];
|
|
//IConfig::Set($arr,'activitypub','context', str_replace('/item/','/conversation/',$item['parent_mid']));
|
|
}
|
|
$arr['aid'] = $channel['channel_account_id'];
|
|
$arr['uid'] = $channel['channel_id'];
|
|
|
|
$arr['verb'] = 'Announce';
|
|
|
|
if (is_array($item['obj'])) {
|
|
$arr['obj'] = $item['obj'];
|
|
}
|
|
elseif (is_string($item['obj']) && strlen($item['obj'])) {
|
|
$arr['obj'] = json_decode($item['obj'],true);
|
|
}
|
|
|
|
if (! $arr['obj']) {
|
|
$arr['obj'] = $item['mid'];
|
|
}
|
|
|
|
if (is_array($arr['obj'])) {
|
|
$obj_actor = ((isset($arr['obj']['actor'])) ? ((is_array($arr['obj']['actor'])) ? $arr['obj']['actor']['id'] : $arr['obj']['actor']) : $arr['obj']['attributedTo']);
|
|
$mention = Activity::get_actor_bbmention($obj_actor);
|
|
$arr['body'] = sprintf( t('🔁 Repeated %1$s\'s %2$s'), $mention, $arr['obj']['type']);
|
|
}
|
|
|
|
$arr['author_xchan'] = $channel['channel_hash'];
|
|
|
|
$arr['item_wall'] = 1;
|
|
|
|
$arr['item_private'] = (($channel['channel_allow_cid'] || $channel['channel_allow_gid'] || $channel['channel_deny_cid'] || $channel['channel_deny_gid']) ? 1 : 0);
|
|
|
|
$arr['item_origin'] = 1;
|
|
$arr['item_hidden'] = 1;
|
|
|
|
$arr['item_thread_top'] = 0;
|
|
|
|
$arr['allow_cid'] = $channel['channel_allow_cid'];
|
|
$arr['allow_gid'] = $channel['channel_allow_gid'];
|
|
$arr['deny_cid'] = $channel['channel_deny_cid'];
|
|
$arr['deny_gid'] = $channel['channel_deny_gid'];
|
|
$arr['comment_policy'] = map_scope(PermissionLimits::Get($channel['channel_id'],'post_comments'));
|
|
|
|
$post = item_store($arr, deliver: false, addAndSync: false);
|
|
$post_id = $post['item_id'] ?? 0;
|
|
|
|
if ($post_id) {
|
|
Master::Summon(['Notifier', 'tgroup', $post_id]);
|
|
}
|
|
|
|
q("update channel set channel_lastpost = '%s' where channel_id = %d",
|
|
dbesc(datetime_convert()),
|
|
intval($channel['channel_id'])
|
|
);
|
|
|
|
return;
|
|
}
|
|
|
|
}
|
|
|
|
/**
|
|
* @brief
|
|
*
|
|
* Checks to see if this item owner is referenced as a source for this channel and if the post
|
|
* matches the rules for inclusion in this channel. Returns true if we should create a second delivery
|
|
* chain and false if none of the rules apply, or if the item is private.
|
|
*
|
|
* @param int $uid
|
|
* @param array $item
|
|
*/
|
|
function check_item_source($uid, $item) {
|
|
|
|
logger('source: uid: ' . $uid, LOGGER_DEBUG);
|
|
$xchan = ((isset($item['source_xchan']) && $item['source_xchan'] && isset($item['item_uplink']) && $item['item_uplink']) ? $item['source_xchan'] : $item['owner_xchan']);
|
|
|
|
$r = q("select * from source where src_channel_id = %d and ( src_xchan = '%s' or src_xchan = '*' ) limit 1",
|
|
intval($uid),
|
|
dbesc($xchan)
|
|
);
|
|
|
|
if(! $r) {
|
|
logger('source: no source record for this channel and source', LOGGER_DEBUG);
|
|
return false;
|
|
}
|
|
|
|
$x = q("select abook_feed from abook where abook_channel = %d and abook_xchan = '%s' limit 1",
|
|
intval($uid),
|
|
dbesc($xchan)
|
|
);
|
|
|
|
if(! $x) {
|
|
logger('source: not connected to this channel.');
|
|
return false;
|
|
}
|
|
|
|
if(! get_abconfig($uid,$xchan,'their_perms','republish')) {
|
|
logger('source: no republish permission');
|
|
return false;
|
|
}
|
|
|
|
if($item['item_private'] && (! intval($x[0]['abook_feed']))) {
|
|
logger('source: item is private');
|
|
return false;
|
|
}
|
|
|
|
if($r[0]['src_channel_xchan'] === $xchan) {
|
|
logger('source: cannot source yourself');
|
|
return false;
|
|
}
|
|
|
|
if (! $r[0]['src_patt']) {
|
|
logger('source: success');
|
|
return true;
|
|
}
|
|
|
|
if ((new MessageFilter($item, html_entity_decode($r[0]['src_patt']), EMPTY_STR))->evaluate()) {
|
|
logger('source: text filter success');
|
|
return true;
|
|
}
|
|
|
|
logger('source: filter fail');
|
|
return false;
|
|
}
|
|
|
|
|
|
// Checks an incoming item against the per-channel and per-connection content filter.
|
|
// This implements the backend of the 'Content Filter' system app
|
|
|
|
function post_is_importable($channel_id, $item, $abook) {
|
|
|
|
if (! $item) {
|
|
return false;
|
|
}
|
|
|
|
$incl = PConfig::get($channel_id, 'system', 'message_filter_incl', EMPTY_STR);
|
|
$excl = PConfig::get($channel_id, 'system', 'message_filter_excl', EMPTY_STR);
|
|
|
|
$plaintext = prepare_text($item['body'], ((isset($item['mimetype'])) ? $item['mimetype'] : 'text/bbcode'));
|
|
$plaintext = html2plain((isset($item['summary']) && $item['summary']) ? $item['summary'] . ' ' . $plaintext : $plaintext);
|
|
$plaintext = html2plain((isset($item['title']) && $item['title']) ? $item['title'] . ' ' . $plaintext : $plaintext);
|
|
|
|
if ($incl || $excl) {
|
|
if (!(new MessageFilter($item, html_entity_decode($incl), html_entity_decode($excl), ['plaintext' => $plaintext]))->evaluate()) {
|
|
logger('MessageFilter: channel blocked content', LOGGER_DEBUG, LOG_INFO);
|
|
return false;
|
|
}
|
|
}
|
|
|
|
if(!feature_enabled($channel_id, 'connfilter')) {
|
|
return true;
|
|
}
|
|
|
|
if (! $abook) {
|
|
return true;
|
|
}
|
|
|
|
foreach ($abook as $ab) {
|
|
// check eligibility
|
|
if (intval($ab['abook_self'])) {
|
|
continue;
|
|
}
|
|
|
|
if (!($ab['abook_incl'] || $ab['abook_excl'])) {
|
|
continue;
|
|
}
|
|
|
|
// A negative assessment for any individual connections is an instant fail
|
|
if (!(new MessageFilter($item, html_entity_decode($ab['abook_incl']), html_entity_decode($ab['abook_excl']), ['plaintext' => $plaintext]))->evaluate()) {
|
|
logger('MessageFilter: connection blocked content', LOGGER_DEBUG, LOG_INFO);
|
|
return false;
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
function fix_private_photos($s, $uid, $item = null, $cid = 0) {
|
|
|
|
logger('fix_private_photos', LOGGER_DEBUG);
|
|
$site = substr(z_root(),strpos(z_root(),'://'));
|
|
|
|
$orig_body = $s;
|
|
$new_body = '';
|
|
|
|
$img_start = strpos($orig_body, '[zmg');
|
|
$img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
|
|
$img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/zmg]') : false);
|
|
while( ($img_st_close !== false) && ($img_len !== false) ) {
|
|
|
|
$img_st_close++; // make it point to AFTER the closing bracket
|
|
$image = substr($orig_body, $img_start + $img_st_close, $img_len);
|
|
|
|
logger('Found photo ' . $image, LOGGER_DEBUG);
|
|
|
|
if(stristr($image , $site . '/photo/')) {
|
|
// Only embed locally hosted photos
|
|
$replace = false;
|
|
$i = basename($image);
|
|
$x = strpos($i,'-');
|
|
|
|
if($x) {
|
|
$res = substr($i,$x+1);
|
|
$i = substr($i,0,$x);
|
|
$r = q("SELECT * FROM photo WHERE resource_id = '%s' AND imgscale = %d AND uid = %d",
|
|
dbesc($i),
|
|
intval($res),
|
|
intval($uid)
|
|
);
|
|
if(count($r)) {
|
|
|
|
// Check to see if we should replace this photo link with an embedded image
|
|
// 1. No need to do so if the photo is public
|
|
// 2. If there's a contact-id provided, see if they're in the access list
|
|
// for the photo. If so, embed it.
|
|
// 3. Otherwise, if we have an item, see if the item permissions match the photo
|
|
// permissions, regardless of order but first check to see if they're an exact
|
|
// match to save some processing overhead.
|
|
|
|
if(has_permissions($r[0])) {
|
|
if($cid) {
|
|
$recips = enumerate_permissions($r[0]);
|
|
if(in_array($cid, $recips)) {
|
|
$replace = true;
|
|
}
|
|
}
|
|
elseif($item) {
|
|
if(compare_permissions($item,$r[0]))
|
|
$replace = true;
|
|
}
|
|
}
|
|
if($replace) {
|
|
$data = $r[0]['data'];
|
|
$type = $r[0]['type'];
|
|
|
|
// If a custom width and height were specified, apply before embedding
|
|
if(preg_match("/\[zmg\=([0-9]*)x([0-9]*)\]/is", substr($orig_body, $img_start, $img_st_close), $match)) {
|
|
logger('Scaling photo', LOGGER_DEBUG);
|
|
|
|
$width = intval($match[1]);
|
|
$height = intval($match[2]);
|
|
|
|
$ph = photo_factory($data, $type);
|
|
if($ph->is_valid()) {
|
|
$ph->scaleImage(max($width, $height));
|
|
$data = $ph->imageString();
|
|
$type = $ph->getType();
|
|
}
|
|
}
|
|
|
|
logger('Replacing photo', LOGGER_DEBUG);
|
|
$image = 'data:' . $type . ';base64,' . base64_encode($data);
|
|
logger('Replaced: ' . $image, LOGGER_DATA);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
$new_body = $new_body . substr($orig_body, 0, $img_start + $img_st_close) . $image . '[/zmg]';
|
|
$orig_body = substr($orig_body, $img_start + $img_st_close + $img_len + strlen('[/zmg]'));
|
|
if($orig_body === false)
|
|
$orig_body = '';
|
|
|
|
$img_start = strpos($orig_body, '[zmg');
|
|
$img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
|
|
$img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/zmg]') : false);
|
|
}
|
|
|
|
$new_body = $new_body . $orig_body;
|
|
|
|
return($new_body);
|
|
}
|
|
|
|
|
|
function has_permissions($obj) {
|
|
if(($obj['allow_cid'] != '') || ($obj['allow_gid'] != '') || ($obj['deny_cid'] != '') || ($obj['deny_gid'] != ''))
|
|
return true;
|
|
|
|
return false;
|
|
}
|
|
|
|
function compare_permissions($obj1,$obj2) {
|
|
// first part is easy. Check that these are exactly the same.
|
|
if(($obj1['allow_cid'] == $obj2['allow_cid'])
|
|
&& ($obj1['allow_gid'] == $obj2['allow_gid'])
|
|
&& ($obj1['deny_cid'] == $obj2['deny_cid'])
|
|
&& ($obj1['deny_gid'] == $obj2['deny_gid']))
|
|
return true;
|
|
|
|
// This is harder. Parse all the permissions and compare the resulting set.
|
|
|
|
$recipients1 = enumerate_permissions($obj1);
|
|
$recipients2 = enumerate_permissions($obj2);
|
|
sort($recipients1);
|
|
sort($recipients2);
|
|
if($recipients1 == $recipients2)
|
|
return true;
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @brief Returns an array of contact-ids that are allowed to see this object.
|
|
*
|
|
* @param object $obj
|
|
* @return array
|
|
*/
|
|
function enumerate_permissions($obj) {
|
|
|
|
$allow_people = expand_acl($obj['allow_cid']);
|
|
$allow_groups = AccessList::expand(expand_acl($obj['allow_gid']));
|
|
$deny_people = expand_acl($obj['deny_cid']);
|
|
$deny_groups = AccessList::expand(expand_acl($obj['deny_gid']));
|
|
$recipients = array_unique(array_merge($allow_people,$allow_groups));
|
|
$deny = array_unique(array_merge($deny_people,$deny_groups));
|
|
$recipients = array_diff($recipients,$deny);
|
|
|
|
return $recipients;
|
|
}
|
|
|
|
function item_getfeedtags($item) {
|
|
|
|
$terms = get_terms_oftype($item['term'],array(TERM_HASHTAG,TERM_MENTION,TERM_COMMUNITYTAG));
|
|
$ret = array();
|
|
|
|
if(count($terms)) {
|
|
foreach($terms as $term) {
|
|
if(($term['ttype'] == TERM_HASHTAG) || ($term['ttype'] == TERM_COMMUNITYTAG))
|
|
$ret[] = array('#',$term['url'],$term['term']);
|
|
else
|
|
$ret[] = array('@',$term['url'],$term['term']);
|
|
}
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
function item_getfeedattach($item) {
|
|
$ret = '';
|
|
$arr = explode(',',$item['attach']);
|
|
if(count($arr)) {
|
|
foreach($arr as $r) {
|
|
$matches = false;
|
|
$cnt = preg_match('|\[attach\]href=\"(.*?)\" length=\"(.*?)\" type=\"(.*?)\" title=\"(.*?)\"\[\/attach\]|',$r,$matches);
|
|
if($cnt) {
|
|
$ret .= '<link rel="enclosure" href="' . xmlify($matches[1]) . '" type="' . xmlify($matches[3]) . '" ';
|
|
if(intval($matches[2]))
|
|
$ret .= 'length="' . intval($matches[2]) . '" ';
|
|
if($matches[4] !== ' ')
|
|
$ret .= 'title="' . xmlify(trim($matches[4])) . '" ';
|
|
$ret .= ' />' . "\r\n";
|
|
}
|
|
}
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
function item_expire($uid,$days,$comment_days = 7) {
|
|
|
|
if((! $uid) || ($days < 1))
|
|
return;
|
|
|
|
if(! $comment_days)
|
|
$comment_days = 7;
|
|
|
|
// $expire_network_only = save your own wall posts
|
|
// and just expire conversations started by others
|
|
// do not enable this until we can pass bulk delete messages through zot
|
|
// $expire_network_only = get_pconfig($uid,'expire','network_only');
|
|
|
|
$expire_network_only = 1;
|
|
|
|
$sql_extra = ((intval($expire_network_only)) ? " AND item_wall = 0 " : "");
|
|
|
|
$expire_limit = Config::Get('system','expire_limit', 100);
|
|
|
|
$item_normal = item_normal();
|
|
|
|
do {
|
|
$r = q("SELECT id FROM item
|
|
WHERE uid = %d
|
|
AND created < %s - INTERVAL %s
|
|
AND commented < %s - INTERVAL %s
|
|
AND item_retained = 0
|
|
AND item_thread_top = 1
|
|
AND resource_type = ''
|
|
AND item_starred = 0
|
|
$sql_extra $item_normal LIMIT $expire_limit",
|
|
intval($uid),
|
|
db_utcnow(),
|
|
db_quoteinterval(intval($days) . ' DAY'),
|
|
db_utcnow(),
|
|
db_quoteinterval(intval($comment_days) . ' DAY')
|
|
);
|
|
|
|
if ($r) {
|
|
foreach ($r as $item) {
|
|
drop_item($item['id'], uid: $uid);
|
|
}
|
|
}
|
|
|
|
} while ($r);
|
|
}
|
|
|
|
function retain_item($id) {
|
|
$r = q("update item set item_retained = 1 where id = %d",
|
|
intval($id)
|
|
);
|
|
}
|
|
|
|
function drop_items($items, $stage = DROPITEM_NORMAL, $force = false, $expire = false) {
|
|
if ($items) {
|
|
foreach($items as $item) {
|
|
drop_item($item, $stage, $force, expire: $expire);
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
// Delete item with given item $id. $interactive means we're running interactively, and must check
|
|
// permissions to carry out this act. If it is non-interactive, we are deleting something at the
|
|
// system's request and do not check permission. This is very important to know.
|
|
|
|
// Some deletion requests (those coming from remote sites) must be staged.
|
|
// $stage = 0 => unstaged
|
|
// $stage = 1 => set deleted flag on the item and perform intial notifications
|
|
// $stage = 2 => perform low level delete at a later stage
|
|
|
|
function drop_item($id, $stage = DROPITEM_NORMAL, $force = false, $uid = 0, $observer_hash = '', $expire = false, $recurse = false) {
|
|
|
|
// locate item to be deleted
|
|
|
|
$r = q("SELECT * FROM item WHERE id = %d LIMIT 1",
|
|
intval($id)
|
|
);
|
|
|
|
if(!$r || (intval($r[0]['item_deleted']) && $stage === DROPITEM_NORMAL)) {
|
|
return false;
|
|
}
|
|
|
|
$item = $r[0];
|
|
|
|
if(!$recurse) {
|
|
drop_related($item, $stage, $force, $uid, $observer_hash, $expire);
|
|
}
|
|
|
|
$ok_to_delete = false;
|
|
|
|
// admin deletion
|
|
if(is_site_admin()) {
|
|
$ok_to_delete = true;
|
|
}
|
|
|
|
// owner deletion
|
|
if(local_channel() && local_channel() == $item['uid']) {
|
|
$ok_to_delete = true;
|
|
}
|
|
|
|
// remote delete when nobody is authenticated (called from Libzot and Daemons)
|
|
if ($uid && intval($uid) === intval($item['uid'])) {
|
|
$ok_to_delete = true;
|
|
}
|
|
|
|
// author deletion
|
|
if ($observer_hash) {
|
|
$observer = ['xchan_hash' => $observer_hash];
|
|
}
|
|
else {
|
|
$observer = App::get_observer();
|
|
}
|
|
|
|
if (isset($observer['xchan_hash']) && $observer['xchan_hash'] === $item['author_xchan']) {
|
|
$ok_to_delete = true;
|
|
}
|
|
|
|
if (isset($observer['xchan_hash']) && $observer['xchan_hash'] === $item['owner_xchan']) {
|
|
$ok_to_delete = true;
|
|
}
|
|
|
|
if($ok_to_delete) {
|
|
|
|
// set the deleted flag immediately on this item just in case the
|
|
// hook calls a remote process which loops. We'll delete it properly in a second.
|
|
|
|
$r = q("UPDATE item SET item_deleted = 1 WHERE id = %d",
|
|
intval($item['id'])
|
|
);
|
|
|
|
$arr = [
|
|
'item' => $item,
|
|
'stage' => $stage
|
|
];
|
|
|
|
/**
|
|
* @hooks drop_item
|
|
* Called when an 'item' is removed.
|
|
*/
|
|
call_hooks('drop_item', $arr);
|
|
|
|
$notify_id = intval($item['id']);
|
|
|
|
$items = q("select id, resource_id, uid, resource_type, mid from item where parent = %d and uid = %d",
|
|
intval($item['id']),
|
|
intval($item['uid'])
|
|
);
|
|
|
|
if($items) {
|
|
foreach($items as $i) {
|
|
delete_item_lowlevel($i, $stage);
|
|
}
|
|
}
|
|
else {
|
|
delete_item_lowlevel($item, $stage);
|
|
}
|
|
|
|
return true;
|
|
}
|
|
else {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
|
|
// If somebody deletes a 'Create' activity, find any associated 'Add/Collection'
|
|
// activity and delete it. And vice versa.
|
|
|
|
function drop_related($item, $stage = DROPITEM_NORMAL, $force = false, $uid = 0, $observer_hash = '', $expire = false, $recurse = false) {
|
|
$allRelated = q("select id, mid, verb, tgt_type, obj from item where parent_mid = '%s' and uid = %d",
|
|
dbesc($item['parent_mid']),
|
|
intval($item['uid'])
|
|
);
|
|
if (! $allRelated) {
|
|
return;
|
|
}
|
|
if ($item['verb'] === 'Add' && $item['tgt_type'] === 'Collection') {
|
|
if (is_array($item['obj'])) {
|
|
$thisItem = $item['obj'];
|
|
}
|
|
else {
|
|
$thisItem = json_decode($item['obj'], true);
|
|
}
|
|
if (isset($thisItem['object']['id'])) {
|
|
$targetMid = $thisItem['object']['id'];
|
|
}
|
|
if (!$targetMid) {
|
|
return;
|
|
}
|
|
foreach ($allRelated as $related) {
|
|
if ($related['mid'] === $targetMid) {
|
|
drop_item($related['id'], $stage, $force, $uid, $observer_hash, $expire, recurse: true);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
foreach ($allRelated as $related) {
|
|
if ($related['verb'] === 'Add' && str_contains($related['tgt_type'], 'Collection')) {
|
|
$thisItem = json_decode($related['obj'], true);
|
|
if (isset($thisItem['id']) && $thisItem['id'] === str_replace('/item/', '/activity/', $item['mid'])) {
|
|
drop_item($related['id'], $stage, $force, $uid, $observer_hash, $expire, recurse: true);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
function find_related($item) {
|
|
$allRelated = q("select * from item where parent_mid = '%s' and uid = %d",
|
|
dbesc($item['parent_mid']),
|
|
intval($item['uid'])
|
|
);
|
|
if (! $allRelated) {
|
|
return false;
|
|
}
|
|
if ($item['verb'] === 'Add' && $item['tgt_type'] === 'Collection') {
|
|
$thisItem = json_decode($item['obj'],true);
|
|
if (is_array($thisItem)) {
|
|
$targetMid = $thisItem['object']['id'];
|
|
}
|
|
if (!$targetMid) {
|
|
return false;
|
|
}
|
|
foreach ($allRelated as $related) {
|
|
if ($related['mid'] === $targetMid) {
|
|
return $related;
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
foreach ($allRelated as $related) {
|
|
if ($related['verb'] === 'Add' && str_contains($related['tgt_type'], 'Collection')) {
|
|
$thisItem = json_decode($related['obj'], true);
|
|
if (isset($thisItem['object']['id']) && $thisItem['object']['id'] === $item['mid']) {
|
|
return $related;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
|
|
/**
|
|
* @warning This function does not check for permission and does not send
|
|
* notifications and does not check recursion.
|
|
* It merely destroys all resources associated with an item.
|
|
* Please do not use without a suitable wrapper.
|
|
*
|
|
* @param array $item
|
|
* @param int $stage
|
|
* @return boolean
|
|
*/
|
|
function delete_item_lowlevel($item, $stage = DROPITEM_NORMAL) {
|
|
|
|
logger('item: ' . $item['id'] . ' stage: ' . $stage, LOGGER_DATA);
|
|
|
|
switch($stage) {
|
|
case DROPITEM_PHASE2:
|
|
$r = q("UPDATE item SET item_pending_remove = 1, body = '', title = '',
|
|
changed = '%s', edited = '%s' WHERE id = %d",
|
|
dbesc(datetime_convert()),
|
|
dbesc(datetime_convert()),
|
|
intval($item['id'])
|
|
);
|
|
break;
|
|
|
|
case DROPITEM_PHASE1:
|
|
$r = q("UPDATE item set item_deleted = 1, changed = '%s', edited = '%s' where id = %d",
|
|
dbesc(datetime_convert()),
|
|
dbesc(datetime_convert()),
|
|
intval($item['id'])
|
|
);
|
|
break;
|
|
|
|
case DROPITEM_NORMAL:
|
|
default:
|
|
$r = q("DELETE FROM item WHERE id = %d",
|
|
intval($item['id'])
|
|
);
|
|
break;
|
|
}
|
|
|
|
// immediately remove local linked resources
|
|
|
|
if($item['resource_type'] === 'event') {
|
|
$r = q("SELECT * FROM event WHERE event_hash = '%s' AND uid = %d LIMIT 1",
|
|
dbesc($item['resource_id']),
|
|
intval($item['uid'])
|
|
);
|
|
|
|
$sync_data = $r[0];
|
|
|
|
$x = q("delete from event where event_hash = '%s' and uid = %d",
|
|
dbesc($item['resource_id']),
|
|
intval($item['uid'])
|
|
);
|
|
|
|
if($x) {
|
|
$sync_data['event_deleted'] = 1;
|
|
Libsync::build_sync_packet($item['uid'], ['event' => [$sync_data]]);
|
|
}
|
|
}
|
|
|
|
if($item['resource_type'] === 'photo') {
|
|
attach_delete($item['uid'], $item['resource_id'], true );
|
|
$channel = channelx_by_n($item['uid']);
|
|
$sync_data = attach_export_data($channel, $item['resource_id'], true);
|
|
if($sync_data)
|
|
Libsync::build_sync_packet($item['uid'], ['file' => [$sync_data]]);
|
|
}
|
|
|
|
// immediately remove any undesired profile likes.
|
|
|
|
q("delete from likes where iid = %d and channel_id = %d",
|
|
intval($item['id']),
|
|
intval($item['uid'])
|
|
);
|
|
|
|
// remove delivery reports
|
|
|
|
$c = q("select channel_hash from channel where channel_id = %d limit 1",
|
|
intval($item['uid'])
|
|
);
|
|
if($c) {
|
|
q("delete from dreport where dreport_xchan = '%s' and dreport_mid = '%s'",
|
|
dbesc($c[0]['channel_hash']),
|
|
dbesc($item['mid'])
|
|
);
|
|
}
|
|
|
|
// network deletion request. Keep the message structure so that we can deliver delete notifications.
|
|
// Come back after several days (or perhaps a month) to do the lowlevel delete (DROPITEM_PHASE2).
|
|
|
|
if($stage == DROPITEM_PHASE1)
|
|
return true;
|
|
|
|
q("delete from iconfig where iid = %d",
|
|
intval($item['id'])
|
|
);
|
|
|
|
$n = q("SELECT count(id) AS total FROM item WHERE mid = '%s'",
|
|
dbesc($item['mid'])
|
|
);
|
|
|
|
if (!$n[0]['total']) {
|
|
ObjCache::Delete($item['mid']);
|
|
ObjCache::Delete($item['mid'], 'diaspora');
|
|
}
|
|
|
|
q("delete from term where oid = %d and otype = %d",
|
|
intval($item['id']),
|
|
intval(TERM_OBJ_POST)
|
|
);
|
|
|
|
ThreadListener::delete_by_target($item['mid']);
|
|
|
|
/** @FIXME remove notifications for this item */
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* @brief Return the first post date.
|
|
*
|
|
* @param int $uid
|
|
* @param boolean $wall (optional) no longer used
|
|
* @return string|boolean date string, otherwise false
|
|
*/
|
|
function first_post_date($uid, $wall = false) {
|
|
|
|
switch(App::$module) {
|
|
case 'articles':
|
|
$item_normal = " and item.item_hidden = 0 and item.item_type = 7 and item.item_deleted = 0
|
|
and item.item_unpublished = 0 and item.item_delayed = 0 and item.item_pending_remove = 0
|
|
and item.item_blocked = 0 ";
|
|
break;
|
|
default:
|
|
$item_normal = item_normal();
|
|
break;
|
|
}
|
|
|
|
$r = q("select id, created from item
|
|
where uid = %d and id = parent $item_normal
|
|
order by created limit 1",
|
|
intval($uid)
|
|
);
|
|
|
|
if($r) {
|
|
return substr(datetime_convert('',date_default_timezone_get(),$r[0]['created']),0,10);
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* modified posted_dates() {below} to arrange the list in years, which we'll eventually
|
|
* use to make a menu of years with collapsible sub-menus for the months instead of the
|
|
* current flat list of all representative dates.
|
|
*
|
|
* @param int $uid
|
|
* @param boolean $wall
|
|
* @param string $mindate
|
|
* @return array
|
|
*/
|
|
function list_post_dates($uid, $wall, $mindate) {
|
|
$dnow = datetime_convert('',date_default_timezone_get(),'now','Y-m-d');
|
|
|
|
if($mindate)
|
|
$dthen = datetime_convert('',date_default_timezone_get(), $mindate);
|
|
else
|
|
$dthen = first_post_date($uid, $wall);
|
|
if(! $dthen)
|
|
return array();
|
|
|
|
// If it's near the end of a long month, backup to the 28th so that in
|
|
// consecutive loops we'll always get a whole month difference.
|
|
|
|
if(intval(substr($dnow,8)) > 28)
|
|
$dnow = substr($dnow,0,8) . '28';
|
|
if(intval(substr($dthen,8)) > 28)
|
|
$dthen = substr($dthen,0,8) . '28';
|
|
|
|
$ret = array();
|
|
// Starting with the current month, get the first and last days of every
|
|
// month down to and including the month of the first post
|
|
while(substr($dnow, 0, 7) >= substr($dthen, 0, 7)) {
|
|
$dyear = intval(substr($dnow,0,4));
|
|
$dstart = substr($dnow,0,8) . '01';
|
|
$dend = substr($dnow,0,8) . get_dim(intval($dnow),intval(substr($dnow,5)));
|
|
$start_month = datetime_convert('','',$dstart,'Y-m-d');
|
|
$end_month = datetime_convert('','',$dend,'Y-m-d');
|
|
$str = day_translate(datetime_convert('','',$dnow,'F'));
|
|
if(! isset($ret[$dyear]))
|
|
$ret[$dyear] = [];
|
|
$ret[$dyear][] = [ $str, $end_month, $start_month ];
|
|
$dnow = datetime_convert('','',$dnow . ' -1 month', 'Y-m-d');
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
function posted_dates($uid,$wall) {
|
|
$dnow = datetime_convert('',date_default_timezone_get(),'now','Y-m-d');
|
|
|
|
$dthen = first_post_date($uid,$wall);
|
|
if(! $dthen)
|
|
return array();
|
|
|
|
// If it's near the end of a long month, backup to the 28th so that in
|
|
// consecutive loops we'll always get a whole month difference.
|
|
|
|
if(intval(substr($dnow,8)) > 28)
|
|
$dnow = substr($dnow,0,8) . '28';
|
|
if(intval(substr($dthen,8)) > 28)
|
|
$dthen = substr($dthen,0,8) . '28';
|
|
|
|
$ret = array();
|
|
// Starting with the current month, get the first and last days of every
|
|
// month down to and including the month of the first post
|
|
while(substr($dnow, 0, 7) >= substr($dthen, 0, 7)) {
|
|
$dstart = substr($dnow,0,8) . '01';
|
|
$dend = substr($dnow,0,8) . get_dim(intval($dnow),intval(substr($dnow,5)));
|
|
$start_month = datetime_convert('','',$dstart,'Y-m-d');
|
|
$end_month = datetime_convert('','',$dend,'Y-m-d');
|
|
$str = day_translate(datetime_convert('','',$dnow,'F Y'));
|
|
$ret[] = array($str,$end_month,$start_month);
|
|
$dnow = datetime_convert('','',$dnow . ' -1 month', 'Y-m-d');
|
|
}
|
|
return $ret;
|
|
}
|
|
|
|
/**
|
|
* @brief Extend an item array with the associated tags of the posts.
|
|
*
|
|
* @param array $items
|
|
* @param boolean $link (optional) default false
|
|
* @return array Return the provided $items array after extended the posts with tags
|
|
*/
|
|
function fetch_post_tags($items, $link = false) {
|
|
|
|
if (!is_array($items) || !$items) {
|
|
return $items;
|
|
}
|
|
|
|
$tag_finder = [];
|
|
foreach($items as $item) {
|
|
if(is_array($item)) {
|
|
if(array_key_exists('item_id',$item)) {
|
|
if(! in_array($item['item_id'],$tag_finder))
|
|
$tag_finder[] = $item['item_id'];
|
|
}
|
|
else {
|
|
if(! in_array($item['id'],$tag_finder))
|
|
$tag_finder[] = $item['id'];
|
|
}
|
|
}
|
|
}
|
|
|
|
$tag_finder_str = implode(', ', $tag_finder);
|
|
|
|
if(strlen($tag_finder_str)) {
|
|
$tags = q("select * from term where oid in ( %s ) and otype = %d",
|
|
dbesc($tag_finder_str),
|
|
intval(TERM_OBJ_POST)
|
|
);
|
|
$imeta = q("select * from iconfig where iid in ( %s )",
|
|
dbesc($tag_finder_str)
|
|
);
|
|
}
|
|
|
|
for($x = 0; $x < count($items); $x ++) {
|
|
if($tags) {
|
|
foreach($tags as $t) {
|
|
if(($link) && ($t['ttype'] == TERM_MENTION))
|
|
$t['url'] = chanlink_url($t['url']);
|
|
if(array_key_exists('item_id', $items[$x])) {
|
|
if($t['oid'] == $items[$x]['item_id']) {
|
|
if(array_key_exists('term', $items[$x]) && ! is_array($items[$x]['term']))
|
|
$items[$x]['term'] = [];
|
|
$items[$x]['term'][] = $t;
|
|
}
|
|
}
|
|
else {
|
|
if($t['oid'] == $items[$x]['id']) {
|
|
if(array_key_exists('term', $items[$x]) && ! is_array($items[$x]['term']))
|
|
$items[$x]['term'] = [];
|
|
$items[$x]['term'][] = $t;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if($imeta) {
|
|
foreach($imeta as $i) {
|
|
if(array_key_exists('item_id',$items[$x])) {
|
|
if($i['iid'] == $items[$x]['item_id']) {
|
|
if(! isset($items[$x]['iconfig']))
|
|
$items[$x]['iconfig'] = [];
|
|
$i['v'] = ((preg_match('|^a:[0-9]+:{.*}$|s',$i['v'])) ? unserialize($i['v']) : $i['v']);
|
|
$items[$x]['iconfig'][] = $i;
|
|
}
|
|
}
|
|
else {
|
|
if($i['iid'] == $items[$x]['id']) {
|
|
if(array_key_exists('iconfig', $items[$x]) && ! is_array($items[$x]['iconfig']))
|
|
$items[$x]['iconfig'] = [];
|
|
$i['v'] = ((preg_match('|^a:[0-9]+:{.*}$|s',$i['v'])) ? unserialize($i['v']) : $i['v']);
|
|
$items[$x]['iconfig'][] = $i;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return $items;
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief
|
|
*
|
|
* @param int $uid
|
|
* @param string $observer_hash
|
|
* @param array $arr
|
|
* @return array
|
|
*/
|
|
function zot_feed($uid, $observer_hash, $arr) {
|
|
|
|
$result = [];
|
|
$mindate = null;
|
|
$message_id = null;
|
|
$wall = true;
|
|
|
|
require_once('include/security.php');
|
|
|
|
if (array_key_exists('mindate', $arr)) {
|
|
$mindate = datetime_convert('UTC', 'UTC', $arr['mindate']);
|
|
}
|
|
|
|
if (array_key_exists('message_id', $arr)) {
|
|
$message_id = $arr['message_id'];
|
|
}
|
|
|
|
if (array_key_exists('wall', $arr)) {
|
|
$wall = intval($arr['wall']);
|
|
}
|
|
|
|
if (!$mindate)
|
|
$mindate = DBA::$dba->get_null_date();
|
|
|
|
$mindate = dbesc($mindate);
|
|
|
|
logger('zot_feed: requested for uid ' . $uid . ' from observer ' . $observer_hash, LOGGER_DEBUG);
|
|
if ($message_id)
|
|
logger('message_id: ' . $message_id, LOGGER_DEBUG);
|
|
|
|
if (!perm_is_allowed($uid, $observer_hash, 'view_stream')) {
|
|
logger('zot_feed: permission denied.');
|
|
return $result;
|
|
}
|
|
|
|
if (!is_sys_channel($uid))
|
|
$sql_extra = item_permissions_sql($uid, $observer_hash);
|
|
|
|
$limit = " LIMIT 5000 ";
|
|
|
|
if ($mindate > DBA::$dba->get_null_date()) {
|
|
$sql_extra .= " and ( created > '$mindate' or changed > '$mindate' ) ";
|
|
}
|
|
|
|
if ($message_id) {
|
|
$sql_extra .= " and mid = '" . dbesc($message_id) . "' ";
|
|
$limit = '';
|
|
}
|
|
|
|
if ($wall) {
|
|
$sql_extra .= " and item_wall = 1 ";
|
|
}
|
|
|
|
|
|
$items = [];
|
|
|
|
$item_normal = item_normal();
|
|
|
|
if (is_sys_channel($uid)) {
|
|
|
|
$nonsys_uids = q("SELECT channel_id FROM channel WHERE channel_system = 0");
|
|
$nonsys_uids_str = ids_to_querystr($nonsys_uids, 'channel_id');
|
|
|
|
$r = q("SELECT parent, postopts FROM item
|
|
WHERE uid IN ( %s )
|
|
AND item_private = 0
|
|
$item_normal
|
|
$sql_extra ORDER BY created ASC $limit",
|
|
dbesc($nonsys_uids_str)
|
|
);
|
|
}
|
|
else {
|
|
$r = q("SELECT parent, postopts FROM item
|
|
WHERE uid = %d
|
|
$item_normal
|
|
$sql_extra ORDER BY created ASC $limit",
|
|
intval($uid)
|
|
);
|
|
}
|
|
|
|
$parents = [];
|
|
|
|
if ($r) {
|
|
foreach ($r as $rv) {
|
|
if (array_key_exists($rv['parent'], $parents))
|
|
continue;
|
|
if (strpos($rv['postopts'], 'nodeliver') !== false)
|
|
continue;
|
|
$parents[$rv['parent']] = $rv;
|
|
if (count($parents) > 200)
|
|
break;
|
|
}
|
|
|
|
$parents_str = ids_to_querystr($parents, 'parent');
|
|
$sys_query = ((is_sys_channel($uid)) ? $sql_extra : '');
|
|
$item_normal = item_normal();
|
|
|
|
$items = q("SELECT item.*, item.id AS item_id FROM item
|
|
WHERE item.parent IN ( %s ) $item_normal $sys_query ",
|
|
dbesc($parents_str)
|
|
);
|
|
}
|
|
|
|
if ($items) {
|
|
xchan_query($items);
|
|
$items = fetch_post_tags($items);
|
|
require_once('include/conversation.php');
|
|
$items = conv_sort($items, 'ascending');
|
|
}
|
|
else
|
|
$items = [];
|
|
|
|
logger('zot_feed: number items: ' . count($items), LOGGER_DEBUG);
|
|
|
|
foreach ($items as $item)
|
|
$result[] = encode_item($item);
|
|
|
|
return $result;
|
|
}
|
|
|
|
function items_fetch($arr,$channel = null,$observer_hash = null,$client_mode = CLIENT_MODE_NORMAL,$module = 'network') {
|
|
$result = ['success' => false];
|
|
$sql_extra = '';
|
|
$sql_nets = '';
|
|
$sql_options = '';
|
|
$sql_extra2 = '';
|
|
$sql_extra3 = '';
|
|
$def_acl = '';
|
|
$item_uids = ' true ';
|
|
$item_normal = item_normal();
|
|
|
|
if (! (isset($arr['include_follow']) && intval($arr['include_follow']))) {
|
|
$item_normal .= sprintf(" and not verb in ('Follow', 'Ignore', '%s', '%s') ",
|
|
dbesc(ACTIVITY_FOLLOW),
|
|
dbesc(ACTIVITY_UNFOLLOW)
|
|
);
|
|
}
|
|
|
|
if(isset($arr['uid']) && $arr['uid']) {
|
|
$uid = $arr['uid'];
|
|
}
|
|
|
|
if($channel) {
|
|
$uid = $channel['channel_id'];
|
|
$uidhash = $channel['channel_hash'];
|
|
$item_uids = " item.uid = " . intval($uid) . " ";
|
|
}
|
|
|
|
if(isset($arr['top']) && $arr['top'])
|
|
$sql_options .= " and item_thread_top = 1 ";
|
|
|
|
if(isset($arr['star']) && $arr['star'])
|
|
$sql_options .= " and item_starred = 1 ";
|
|
|
|
if(isset($arr['wall']) && $arr['wall'])
|
|
$sql_options .= " and item_wall = 1 ";
|
|
|
|
if(isset($arr['item_id']) && $arr['item_id'])
|
|
$sql_options .= " and parent = " . intval($arr['item_id']) . " ";
|
|
|
|
if(isset($arr['mid']) && $arr['mid'])
|
|
$sql_options .= " and parent_mid = '" . dbesc($arr['mid']) . "' ";
|
|
|
|
$sql_extra = " AND item.parent IN ( SELECT parent FROM item WHERE $item_uids and item_thread_top = 1 $sql_options $item_normal ) ";
|
|
|
|
if(isset($arr['since_id']) && $arr['since_id'])
|
|
$sql_extra .= " and item.id > " . intval($arr['since_id']) . " ";
|
|
|
|
if(isset($arr['cat']) && $arr['cat'])
|
|
$sql_extra .= protect_sprintf(term_query('item', $arr['cat'], TERM_CATEGORY));
|
|
|
|
if((isset($arr['gid']) && $arr['gid']) && $uid) {
|
|
$r = q("SELECT * FROM pgrp WHERE id = %d AND uid = %d LIMIT 1",
|
|
intval($arr['group']),
|
|
intval($uid)
|
|
);
|
|
if(! $r) {
|
|
$result['message'] = t('Privacy group not found.');
|
|
return $result;
|
|
}
|
|
|
|
$contact_str = '';
|
|
|
|
$contacts = AccessList::members($uid, $r[0]['id']);
|
|
if ($contacts) {
|
|
foreach($contacts as $c) {
|
|
if($contact_str)
|
|
$contact_str .= ',';
|
|
|
|
$contact_str .= "'" . $c['xchan'] . "'";
|
|
}
|
|
} else {
|
|
$contact_str = ' 0 ';
|
|
$result['message'] = t('Privacy group is empty.');
|
|
return $result;
|
|
}
|
|
|
|
$sql_extra = " AND item.parent IN ( SELECT DISTINCT parent FROM item WHERE true $sql_options AND (( author_xchan IN ( $contact_str ) OR owner_xchan in ( $contact_str)) or allow_gid like '" . protect_sprintf('%<' . dbesc($r[0]['hash']) . '>%') . "' ) and id = parent $item_normal ) ";
|
|
|
|
$x = AccessList::by_hash($uid, $r[0]['hash']);
|
|
$result['headline'] = sprintf( t('Privacy group: %s'),$x['gname']);
|
|
}
|
|
elseif((isset($arr['cid']) && $arr['cid']) && $uid) {
|
|
|
|
$r = q("SELECT abook.*, xchan.* from abook left join xchan on abook_xchan = xchan_hash where abook_id = %d and abook_channel = %d and abook_blocked = 0 limit 1",
|
|
intval($arr['cid']),
|
|
intval(local_channel())
|
|
);
|
|
if ($r) {
|
|
$sql_extra = " AND item.parent IN ( SELECT DISTINCT parent FROM item WHERE true $sql_options AND uid = " . intval($arr['uid']) . " AND ( author_xchan = '" . dbesc($r[0]['abook_xchan']) . "' or owner_xchan = '" . dbesc($r[0]['abook_xchan']) . "' ) $item_normal ) ";
|
|
$result['headline'] = sprintf( t('Connection: %s'),$r[0]['xchan_name']);
|
|
} else {
|
|
$result['message'] = t('Connection not found.');
|
|
return $result;
|
|
}
|
|
}
|
|
|
|
if($channel && intval($arr['compat']) === 1) {
|
|
$sql_extra = " AND author_xchan = '" . $channel['channel_hash'] . "' and item_private = 0 $item_normal ";
|
|
}
|
|
|
|
if (isset($arr['datequery']) && $arr['datequery']) {
|
|
$sql_extra3 .= protect_sprintf(sprintf(" AND item.created <= '%s' ", dbesc(datetime_convert('UTC','UTC',$arr['datequery']))));
|
|
}
|
|
if (isset($arr['datequery2']) && $arr['datequery2']) {
|
|
$sql_extra3 .= protect_sprintf(sprintf(" AND item.created >= '%s' ", dbesc(datetime_convert('UTC','UTC',$arr['datequery2']))));
|
|
}
|
|
|
|
if(isset($arr['search']) && $arr['search']) {
|
|
if(strpos($arr['search'],'#') === 0)
|
|
$sql_extra .= term_query('item',substr($arr['search'],1),TERM_HASHTAG,TERM_COMMUNITYTAG);
|
|
else
|
|
$sql_extra .= sprintf(" AND item.body like '%s' ",
|
|
dbesc(protect_sprintf('%' . $arr['search'] . '%'))
|
|
);
|
|
}
|
|
|
|
if(isset($arr['file']) && $arr['file']) {
|
|
$sql_extra .= term_query('item',$arr['file'],TERM_FILE);
|
|
}
|
|
|
|
if((isset($arr['conv']) && $arr['conv']) && $channel) {
|
|
$sql_extra .= sprintf(" AND parent IN (SELECT distinct parent from item where ( author_xchan like '%s' or item_mentionsme = 1 )) ",
|
|
dbesc(protect_sprintf($uidhash))
|
|
);
|
|
}
|
|
|
|
if (($client_mode & CLIENT_MODE_UPDATE) && (! ($client_mode & CLIENT_MODE_LOAD))) {
|
|
// only setup pagination on initial page view
|
|
$pager_sql = '';
|
|
} else {
|
|
if(!isset($arr['total'])) {
|
|
$itemspage = (($channel) ? get_pconfig($uid,'system','itemspage') : 10);
|
|
App::set_pager_itemspage(((intval($itemspage)) ? $itemspage : 10));
|
|
$pager_sql = sprintf(" LIMIT %d OFFSET %d ", intval(App::$pager['itemspage']), intval(App::$pager['start']));
|
|
}
|
|
}
|
|
|
|
if (isset($arr['start']) && isset($arr['records']))
|
|
$pager_sql = sprintf(" LIMIT %d OFFSET %d ", intval($arr['records']), intval($arr['start']));
|
|
|
|
if (array_key_exists('cmin',$arr) || array_key_exists('cmax',$arr)) {
|
|
if (($arr['cmin'] != 0) || ($arr['cmax'] != 99)) {
|
|
|
|
// Not everybody who shows up in the network stream will be in your address book.
|
|
// By default those that aren't are assumed to have closeness = 99; but this isn't
|
|
// recorded anywhere. So if cmax is 99, we'll open the search up to anybody in
|
|
// the stream with a NULL address book entry.
|
|
|
|
$sql_nets .= " AND ";
|
|
|
|
if ($arr['cmax'] == 99)
|
|
$sql_nets .= " ( ";
|
|
|
|
$sql_nets .= "( abook.abook_closeness >= " . intval($arr['cmin']) . " ";
|
|
$sql_nets .= " AND abook.abook_closeness <= " . intval($arr['cmax']) . " ) ";
|
|
|
|
if ($arr['cmax'] == 99)
|
|
$sql_nets .= " OR abook.abook_closeness IS NULL ) ";
|
|
}
|
|
}
|
|
|
|
$simple_update = (($client_mode & CLIENT_MODE_UPDATE) ? " and item.item_unseen = 1 " : '');
|
|
if($client_mode & CLIENT_MODE_LOAD)
|
|
$simple_update = '';
|
|
|
|
//$start = dba_timer();
|
|
|
|
require_once('include/security.php');
|
|
$sql_extra .= item_permissions_sql($channel['channel_id'],$observer_hash);
|
|
|
|
if(isset($arr['pages']) && $arr['pages']) {
|
|
$item_restrict = " AND item_type = " . ITEM_TYPE_WEBPAGE . " ";
|
|
}
|
|
else
|
|
$item_restrict = " AND item_type = 0 ";
|
|
|
|
if(isset($arr['item_type']) && $arr['item_type'] === '*')
|
|
$item_restrict = '';
|
|
|
|
if (((isset($arr['compat']) && $arr['compat']) || ((isset($arr['nouveau']) && $arr['nouveau']) && ($client_mode & CLIENT_MODE_LOAD))) && $channel) {
|
|
|
|
// "New Item View" - show all items unthreaded in reverse created date order
|
|
|
|
if (isset($arr['total'])) {
|
|
$items = dbq("SELECT count(item.id) AS total FROM item
|
|
WHERE $item_uids $item_restrict
|
|
$simple_update $sql_options
|
|
$sql_extra $sql_nets $sql_extra3"
|
|
);
|
|
if ($items) {
|
|
return intval($items[0]['total']);
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
$items = dbq("SELECT item.*, item.id AS item_id FROM item
|
|
WHERE $item_uids $item_restrict
|
|
$simple_update $sql_options
|
|
$sql_extra $sql_nets $sql_extra3
|
|
ORDER BY item.received DESC $pager_sql"
|
|
);
|
|
|
|
require_once('include/items.php');
|
|
xchan_query($items);
|
|
|
|
$items = fetch_post_tags($items,true);
|
|
} else {
|
|
|
|
// Normal conversation view
|
|
|
|
if(isset($arr['order']) && $arr['order'] === 'post')
|
|
$ordering = "created";
|
|
else
|
|
$ordering = "commented";
|
|
|
|
if(($client_mode & CLIENT_MODE_LOAD) || ($client_mode == CLIENT_MODE_NORMAL)) {
|
|
// Fetch a page full of parent items for this page
|
|
$r = dbq("SELECT distinct item.id AS item_id, item.$ordering FROM item
|
|
left join abook on item.author_xchan = abook.abook_xchan
|
|
WHERE $item_uids $item_restrict
|
|
AND item.parent = item.id
|
|
and (abook.abook_blocked = 0 or abook.abook_flags is null)
|
|
$sql_extra3 $sql_extra $sql_nets
|
|
ORDER BY item.$ordering DESC $pager_sql "
|
|
);
|
|
}
|
|
else {
|
|
// update
|
|
$r = dbq("SELECT item.parent AS item_id FROM item
|
|
left join abook on item.author_xchan = abook.abook_xchan
|
|
WHERE $item_uids $item_restrict $simple_update
|
|
and (abook.abook_blocked = 0 or abook.abook_flags is null)
|
|
$sql_extra3 $sql_extra $sql_nets "
|
|
);
|
|
}
|
|
|
|
//$first = dba_timer();
|
|
|
|
// Then fetch all the children of the parents that are on this page
|
|
|
|
if($r) {
|
|
|
|
$parents_str = ids_to_querystr($r,'item_id');
|
|
|
|
if($arr['top'])
|
|
$sql_extra = ' and id = parent ' . $sql_extra;
|
|
|
|
$items = q("SELECT item.*, item.id AS item_id FROM item
|
|
WHERE $item_uids $item_restrict
|
|
AND item.parent IN ( %s )
|
|
$sql_extra ",
|
|
dbesc($parents_str)
|
|
);
|
|
|
|
//$second = dba_timer();
|
|
|
|
xchan_query($items);
|
|
|
|
//$third = dba_timer();
|
|
|
|
$items = fetch_post_tags($items,false);
|
|
|
|
//$fourth = dba_timer();
|
|
|
|
require_once('include/conversation.php');
|
|
$items = conv_sort($items,$ordering);
|
|
|
|
//logger('items: ' . print_r($items,true));
|
|
} else {
|
|
$items = array();
|
|
}
|
|
|
|
/** @FIXME finish mark unseen sql
|
|
if ($parents_str && (isset($arr['mark_seen']) && $arr['mark_seen'])) {
|
|
$update_unseen = ' AND parent IN ( ' . dbesc($parents_str) . ' )';
|
|
}
|
|
*/
|
|
}
|
|
|
|
return $items;
|
|
}
|
|
|
|
function item_type_to_namespace($item_type) {
|
|
|
|
if($item_type == ITEM_TYPE_WEBPAGE)
|
|
$page_type = 'WEBPAGE';
|
|
elseif($item_type == ITEM_TYPE_BLOCK)
|
|
$page_type = 'BUILDBLOCK';
|
|
elseif($item_type == ITEM_TYPE_PDL)
|
|
$page_type = 'PDL';
|
|
elseif($item_type == ITEM_TYPE_CARD)
|
|
$page_type = 'CARD';
|
|
elseif($item_type == ITEM_TYPE_ARTICLE)
|
|
$page_type = 'ARTICLE';
|
|
elseif($item_type == ITEM_TYPE_DOC)
|
|
$page_type = 'docfile';
|
|
else
|
|
$page_type = 'unknown';
|
|
|
|
return $page_type;
|
|
}
|
|
|
|
|
|
function update_remote_id($channel,$post_id,$item_type,$pagetitle,$namespace,$remote_id,$mid) {
|
|
|
|
if(! intval($post_id))
|
|
return;
|
|
|
|
$page_type = item_type_to_namespace($item_type);
|
|
|
|
if($page_type == 'unknown' && $namespace && $remote_id) {
|
|
$page_type = $namespace;
|
|
$pagetitle = $remote_id;
|
|
}
|
|
else {
|
|
$page_type = '';
|
|
}
|
|
|
|
if($page_type) {
|
|
|
|
// store page info as an alternate message_id so we can access it via
|
|
// https://sitename/page/$channelname/$pagetitle
|
|
// if no pagetitle was given or it couldn't be transliterated into a url, use the first
|
|
// sixteen bytes of the mid - which makes the link portable and not quite as daunting
|
|
// as the entire mid. If it were the post_id the link would be less portable.
|
|
|
|
IConfig::Set(
|
|
$post_id,
|
|
'system',
|
|
$page_type,
|
|
($pagetitle) ? $pagetitle : substr($mid,0,16),
|
|
false
|
|
);
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief Change access control for item with message_id $mid and channel_id $uid.
|
|
*
|
|
* @param string $xchan_hash
|
|
* @param string $mid
|
|
* @param int $uid
|
|
*/
|
|
function item_add_cid($xchan_hash, $mid, $uid) {
|
|
$r = q("select id from item where mid = '%s' and uid = %d and allow_cid like '%s'",
|
|
dbesc($mid),
|
|
intval($uid),
|
|
dbesc('<' . $xchan_hash . '>')
|
|
);
|
|
if(! $r) {
|
|
$r = q("update item set allow_cid = concat(allow_cid,'%s') where mid = '%s' and uid = %d",
|
|
dbesc('<' . $xchan_hash . '>'),
|
|
dbesc($mid),
|
|
intval($uid)
|
|
);
|
|
}
|
|
}
|
|
|
|
function item_remove_cid($xchan_hash,$mid,$uid) {
|
|
$r = q("select allow_cid from item where mid = '%s' and uid = %d and allow_cid like '%s'",
|
|
dbesc($mid),
|
|
intval($uid),
|
|
dbesc('<' . $xchan_hash . '>')
|
|
);
|
|
if($r) {
|
|
$x = q("update item set allow_cid = '%s' where mid = '%s' and uid = %d",
|
|
dbesc(str_replace('<' . $xchan_hash . '>','',$r[0]['allow_cid'])),
|
|
dbesc($mid),
|
|
intval($uid)
|
|
);
|
|
}
|
|
}
|
|
|
|
// Set item permissions based on results obtained from linkify_tags()
|
|
function set_linkified_perms($linkified, &$str_contact_allow, &$str_group_allow, $profile_uid, &$private, $parent_item = false) {
|
|
$first_access_tag = true;
|
|
|
|
foreach($linkified as $x) {
|
|
$access_tag = $x['success']['access_tag'];
|
|
if(($access_tag) && (! $parent_item)) {
|
|
logger('access_tag: ' . print_r($access_tag,true), LOGGER_DATA);
|
|
if ($first_access_tag && (! get_pconfig($profile_uid,'system','no_private_mention_acl_override'))) {
|
|
|
|
// This is a tough call, hence configurable. The issue is that one can type in a @!privacy mention
|
|
// and also have a default ACL (perhaps from viewing a collection) and could be suprised that the
|
|
// privacy mention wasn't the only recipient. So the default is to wipe out the existing ACL if a
|
|
// private mention is found. This can be over-ridden if you wish private mentions to be in
|
|
// addition to the current ACL settings.
|
|
|
|
$str_contact_allow = '';
|
|
$str_group_allow = '';
|
|
$first_access_tag = false;
|
|
}
|
|
if(strpos($access_tag,'cid:') === 0) {
|
|
$str_contact_allow .= '<' . substr($access_tag,4) . '>';
|
|
$access_tag = '';
|
|
$private = 2;
|
|
}
|
|
elseif(strpos($access_tag,'gid:') === 0) {
|
|
$str_group_allow .= '<' . substr($access_tag,4) . '>';
|
|
$access_tag = '';
|
|
$private = 1;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* We can't trust ITEM_ORIGIN to tell us if this is a local comment
|
|
* which needs to be relayed, because it was misconfigured at one point for several
|
|
* months and set for some remote items (in alternate delivery chains). This could
|
|
* cause looping, so use this hackish but accurate method.
|
|
*
|
|
* @param array $item
|
|
* @return boolean
|
|
*/
|
|
function comment_local_origin($item) {
|
|
if(stripos($item['mid'], App::get_hostname()) && ($item['parent'] != $item['id']))
|
|
return true;
|
|
|
|
return false;
|
|
}
|
|
|
|
function sync_an_item($channel_id,$item_id) {
|
|
$r = q("select * from item where id = %d",
|
|
intval($item_id)
|
|
);
|
|
if($r) {
|
|
xchan_query($r);
|
|
$sync_item = fetch_post_tags($r);
|
|
Libsync::build_sync_packet($channel_id, array('item' => array(encode_item($sync_item[0],true))));
|
|
}
|
|
}
|
|
|
|
|
|
function fix_attached_photo_permissions($uid,$xchan_hash,$body,
|
|
$str_contact_allow,$str_group_allow,$str_contact_deny,$str_group_deny) {
|
|
|
|
if(get_pconfig($uid,'system','force_public_uploads')) {
|
|
$str_contact_allow = $str_group_allow = $str_contact_deny = $str_group_deny = '';
|
|
}
|
|
|
|
$match = null;
|
|
// match img and zmg image links
|
|
if(preg_match_all("/\[[zi]mg(.*?)\](.*?)\[\/[zi]mg\]/",$body,$match)) {
|
|
|
|
// The URI can be in both places
|
|
$images = array_merge($match[1], $match[2]);
|
|
|
|
if($images) {
|
|
foreach($images as $image) {
|
|
if(! stristr($image,z_root() . '/photo/'))
|
|
continue;
|
|
$image_uri = substr($image,strrpos($image,'/') + 1);
|
|
if(strrpos($image_uri,'-') !== false)
|
|
$image_uri = substr($image_uri,0, strrpos($image_uri,'-'));
|
|
if(strrpos($image_uri,'.') !== false)
|
|
$image_uri = substr($image_uri,0, strrpos($image_uri,'.'));
|
|
if(! strlen($image_uri))
|
|
continue;
|
|
$srch = '<' . $xchan_hash . '>';
|
|
|
|
$r = q("select folder from attach where hash = '%s' and uid = %d limit 1",
|
|
dbesc($image_uri),
|
|
intval($uid)
|
|
);
|
|
|
|
if($r && $r[0]['folder']) {
|
|
$f = q("select * from attach where hash = '%s' and is_dir = 1 and uid = %d limit 1",
|
|
dbesc($r[0]['folder']),
|
|
intval($uid)
|
|
);
|
|
if(($f) && (($f[0]['allow_cid']) || ($f[0]['allow_gid']) || ($f[0]['deny_cid']) || ($f[0]['deny_gid']))) {
|
|
$str_contact_allow = $f[0]['allow_cid'];
|
|
$str_group_allow = $f[0]['allow_gid'];
|
|
$str_contact_deny = $f[0]['deny_cid'];
|
|
$str_group_deny = $f[0]['deny_gid'];
|
|
}
|
|
}
|
|
|
|
$r = q("SELECT id FROM photo
|
|
WHERE allow_cid = '%s' AND allow_gid = '' AND deny_cid = '' AND deny_gid = ''
|
|
AND resource_id = '%s' AND uid = %d LIMIT 1",
|
|
dbesc($srch),
|
|
dbesc($image_uri),
|
|
intval($uid)
|
|
);
|
|
|
|
if($r) {
|
|
$r = q("UPDATE photo SET allow_cid = '%s', allow_gid = '%s', deny_cid = '%s', deny_gid = '%s'
|
|
WHERE resource_id = '%s' AND uid = %d ",
|
|
dbesc($str_contact_allow),
|
|
dbesc($str_group_allow),
|
|
dbesc($str_contact_deny),
|
|
dbesc($str_group_deny),
|
|
dbesc($image_uri),
|
|
intval($uid)
|
|
);
|
|
|
|
// also update the linked item (which is probably invisible)
|
|
|
|
$r = q("select id from item
|
|
WHERE allow_cid = '%s' AND allow_gid = '' AND deny_cid = '' AND deny_gid = ''
|
|
AND resource_id = '%s' and resource_type = 'photo' AND uid = %d LIMIT 1",
|
|
dbesc($srch),
|
|
dbesc($image_uri),
|
|
intval($uid)
|
|
);
|
|
if($r) {
|
|
$private = (($str_contact_allow || $str_group_allow || $str_contact_deny || $str_group_deny) ? true : false);
|
|
|
|
$r = q("UPDATE item SET allow_cid = '%s', allow_gid = '%s', deny_cid = '%s', deny_gid = '%s', item_private = %d
|
|
WHERE id = %d AND uid = %d",
|
|
dbesc($str_contact_allow),
|
|
dbesc($str_group_allow),
|
|
dbesc($str_contact_deny),
|
|
dbesc($str_group_deny),
|
|
intval($private),
|
|
intval($r[0]['id']),
|
|
intval($uid)
|
|
);
|
|
}
|
|
$r = q("select id from attach where hash = '%s' and uid = %d limit 1",
|
|
dbesc($image_uri),
|
|
intval($uid)
|
|
);
|
|
if($r) {
|
|
q("update attach SET allow_cid = '%s', allow_gid = '%s', deny_cid = '%s', deny_gid = '%s'
|
|
WHERE id = %d AND uid = %d",
|
|
dbesc($str_contact_allow),
|
|
dbesc($str_group_allow),
|
|
dbesc($str_contact_deny),
|
|
dbesc($str_group_deny),
|
|
intval($r[0]['id']),
|
|
intval($uid)
|
|
);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
function fix_attached_file_permissions($channel,$observer_hash,$body,
|
|
$str_contact_allow,$str_group_allow,$str_contact_deny,$str_group_deny) {
|
|
|
|
if(get_pconfig($channel['channel_id'],'system','force_public_uploads')) {
|
|
$str_contact_allow = $str_group_allow = $str_contact_deny = $str_group_deny = '';
|
|
}
|
|
|
|
$match = false;
|
|
|
|
if(preg_match_all("/\[attachment\](.*?)\[\/attachment\]/",$body,$match)) {
|
|
$attaches = $match[1];
|
|
if($attaches) {
|
|
foreach($attaches as $attach) {
|
|
$hash = substr($attach,0,strpos($attach,','));
|
|
$rev = intval(substr($attach,strpos($attach,',')));
|
|
attach_store($channel,$observer_hash,$options = 'update', array(
|
|
'hash' => $hash,
|
|
'revision' => $rev,
|
|
'allow_cid' => $str_contact_allow,
|
|
'allow_gid' => $str_group_allow,
|
|
'deny_cid' => $str_contact_deny,
|
|
'deny_gid' => $str_group_deny
|
|
));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
function list_attached_local_files($body) {
|
|
|
|
$files = [];
|
|
$match = [];
|
|
|
|
// match img and zmg image links
|
|
if (preg_match_all("/\[[zi]mg(.*?)](.*?)\[\/[zi]mg]/", $body, $match)) {
|
|
$images = array_merge($match[1], $match[2]);
|
|
if ($images) {
|
|
foreach ($images as $image) {
|
|
if (!stristr($image, z_root() . '/photo/')) {
|
|
continue;
|
|
}
|
|
$image_uri = substr($image,strrpos($image,'/') + 1);
|
|
if (str_contains($image_uri, '-')) {
|
|
$image_uri = substr($image_uri,0, strrpos($image_uri,'-'));
|
|
}
|
|
if (str_contains($image_uri, '.')) {
|
|
$image_uri = substr($image_uri,0, strpos($image_uri,'.'));
|
|
}
|
|
if ($image_uri && !in_array($image_uri, $files)) {
|
|
$files[] = $image_uri;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if (preg_match_all("/\[attachment](.*?)\[\/attachment]/",$body,$match)) {
|
|
$attaches = $match[1];
|
|
if ($attaches) {
|
|
foreach ($attaches as $attach) {
|
|
$hash = substr($attach,0,strpos($attach,','));
|
|
if ($hash && !in_array($hash, $files)) {
|
|
$files[] = $hash;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return $files;
|
|
}
|
|
|
|
function fix_attached_permissions($uid, $body, $str_contact_allow, $str_group_allow, $str_contact_deny, $str_group_deny, $token = EMPTY_STR) {
|
|
|
|
$files = list_attached_local_files($body);
|
|
|
|
if (! $files) {
|
|
return;
|
|
}
|
|
|
|
foreach ($files as $file) {
|
|
$attach_q = q("select id, hash, flags, is_photo, allow_cid, allow_gid, deny_cid, deny_gid from attach where hash = '%s' and uid = %d",
|
|
dbesc($file),
|
|
intval($uid)
|
|
);
|
|
|
|
if (! $attach_q) {
|
|
continue;
|
|
}
|
|
|
|
$attach = array_shift($attach_q);
|
|
|
|
//$new_public = !(($str_contact_allow || $str_group_allow || $str_contact_deny || $str_group_deny));
|
|
$existing_public = !(($attach['allow_cid'] || $attach['allow_gid'] || $attach['deny_cid'] || $attach['deny_gid']));
|
|
|
|
if ($existing_public) {
|
|
// permissions have already been fixed and they are public. There's nothing for us to do.
|
|
continue;
|
|
}
|
|
|
|
// if flags & 1, the attachment was uploaded directly into a post and needs to have permissions corrected
|
|
// or - if it is a private file and a new token was generated, we'll need to add the token to the ACL.
|
|
|
|
if (((intval($attach['flags']) & 1) !== 1) && (! $token)) {
|
|
continue;
|
|
}
|
|
|
|
if ($token) {
|
|
$str_contact_allow = $attach['allow_cid'];
|
|
$str_group_allow = $attach['allow_gid'];
|
|
$str_contact_deny = $attach['deny_cid'];
|
|
$str_group_deny = $attach['deny_gid'];
|
|
|
|
// preserve any existing tokens that may have been set for this file
|
|
$token_matches = null;
|
|
if (preg_match_all('/<token:(.*?)>/',$attach['allow_cid'],$token_matches, PREG_SET_ORDER)) {
|
|
foreach ($token_matches as $m) {
|
|
$tok = '<token:' . $m[1] . '>';
|
|
if (!str_contains($str_contact_allow, $tok)) {
|
|
$str_contact_allow .= $tok;
|
|
}
|
|
}
|
|
}
|
|
if ($token && !str_contains($str_contact_allow, $token)) {
|
|
$str_contact_allow .= '<token:' . $token . '>';
|
|
}
|
|
}
|
|
|
|
q("update attach SET allow_cid = '%s', allow_gid = '%s', deny_cid = '%s', deny_gid = '%s', flags = 0
|
|
WHERE id = %d AND uid = %d",
|
|
dbesc($str_contact_allow),
|
|
dbesc($str_group_allow),
|
|
dbesc($str_contact_deny),
|
|
dbesc($str_group_deny),
|
|
intval($attach['id']),
|
|
intval($uid)
|
|
);
|
|
|
|
if ($attach['is_photo']) {
|
|
q("UPDATE photo SET allow_cid = '%s', allow_gid = '%s', deny_cid = '%s', deny_gid = '%s'
|
|
WHERE resource_id = '%s' AND uid = %d ",
|
|
dbesc($str_contact_allow),
|
|
dbesc($str_group_allow),
|
|
dbesc($str_contact_deny),
|
|
dbesc($str_group_deny),
|
|
dbesc($file),
|
|
intval($uid)
|
|
);
|
|
|
|
$item_private = 0;
|
|
|
|
if ($str_group_allow || $str_contact_deny || $str_group_deny) {
|
|
$item_private = 1;
|
|
}
|
|
elseif ($str_contact_allow) {
|
|
$item_private = 2;
|
|
}
|
|
|
|
q("UPDATE item SET allow_cid = '%s', allow_gid = '%s', deny_cid = '%s', deny_gid = '%s', item_private = %d
|
|
WHERE resource_id = '%s' AND 'resource_type' = 'photo' AND uid = %d",
|
|
dbesc($str_contact_allow),
|
|
dbesc($str_group_allow),
|
|
dbesc($str_contact_deny),
|
|
dbesc($str_group_deny),
|
|
intval($item_private),
|
|
dbesc($file),
|
|
intval($uid)
|
|
);
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
* @brief copies an entire conversation from the pubstream to this channel's stream
|
|
* which will allow you to interact with it.
|
|
*/
|
|
|
|
function copy_of_pubitem($channel, $mid) {
|
|
|
|
$result = null;
|
|
$syschan = get_sys_channel();
|
|
|
|
// logger('copy_of_pubitem: ' . $channel['channel_id'] . ' mid: ' . $mid);
|
|
|
|
$r = q("select * from item where mid = '%s' and uid = %d limit 1",
|
|
dbesc($mid),
|
|
intval($channel['channel_id'])
|
|
);
|
|
|
|
if($r) {
|
|
logger('exists');
|
|
$item = fetch_post_tags($r,true);
|
|
return $item[0];
|
|
}
|
|
|
|
$r = q("select * from item where parent_mid = (select parent_mid from item where mid = '%s' and uid = %d) and uid = %d order by id ",
|
|
dbesc($mid),
|
|
intval($syschan['channel_id']),
|
|
intval($syschan['channel_id'])
|
|
);
|
|
|
|
if($r) {
|
|
$items = fetch_post_tags($r,true);
|
|
foreach($items as $rv) {
|
|
|
|
unset($rv['id']);
|
|
unset($rv['parent']);
|
|
|
|
$rv['aid'] = $channel['channel_account_id'];
|
|
$rv['uid'] = $channel['channel_id'];
|
|
$rv['item_wall'] = 0;
|
|
$rv['item_origin'] = 0;
|
|
|
|
$x = item_store($rv, deliver: false, addAndSync: false);
|
|
if($x['item_id'] && $x['item']['mid'] === $mid) {
|
|
$result = $x['item'];
|
|
sync_an_item($channel['channel_id'], $x['item_id']);
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
function addToCollectionAndSync($ret) {
|
|
if (!$ret['success']) {
|
|
return $ret;
|
|
}
|
|
|
|
$channel = channelx_by_n($ret['item']['uid']);
|
|
if ($channel && $channel['channel_hash'] === $ret['item']['owner_xchan']) {
|
|
$items = [$ret['item']];
|
|
|
|
if ((int)$items[0]['item_blocked'] === ITEM_MODERATED
|
|
|| (int)$items[0]['item_unpublished'] || (int)$items[0]['item_delayed']) {
|
|
return $ret;
|
|
}
|
|
|
|
xchan_query($items);
|
|
// TODO: fetch_post_tags() will add term and iconfig twice if called twice and it looks like they are already added here
|
|
// $items = fetch_post_tags($items);
|
|
$sync_items = [];
|
|
$sync_items[] = encode_item($items[0], true);
|
|
|
|
if (!in_array($ret['item']['verb'], ['Add', 'Remove'])) {
|
|
$activity = Activity::encode_activity($items[0]);
|
|
|
|
if (!$activity) {
|
|
return $ret;
|
|
}
|
|
|
|
$new_obj = Activity::build_packet($activity, $channel, false);
|
|
$approval = Activity::addToCollection($channel, $new_obj, $ret['item']['parent_mid'], $ret['item'], deliver: false);
|
|
|
|
if ($approval['success']) {
|
|
$ret['approval_id'] = $approval['item_id'];
|
|
$ret['approval'] = $approval['activity'];
|
|
$add_items = [$approval['activity']];
|
|
xchan_query($add_items);
|
|
$add_items = fetch_post_tags($add_items);
|
|
$sync_items[] = encode_item($add_items[0], true);
|
|
}
|
|
}
|
|
|
|
$resource_type = $ret['item']['resource_type'];
|
|
|
|
if ($resource_type === 'event') {
|
|
$z = q("select * from event where event_hash = '%s' and uid = %d limit 1",
|
|
dbesc($ret['item']['resource_id']),
|
|
intval($channel['channel_id'])
|
|
);
|
|
|
|
if ($z) {
|
|
Libsync::build_sync_packet($channel['channel_id'], ['event_item' => $sync_items, 'event' => $z]);
|
|
}
|
|
}
|
|
elseif ($resource_type === 'photo') {
|
|
// reserved for future use, currently handled in the photo upload workflow
|
|
}
|
|
else {
|
|
Libsync::build_sync_packet($ret['item']['uid'], ['item' => $sync_items]);
|
|
}
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
function reverse_activity_mid($string) {
|
|
return str_replace(z_root() . '/activity/', z_root() . '/item/', $string);
|
|
}
|
|
|
|
function set_activity_mid($string) {
|
|
return str_replace(z_root() . '/item/', z_root() . '/activity/', $string);
|
|
}
|
|
|
|
/**
|
|
* @brief returns an item by id and parent belonging to local_channel()
|
|
* including activity counts.
|
|
* @param int $id
|
|
* @param int $parent
|
|
* @param int $type (optional) - defaults to ITEM_TYPE_POST
|
|
*/
|
|
|
|
function item_by_item_id(int $id, int $parent, int $type = ITEM_TYPE_POST): array
|
|
{
|
|
if (!$id && !$parent && !local_channel()) {
|
|
return [];
|
|
}
|
|
|
|
$item_normal_sql = item_normal(type: $type);
|
|
|
|
$reaction = item_reaction_sql($parent, type: $type);
|
|
$reaction_cte_sql = $reaction['cte'];
|
|
$reaction_select_sql = $reaction['select'];
|
|
$reaction_join_sql = $reaction['join'];
|
|
|
|
return q("WITH
|
|
$reaction_cte_sql
|
|
SELECT
|
|
*,
|
|
$reaction_select_sql
|
|
FROM item
|
|
$reaction_join_sql
|
|
WHERE
|
|
item.id = %d
|
|
AND item.uid = %d
|
|
AND item.verb IN ('Create', 'Update', 'EmojiReact', 'Announce')
|
|
AND item.obj_type NOT IN ('Answer')
|
|
$item_normal_sql",
|
|
intval($id),
|
|
intval(local_channel())
|
|
);
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief returns an array of items by ids
|
|
* ATTENTION: no permissions for the parents are checked here!!!
|
|
* Permissions MUST be checked by the module which calls this function.
|
|
* @param array $parents
|
|
* @param null|array $thr_parents (optional) - thr_parent mids which will be included
|
|
* @param string $permission_sql (optional) - SQL as provided by item_permission_sql() from the calling module
|
|
* @param bool $blog_mode (optional) - if set to yes only the parent items will be returned
|
|
* @param int $type (optional) - defaults to ITEM_TYPE_POST
|
|
*/
|
|
|
|
function items_by_parent_ids(array $parents, null|array $thr_parents = null, string $permission_sql = '', bool $blog_mode = false, int $type = ITEM_TYPE_POST): array
|
|
{
|
|
if (!$parents) {
|
|
return [];
|
|
}
|
|
|
|
$ids = ids_to_querystr($parents, 'item_id');
|
|
$thread_allow = ((local_channel()) ? PConfig::Get(local_channel(), 'system', 'thread_allow', true) : Config::Get('system', 'thread_allow', true));
|
|
$item_normal_sql = item_normal(type: $type);
|
|
$limit = $thread_allow ? 3 : 1000;
|
|
|
|
$thr_parent_sql = (($thread_allow) ? " AND item.thr_parent = item.parent_mid " : '');
|
|
if ($thr_parents && $thread_allow) {
|
|
$limit = 300;
|
|
$thr_parent_str = stringify_array($thr_parents, true);
|
|
$thr_parent_sql = " AND item.thr_parent IN (" . protect_sprintf($thr_parent_str) . ") ";
|
|
}
|
|
|
|
$reaction = item_reaction_sql($ids, $permission_sql, 'final_selection', $blog_mode, $type);
|
|
$reaction_cte_sql = $reaction['cte'];
|
|
$reaction_select_sql = $reaction['select'];
|
|
$reaction_join_sql = $reaction['join'];
|
|
|
|
if ($blog_mode) {
|
|
$q = <<<SQL
|
|
WITH
|
|
final_selection AS (
|
|
SELECT
|
|
item.*
|
|
FROM
|
|
item
|
|
WHERE
|
|
item.id IN ($ids)
|
|
),
|
|
|
|
$reaction_cte_sql
|
|
|
|
SELECT
|
|
final_selection.*,
|
|
$reaction_select_sql
|
|
FROM final_selection
|
|
$reaction_join_sql
|
|
SQL;
|
|
|
|
return dbq(trim($q));
|
|
}
|
|
|
|
$q = <<<SQL
|
|
WITH
|
|
parent_items AS (
|
|
SELECT
|
|
item.*,
|
|
0 AS rn
|
|
FROM item
|
|
WHERE
|
|
item.id IN ($ids)
|
|
),
|
|
|
|
$reaction_cte_sql,
|
|
|
|
all_comments AS (
|
|
SELECT
|
|
item.*,
|
|
ROW_NUMBER() OVER (PARTITION BY item.parent ORDER BY item.created DESC) AS rn
|
|
FROM item
|
|
WHERE item.parent IN ($ids)
|
|
AND item.verb IN ('Create', 'Update', 'EmojiReact')
|
|
AND item.obj_type NOT IN ('Answer')
|
|
AND item.item_thread_top = 0
|
|
$thr_parent_sql
|
|
$permission_sql
|
|
$item_normal_sql
|
|
),
|
|
|
|
final_selection AS (
|
|
SELECT * FROM parent_items
|
|
UNION ALL
|
|
SELECT * FROM all_comments WHERE all_comments.rn <= $limit
|
|
)
|
|
|
|
SELECT
|
|
final_selection.*,
|
|
$reaction_select_sql
|
|
FROM final_selection
|
|
$reaction_join_sql
|
|
SQL;
|
|
|
|
return dbq(trim($q));
|
|
}
|
|
|
|
/**
|
|
* @brief prepare reaction sql for items_by_parent_ids()
|
|
* ATTENTION: no permissions for the pa are checked here!!!
|
|
* Permissions MUST be checked by the function which returns the ids.
|
|
* @param string $ids
|
|
* @param string $permission_sql (optional) - SQL provided by item_permission_sql()
|
|
* @param string $join_prefix (optional) - prefix for the join part defaults to 'item'
|
|
* @param int $type (optional) - defaults to ITEM_TYPE_POST
|
|
*/
|
|
|
|
function item_reaction_sql(string $ids, string $permission_sql = '', string $join_prefix = 'item', bool $blog_mode = false, int $type = ITEM_TYPE_POST): array
|
|
{
|
|
$item_normal_sql = item_normal(type: $type);
|
|
$observer = get_observer_hash();
|
|
|
|
$verbs = [
|
|
'like' => ['Like'],
|
|
'dislike' => ['Dislike'],
|
|
'announce' => ['Announce'],
|
|
'accept' => ['Accept'],
|
|
'reject' => ['Reject'],
|
|
'tentativeaccept' => ['TentativeAccept']
|
|
];
|
|
|
|
$thread_allow = ((local_channel()) ? PConfig::Get(local_channel(), 'system', 'thread_allow', true) : Config::Get('system', 'thread_allow', true));
|
|
|
|
if ($thread_allow || $blog_mode) {
|
|
$verbs['comment'] = ['Create', 'Update', 'EmojiReact'];
|
|
}
|
|
|
|
$cte = '';
|
|
$select = '';
|
|
$join = '';
|
|
|
|
foreach($verbs as $k => $v) {
|
|
|
|
$observer_sql = "0 AS observer_{$k}_count";
|
|
if ($observer) {
|
|
$observer_sql = "COUNT(CASE WHEN item.author_xchan = '$observer' THEN 1 END) AS observer_{$k}_count";
|
|
}
|
|
|
|
$verbs_str = stringify_array($v);
|
|
|
|
if ($cte) {
|
|
$cte .= ",\n";
|
|
}
|
|
|
|
$cte .= <<<SQL
|
|
reaction_{$k} AS (
|
|
SELECT
|
|
item.thr_parent,
|
|
-- COUNT(DISTINCT item.author_xchan) AS {$k}_count, (should we prevent multiple reactions by the same author?)
|
|
COUNT(*) AS {$k}_count,
|
|
$observer_sql
|
|
FROM item
|
|
WHERE item.verb IN ($verbs_str)
|
|
AND item.obj_type NOT IN ('Answer')
|
|
AND item.item_thread_top = 0
|
|
AND item.parent IN ($ids)
|
|
$item_normal_sql
|
|
$permission_sql
|
|
GROUP BY item.thr_parent
|
|
)
|
|
SQL;
|
|
|
|
if ($select) {
|
|
$select .= ",\n";
|
|
}
|
|
|
|
$select .= <<<SQL
|
|
COALESCE(reaction_{$k}.{$k}_count, 0) AS {$k}_count,
|
|
COALESCE(reaction_{$k}.observer_{$k}_count, 0) AS observer_{$k}_count
|
|
SQL;
|
|
|
|
$join .= <<<SQL
|
|
LEFT JOIN reaction_{$k} ON reaction_{$k}.thr_parent = $join_prefix.mid
|
|
SQL;
|
|
|
|
}
|
|
|
|
$ret['cte'] = $cte;
|
|
$ret['select'] = $select;
|
|
$ret['join'] = $join;
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
* @brief returns an array of items by thr_parent mid of a parent
|
|
|
|
* @param string $mid
|
|
* @param int $parent
|
|
* @param int|null $offset
|
|
*/
|
|
|
|
function items_by_thr_parent(string $mid, int $parent, int|null $offset = null): array
|
|
{
|
|
if (!$mid && !$parent) {
|
|
return [];
|
|
}
|
|
|
|
$parent_item = q("SELECT uid FROM item WHERE id = %d",
|
|
intval($parent)
|
|
);
|
|
|
|
$order_sql = "ORDER BY item.created";
|
|
if (isset($offset)) {
|
|
$order_sql = "ORDER BY item.created DESC, item.received DESC LIMIT 3 OFFSET $offset";
|
|
}
|
|
|
|
$owner_uid = intval($parent_item[0]['uid']);
|
|
$item_normal_sql = item_normal($owner_uid);
|
|
|
|
if (local_channel() === $owner_uid) {
|
|
$reaction = item_reaction_sql($parent);
|
|
$reaction_cte_sql = $reaction['cte'];
|
|
$reaction_select_sql = $reaction['select'];
|
|
$reaction_join_sql = $reaction['join'];
|
|
|
|
$ret = q("WITH
|
|
$reaction_cte_sql
|
|
SELECT
|
|
item.*,
|
|
$reaction_select_sql
|
|
FROM item
|
|
$reaction_join_sql
|
|
WHERE
|
|
item.thr_parent = '%s'
|
|
AND item.uid = %d
|
|
AND item.verb IN ('Create', 'Update', 'EmojiReact')
|
|
AND item.obj_type NOT IN ('Answer')
|
|
AND item.item_thread_top = 0
|
|
$item_normal_sql
|
|
$order_sql",
|
|
dbesc($mid),
|
|
intval($owner_uid)
|
|
);
|
|
}
|
|
else {
|
|
$observer_hash = get_observer_hash();
|
|
$permission_sql = item_permissions_sql($owner_uid, $observer_hash);
|
|
|
|
$reaction = item_reaction_sql($parent, $permission_sql);
|
|
$reaction_cte_sql = $reaction['cte'];
|
|
$reaction_select_sql = $reaction['select'];
|
|
$reaction_join_sql = $reaction['join'];
|
|
|
|
$ret = q("WITH
|
|
$reaction_cte_sql
|
|
SELECT
|
|
item.*,
|
|
$reaction_select_sql
|
|
FROM item
|
|
$reaction_join_sql
|
|
WHERE
|
|
item.thr_parent = '%s'
|
|
AND item.uid = %d
|
|
AND item.verb IN ('Create', 'Update', 'EmojiReact')
|
|
AND item.obj_type NOT IN ('Answer')
|
|
AND item.item_thread_top = 0
|
|
$permission_sql
|
|
$item_normal_sql
|
|
$order_sql",
|
|
dbesc($mid),
|
|
intval($owner_uid)
|
|
);
|
|
}
|
|
|
|
if (isset($offset)) {
|
|
$ret = array_reverse($ret);
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief returns an array of xchan entries (partly) for activities of an item by mid of a parent.
|
|
* Also checks if observer is allowed to add activities to the item.
|
|
* @param string $mid
|
|
* @param int $parent
|
|
* @param string $verb
|
|
*/
|
|
|
|
function item_activity_xchans(string $mid, int $parent, string $verb): array
|
|
{
|
|
if (!$mid && !$parent && !$verb) {
|
|
return [];
|
|
}
|
|
|
|
$observer_hash = get_observer_hash();
|
|
$parent_item = q("SELECT * FROM item WHERE id = %d",
|
|
intval($parent)
|
|
);
|
|
|
|
$owner_uid = intval($parent_item[0]['uid']);
|
|
$item_normal = item_normal($owner_uid, type: $parent_item[0]['item_type']);
|
|
|
|
if (local_channel() === $owner_uid) {
|
|
$ret = q("SELECT item.id, item.item_blocked, xchan.xchan_hash, xchan.xchan_name as name, xchan.xchan_url as url, xchan.xchan_photo_s as photo FROM item
|
|
LEFT JOIN xchan ON item.author_xchan = xchan.xchan_hash
|
|
WHERE item.uid = %d
|
|
AND item.parent = %d
|
|
AND item.thr_parent = '%s'
|
|
AND item.verb = '%s'
|
|
AND item.item_thread_top = 0
|
|
$item_normal
|
|
-- GROUP BY item.author_xchan (should we prevent multiple reactions by the same author?)
|
|
ORDER BY item.created",
|
|
intval(local_channel()),
|
|
intval($parent),
|
|
dbesc($mid),
|
|
dbesc($verb)
|
|
);
|
|
}
|
|
else {
|
|
$sql_extra = item_permissions_sql($owner_uid, $observer_hash);
|
|
|
|
$ret = q("SELECT item.id, item.item_blocked, xchan.xchan_hash, xchan.xchan_name as name, xchan.xchan_url as url, xchan.xchan_photo_s as photo FROM item
|
|
LEFT JOIN xchan ON item.author_xchan = xchan.xchan_hash
|
|
WHERE item.uid = %d
|
|
AND item.thr_parent = '%s'
|
|
AND item.verb = '%s'
|
|
AND item.item_thread_top = 0
|
|
$sql_extra
|
|
$item_normal
|
|
-- GROUP BY item.author_xchan (should we prevent multiple reactions by the same author?)
|
|
ORDER BY item.created",
|
|
intval($owner_uid),
|
|
dbesc($mid),
|
|
dbesc($verb)
|
|
);
|
|
}
|
|
|
|
$ret['is_commentable'] = can_comment_on_post($observer_hash, $parent_item[0]);
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief find and return thr_parents we need to show when displaying a nested comment.
|
|
* TODO: can this be improved or maybe implemented differently in the UI?
|
|
* @param array $item
|
|
*/
|
|
|
|
function get_recursive_thr_parents(array $item): array|null
|
|
{
|
|
if ($item['id'] === $item['parent']) {
|
|
// This is a toplevel post, return null.
|
|
return null;
|
|
}
|
|
|
|
$thr_parents[] = $item['thr_parent'];
|
|
|
|
$mid = $item['thr_parent'];
|
|
$parent_mid = $item['parent_mid'];
|
|
$uid = $item['uid'];
|
|
$i = 0;
|
|
|
|
while ($mid !== $item['parent_mid'] && $i < 100) {
|
|
$x = q("SELECT thr_parent, mid FROM item WHERE uid = %d AND mid = '%s'",
|
|
intval($uid),
|
|
dbesc($mid)
|
|
);
|
|
|
|
if (!$x) {
|
|
break;
|
|
}
|
|
|
|
$mid = $x[0]['thr_parent'];
|
|
$thr_parents[] = $x[0]['thr_parent'];
|
|
|
|
$i++;
|
|
}
|
|
|
|
return $thr_parents;
|
|
}
|
|
|
|
/**
|
|
* @brief updates most common AS1 verbs to their AS2 equivalent.
|
|
* @param array $items an array of items where at least item_id (the parent id) and verb should be set.
|
|
*
|
|
*/
|
|
function AS1_to_AS2_verbs($items) {
|
|
$replaceable = [
|
|
ACTIVITY_POST
|
|
];
|
|
|
|
foreach($items as $item) {
|
|
if (isset($item['verb'], $item['item_id']) && in_array($item['verb'], $replaceable)) {
|
|
q("UPDATE item
|
|
SET verb = CASE
|
|
WHEN verb = 'http://activitystrea.ms/schema/1.0/post' THEN 'Create'
|
|
WHEN verb = 'http://activitystrea.ms/schema/1.0/like' THEN 'Like'
|
|
WHEN verb = 'http://activitystrea.ms/schema/1.0/dislike' THEN 'Dislike'
|
|
ELSE verb -- Keep the current
|
|
END
|
|
WHERE parent = %d",
|
|
intval($item['item_id'])
|
|
);
|
|
}
|
|
}
|
|
}
|