Initial push
This commit is contained in:
224
hubzilla/addon/cry01/cry01.php
Normal file
224
hubzilla/addon/cry01/cry01.php
Normal file
@@ -0,0 +1,224 @@
|
||||
<?php
|
||||
|
||||
/**
|
||||
* Name: CRY01 Value Layer
|
||||
* Description: Ğ1 balance display, capacity signal registration, and Ğ1 web of trust bridge.
|
||||
* Version: 0.1.0
|
||||
* MinVersion: 11.0
|
||||
* MaxVersion: 12.0
|
||||
*/
|
||||
|
||||
use Zotlabs\Extend\Widget;
|
||||
|
||||
require_once 'addon/cry01/cry01_chain.php';
|
||||
require_once 'addon/cry01/cry01_renderer.php';
|
||||
require_once 'addon/cry01/cry01_spool.php';
|
||||
|
||||
function cry01_module() {}
|
||||
|
||||
function cry01_load() {
|
||||
register_hook('load_pdl', 'addon/cry01/cry01.php', 'cry01_load_pdl');
|
||||
Widget::register('addon/cry01/Widget/Cry01.php', 'cry01');
|
||||
}
|
||||
|
||||
function cry01_unload() {
|
||||
unregister_hook('load_pdl', 'addon/cry01/cry01.php', 'cry01_load_pdl');
|
||||
Widget::unregister('addon/cry01/Widget/Cry01.php', 'cry01');
|
||||
}
|
||||
|
||||
function cry01_load_pdl(&$b) {
|
||||
// Loads the cry01 PDL layout for cry01 module pages.
|
||||
if (!is_array($b) || empty($b['module']) || $b['module'] !== 'cry01') {
|
||||
return;
|
||||
}
|
||||
$layout = @file_get_contents('addon/cry01/mod_cry01.pdl');
|
||||
if ($layout !== false) {
|
||||
$b['layout'] = $layout;
|
||||
}
|
||||
}
|
||||
|
||||
// ---------------------------------------------------------------------------
|
||||
// HELPERS
|
||||
// ---------------------------------------------------------------------------
|
||||
|
||||
function cry01_h($value) {
|
||||
// HTML-escapes a value for safe output.
|
||||
return htmlspecialchars((string) $value, ENT_QUOTES, 'UTF-8');
|
||||
}
|
||||
|
||||
// ---------------------------------------------------------------------------
|
||||
// ACCESS
|
||||
// ---------------------------------------------------------------------------
|
||||
|
||||
function cry01_access_state($association_slug = '') {
|
||||
// Returns operator, participant, or public. Does not call local_channel() for group checks.
|
||||
if (local_channel()) {
|
||||
$channel = App::get_channel();
|
||||
if (local_channel() === intval($channel['channel_id'])) {
|
||||
return 'operator';
|
||||
}
|
||||
}
|
||||
|
||||
if (!$association_slug) return 'public';
|
||||
|
||||
$raw = @file_get_contents('addon/vs01/config.json');
|
||||
if ($raw === false) return 'public';
|
||||
$cfg = json_decode($raw, true);
|
||||
if (json_last_error() !== JSON_ERROR_NONE) return 'public';
|
||||
|
||||
$assoc = $cfg['associations'][$association_slug] ?? null;
|
||||
if (!$assoc) return 'public';
|
||||
|
||||
$observer = get_observer_hash();
|
||||
if (!$observer) return 'public';
|
||||
|
||||
$groups = $assoc['groups'] ?? [];
|
||||
|
||||
// Direct pgrp_member query — works for guest tokens.
|
||||
foreach (['corpus_builder', 'sase_participant', 'civic_professional'] as $group_key) {
|
||||
$gid = intval($groups[$group_key] ?? 0);
|
||||
if ($gid) {
|
||||
$r = q("SELECT xchan FROM pgrp_member WHERE gid = %d AND xchan = '%s' LIMIT 1",
|
||||
intval($gid),
|
||||
dbesc($observer)
|
||||
);
|
||||
if ($r) return 'participant';
|
||||
}
|
||||
}
|
||||
|
||||
return 'public';
|
||||
}
|
||||
|
||||
function cry01_access_wall($association_slug = '') {
|
||||
// Renders the access wall for non-participants attempting to submit a signal.
|
||||
$raw = @file_get_contents('addon/vs01/config.json');
|
||||
$cfg = $raw ? json_decode($raw, true) : [];
|
||||
$assoc = $association_slug ? ($cfg['associations'][$association_slug] ?? null) : null;
|
||||
$name = $assoc ? cry01_h($assoc['name']) : 'this association';
|
||||
return '
|
||||
<div class="cry01-content">
|
||||
<div class="alert alert-info" role="alert">
|
||||
<strong>HOA_MEMBER standing required to register a signal for ' . $name . '.</strong>
|
||||
The signal board is readable by verified participants only.
|
||||
To participate, you must complete the SASE process.
|
||||
Visit <a href="https://directory.diagnostics.kane-il.us/channel/theron">
|
||||
directory.diagnostics.kane-il.us
|
||||
</a> to begin.
|
||||
</div>
|
||||
</div>
|
||||
';
|
||||
}
|
||||
|
||||
// ---------------------------------------------------------------------------
|
||||
// CONTENT ROUTER
|
||||
// ---------------------------------------------------------------------------
|
||||
|
||||
function cry01_content() {
|
||||
if (function_exists('head_add_css')) {
|
||||
head_add_css('/addon/cry01/view/css/cry01.css');
|
||||
}
|
||||
if (function_exists('head_add_js')) {
|
||||
head_add_js('/addon/cry01/view/js/cry01.js');
|
||||
}
|
||||
|
||||
$association_slug = argv(1) ?? '';
|
||||
$sub_route = strtolower(argv(2) ?? '');
|
||||
|
||||
if (!$association_slug) {
|
||||
return cry01_render_index();
|
||||
}
|
||||
|
||||
$raw = @file_get_contents('addon/vs01/config.json');
|
||||
if ($raw === false) return cry01_render_error('Configuration unavailable. Contact the operator.');
|
||||
$cfg = json_decode($raw, true);
|
||||
if (!isset($cfg['associations'][$association_slug])) {
|
||||
return cry01_render_not_found();
|
||||
}
|
||||
|
||||
$access = cry01_access_state($association_slug);
|
||||
|
||||
switch ($sub_route) {
|
||||
case 'signal':
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
if ($access === 'public') return cry01_access_wall($association_slug);
|
||||
if (!cry01_verify_csrf()) {
|
||||
return cry01_render_error('Invalid form token. Please reload and try again.');
|
||||
}
|
||||
return cry01_handle_signal_post($association_slug, $access);
|
||||
}
|
||||
if ($access === 'public') return cry01_access_wall($association_slug);
|
||||
return cry01_render_signal_form($association_slug, $access);
|
||||
|
||||
case 'g1':
|
||||
if ($access !== 'operator') return cry01_access_wall($association_slug);
|
||||
return cry01_render_g1_candidates($association_slug);
|
||||
|
||||
case 'manage':
|
||||
if ($access !== 'operator') return cry01_access_wall($association_slug);
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
return cry01_handle_manage_post($association_slug);
|
||||
}
|
||||
return cry01_render_manage($association_slug);
|
||||
|
||||
default:
|
||||
return cry01_render_landing($association_slug, $access);
|
||||
}
|
||||
}
|
||||
|
||||
// ---------------------------------------------------------------------------
|
||||
// RENDER — INDEX
|
||||
// ---------------------------------------------------------------------------
|
||||
|
||||
function cry01_render_index() {
|
||||
// Lists all registered associations with links to their value layer pages.
|
||||
$raw = @file_get_contents('addon/vs01/config.json');
|
||||
$cfg = $raw ? json_decode($raw, true) : [];
|
||||
$list = $cfg['associations'] ?? [];
|
||||
|
||||
if (empty($list)) {
|
||||
return '<div class="cry01-content"><p class="text-muted">No associations registered.</p></div>';
|
||||
}
|
||||
|
||||
$out = '<div class="cry01-content">';
|
||||
$out .= '<h2>Value Layer</h2>';
|
||||
$out .= '<ul class="list-group">';
|
||||
foreach ($list as $slug => $assoc) {
|
||||
$name = cry01_h($assoc['name'] ?? $slug);
|
||||
$url = z_root() . '/cry01/' . cry01_h($slug);
|
||||
$out .= '<li class="list-group-item"><a href="' . $url . '">' . $name . '</a></li>';
|
||||
}
|
||||
$out .= '</ul></div>';
|
||||
return $out;
|
||||
}
|
||||
|
||||
// ---------------------------------------------------------------------------
|
||||
// RENDER — NOT FOUND / ERROR
|
||||
// ---------------------------------------------------------------------------
|
||||
|
||||
function cry01_render_not_found() {
|
||||
return '<div class="cry01-content"><div class="alert alert-warning">Association not found.</div></div>';
|
||||
}
|
||||
|
||||
function cry01_render_error($message) {
|
||||
// Shows a plain-language error message. Never shows a blank page or stack trace.
|
||||
return '<div class="cry01-content"><div class="alert alert-danger">' . cry01_h($message) . '</div></div>';
|
||||
}
|
||||
|
||||
// ---------------------------------------------------------------------------
|
||||
// CSRF
|
||||
// ---------------------------------------------------------------------------
|
||||
|
||||
function cry01_csrf_token() {
|
||||
// Generates and stores a CSRF token for the current session.
|
||||
if (empty($_SESSION['cry01_csrf'])) {
|
||||
$_SESSION['cry01_csrf'] = bin2hex(random_bytes(16));
|
||||
}
|
||||
return '<input type="hidden" name="cry01_csrf" value="'
|
||||
. cry01_h($_SESSION['cry01_csrf']) . '">';
|
||||
}
|
||||
|
||||
function cry01_verify_csrf() {
|
||||
// Returns true if the CSRF token in POST matches the session token.
|
||||
return isset($_POST['cry01_csrf'], $_SESSION['cry01_csrf'])
|
||||
&& hash_equals($_SESSION['cry01_csrf'], $_POST['cry01_csrf']);
|
||||
}
|
||||
Reference in New Issue
Block a user