actions/subscribe.php

   1 <?php
   2 /*
   3  * Laconica - a distributed open-source microblogging tool
   4  * Copyright (C) 2008, Controlez-Vous, Inc.
   5  *
   6  * This program is free software: you can redistribute it and/or modify
   7  * it under the terms of the GNU Affero General Public License as published by
   8  * the Free Software Foundation, either version 3 of the License, or
   9  * (at your option) any later version.
  10  *
  11  * This program is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  * GNU Affero General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Affero General Public License
  17  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 if (!defined('LACONICA')) { exit(1); }
  21
  22 class SubscribeAction extends Action {
  23
  24         function handle($args) {
  25                 parent::handle($args);
  26
  27                 if (!common_logged_in()) {
  28                         common_user_error(_('Not logged in.'));
  29                         return;
  30                 }
  31
  32                 $user = common_current_user();
  33
  34                 if ($_SERVER['REQUEST_METHOD'] != 'POST') {
  35                         common_redirect(common_local_url('subscriptions', array('nickname' => $user->nickname)));
  36                         return;
  37                 }
  38
  39                 # CSRF protection
  40
  41                 $token = $this->trimmed('token');
  42
  43                 if (!$token || $token != common_session_token()) {
  44                         $this->client_error(_('There was a problem with your session token. Try again, please.'));
  45                         return;
  46                 }
  47
  48                 $other_nickname = $this->arg('subscribeto');
  49
  50                 $result=subs_subscribe_user($user, $other_nickname);
  51
  52                 if($result != true) {
  53                         common_user_error($result);
  54                         return;
  55                 }
  56
  57                 common_redirect(common_local_url('subscriptions', array('nickname' =>
  58                                                                                                                                 $user->nickname)));
  59         }
  60 }