]> git.mxchange.org Git - friendica.git/blob - addon/facebook/facebook.php
bug #114, warn about linked Facebook item privacy
[friendica.git] / addon / facebook / facebook.php
1 <?php
2 /**
3  * Name: Facebook Connector
4  * Version: 1.0
5  * Author: Mike Macgirvin <http://macgirvin.com/profile/mike>
6  */
7
8 /**
9  * Installing the Friendika/Facebook connector
10  *
11  * 1. register an API key for your site from developer.facebook.com
12  *   a. We'd be very happy if you include "Friendika" in the application name
13  *      to increase name recognition. The Friendika icons are also present
14  *      in the images directory and may be uploaded as a Facebook app icon.
15  *      Use images/friendika-16.jpg for the Icon and images/friendika-128.jpg for the Logo.
16  *   b. The url should be your site URL with a trailing slash.
17  *      You may use http://portal.friendika.com/privacy as the privacy policy
18  *      URL unless your site has different requirements, and 
19  *      http://portal.friendika.com as the Terms of Service URL unless
20  *      you have different requirements. (Friendika is a software application
21  *      and does not require Terms of Service, though your installation of it might).
22  *   c. Set the following values in your .htconfig.php file
23  *         $a->config['facebook']['appid'] = 'xxxxxxxxxxx';
24  *         $a->config['facebook']['appsecret'] = 'xxxxxxxxxxxxxxx';
25  *      Replace with the settings Facebook gives you.
26  *   d. Navigate to Set Web->Site URL & Domain -> Website Settings.  Set 
27  *      Site URL to yoursubdomain.yourdomain.com. Set Site Domain to your 
28  *      yourdomain.com.
29  * 2. Enable the facebook plugin by including it in .htconfig.php - e.g. 
30  *     $a->config['system']['addon'] = 'plugin1,plugin2,facebook';
31  * 3. Visit the Facebook Settings section of the "Settings->Plugin Settings" page.
32  *    and click 'Install Facebook Connector'.
33  * 4. This will ask you to login to Facebook and grant permission to the 
34  *    plugin to do its stuff. Allow it to do so. 
35  * 5. You're done. To turn it off visit the Plugin Settings page again and
36  *    'Remove Facebook posting'.
37  *
38  * Vidoes and embeds will not be posted if there is no other content. Links 
39  * and images will be converted to a format suitable for the Facebook API and 
40  * long posts truncated - with a link to view the full post. 
41  *
42  * Facebook contacts will not be able to view private photos, as they are not able to
43  * authenticate to your site to establish identity. We will address this 
44  * in a future release.
45  */
46
47 define('FACEBOOK_MAXPOSTLEN', 420);
48
49
50 function facebook_install() {
51         register_hook('post_local_end',   'addon/facebook/facebook.php', 'facebook_post_hook');
52         register_hook('jot_networks',     'addon/facebook/facebook.php', 'facebook_jot_nets');
53         register_hook('plugin_settings',  'addon/facebook/facebook.php', 'facebook_plugin_settings');
54         register_hook('cron',             'addon/facebook/facebook.php', 'facebook_cron');
55         register_hook('queue_predeliver', 'addon/facebook/facebook.php', 'fb_queue_hook');
56 }
57
58
59 function facebook_uninstall() {
60         unregister_hook('post_local_end',   'addon/facebook/facebook.php', 'facebook_post_hook');
61         unregister_hook('jot_networks',     'addon/facebook/facebook.php', 'facebook_jot_nets');
62         unregister_hook('plugin_settings',  'addon/facebook/facebook.php', 'facebook_plugin_settings');
63         unregister_hook('cron',             'addon/facebook/facebook.php', 'facebook_cron');
64         unregister_hook('queue_predeliver', 'addon/facebook/facebook.php', 'fb_queue_hook');
65 }
66
67
68 /* declare the facebook_module function so that /facebook url requests will land here */
69
70 function facebook_module() {}
71
72
73
74 /* If a->argv[1] is a nickname, this is a callback from Facebook oauth requests. */
75
76 function facebook_init(&$a) {
77
78         if($a->argc != 2)
79                 return;
80         $nick = $a->argv[1];
81         if(strlen($nick))
82                 $r = q("SELECT `uid` FROM `user` WHERE `nickname` = '%s' LIMIT 1",
83                                 dbesc($nick)
84                 );
85         if(! count($r))
86                 return;
87
88         $uid           = $r[0]['uid'];
89         $auth_code     = (($_GET['code']) ? $_GET['code'] : '');
90         $error         = (($_GET['error_description']) ? $_GET['error_description'] : '');
91
92
93         if($error)
94                 logger('facebook_init: Error: ' . $error);
95
96         if($auth_code && $uid) {
97
98                 $appid = get_config('facebook','appid');
99                 $appsecret = get_config('facebook', 'appsecret');
100
101                 $x = fetch_url('https://graph.facebook.com/oauth/access_token?client_id='
102                         . $appid . '&client_secret=' . $appsecret . '&redirect_uri='
103                         . urlencode($a->get_baseurl() . '/facebook/' . $nick) 
104                         . '&code=' . $auth_code);
105
106                 logger('facebook_init: returned access token: ' . $x, LOGGER_DATA);
107
108                 if(strpos($x,'access_token=') !== false) {
109                         $token = str_replace('access_token=', '', $x);
110                         if(strpos($token,'&') !== false)
111                                 $token = substr($token,0,strpos($token,'&'));
112                         set_pconfig($uid,'facebook','access_token',$token);
113                         set_pconfig($uid,'facebook','post','1');
114                         set_pconfig($uid,'facebook','no_linking',1);
115                         fb_get_self($uid);
116                         fb_get_friends($uid);
117                         fb_consume_all($uid);
118
119                 }
120
121         }
122
123 }
124
125
126 function fb_get_self($uid) {
127         $access_token = get_pconfig($uid,'facebook','access_token');
128         if(! $access_token)
129                 return;
130         $s = fetch_url('https://graph.facebook.com/me/?access_token=' . $access_token);
131         if($s) {
132                 $j = json_decode($s);
133                 set_pconfig($uid,'facebook','self_id',(string) $j->id);
134         }
135 }
136
137
138
139 function fb_get_friends($uid) {
140
141         $access_token = get_pconfig($uid,'facebook','access_token');
142
143         $no_linking = get_pconfig($uid,'facebook','no_linking');
144         if($no_linking)
145                 return;
146
147         if(! $access_token)
148                 return;
149         $s = fetch_url('https://graph.facebook.com/me/friends?access_token=' . $access_token);
150         if($s) {
151                 logger('facebook: fb_get_friends: ' . $s, LOGGER_DATA);
152                 $j = json_decode($s);
153                 logger('facebook: fb_get_friends: json: ' . print_r($j,true), LOGGER_DATA);
154                 foreach($j->data as $person) {
155                         $s = fetch_url('https://graph.facebook.com/' . $person->id . '?access_token=' . $access_token);
156                         if($s) {
157                                 $jp = json_decode($s);
158                                 logger('fb_get_friends: info: ' . print_r($jp,true), LOGGER_DATA);
159
160                                 // always use numeric link for consistency
161
162                                 $jp->link = 'http://facebook.com/profile.php?id=' . $person->id;
163
164                                 // check if we already have a contact
165
166                                 $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `url` = '%s' LIMIT 1",
167                                         intval($uid),
168                                         dbesc($jp->link)
169                                 );                      
170
171                                 if(count($r)) {
172
173                                         // check that we have all the photos, this has been known to fail on occasion
174
175                                         if((! $r[0]['photo']) || (! $r[0]['thumb']) || (! $r[0]['micro'])) {  
176                                                 require_once("Photo.php");
177
178                                                 $photos = import_profile_photo('https://graph.facebook.com/' . $jp->id . '/picture', $uid, $r[0]['id']);
179
180                                                 $r = q("UPDATE `contact` SET `photo` = '%s', 
181                                                         `thumb` = '%s',
182                                                         `micro` = '%s', 
183                                                         `name-date` = '%s', 
184                                                         `uri-date` = '%s', 
185                                                         `avatar-date` = '%s'
186                                                         WHERE `id` = %d LIMIT 1
187                                                 ",
188                                                         dbesc($photos[0]),
189                                                         dbesc($photos[1]),
190                                                         dbesc($photos[2]),
191                                                         dbesc(datetime_convert()),
192                                                         dbesc(datetime_convert()),
193                                                         dbesc(datetime_convert()),
194                                                         intval($r[0]['id'])
195                                                 );                      
196                                         }       
197                                         continue;
198                                 }
199                                 else {
200
201                                         // create contact record 
202                                         $r = q("INSERT INTO `contact` ( `uid`, `created`, `url`, `addr`, `alias`, `notify`, `poll`, 
203                                                 `name`, `nick`, `photo`, `network`, `rel`, `priority`,
204                                                 `writable`, `blocked`, `readonly`, `pending` )
205                                                 VALUES ( %d, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', %d, %d, %d, 0, 0, 0 ) ",
206                                                 intval($uid),
207                                                 dbesc(datetime_convert()),
208                                                 dbesc($jp->link),
209                                                 dbesc(''),
210                                                 dbesc(''),
211                                                 dbesc($jp->id),
212                                                 dbesc('facebook ' . $jp->id),
213                                                 dbesc($jp->name),
214                                                 dbesc(($jp->nickname) ? $jp->nickname : strtolower($jp->first_name)),
215                                                 dbesc('https://graph.facebook.com/' . $jp->id . '/picture'),
216                                                 dbesc(NETWORK_FACEBOOK),
217                                                 intval(REL_BUD),
218                                                 intval(1),
219                                                 intval(1)
220                                         );
221                                 }
222
223                                 $r = q("SELECT * FROM `contact` WHERE `url` = '%s' AND `uid` = %d LIMIT 1",
224                                         dbesc($jp->link),
225                                         intval($uid)
226                                 );
227
228                                 if(! count($r)) {
229                                         continue;
230                                 }
231
232                                 $contact = $r[0];
233                                 $contact_id  = $r[0]['id'];
234
235                                 require_once("Photo.php");
236
237                                 $photos = import_profile_photo($r[0]['photo'],$uid,$contact_id);
238
239                                 $r = q("UPDATE `contact` SET `photo` = '%s', 
240                                         `thumb` = '%s',
241                                         `micro` = '%s', 
242                                         `name-date` = '%s', 
243                                         `uri-date` = '%s', 
244                                         `avatar-date` = '%s'
245                                         WHERE `id` = %d LIMIT 1
246                                 ",
247                                         dbesc($photos[0]),
248                                         dbesc($photos[1]),
249                                         dbesc($photos[2]),
250                                         dbesc(datetime_convert()),
251                                         dbesc(datetime_convert()),
252                                         dbesc(datetime_convert()),
253                                         intval($contact_id)
254                                 );                      
255
256                         }
257                 }
258         }
259 }
260
261 // This is the POST method to the facebook settings page
262 // Content is posted to Facebook in the function facebook_post_hook() 
263
264 function facebook_post(&$a) {
265
266         $uid = local_user();
267         if($uid){
268
269                 $value = ((x($_POST,'post_by_default')) ? intval($_POST['post_by_default']) : 0);
270                 set_pconfig($uid,'facebook','post_by_default', $value);
271
272                 $no_linking = get_pconfig($uid,'facebook','no_linking');
273
274                 $linkvalue = ((x($_POST,'facebook_linking')) ? intval($_POST['facebook_linking']) : 0);
275                 set_pconfig($uid,'facebook','no_linking', (($linkvalue) ? 0 : 1));
276
277                 // FB linkage was allowed but has just been turned off - remove all FB contacts and posts
278
279                 if((! intval($no_linking)) && (! intval($linkvalue))) {
280                         $r = q("SELECT `id` FROM `contact` WHERE `uid` = %d AND `network` = '%s' ",
281                                 intval($uid),
282                                 dbesc(NETWORK_FACEBOOK)
283                         );
284                         if(count($r)) {
285                                 require_once('include/Contact.php');
286                                 foreach($r as $rr)
287                                         contact_remove($rr['id']);
288                         }
289                 }
290                 elseif(intval($no_linking) && intval($linkvalue)) {
291                         // FB linkage is now allowed - import stuff.
292                         fb_get_self($uid);
293                         fb_get_friends($uid);
294                         fb_consume_all($uid);
295                 }
296
297                 info( t('Settings updated.') . EOL);
298         } 
299
300         return;         
301 }
302
303 // Facebook settings form
304
305 function facebook_content(&$a) {
306
307         if(! local_user()) {
308                 notice( t('Permission denied.') . EOL);
309                 return '';
310         }
311
312         if($a->argc > 1 && $a->argv[1] === 'remove') {
313                 del_pconfig(local_user(),'facebook','post');
314                 info( t('Facebook disabled') . EOL);
315         }
316
317         if($a->argc > 1 && $a->argv[1] === 'friends') {
318                 fb_get_friends(local_user());
319                 info( t('Updating contacts') . EOL);
320         }
321
322
323         $fb_installed = get_pconfig(local_user(),'facebook','post');
324
325         $appid = get_config('facebook','appid');
326
327         if(! $appid) {
328                 notice( t('Facebook API key is missing.') . EOL);
329                 return '';
330         }
331
332         $a->page['htmlhead'] .= '<link rel="stylesheet" type="text/css" href="' 
333                 . $a->get_baseurl() . '/addon/facebook/facebook.css' . '" media="all" />' . "\r\n";
334
335         $o .= '<h3>' . t('Facebook Connect') . '</h3>';
336
337         if(! $fb_installed) { 
338                 $o .= '<div id="facebook-enable-wrapper">';
339
340                 $o .= '<a href="https://www.facebook.com/dialog/oauth?client_id=' . $appid . '&redirect_uri=' 
341                         . $a->get_baseurl() . '/facebook/' . $a->user['nickname'] . '&scope=publish_stream,read_stream,offline_access">' . t('Install Facebook connector for this account.') . '</a>';
342                 $o .= '</div>';
343         }
344
345         if($fb_installed) {
346                 $o .= '<div id="facebook-disable-wrapper">';
347
348                 $o .= '<a href="' . $a->get_baseurl() . '/facebook/remove' . '">' . t('Remove Facebook connector') . '</a></div>';
349         
350                 $o .= '<div id="facebook-post-default-form">';
351                 $o .= '<form action="facebook" method="post" >';
352                 $post_by_default = get_pconfig(local_user(),'facebook','post_by_default');
353                 $checked = (($post_by_default) ? ' checked="checked" ' : '');
354                 $o .= '<input type="checkbox" name="post_by_default" value="1"' . $checked . '/>' . ' ' . t('Post to Facebook by default') . EOL;
355
356                 $no_linking = get_pconfig(local_user(),'facebook','no_linking');
357                 $checked = (($no_linking) ? '' : ' checked="checked" ');
358                 $o .= '<input type="checkbox" name="facebook_linking" value="1"' . $checked . '/>' . ' ' . t('Link all your Facebook friends and conversations') . EOL ;
359
360                 $hidden = (($a->user['hidewall'] || get_config('system','block_public')) ? true : false);
361                 if(! $hidden) {
362                         $o .= EOL;
363                         $o .= t('Warning: Your Facebook privacy settings can not be imported.') . EOL;
364                         $o .= t('Linked Facebook items <strong>may</strong> be publicly visible, depending on your privacy settings for this website/account.') . EOL;
365                 }
366                 $o .= '<input type="submit" name="submit" value="' . t('Submit') . '" /></form></div>';
367         }
368
369         return $o;
370 }
371
372
373
374 function facebook_cron($a,$b) {
375
376         $last = get_config('facebook','last_poll');
377         
378         $poll_interval = intval(get_config('facebook','poll_interval'));
379         if(! $poll_interval)
380                 $poll_interval = 3600;
381
382         if($last) {
383                 $next = $last + $poll_interval;
384                 if($next > time()) 
385                         return;
386         }
387
388         logger('facebook_cron');
389
390
391         // Find the FB users on this site and randomize in case one of them
392         // uses an obscene amount of memory. It may kill this queue run
393         // but hopefully we'll get a few others through on each run. 
394
395         $r = q("SELECT * FROM `pconfig` WHERE `cat` = 'facebook' AND `k` = 'post' AND `v` = '1' ORDER BY RAND() ");
396         if(count($r)) {
397                 foreach($r as $rr) {
398                         // check for new friends once a day
399                         $last_friend_check = get_pconfig($rr['uid'],'facebook','friend_check');
400                         if($last_friend_check) 
401                                 $next_friend_check = $last_friend_check + 86400;
402                         if($next_friend_check <= time()) {
403                                 fb_get_friends($rr['uid']);
404                                 set_pconfig($rr['uid'],'facebook','friend_check',time());
405                         }
406                         fb_consume_all($rr['uid']);
407                 }
408         }       
409
410         set_config('facebook','last_poll', time());
411
412 }
413
414
415
416 function facebook_plugin_settings(&$a,&$b) {
417
418         $b .= '<div class="settings-block">';
419         $b .= '<h3>' . t('Facebook') . '</h3>';
420         $b .= '<a href="facebook">' . t('Facebook Connector Settings') . '</a><br />';
421         $b .= '</div>';
422
423 }
424
425 function facebook_jot_nets(&$a,&$b) {
426         if(! local_user())
427                 return;
428
429         $fb_post = get_pconfig(local_user(),'facebook','post');
430         if(intval($fb_post) == 1) {
431                 $fb_defpost = get_pconfig(local_user(),'facebook','post_by_default');
432                 $selected = ((intval($fb_defpost) == 1) ? ' checked="checked" ' : '');
433                 $b .= '<div class="profile-jot-net"><input type="checkbox" name="facebook_enable"' . $selected . 'value="1" /> ' 
434                         . t('Post to Facebook') . '</div>';     
435         }
436 }
437
438
439 function facebook_post_hook(&$a,&$b) {
440
441         /**
442          * Post to Facebook stream
443          */
444
445         require_once('include/group.php');
446
447         logger('Facebook post');
448
449         $reply = false;
450         $likes = false;
451
452         if((local_user()) && (local_user() == $b['uid'])) {
453
454                 // Facebook is not considered a private network
455                 if($b['prvnets'] && $b['private'])
456                         return;
457
458                 if($b['parent']) {
459                         $r = q("SELECT * FROM `item` WHERE `id` = %d AND `uid` = %d LIMIT 1",
460                                 intval($b['parent']),
461                                 intval(local_user())
462                         );
463                         if(count($r) && substr($r[0]['uri'],0,4) === 'fb::')
464                                 $reply = substr($r[0]['uri'],4);
465                         elseif(count($r) && substr($r[0]['extid'],0,4) === 'fb::')
466                                 $reply = substr($r[0]['extid'],4);
467                         else
468                                 return;
469                         logger('facebook reply id=' . $reply);
470                 }
471
472                 if($b['private'] && $reply === false) {
473                         $allow_people = expand_acl($b['allow_cid']);
474                         $allow_groups = expand_groups(expand_acl($b['allow_gid']));
475                         $deny_people  = expand_acl($b['deny_cid']);
476                         $deny_groups  = expand_groups(expand_acl($b['deny_gid']));
477
478                         $recipients = array_unique(array_merge($allow_people,$allow_groups));
479                         $deny = array_unique(array_merge($deny_people,$deny_groups));
480
481                         $allow_str = dbesc(implode(', ',$recipients));
482                         if($allow_str) {
483                                 $r = q("SELECT `notify` FROM `contact` WHERE `id` IN ( $allow_str ) AND `network` = 'face'"); 
484                                 $allow_arr = array();
485                                 if(count($r)) 
486                                         foreach($r as $rr)
487                                                 $allow_arr[] = $rr['notify'];
488                         }
489
490                         $deny_str = dbesc(implode(', ',$deny));
491                         if($deny_str) {
492                                 $r = q("SELECT `notify` FROM `contact` WHERE `id` IN ( $deny_str ) AND `network` = 'face'"); 
493                                 $deny_arr = array();
494                                 if(count($r)) 
495                                         foreach($r as $rr)
496                                                 $deny_arr[] = $rr['notify'];
497                         }
498
499                         if(count($deny_arr) && (! count($allow_arr))) {
500
501                                 // One or more FB folks were denied access but nobody on FB was specifically allowed access.
502                                 // This might cause the post to be open to public on Facebook, but only to selected members
503                                 // on another network. Since this could potentially leak a post to somebody who was denied, 
504                                 // we will skip posting it to Facebook with a slightly vague but relevant message that will 
505                                 // hopefully lead somebody to this code comment for a better explanation of what went wrong.
506
507                                 notice( t('Post to Facebook cancelled because of multi-network access permission conflict.') . EOL);
508                                 return;
509                         }
510
511
512                         // if it's a private message but no Facebook members are allowed or denied, skip Facebook post
513
514                         if((! count($allow_arr)) && (! count($deny_arr)))
515                                 return;
516                 }
517
518                 if($b['verb'] == ACTIVITY_LIKE)
519                         $likes = true;                          
520
521
522                 $appid  = get_config('facebook', 'appid'  );
523                 $secret = get_config('facebook', 'appsecret' );
524
525                 if($appid && $secret) {
526
527                         logger('facebook: have appid+secret');
528
529                         $fb_post   = intval(get_pconfig(local_user(),'facebook','post'));
530                         $fb_enable = (($fb_post && x($_POST,'facebook_enable')) ? intval($_POST['facebook_enable']) : 0);
531                         $fb_token  = get_pconfig(local_user(),'facebook','access_token');
532
533                         logger('facebook: $fb_post: ' . $fb_post . ' $fb_enable: ' . $fb_enable . ' $fb_token: ' . $fb_token,LOGGER_DEBUG); 
534
535                         // post to facebook if it's a public post and we've ticked the 'post to Facebook' box, 
536                         // or it's a private message with facebook participants
537                         // or it's a reply or likes action to an existing facebook post                 
538
539                         if($fb_post && $fb_token && ($fb_enable || $b['private'] || $reply)) {
540                                 logger('facebook: able to post');
541                                 require_once('library/facebook.php');
542                                 require_once('include/bbcode.php');     
543
544                                 $msg = $b['body'];
545
546                                 logger('Facebook post: original msg=' . $msg, LOGGER_DATA);
547
548                                 // make links readable before we strip the code
549
550                                 // unless it's a dislike - just send the text as a comment
551
552                                 if($b['verb'] == ACTIVITY_DISLIKE)
553                                         $msg = trim(strip_tags(bbcode($msg)));
554
555                                 $search_str = $a->get_baseurl() . '/search';
556
557                                 if(preg_match("/\[url=(.*?)\](.*?)\[\/url\]/is",$msg,$matches)) {
558
559                                         // don't use hashtags for message link
560
561                                         if(strpos($matches[2],$search_str) === false) {
562                                                 $link = $matches[1];
563                                                 if(substr($matches[2],0,5) != '[img]')
564                                                         $linkname = $matches[2];
565                                         }
566                                 }
567
568                                 $msg = preg_replace("/\[url=(.*?)\](.*?)\[\/url\]/is",'$2 $1',$msg);
569
570                                 if(preg_match("/\[img\](.*?)\[\/img\]/is",$msg,$matches))
571                                         $image = $matches[1];
572
573                                 $msg = preg_replace("/\[img\](.*?)\[\/img\]/is", t('Image: ') . '$1', $msg);
574
575                                 if((strpos($link,z_root()) !== false) && (! $image))
576                                         $image = $a->get_baseurl() . '/images/friendika-64.jpg';
577
578                                 $msg = trim(strip_tags(bbcode($msg)));
579                                 $msg = html_entity_decode($msg,ENT_QUOTES,'UTF-8');
580
581                                 // add any attachments as text urls
582
583                             $arr = explode(',',$b['attach']);
584
585                             if(count($arr)) {
586                                         $msg .= "\n";
587                                 foreach($arr as $r) {
588                                 $matches = false;
589                                                 $cnt = preg_match('|\[attach\]href=\"(.*?)\" size=\"(.*?)\" type=\"(.*?)\" title=\"(.*?)\"\[\/attach\]|',$r,$matches);
590                                                 if($cnt) {
591                                                         $msg .= $matches[1];
592                                                 }
593                                         }
594                                 }
595
596                                 if (strlen($msg) > FACEBOOK_MAXPOSTLEN) {
597                                         $shortlink = "";
598                                         require_once('library/slinky.php');
599
600                                         $display_url = $a->get_baseurl() . '/display/' . $a->user['nickname'] . '/' . $b['id'];
601                                         $slinky = new Slinky( $display_url );
602                                         // setup a cascade of shortening services
603                                         // try to get a short link from these services
604                                         // in the order ur1.ca, trim, id.gd, tinyurl
605                                         $slinky->set_cascade( array( new Slinky_UR1ca(), new Slinky_Trim(), new Slinky_IsGd(), new Slinky_TinyURL() ) );
606                                         $shortlink = $slinky->short();
607                                         // the new message will be shortened such that "... $shortlink"
608                                         // will fit into the character limit
609                                         $msg = substr($msg, 0, FACEBOOK_MAXPOSTLEN - strlen($shortlink) - 4);
610                                         $msg .= '... ' . $shortlink;
611                                 }
612                                 if(! strlen($msg))
613                                         return;
614
615                                 logger('Facebook post: msg=' . $msg, LOGGER_DATA);
616
617                                 if($likes) { 
618                                         $postvars = array('access_token' => $fb_token);
619                                 }
620                                 else {
621                                         $postvars = array(
622                                                 'access_token' => $fb_token, 
623                                                 'message' => $msg
624                                         );
625                                         if(isset($image))
626                                                 $postvars['picture'] = $image;
627                                         if(isset($link))
628                                                 $postvars['link'] = $link;
629                                         if(isset($linkname))
630                                                 $postvars['name'] = $linkname;
631                                 }
632
633                                 if(($b['private']) && (! $b['parent'])) {
634                                         $postvars['privacy'] = '{"value": "CUSTOM", "friends": "SOME_FRIENDS"';
635                                         if(count($allow_arr))
636                                                 $postvars['privacy'] .= ',"allow": "' . implode(',',$allow_arr) . '"';
637                                         if(count($deny_arr))
638                                                 $postvars['privacy'] .= ',"deny": "' . implode(',',$deny_arr) . '"';
639                                         $postvars['privacy'] .= '}';
640
641                                 }
642
643                                 if($reply) {
644                                         $url = 'https://graph.facebook.com/' . $reply . '/' . (($likes) ? 'likes' : 'comments');
645                                 }
646                                 else { 
647                                         $url = 'https://graph.facebook.com/me/feed';
648                                         if($b['plink'])
649                                                 $postvars['actions'] = '{"name": "' . t('View on Friendika') . '", "link": "' .  $b['plink'] . '"}';
650                                 }
651
652                                 logger('facebook: post to ' . $url);
653                                 logger('facebook: postvars: ' . print_r($postvars,true));
654
655                                 // "test_mode" prevents anything from actually being posted.
656                                 // Otherwise, let's do it. 
657
658                                 if(! get_config('facebook','test_mode')) {
659                                         $x = post_url($url, $postvars);
660
661                                         $retj = json_decode($x);
662                                         if($retj->id) {
663                                                 q("UPDATE `item` SET `extid` = '%s' WHERE `id` = %d LIMIT 1",
664                                                         dbesc('fb::' . $retj->id),
665                                                         intval($b['id'])
666                                                 );
667                                         }
668                                         else {
669                                                 if(! $likes) {
670                                                         $s = serialize(array('url' => $url, 'item' => $b['id'], 'post' => $postvars));
671                                                         q("INSERT INTO `queue` ( `network`, `cid`, `created`, `last`, `content`)
672                                                                 VALUES ( '%s', %d, '%s', '%s', '%s') ",
673                                                                 dbesc(NETWORK_FACEBOOK),
674                                                                 intval($a->contact),
675                                                                 dbesc(datetime_convert()),
676                                                                 dbesc(datetime_convert()),
677                                                                 dbesc($s)
678                                                         );                                                              
679
680                                                         notice( t('Facebook post failed. Queued for retry.') . EOL);
681                                                 }
682                                         }
683                                         
684                                         logger('Facebook post returns: ' . $x, LOGGER_DEBUG);
685                                 }
686                         }
687                 }
688         }
689 }
690
691
692 function fb_queue_hook(&$a,&$b) {
693
694         $qi = q("SELECT * FROM `queue` WHERE `network` = '%s'",
695                 dbesc(NETWORK_FACEBOOK)
696         );
697         if(! count($qi))
698                 return;
699
700         require_once('include/queue_fn.php');
701
702         foreach($qi as $x) {
703                 if($x['network'] !== NETWORK_FACEBOOK)
704                         continue;
705
706                 logger('facebook_queue: run');
707
708                 $r = q("SELECT `user`.* FROM `user` LEFT JOIN `contact` on `contact`.`uid` = `user`.`uid` 
709                         WHERE `contact`.`self` = 1 AND `contact`.`id` = %d LIMIT 1",
710                         intval($x['cid'])
711                 );
712                 if(! count($r))
713                         continue;
714
715                 $user = $r[0];
716
717                 $appid  = get_config('facebook', 'appid'  );
718                 $secret = get_config('facebook', 'appsecret' );
719
720                 if($appid && $secret) {
721                         $fb_post   = intval(get_pconfig($user['uid'],'facebook','post'));
722                         $fb_token  = get_pconfig($user['uid'],'facebook','access_token');
723
724                         if($fb_post && $fb_token) {
725                                 logger('facebook_queue: able to post');
726                                 require_once('library/facebook.php');
727
728                                 $z = unserialize($x['content']);
729                                 $item = $z['item'];
730                                 $j = post_url($z['url'],$z['post']);
731
732                                 $retj = json_decode($j);
733                                 if($retj->id) {
734                                         q("UPDATE `item` SET `extid` = '%s' WHERE `id` = %d LIMIT 1",
735                                                 dbesc('fb::' . $retj->id),
736                                                 intval($item)
737                                         );
738                                         logger('facebook_queue: success: ' . $j); 
739                                         remove_queue_item($x['id']);
740                                 }
741                                 else {
742                                         logger('facebook_queue: failed: ' . $j);
743                                         update_queue_time($x['id']);
744                                 }
745                         }
746                 }
747         }
748 }
749
750 function fb_consume_all($uid) {
751
752         require_once('include/items.php');
753
754         $access_token = get_pconfig($uid,'facebook','access_token');
755         if(! $access_token)
756                 return;
757         
758
759         $s = fetch_url('https://graph.facebook.com/me/feed?access_token=' . $access_token);
760         if($s) {
761                 $j = json_decode($s);
762                 logger('fb_consume_stream: wall: ' . print_r($j,true), LOGGER_DATA);
763                 fb_consume_stream($uid,$j,true);
764         }
765         $s = fetch_url('https://graph.facebook.com/me/home?access_token=' . $access_token);
766         if($s) {
767                 $j = json_decode($s);
768                 logger('fb_consume_stream: feed: ' . print_r($j,true), LOGGER_DATA);
769                 fb_consume_stream($uid,$j,false);
770         }
771
772 }
773
774 function fb_consume_stream($uid,$j,$wall = false) {
775         $a = get_app();
776
777         $no_linking = get_pconfig($uid,'facebook','no_linking');
778         if($no_linking)
779                 return;
780
781         $self = q("SELECT * FROM `contact` WHERE `self` = 1 AND `uid` = %d LIMIT 1",
782                 intval($uid)
783         );
784
785         $user = q("SELECT `nickname`, `blockwall` FROM `user` WHERE `uid` = %d LIMIT 1",
786                 intval($uid)
787         );
788         if(count($user))
789                 $my_local_url = $a->get_baseurl() . '/profile/' . $user[0]['nickname'];
790
791         $self_id = get_pconfig($uid,'facebook','self_id');
792         if(! count($j->data) || (! strlen($self_id)))
793                 return;
794
795         foreach($j->data as $entry) {
796                 logger('fb_consume: entry: ' . print_r($entry,true), LOGGER_DATA);
797                 $datarray = array();
798
799                 $r = q("SELECT * FROM `item` WHERE ( `uri` = '%s' OR `extid` = '%s') AND `uid` = %d LIMIT 1",
800                                 dbesc('fb::' . $entry->id),
801                                 dbesc('fb::' . $entry->id),
802                                 intval($uid)
803                 );
804                 if(count($r)) {
805                         $post_exists = true;
806                         $orig_post = $r[0];
807                         $top_item = $r[0]['id'];
808                 }
809                 else {
810                         $post_exists = false;
811                         $orig_post = null;
812                 }
813
814                 if(! $orig_post) {
815                         $datarray['gravity'] = 0;
816                         $datarray['uid'] = $uid;
817                         $datarray['wall'] = (($wall) ? 1 : 0);
818                         $datarray['uri'] = $datarray['parent-uri'] = 'fb::' . $entry->id;
819                         $from = $entry->from;
820                         if($from->id == $self_id)
821                                 $datarray['contact-id'] = $self[0]['id'];
822                         else {
823                                 $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d AND `blocked` = 0 AND `readonly` = 0 LIMIT 1",
824                                         dbesc($from->id),
825                                         intval($uid)
826                                 );
827                                 if(count($r))
828                                         $datarray['contact-id'] = $r[0]['id'];
829                         }
830
831                         // don't store post if we don't have a contact
832
833                         if(! x($datarray,'contact-id')) {
834                                 logger('no contact: post ignored');
835                                 continue; 
836                         }
837
838                         $datarray['verb'] = ACTIVITY_POST;                                              
839                         if($wall) {
840                                 $datarray['owner-name'] = $self[0]['name'];
841                                 $datarray['owner-link'] = $self[0]['url'];
842                                 $datarray['owner-avatar'] = $self[0]['thumb'];
843                         }
844                         if(isset($entry->application) && isset($entry->application->name) && strlen($entry->application->name))
845                                 $datarray['app'] = strip_tags($entry->application->name);
846                         else
847                                 $datarray['app'] = 'facebook';
848                         $datarray['author-name'] = $from->name;
849                         $datarray['author-link'] = 'http://facebook.com/profile.php?id=' . $from->id;
850                         $datarray['author-avatar'] = 'https://graph.facebook.com/' . $from->id . '/picture';
851                         $datarray['plink'] = $datarray['author-link'] . '&v=wall&story_fbid=' . substr($entry->id,strpos($entry->id,'_') + 1);
852
853                         $datarray['body'] = $entry->message;
854                         if($entry->picture)
855                                 $datarray['body'] .= "\n\n" . '[img]' . $entry->picture . '[/img]';
856                         if($entry->link)
857                                 $datarray['body'] .= "\n" . linkify($entry->link);
858                         if($entry->name)
859                                 $datarray['body'] .= "\n" . $entry->name;
860                         if($entry->caption)
861                                 $datarray['body'] .= "\n" . $entry->caption;
862                         if($entry->description)
863                                 $datarray['body'] .= "\n" . $entry->description;
864                         $datarray['created'] = datetime_convert('UTC','UTC',$entry->created_time);
865                         $datarray['edited'] = datetime_convert('UTC','UTC',$entry->updated_time);
866
867                         // If the entry has a privacy policy, we cannot assume who can or cannot see it,
868                         // as the identities are from a foreign system. Mark it as private to the owner.
869
870                         if($entry->privacy && $entry->privacy->value !== 'EVERYONE') {
871                                 $datarray['private'] = 1;
872                                 $datarray['allow_cid'] = '<' . $uid . '>';
873                         }
874                         
875                         $top_item = item_store($datarray);
876                         $r = q("SELECT * FROM `item` WHERE `id` = %d AND `uid` = %d LIMIT 1",
877                                 intval($top_item),
878                                 intval($uid)
879                         );                      
880                         if(count($r)) {
881                                 $orig_post = $r[0];
882                                 logger('fb: new top level item posted');
883                         }
884                 }
885
886                 if(isset($entry->likes) && isset($entry->likes->data))
887                         $likers = $entry->likes->data;
888                 else
889                         $likers = null;
890
891                 if(isset($entry->comments) && isset($entry->comments->data))
892                         $comments = $entry->comments->data;
893                 else
894                         $comments = null;
895
896                 if(is_array($likers)) {
897                         foreach($likers as $likes) {
898
899                                 if(! $orig_post)
900                                         continue;
901
902                                 // If we posted the like locally, it will be found with our url, not the FB url.
903
904                                 $second_url = (($likes->id == $self_id) ? $self[0]['url'] : 'http://facebook.com/profile.php?id=' . $likes->id); 
905
906                                 $r = q("SELECT * FROM `item` WHERE `parent-uri` = '%s' AND `uid` = %d AND `verb` = '%s' 
907                                         AND ( `author-link` = '%s' OR `author-link` = '%s' ) LIMIT 1",
908                                         dbesc($orig_post['uri']),
909                                         intval($uid),
910                                         dbesc(ACTIVITY_LIKE),
911                                         dbesc('http://facebook.com/profile.php?id=' . $likes->id),
912                                         dbesc($second_url)
913                                 );
914
915                                 if(count($r))
916                                         continue;
917                                         
918                                 $likedata = array();
919                                 $likedata['parent'] = $top_item;
920                                 $likedata['verb'] = ACTIVITY_LIKE;
921                                 $likedata['gravity'] = 3;
922                                 $likedata['uid'] = $uid;
923                                 $likedata['wall'] = (($wall) ? 1 : 0);
924                                 $likedata['uri'] = item_new_uri($a->get_baseurl(), $uid);
925                                 $likedata['parent-uri'] = $orig_post['uri'];
926                                 if($likes->id == $self_id)
927                                         $likedata['contact-id'] = $self[0]['id'];
928                                 else {
929                                         $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d AND `blocked` = 0 AND `readonly` = 0 LIMIT 1",
930                                                 dbesc($likes->id),
931                                                 intval($uid)
932                                         );
933                                         if(count($r))
934                                                 $likedata['contact-id'] = $r[0]['id'];
935                                 }
936                                 if(! x($likedata,'contact-id'))
937                                         $likedata['contact-id'] = $orig_post['contact-id'];
938
939                                 $likedata['app'] = 'facebook';
940                                 $likedata['verb'] = ACTIVITY_LIKE;                                              
941                                 $likedata['author-name'] = $likes->name;
942                                 $likedata['author-link'] = 'http://facebook.com/profile.php?id=' . $likes->id;
943                                 $likedata['author-avatar'] = 'https://graph.facebook.com/' . $likes->id . '/picture';
944                                 
945                                 $author  = '[url=' . $likedata['author-link'] . ']' . $likedata['author-name'] . '[/url]';
946                                 $objauthor =  '[url=' . $orig_post['author-link'] . ']' . $orig_post['author-name'] . '[/url]';
947                                 $post_type = t('status');
948                         $plink = '[url=' . $orig_post['plink'] . ']' . $post_type . '[/url]';
949                                 $likedata['object-type'] = ACTIVITY_OBJ_NOTE;
950
951                                 $likedata['body'] = sprintf( t('%1$s likes %2$s\'s %3$s'), $author, $objauthor, $plink);
952                                 $likedata['object'] = '<object><type>' . ACTIVITY_OBJ_NOTE . '</type><local>1</local>' . 
953                                         '<id>' . $orig_post['uri'] . '</id><link>' . xmlify('<link rel="alternate" type="text/html" href="' . xmlify($orig_post['plink']) . '" />') . '</link><title>' . $orig_post['title'] . '</title><content>' . $orig_post['body'] . '</content></object>';  
954
955                                 $item = item_store($likedata);                  
956                         }
957                 }
958                 if(is_array($comments)) {
959                         foreach($comments as $cmnt) {
960
961                                 if(! $orig_post)
962                                         continue;
963
964                                 $r = q("SELECT * FROM `item` WHERE `uid` = %d AND ( `uri` = '%s' OR `extid` = '%s' ) LIMIT 1",
965                                         intval($uid),
966                                         dbesc('fb::' . $cmnt->id),
967                                         dbesc('fb::' . $cmnt->id)
968                                 );
969                                 if(count($r))
970                                         continue;
971
972                                 $cmntdata = array();
973                                 $cmntdata['parent'] = $top_item;
974                                 $cmntdata['verb'] = ACTIVITY_POST;
975                                 $cmntdata['gravity'] = 6;
976                                 $cmntdata['uid'] = $uid;
977                                 $cmntdata['wall'] = (($wall) ? 1 : 0);
978                                 $cmntdata['uri'] = 'fb::' . $cmnt->id;
979                                 $cmntdata['parent-uri'] = $orig_post['uri'];
980                                 if($cmnt->from->id == $self_id) {
981                                         $cmntdata['contact-id'] = $self[0]['id'];
982                                 }
983                                 else {
984                                         $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d LIMIT 1",
985                                                 dbesc($cmnt->from->id),
986                                                 intval($uid)
987                                         );
988                                         if(count($r)) {
989                                                 $cmntdata['contact-id'] = $r[0]['id'];
990                                                 if($r[0]['blocked'] || $r[0]['readonly'])
991                                                         continue;
992                                         }
993                                 }
994                                 if(! x($cmntdata,'contact-id'))
995                                         $cmntdata['contact-id'] = $orig_post['contact-id'];
996
997                                 $cmntdata['app'] = 'facebook';
998                                 $cmntdata['created'] = datetime_convert('UTC','UTC',$cmnt->created_time);
999                                 $cmntdata['edited']  = datetime_convert('UTC','UTC',$cmnt->created_time);
1000                                 $cmntdata['verb'] = ACTIVITY_POST;                                              
1001                                 $cmntdata['author-name'] = $cmnt->from->name;
1002                                 $cmntdata['author-link'] = 'http://facebook.com/profile.php?id=' . $cmnt->from->id;
1003                                 $cmntdata['author-avatar'] = 'https://graph.facebook.com/' . $cmnt->from->id . '/picture';
1004                                 $cmntdata['body'] = $cmnt->message;
1005                                 $item = item_store($cmntdata);                  
1006                         }
1007                 }
1008         }
1009 }
1010