boot.php

   1 <?php
   2
   3 require_once('include/config.php');
   4 require_once('include/network.php');
   5 require_once('include/plugin.php');
   6 require_once('include/text.php');
   7 require_once('include/datetime.php');
   8 require_once('include/pgettext.php');
   9 require_once('include/nav.php');
  10 require_once('include/cache.php');
  11 require_once('library/Mobile_Detect/Mobile_Detect.php');
  12
  13 define ( 'FRIENDICA_PLATFORM',     'Friendica');
  14 define ( 'FRIENDICA_VERSION',      '3.0.1531' );
  15 define ( 'DFRN_PROTOCOL_VERSION',  '2.23'    );
  16 define ( 'DB_UPDATE_VERSION',      1156      );
  17
  18 define ( 'EOL',                    "<br />\r\n"     );
  19 define ( 'ATOM_TIME',              'Y-m-d\TH:i:s\Z' );
  20
  21
  22 /**
  23  *
  24  * Image storage quality. Lower numbers save space at cost of image detail.
  25  * For ease of upgrade, please do not change here. Change jpeg quality with
  26  * $a->config['system']['jpeg_quality'] = n;
  27  * in .htconfig.php, where n is netween 1 and 100, and with very poor results
  28  * below about 50
  29  *
  30  */
  31
  32 define ( 'JPEG_QUALITY',            100  );
  33 /**
  34  * $a->config['system']['png_quality'] from 0 (uncompressed) to 9
  35  */
  36 define ( 'PNG_QUALITY',             8  );
  37
  38 /**
  39  *
  40  * An alternate way of limiting picture upload sizes. Specify the maximum pixel
  41  * length that pictures are allowed to be (for non-square pictures, it will apply
  42  * to the longest side). Pictures longer than this length will be resized to be
  43  * this length (on the longest side, the other side will be scaled appropriately).
  44  * Modify this value using
  45  *
  46  *    $a->config['system']['max_image_length'] = n;
  47  *
  48  * in .htconfig.php
  49  *
  50  * If you don't want to set a maximum length, set to -1. The default value is
  51  * defined by 'MAX_IMAGE_LENGTH' below.
  52  *
  53  */
  54 define ( 'MAX_IMAGE_LENGTH',        -1  );
  55
  56
  57 /**
  58  * Not yet used
  59  */
  60
  61 define ( 'DEFAULT_DB_ENGINE',  'MyISAM'  );
  62
  63 /**
  64  * SSL redirection policies
  65  */
  66
  67 define ( 'SSL_POLICY_NONE',         0 );
  68 define ( 'SSL_POLICY_FULL',         1 );
  69 define ( 'SSL_POLICY_SELFSIGN',     2 );
  70
  71
  72 /**
  73  * log levels
  74  */
  75
  76 define ( 'LOGGER_NORMAL',          0 );
  77 define ( 'LOGGER_TRACE',           1 );
  78 define ( 'LOGGER_DEBUG',           2 );
  79 define ( 'LOGGER_DATA',            3 );
  80 define ( 'LOGGER_ALL',             4 );
  81
  82 /**
  83  * registration policies
  84  */
  85
  86 define ( 'REGISTER_CLOSED',        0 );
  87 define ( 'REGISTER_APPROVE',       1 );
  88 define ( 'REGISTER_OPEN',          2 );
  89
  90 /**
  91  * relationship types
  92  */
  93
  94 define ( 'CONTACT_IS_FOLLOWER', 1);
  95 define ( 'CONTACT_IS_SHARING',  2);
  96 define ( 'CONTACT_IS_FRIEND',   3);
  97
  98
  99 /**
 100  * DB update return values
 101  */
 102
 103 define ( 'UPDATE_SUCCESS', 0);
 104 define ( 'UPDATE_FAILED',  1);
 105
 106
 107 /**
 108  *
 109  * page/profile types
 110  *
 111  * PAGE_NORMAL is a typical personal profile account
 112  * PAGE_SOAPBOX automatically approves all friend requests as CONTACT_IS_SHARING, (readonly)
 113  * PAGE_COMMUNITY automatically approves all friend requests as CONTACT_IS_SHARING, but with
 114  *      write access to wall and comments (no email and not included in page owner's ACL lists)
 115  * PAGE_FREELOVE automatically approves all friend requests as full friends (CONTACT_IS_FRIEND).
 116  *
 117  */
 118
 119 define ( 'PAGE_NORMAL',            0 );
 120 define ( 'PAGE_SOAPBOX',           1 );
 121 define ( 'PAGE_COMMUNITY',         2 );
 122 define ( 'PAGE_FREELOVE',          3 );
 123 define ( 'PAGE_BLOG',              4 );
 124 define ( 'PAGE_PRVGROUP',          5 );
 125
 126 /**
 127  * Network and protocol family types
 128  */
 129
 130 define ( 'NETWORK_DFRN',             'dfrn');    // Friendica, Mistpark, other DFRN implementations
 131 define ( 'NETWORK_ZOT',              'zot!');    // Zot!
 132 define ( 'NETWORK_OSTATUS',          'stat');    // status.net, identi.ca, GNU-social, other OStatus implementations
 133 define ( 'NETWORK_FEED',             'feed');    // RSS/Atom feeds with no known "post/notify" protocol
 134 define ( 'NETWORK_DIASPORA',         'dspr');    // Diaspora
 135 define ( 'NETWORK_MAIL',             'mail');    // IMAP/POP
 136 define ( 'NETWORK_MAIL2',            'mai2');    // extended IMAP/POP
 137 define ( 'NETWORK_FACEBOOK',         'face');    // Facebook API
 138 define ( 'NETWORK_LINKEDIN',         'lnkd');    // LinkedIn
 139 define ( 'NETWORK_XMPP',             'xmpp');    // XMPP
 140 define ( 'NETWORK_MYSPACE',          'mysp');    // MySpace
 141 define ( 'NETWORK_GPLUS',            'goog');    // Google+
 142
 143 define ( 'NETWORK_PHANTOM',          'unkn');    // Place holder
 144
 145 /**
 146  * These numbers are used in stored permissions
 147  * and existing allocations MUST NEVER BE CHANGED
 148  * OR RE-ASSIGNED! You may only add to them.
 149  */
 150
 151 $netgroup_ids = array(
 152         NETWORK_DFRN     => (-1),
 153         NETWORK_ZOT      => (-2),
 154         NETWORK_OSTATUS  => (-3),
 155         NETWORK_FEED     => (-4),
 156         NETWORK_DIASPORA => (-5),
 157         NETWORK_MAIL     => (-6),
 158         NETWORK_MAIL2    => (-7),
 159         NETWORK_FACEBOOK => (-8),
 160         NETWORK_LINKEDIN => (-9),
 161         NETWORK_XMPP     => (-10),
 162         NETWORK_MYSPACE  => (-11),
 163         NETWORK_GPLUS    => (-12),
 164
 165         NETWORK_PHANTOM  => (-127),
 166 );
 167
 168
 169 /**
 170  * Maximum number of "people who like (or don't like) this"  that we will list by name
 171  */
 172
 173 define ( 'MAX_LIKERS',    75);
 174
 175 /**
 176  * Communication timeout
 177  */
 178
 179 define ( 'ZCURL_TIMEOUT' , (-1));
 180
 181
 182 /**
 183  * email notification options
 184  */
 185
 186 define ( 'NOTIFY_INTRO',    0x0001 );
 187 define ( 'NOTIFY_CONFIRM',  0x0002 );
 188 define ( 'NOTIFY_WALL',     0x0004 );
 189 define ( 'NOTIFY_COMMENT',  0x0008 );
 190 define ( 'NOTIFY_MAIL',     0x0010 );
 191 define ( 'NOTIFY_SUGGEST',  0x0020 );
 192 define ( 'NOTIFY_PROFILE',  0x0040 );
 193 define ( 'NOTIFY_TAGSELF',  0x0080 );
 194 define ( 'NOTIFY_TAGSHARE', 0x0100 );
 195 define ( 'NOTIFY_POKE',     0x0200 );
 196
 197 define ( 'NOTIFY_SYSTEM',   0x8000 );
 198
 199
 200 /**
 201  * Tag/term types
 202  */
 203
 204 define ( 'TERM_UNKNOWN',   0 );
 205 define ( 'TERM_HASHTAG',   1 );
 206 define ( 'TERM_MENTION',   2 );
 207 define ( 'TERM_CATEGORY',  3 );
 208 define ( 'TERM_PCATEGORY', 4 );
 209 define ( 'TERM_FILE',      5 );
 210
 211 define ( 'TERM_OBJ_POST',  1 );
 212 define ( 'TERM_OBJ_PHOTO', 2 );
 213
 214
 215
 216 /**
 217  * various namespaces we may need to parse
 218  */
 219
 220 define ( 'NAMESPACE_ZOT',             'http://purl.org/zot' );
 221 define ( 'NAMESPACE_DFRN' ,           'http://purl.org/macgirvin/dfrn/1.0' );
 222 define ( 'NAMESPACE_THREAD' ,         'http://purl.org/syndication/thread/1.0' );
 223 define ( 'NAMESPACE_TOMB' ,           'http://purl.org/atompub/tombstones/1.0' );
 224 define ( 'NAMESPACE_ACTIVITY',        'http://activitystrea.ms/spec/1.0/' );
 225 define ( 'NAMESPACE_ACTIVITY_SCHEMA', 'http://activitystrea.ms/schema/1.0/' );
 226 define ( 'NAMESPACE_MEDIA',           'http://purl.org/syndication/atommedia' );
 227 define ( 'NAMESPACE_SALMON_ME',       'http://salmon-protocol.org/ns/magic-env' );
 228 define ( 'NAMESPACE_OSTATUSSUB',      'http://ostatus.org/schema/1.0/subscribe' );
 229 define ( 'NAMESPACE_GEORSS',          'http://www.georss.org/georss' );
 230 define ( 'NAMESPACE_POCO',            'http://portablecontacts.net/spec/1.0' );
 231 define ( 'NAMESPACE_FEED',            'http://schemas.google.com/g/2010#updates-from' );
 232 define ( 'NAMESPACE_OSTATUS',         'http://ostatus.org/schema/1.0' );
 233 define ( 'NAMESPACE_STATUSNET',       'http://status.net/schema/api/1/' );
 234 define ( 'NAMESPACE_ATOM1',           'http://www.w3.org/2005/Atom' );
 235 /**
 236  * activity stream defines
 237  */
 238
 239 define ( 'ACTIVITY_LIKE',        NAMESPACE_ACTIVITY_SCHEMA . 'like' );
 240 define ( 'ACTIVITY_DISLIKE',     NAMESPACE_DFRN            . '/dislike' );
 241 define ( 'ACTIVITY_OBJ_HEART',   NAMESPACE_DFRN            . '/heart' );
 242
 243 define ( 'ACTIVITY_FRIEND',      NAMESPACE_ACTIVITY_SCHEMA . 'make-friend' );
 244 define ( 'ACTIVITY_REQ_FRIEND',  NAMESPACE_ACTIVITY_SCHEMA . 'request-friend' );
 245 define ( 'ACTIVITY_UNFRIEND',    NAMESPACE_ACTIVITY_SCHEMA . 'remove-friend' );
 246 define ( 'ACTIVITY_FOLLOW',      NAMESPACE_ACTIVITY_SCHEMA . 'follow' );
 247 define ( 'ACTIVITY_UNFOLLOW',    NAMESPACE_ACTIVITY_SCHEMA . 'stop-following' );
 248 define ( 'ACTIVITY_JOIN',        NAMESPACE_ACTIVITY_SCHEMA . 'join' );
 249
 250 define ( 'ACTIVITY_POST',        NAMESPACE_ACTIVITY_SCHEMA . 'post' );
 251 define ( 'ACTIVITY_UPDATE',      NAMESPACE_ACTIVITY_SCHEMA . 'update' );
 252 define ( 'ACTIVITY_TAG',         NAMESPACE_ACTIVITY_SCHEMA . 'tag' );
 253 define ( 'ACTIVITY_FAVORITE',    NAMESPACE_ACTIVITY_SCHEMA . 'favorite' );
 254
 255 define ( 'ACTIVITY_POKE',        NAMESPACE_ZOT . '/activity/poke' );
 256 define ( 'ACTIVITY_MOOD',        NAMESPACE_ZOT . '/activity/mood' );
 257
 258 define ( 'ACTIVITY_OBJ_COMMENT', NAMESPACE_ACTIVITY_SCHEMA . 'comment' );
 259 define ( 'ACTIVITY_OBJ_NOTE',    NAMESPACE_ACTIVITY_SCHEMA . 'note' );
 260 define ( 'ACTIVITY_OBJ_PERSON',  NAMESPACE_ACTIVITY_SCHEMA . 'person' );
 261 define ( 'ACTIVITY_OBJ_PHOTO',   NAMESPACE_ACTIVITY_SCHEMA . 'photo' );
 262 define ( 'ACTIVITY_OBJ_P_PHOTO', NAMESPACE_ACTIVITY_SCHEMA . 'profile-photo' );
 263 define ( 'ACTIVITY_OBJ_ALBUM',   NAMESPACE_ACTIVITY_SCHEMA . 'photo-album' );
 264 define ( 'ACTIVITY_OBJ_EVENT',   NAMESPACE_ACTIVITY_SCHEMA . 'event' );
 265 define ( 'ACTIVITY_OBJ_GROUP',   NAMESPACE_ACTIVITY_SCHEMA . 'group' );
 266 define ( 'ACTIVITY_OBJ_TAGTERM', NAMESPACE_DFRN            . '/tagterm' );
 267 define ( 'ACTIVITY_OBJ_PROFILE', NAMESPACE_DFRN            . '/profile' );
 268
 269 /**
 270  * item weight for query ordering
 271  */
 272
 273 define ( 'GRAVITY_PARENT',       0);
 274 define ( 'GRAVITY_LIKE',         3);
 275 define ( 'GRAVITY_COMMENT',      6);
 276
 277 /**
 278  *
 279  * Reverse the effect of magic_quotes_gpc if it is enabled.
 280  * Please disable magic_quotes_gpc so we don't have to do this.
 281  * See http://php.net/manual/en/security.magicquotes.disabling.php
 282  *
 283  */
 284
 285 function startup() {
 286
 287         error_reporting(E_ERROR | E_WARNING | E_PARSE);
 288
 289         set_time_limit(0);
 290
 291         // This has to be quite large to deal with embedded private photos
 292         ini_set('pcre.backtrack_limit', 500000);
 293
 294
 295         if (get_magic_quotes_gpc()) {
 296                 $process = array(&$_GET, &$_POST, &$_COOKIE, &$_REQUEST);
 297                 while (list($key, $val) = each($process)) {
 298                         foreach ($val as $k => $v) {
 299                                 unset($process[$key][$k]);
 300                                 if (is_array($v)) {
 301                                         $process[$key][stripslashes($k)] = $v;
 302                                         $process[] = &$process[$key][stripslashes($k)];
 303                                 } else {
 304                                         $process[$key][stripslashes($k)] = stripslashes($v);
 305                                 }
 306                         }
 307                 }
 308                 unset($process);
 309         }
 310
 311 }
 312
 313 /**
 314  *
 315  * class: App
 316  *
 317  * Our main application structure for the life of this page
 318  * Primarily deals with the URL that got us here
 319  * and tries to make some sense of it, and
 320  * stores our page contents and config storage
 321  * and anything else that might need to be passed around
 322  * before we spit the page out.
 323  *
 324  */
 325
 326 if(! class_exists('App')) {
 327         class App {
 328
 329                 public  $module_loaded = false;
 330                 public  $query_string;
 331                 public  $config;
 332                 public  $page;
 333                 public  $profile;
 334                 public  $user;
 335                 public  $cid;
 336                 public  $contact;
 337                 public  $contacts;
 338                 public  $page_contact;
 339                 public  $content;
 340                 public  $data = array();
 341                 public  $error = false;
 342                 public  $cmd;
 343                 public  $argv;
 344                 public  $argc;
 345                 public  $module;
 346                 public  $pager;
 347                 public  $strings;
 348                 public  $path;
 349                 public  $hooks;
 350                 public  $timezone;
 351                 public  $interactive = true;
 352                 public  $plugins;
 353                 public  $apps = array();
 354                 public  $identities;
 355                 public  $is_mobile;
 356                 public  $is_tablet;
 357
 358                 public $nav_sel;
 359
 360                 public $category;
 361
 362                 // Allow themes to control internal parameters
 363                 // by changing App values in theme.php
 364
 365                 public  $sourcename = '';
 366                 public  $videowidth = 425;
 367                 public  $videoheight = 350;
 368                 public  $force_max_items = 0;
 369                 public  $theme_thread_allow = true;
 370
 371                 // An array for all theme-controllable parameters
 372                 // Mostly unimplemented yet. Only options 'stylesheet' and
 373                 // beyond are used.
 374
 375                 public  $theme = array(
 376                         'sourcename' => '',
 377                         'videowidth' => 425,
 378                         'videoheight' => 350,
 379                         'force_max_items' => 0,
 380                         'thread_allow' => true,
 381                         'stylesheet' => ''
 382                 );
 383
 384                 private $scheme;
 385                 private $hostname;
 386                 private $baseurl;
 387                 private $db;
 388
 389                 private $curl_code;
 390                 private $curl_headers;
 391
 392                 private $cached_profile_image;
 393                 private $cached_profile_picdate;
 394
 395                 function __construct() {
 396
 397                         global $default_timezone, $argv, $argc;
 398
 399                         $this->timezone = ((x($default_timezone)) ? $default_timezone : 'UTC');
 400
 401                         date_default_timezone_set($this->timezone);
 402
 403                         $this->config = array();
 404                         $this->page = array();
 405                         $this->pager= array();
 406
 407                         $this->query_string = '';
 408
 409                         startup();
 410
 411                         $this->scheme = 'http';
 412                         if(x($_SERVER,'HTTPS') && $_SERVER['HTTPS'])
 413                                 $this->scheme = 'https';
 414                         elseif(x($_SERVER,'SERVER_PORT') && (intval($_SERVER['SERVER_PORT']) == 443))
 415                         $this->scheme = 'https';
 416
 417                         if(x($_SERVER,'SERVER_NAME')) {
 418                                 $this->hostname = $_SERVER['SERVER_NAME'];
 419
 420                                 // See bug 437 - this didn't work so disabling it
 421                                 //if(stristr($this->hostname,'xn--')) {
 422                                         // PHP or webserver may have converted idn to punycode, so
 423                                         // convert punycode back to utf-8
 424                                 //      require_once('library/simplepie/idn/idna_convert.class.php');
 425                                 //      $x = new idna_convert();
 426                                 //      $this->hostname = $x->decode($_SERVER['SERVER_NAME']);
 427                                 //}
 428
 429                                 if(x($_SERVER,'SERVER_PORT') && $_SERVER['SERVER_PORT'] != 80 && $_SERVER['SERVER_PORT'] != 443)
 430                                         $this->hostname .= ':' . $_SERVER['SERVER_PORT'];
 431                                 /**
 432                                  * Figure out if we are running at the top of a domain
 433                                  * or in a sub-directory and adjust accordingly
 434                                  */
 435
 436                                 $path = trim(dirname($_SERVER['SCRIPT_NAME']),'/\\');
 437                                 if(isset($path) && strlen($path) && ($path != $this->path))
 438                                         $this->path = $path;
 439                         }
 440                         if (is_array($argv) && $argc>1 && substr(end($argv), 0, 4)=="http" ) {
 441                                 $this->set_baseurl(array_pop($argv) );
 442                                 $argc --;
 443                         }
 444
 445                         set_include_path(
 446                                         "include/$this->hostname" . PATH_SEPARATOR
 447                                         . 'include' . PATH_SEPARATOR
 448                                         . 'library' . PATH_SEPARATOR
 449                                         . 'library/phpsec' . PATH_SEPARATOR
 450                                         . 'library/langdet' . PATH_SEPARATOR
 451                                         . '.' );
 452
 453
 454                         if((x($_SERVER,'QUERY_STRING')) && substr($_SERVER['QUERY_STRING'],0,2) === "q=") {
 455                                 $this->query_string = substr($_SERVER['QUERY_STRING'],2);
 456                                 // removing trailing / - maybe a nginx problem
 457                                 if (substr($this->query_string, 0, 1) == "/")
 458                                         $this->query_string = substr($this->query_string, 1);
 459                         }
 460                         if(x($_GET,'q'))
 461                                 $this->cmd = trim($_GET['q'],'/\\');
 462
 463                         // unix style "homedir"
 464
 465                         if(substr($this->cmd,0,1) === '~')
 466                                 $this->cmd = 'profile/' . substr($this->cmd,1);
 467
 468                         // Diaspora style profile url
 469
 470                         if(substr($this->cmd,0,2) === 'u/')
 471                                 $this->cmd = 'profile/' . substr($this->cmd,2);
 472
 473                         /**
 474                          *
 475                          * Break the URL path into C style argc/argv style arguments for our
 476                          * modules. Given "http://example.com/module/arg1/arg2", $this->argc
 477                          * will be 3 (integer) and $this->argv will contain:
 478                          *   [0] => 'module'
 479                          *   [1] => 'arg1'
 480                          *   [2] => 'arg2'
 481                          *
 482                          *
 483                          * There will always be one argument. If provided a naked domain
 484                          * URL, $this->argv[0] is set to "home".
 485                          *
 486                          */
 487
 488                         $this->argv = explode('/',$this->cmd);
 489                         $this->argc = count($this->argv);
 490                         if((array_key_exists('0',$this->argv)) && strlen($this->argv[0])) {
 491                                 $this->module = str_replace(".", "_", $this->argv[0]);
 492                                 $this->module = str_replace("-", "_", $this->module);
 493                         }
 494                         else {
 495                                 $this->argc = 1;
 496                                 $this->argv = array('home');
 497                                 $this->module = 'home';
 498                         }
 499
 500                         /**
 501                          * See if there is any page number information, and initialise
 502                          * pagination
 503                          */
 504
 505                         $this->pager['page'] = ((x($_GET,'page') && intval($_GET['page']) > 0) ? intval($_GET['page']) : 1);
 506                         $this->pager['itemspage'] = 50;
 507                         $this->pager['start'] = ($this->pager['page'] * $this->pager['itemspage']) - $this->pager['itemspage'];
 508                         if($this->pager['start'] < 0)
 509                                 $this->pager['start'] = 0;
 510                         $this->pager['total'] = 0;
 511
 512                         /**
 513                          * Detect mobile devices
 514                          */
 515
 516                         $mobile_detect = new Mobile_Detect();
 517                         $this->is_mobile = $mobile_detect->isMobile();
 518                         $this->is_tablet = $mobile_detect->isTablet();
 519                 }
 520
 521                 function get_baseurl($ssl = false) {
 522
 523                         $scheme = $this->scheme;
 524
 525                         if((x($this->config,'system')) && (x($this->config['system'],'ssl_policy'))) {
 526                                 if(intval($this->config['system']['ssl_policy']) === intval(SSL_POLICY_FULL))
 527                                         $scheme = 'https';
 528
 529                                 //      Basically, we have $ssl = true on any links which can only be seen by a logged in user
 530                                 //      (and also the login link). Anything seen by an outsider will have it turned off.
 531
 532                                 if($this->config['system']['ssl_policy'] == SSL_POLICY_SELFSIGN) {
 533                                         if($ssl)
 534                                                 $scheme = 'https';
 535                                         else
 536                                                 $scheme = 'http';
 537                                 }
 538                         }
 539
 540                         $this->baseurl = $scheme . "://" . $this->hostname . ((isset($this->path) && strlen($this->path)) ? '/' . $this->path : '' );
 541                         return $this->baseurl;
 542                 }
 543
 544                 function set_baseurl($url) {
 545                         $parsed = @parse_url($url);
 546
 547                         $this->baseurl = $url;
 548
 549                         if($parsed) {
 550                                 $this->scheme = $parsed['scheme'];
 551
 552                                 $this->hostname = $parsed['host'];
 553                                 if(x($parsed,'port'))
 554                                         $this->hostname .= ':' . $parsed['port'];
 555                                 if(x($parsed,'path'))
 556                                         $this->path = trim($parsed['path'],'\\/');
 557                         }
 558
 559                 }
 560
 561                 function get_hostname() {
 562                         return $this->hostname;
 563                 }
 564
 565                 function set_hostname($h) {
 566                         $this->hostname = $h;
 567                 }
 568
 569                 function set_path($p) {
 570                         $this->path = trim(trim($p),'/');
 571                 }
 572
 573                 function get_path() {
 574                         return $this->path;
 575                 }
 576
 577                 function set_pager_total($n) {
 578                         $this->pager['total'] = intval($n);
 579                 }
 580
 581                 function set_pager_itemspage($n) {
 582                         $this->pager['itemspage'] = ((intval($n) > 0) ? intval($n) : 0);
 583                         $this->pager['start'] = ($this->pager['page'] * $this->pager['itemspage']) - $this->pager['itemspage'];
 584
 585                 }
 586
 587                 function init_pagehead() {
 588                         $interval = ((local_user()) ? get_pconfig(local_user(),'system','update_interval') : 40000);
 589                         if($interval < 10000)
 590                                 $interval = 40000;
 591
 592                         $this->page['title'] = $this->config['sitename'];
 593
 594                         /* put the head template at the beginning of page['htmlhead']
 595                          * since the code added by the modules frequently depends on it
 596                          * being first
 597                          */
 598                         if(!isset($this->page['htmlhead']))
 599                                 $this->page['htmlhead'] = '';
 600                         $tpl = get_markup_template('head.tpl');
 601                         $this->page['htmlhead'] = replace_macros($tpl,array(
 602                                 '$baseurl' => $this->get_baseurl(), // FIXME for z_path!!!!
 603                                 '$local_user' => local_user(),
 604                                 '$generator' => 'Friendica' . ' ' . FRIENDICA_VERSION,
 605                                 '$delitem' => t('Delete this item?'),
 606                                 '$comment' => t('Comment'),
 607                                 '$showmore' => t('show more'),
 608                                 '$showfewer' => t('show fewer'),
 609                                 '$update_interval' => $interval
 610                         )) . $this->page['htmlhead'];
 611                 }
 612
 613                 function init_page_end() {
 614                         if(!isset($this->page['end']))
 615                                 $this->page['end'] = '';
 616                         $tpl = get_markup_template('end.tpl');
 617                         $this->page['end'] = replace_macros($tpl,array(
 618                                 '$baseurl' => $this->get_baseurl() // FIXME for z_path!!!!
 619                         )) . $this->page['end'];
 620                 }
 621
 622                 function set_curl_code($code) {
 623                         $this->curl_code = $code;
 624                 }
 625
 626                 function get_curl_code() {
 627                         return $this->curl_code;
 628                 }
 629
 630                 function set_curl_headers($headers) {
 631                         $this->curl_headers = $headers;
 632                 }
 633
 634                 function get_curl_headers() {
 635                         return $this->curl_headers;
 636                 }
 637
 638                 function get_cached_avatar_image($avatar_image){
 639                         if($this->cached_profile_image[$avatar_image])
 640                                 return $this->cached_profile_image[$avatar_image];
 641
 642                         $path_parts = explode("/",$avatar_image);
 643                         $common_filename = $path_parts[count($path_parts)-1];
 644
 645                         if($this->cached_profile_picdate[$common_filename]){
 646                                 $this->cached_profile_image[$avatar_image] = $avatar_image . $this->cached_profile_picdate[$common_filename];
 647                         } else {
 648                                 $r = q("SELECT `contact`.`avatar-date` AS picdate FROM `contact` WHERE `contact`.`thumb` like \"%%/%s\"",
 649                                         $common_filename);
 650                                 if(! count($r)){
 651                                         $this->cached_profile_image[$avatar_image] = $avatar_image;
 652                                 } else {
 653                                         $this->cached_profile_picdate[$common_filename] = "?rev=" . urlencode($r[0]['picdate']);
 654                                         $this->cached_profile_image[$avatar_image] = $avatar_image . $this->cached_profile_picdate[$common_filename];
 655                                 }
 656                         }
 657                         return $this->cached_profile_image[$avatar_image];
 658                 }
 659
 660
 661         }
 662 }
 663
 664 // retrieve the App structure
 665 // useful in functions which require it but don't get it passed to them
 666
 667 if(! function_exists('get_app')) {
 668         function get_app() {
 669                 global $a;
 670                 return $a;
 671         }
 672 };
 673
 674
 675 // Multi-purpose function to check variable state.
 676 // Usage: x($var) or $x($array,'key')
 677 // returns false if variable/key is not set
 678 // if variable is set, returns 1 if has 'non-zero' value, otherwise returns 0.
 679 // e.g. x('') or x(0) returns 0;
 680
 681 if(! function_exists('x')) {
 682         function x($s,$k = NULL) {
 683                 if($k != NULL) {
 684                         if((is_array($s)) && (array_key_exists($k,$s))) {
 685                                 if($s[$k])
 686                                         return (int) 1;
 687                                 return (int) 0;
 688                 }
 689                         return false;
 690                 }
 691                 else {
 692                         if(isset($s)) {
 693                                 if($s) {
 694                                         return (int) 1;
 695                                 }
 696                                 return (int) 0;
 697                         }
 698                         return false;
 699                 }
 700         }
 701 }
 702
 703 // called from db initialisation if db is dead.
 704
 705 if(! function_exists('system_unavailable')) {
 706         function system_unavailable() {
 707                 include('system_unavailable.php');
 708                 system_down();
 709                 killme();
 710         }
 711 }
 712
 713
 714
 715 function clean_urls() {
 716         global $a;
 717         //      if($a->config['system']['clean_urls'])
 718         return true;
 719         //      return false;
 720 }
 721
 722 function z_path() {
 723         global $a;
 724         $base = $a->get_baseurl();
 725         if(! clean_urls())
 726                 $base .= '/?q=';
 727         return $base;
 728 }
 729
 730 function z_root() {
 731         global $a;
 732         return $a->get_baseurl();
 733 }
 734
 735 function absurl($path) {
 736         if(strpos($path,'/') === 0)
 737                 return z_path() . $path;
 738         return $path;
 739 }
 740
 741 function is_ajax() {
 742         return (!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest');
 743 }
 744
 745
 746 // Primarily involved with database upgrade, but also sets the
 747 // base url for use in cmdline programs which don't have
 748 // $_SERVER variables, and synchronising the state of installed plugins.
 749
 750
 751 if(! function_exists('check_config')) {
 752         function check_config(&$a) {
 753
 754                 $build = get_config('system','build');
 755                 if(! x($build))
 756                         $build = set_config('system','build',DB_UPDATE_VERSION);
 757
 758                 $url = get_config('system','url');
 759
 760                 // if the url isn't set or the stored url is radically different
 761                 // than the currently visited url, store the current value accordingly.
 762                 // "Radically different" ignores common variations such as http vs https
 763                 // and www.example.com vs example.com.
 764                 // We will only change the url to an ip address if there is no existing setting
 765
 766                 if(! x($url))
 767                         $url = set_config('system','url',$a->get_baseurl());
 768                 if((! link_compare($url,$a->get_baseurl())) && (! preg_match("/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/",$a->get_hostname)))
 769                         $url = set_config('system','url',$a->get_baseurl());
 770
 771
 772                 if($build != DB_UPDATE_VERSION) {
 773                         $stored = intval($build);
 774                         $current = intval(DB_UPDATE_VERSION);
 775                         if(($stored < $current) && file_exists('update.php')) {
 776
 777                                 load_config('database');
 778
 779                                 // We're reporting a different version than what is currently installed.
 780                                 // Run any existing update scripts to bring the database up to current.
 781
 782                                 require_once('update.php');
 783
 784                                 // make sure that boot.php and update.php are the same release, we might be
 785                                 // updating right this very second and the correct version of the update.php
 786                                 // file may not be here yet. This can happen on a very busy site.
 787
 788                                 if(DB_UPDATE_VERSION == UPDATE_VERSION) {
 789
 790                                         for($x = $stored; $x < $current; $x ++) {
 791                                                 if(function_exists('update_' . $x)) {
 792
 793                                                         // There could be a lot of processes running or about to run.
 794                                                         // We want exactly one process to run the update command.
 795                                                         // So store the fact that we're taking responsibility
 796                                                         // after first checking to see if somebody else already has.
 797
 798                                                         // If the update fails or times-out completely you may need to
 799                                                         // delete the config entry to try again.
 800
 801                                                         $t = get_config('database','update_' . $x);
 802                                                         if($t !== false)
 803                                                                 break;
 804                                                         set_config('database','update_' . $x, time());
 805
 806                                                         // call the specific update
 807
 808                                                         $func = 'update_' . $x;
 809                                                         $retval = $func();
 810                                                         if($retval) {
 811                                                                 //send the administrator an e-mail
 812                                                                 $email_tpl = get_intltext_template("update_fail_eml.tpl");
 813                                                                 $email_msg = replace_macros($email_tpl, array(
 814                                                                         '$sitename' => $a->config['sitename'],
 815                                                                         '$siteurl' =>  $a->get_baseurl(),
 816                                                                         '$update' => $x,
 817                                                                         '$error' => sprintf( t('Update %s failed. See error logs.'), $x)
 818                                                                 ));
 819                                                                 $subject=sprintf(t('Update Error at %s'), $a->get_baseurl());
 820
 821                                                                 mail($a->config['admin_email'], $subject, $email_msg,
 822                                                                         'From: ' . t('Administrator') . '@' . $_SERVER['SERVER_NAME'] . "\n"
 823                                                                         . 'Content-type: text/plain; charset=UTF-8' . "\n"
 824                                                                         . 'Content-transfer-encoding: 8bit' );
 825                                                                 //try the logger
 826                                                                 logger('CRITICAL: Update Failed: '. $x);
 827                                                                 break;
 828                                                         }
 829                                                         else {
 830                                                                 set_config('database','update_' . $x, 'success');
 831                                                                 set_config('system','build', $x + 1);
 832                                                         }
 833                                                 }
 834                                         }
 835                                 }
 836                         }
 837                 }
 838
 839                 /**
 840                  *
 841                  * Synchronise plugins:
 842                  *
 843                  * $a->config['system']['addon'] contains a comma-separated list of names
 844                  * of plugins/addons which are used on this system.
 845                  * Go through the database list of already installed addons, and if we have
 846                  * an entry, but it isn't in the config list, call the uninstall procedure
 847                  * and mark it uninstalled in the database (for now we'll remove it).
 848                  * Then go through the config list and if we have a plugin that isn't installed,
 849                  * call the install procedure and add it to the database.
 850                  *
 851                  */
 852
 853                 $r = q("SELECT * FROM `addon` WHERE `installed` = 1");
 854                 if(count($r))
 855                         $installed = $r;
 856                 else
 857                         $installed = array();
 858
 859                 $plugins = get_config('system','addon');
 860                 $plugins_arr = array();
 861
 862                 if($plugins)
 863                         $plugins_arr = explode(',',str_replace(' ', '',$plugins));
 864
 865                 $a->plugins = $plugins_arr;
 866
 867                 $installed_arr = array();
 868
 869                 if(count($installed)) {
 870                         foreach($installed as $i) {
 871                                 if(! in_array($i['name'],$plugins_arr)) {
 872                                         uninstall_plugin($i['name']);
 873                                 }
 874                                 else {
 875                                         $installed_arr[] = $i['name'];
 876                                 }
 877                         }
 878                 }
 879
 880                 if(count($plugins_arr)) {
 881                         foreach($plugins_arr as $p) {
 882                                 if(! in_array($p,$installed_arr)) {
 883                                         install_plugin($p);
 884                                 }
 885                         }
 886                 }
 887
 888
 889                 load_hooks();
 890
 891                 return;
 892         }
 893 }
 894
 895
 896 function get_guid($size=16) {
 897         $exists = true; // assume by default that we don't have a unique guid
 898         do {
 899                 $s = random_string($size);
 900                 $r = q("select id from guid where guid = '%s' limit 1", dbesc($s));
 901                 if(! count($r))
 902                         $exists = false;
 903         } while($exists);
 904         q("insert into guid ( guid ) values ( '%s' ) ", dbesc($s));
 905         return $s;
 906 }
 907
 908
 909 // wrapper for adding a login box. If $register == true provide a registration
 910 // link. This will most always depend on the value of $a->config['register_policy'].
 911 // returns the complete html for inserting into the page
 912
 913 if(! function_exists('login')) {
 914         function login($register = false, $hiddens=false) {
 915                 $a = get_app();
 916                 $o = "";
 917                 $reg = false;
 918                 if ($register) {
 919                         $reg = array(
 920                                 'title' => t('Create a New Account'),
 921                                 'desc' => t('Register')
 922                         );
 923                 }
 924
 925                 $noid = get_config('system','no_openid');
 926
 927                 $dest_url = $a->get_baseurl(true) . '/' . $a->query_string;
 928
 929                 if(local_user()) {
 930                         $tpl = get_markup_template("logout.tpl");
 931                 }
 932                 else {
 933                         $a->page['htmlhead'] .= replace_macros(get_markup_template("login_head.tpl"),array(
 934                                 '$baseurl'              => $a->get_baseurl(true)
 935                         ));
 936
 937                         $tpl = get_markup_template("login.tpl");
 938                         $_SESSION['return_url'] = $a->query_string;
 939                         $a->module = 'login';
 940                 }
 941
 942
 943                 $o .= replace_macros($tpl,array(
 944
 945                         '$dest_url'     => $dest_url,
 946                         '$logout'       => t('Logout'),
 947                         '$login'        => t('Login'),
 948
 949                         '$lname'                => array('username', t('Nickname or Email address: ') , '', ''),
 950                         '$lpassword'    => array('password', t('Password: '), '', ''),
 951                         '$lremember'    => array('remember', t('Remember me'), 0, ''),
 952
 953                         '$openid'               => !$noid,
 954                         '$lopenid'      => array('openid_url', t('Or login using OpenID: '),'',''),
 955
 956                         '$hiddens'      => $hiddens,
 957
 958                         '$register'     => $reg,
 959
 960                         '$lostpass'     => t('Forgot your password?'),
 961                         '$lostlink'     => t('Password Reset'),
 962                 ));
 963
 964                 call_hooks('login_hook',$o);
 965
 966                 return $o;
 967         }
 968 }
 969
 970 // Used to end the current process, after saving session state.
 971
 972 if(! function_exists('killme')) {
 973         function killme() {
 974                 session_write_close();
 975                 exit;
 976         }
 977 }
 978
 979 // redirect to another URL and terminate this process.
 980
 981 if(! function_exists('goaway')) {
 982         function goaway($s) {
 983                 header("Location: $s");
 984                 killme();
 985         }
 986 }
 987
 988
 989 // Returns the uid of locally logged in user or false.
 990
 991 if(! function_exists('local_user')) {
 992         function local_user() {
 993                 if((x($_SESSION,'authenticated')) && (x($_SESSION,'uid')))
 994                         return intval($_SESSION['uid']);
 995                 return false;
 996         }
 997 }
 998
 999 // Returns contact id of authenticated site visitor or false
1000
1001 if(! function_exists('remote_user')) {
1002         function remote_user() {
1003                 if((x($_SESSION,'authenticated')) && (x($_SESSION,'visitor_id')))
1004                         return intval($_SESSION['visitor_id']);
1005                 return false;
1006         }
1007 }
1008
1009 // contents of $s are displayed prominently on the page the next time
1010 // a page is loaded. Usually used for errors or alerts.
1011
1012 if(! function_exists('notice')) {
1013         /**
1014          * Show an error message to user.
1015          *
1016          * This function save text in session, to be shown to the user at next page load
1017          *
1018          * @param string $s - Text of notice
1019          */
1020         function notice($s) {
1021                 $a = get_app();
1022                 if(! x($_SESSION,'sysmsg'))     $_SESSION['sysmsg'] = array();
1023                 if($a->interactive)
1024                         $_SESSION['sysmsg'][] = $s;
1025         }
1026 }
1027 if(! function_exists('info')) {
1028         /**
1029          * Show an info message to user.
1030          *
1031          * This function save text in session, to be shown to the user at next page load
1032          *
1033          * @param string $s - Text of notice
1034          */
1035         function info($s) {
1036                 $a = get_app();
1037                 if(! x($_SESSION,'sysmsg_info')) $_SESSION['sysmsg_info'] = array();
1038                 if($a->interactive)
1039                         $_SESSION['sysmsg_info'][] = $s;
1040         }
1041 }
1042
1043
1044 // wrapper around config to limit the text length of an incoming message
1045
1046 if(! function_exists('get_max_import_size')) {
1047         function get_max_import_size() {
1048                 global $a;
1049                 return ((x($a->config,'max_import_size')) ? $a->config['max_import_size'] : 0 );
1050         }
1051 }
1052
1053
1054
1055 /**
1056  *
1057  * Function : profile_load
1058  * @parameter App    $a
1059  * @parameter string $nickname
1060  * @parameter int    $profile
1061  *
1062  * Summary: Loads a profile into the page sidebar.
1063  * The function requires a writeable copy of the main App structure, and the nickname
1064  * of a registered local account.
1065  *
1066  * If the viewer is an authenticated remote viewer, the profile displayed is the
1067  * one that has been configured for his/her viewing in the Contact manager.
1068  * Passing a non-zero profile ID can also allow a preview of a selected profile
1069  * by the owner.
1070  *
1071  * Profile information is placed in the App structure for later retrieval.
1072  * Honours the owner's chosen theme for display.
1073  *
1074  */
1075
1076 if(! function_exists('profile_load')) {
1077         function profile_load(&$a, $nickname, $profile = 0) {
1078
1079                 $user = q("select uid from user where nickname = '%s' limit 1",
1080                         dbesc($nickname)
1081                 );
1082
1083                 if(! ($user && count($user))) {
1084                         logger('profile error: ' . $a->query_string, LOGGER_DEBUG);
1085                         notice( t('Requested account is not available.') . EOL );
1086                         $a->error = 404;
1087                         return;
1088                 }
1089
1090                 if(remote_user() && count($_SESSION['remote'])) {
1091                         foreach($_SESSION['remote'] as $visitor) {
1092                                 if($visitor['uid'] == $user[0]['uid']) {
1093                                         $r = q("SELECT `profile-id` FROM `contact` WHERE `id` = %d LIMIT 1",
1094                                                 intval($visitor['cid'])
1095                                         );
1096                                         if(count($r))
1097                                                 $profile = $r[0]['profile-id'];
1098                                         break;
1099                                 }
1100                         }
1101                 }
1102
1103                 $r = null;
1104
1105                 if($profile) {
1106                         $profile_int = intval($profile);
1107                         $r = q("SELECT `profile`.`uid` AS `profile_uid`, `profile`.* , `contact`.`avatar-date` AS picdate, `user`.* FROM `profile`
1108                                         left join `contact` on `contact`.`uid` = `profile`.`uid` LEFT JOIN `user` ON `profile`.`uid` = `user`.`uid`
1109                                         WHERE `user`.`nickname` = '%s' AND `profile`.`id` = %d and `contact`.`self` = 1 LIMIT 1",
1110                                         dbesc($nickname),
1111                                         intval($profile_int)
1112                         );
1113                 }
1114                 if((! $r) && (!  count($r))) {
1115                         $r = q("SELECT `profile`.`uid` AS `profile_uid`, `profile`.* , `contact`.`avatar-date` AS picdate, `user`.* FROM `profile`
1116                                         left join `contact` on `contact`.`uid` = `profile`.`uid` LEFT JOIN `user` ON `profile`.`uid` = `user`.`uid`
1117                                         WHERE `user`.`nickname` = '%s' AND `profile`.`is-default` = 1 and `contact`.`self` = 1 LIMIT 1",
1118                                         dbesc($nickname)
1119                         );
1120                 }
1121
1122                 if(($r === false) || (! count($r))) {
1123                         logger('profile error: ' . $a->query_string, LOGGER_DEBUG);
1124                         notice( t('Requested profile is not available.') . EOL );
1125                         $a->error = 404;
1126                         return;
1127                 }
1128
1129                 // fetch user tags if this isn't the default profile
1130
1131                 if(! $r[0]['is-default']) {
1132                         $x = q("select `pub_keywords` from `profile` where uid = %d and `is-default` = 1 limit 1",
1133                                         intval($profile_uid)
1134                         );
1135                         if($x && count($x))
1136                                 $r[0]['pub_keywords'] = $x[0]['pub_keywords'];
1137                 }
1138
1139                 $a->profile = $r[0];
1140
1141                 $a->profile['mobile-theme'] = get_pconfig($profile_uid, 'system', 'mobile_theme');
1142
1143
1144                 $a->page['title'] = $a->profile['name'] . " @ " . $a->config['sitename'];
1145                 $_SESSION['theme'] = $a->profile['theme'];
1146                 $_SESSION['mobile-theme'] = $a->profile['mobile-theme'];
1147
1148                 /**
1149                  * load/reload current theme info
1150                  */
1151
1152                 $theme_info_file = "view/theme/".current_theme()."/theme.php";
1153                 if (file_exists($theme_info_file)){
1154                         require_once($theme_info_file);
1155                 }
1156
1157                 if(! (x($a->page,'aside')))
1158                         $a->page['aside'] = '';
1159
1160                 if(local_user() && local_user() == $a->profile['uid']) {
1161                         $a->page['aside'] .= replace_macros(get_markup_template('profile_edlink.tpl'),array(
1162                                 '$editprofile' => t('Edit profile'),
1163                                 '$profid' => $a->profile['id']
1164                         ));
1165                 }
1166
1167                 $block = (((get_config('system','block_public')) && (! local_user()) && (! remote_user())) ? true : false);
1168
1169                 $a->page['aside'] .= profile_sidebar($a->profile, $block);
1170
1171                 /*if(! $block)
1172                  $a->page['aside'] .= contact_block();*/
1173
1174                 return;
1175         }
1176 }
1177
1178
1179 /**
1180  *
1181  * Function: profile_sidebar
1182  *
1183  * Formats a profile for display in the sidebar.
1184  * It is very difficult to templatise the HTML completely
1185  * because of all the conditional logic.
1186  *
1187  * @parameter: array $profile
1188  *
1189  * Returns HTML string stuitable for sidebar inclusion
1190  * Exceptions: Returns empty string if passed $profile is wrong type or not populated
1191  *
1192  */
1193
1194
1195 if(! function_exists('profile_sidebar')) {
1196         function profile_sidebar($profile, $block = 0) {
1197
1198                 $a = get_app();
1199
1200                 $o = '';
1201                 $location = false;
1202                 $address = false;
1203                 $pdesc = true;
1204
1205                 if((! is_array($profile)) && (! count($profile)))
1206                         return $o;
1207
1208                 $profile['picdate'] = urlencode($profile['picdate']);
1209
1210                 call_hooks('profile_sidebar_enter', $profile);
1211
1212
1213                 // don't show connect link to yourself
1214                 $connect = (($profile['uid'] != local_user()) ? t('Connect')  : False);
1215
1216                 // don't show connect link to authenticated visitors either
1217
1218                 if(remote_user() && count($_SESSION['remote'])) {
1219                         foreach($_SESSION['remote'] as $visitor) {
1220                                 if($visitor['uid'] == $profile['uid']) {
1221                                         $connect = false;
1222                                         break;
1223                                 }
1224                         }
1225                 }
1226
1227                 if(get_my_url() && $profile['unkmail'])
1228                         $wallmessage = t('Message');
1229                 else
1230                         $wallmessage = false;
1231
1232
1233
1234                 // show edit profile to yourself
1235                 if ($profile['uid'] == local_user()) {
1236                         $profile['edit'] = array($a->get_baseurl(). '/profiles', t('Profiles'),"", t('Manage/edit profiles'));
1237
1238                         $r = q("SELECT * FROM `profile` WHERE `uid` = %d",
1239                                         local_user());
1240
1241                         $profile['menu'] = array(
1242                                 'chg_photo' => t('Change profile photo'),
1243                                 'cr_new' => t('Create New Profile'),
1244                                 'entries' => array(),
1245                         );
1246
1247                         if(count($r)) {
1248
1249                                 foreach($r as $rr) {
1250                                         $profile['menu']['entries'][] = array(
1251                                                 'photo' => $rr['thumb'],
1252                                                 'id' => $rr['id'],
1253                                                 'alt' => t('Profile Image'),
1254                                                 'profile_name' => $rr['profile-name'],
1255                                                 'isdefault' => $rr['is-default'],
1256                                                 'visibile_to_everybody' =>  t('visible to everybody'),
1257                                                 'edit_visibility' => t('Edit visibility'),
1258
1259                                         );
1260                                 }
1261
1262
1263                         }
1264
1265
1266                 }
1267
1268
1269
1270
1271                 if((x($profile,'address') == 1)
1272                                 || (x($profile,'locality') == 1)
1273                                 || (x($profile,'region') == 1)
1274                                 || (x($profile,'postal-code') == 1)
1275                                 || (x($profile,'country-name') == 1))
1276                         $location = t('Location:');
1277
1278                 $gender = ((x($profile,'gender') == 1) ? t('Gender:') : False);
1279
1280
1281                 $marital = ((x($profile,'marital') == 1) ?  t('Status:') : False);
1282
1283                 $homepage = ((x($profile,'homepage') == 1) ?  t('Homepage:') : False);
1284
1285                 if(($profile['hidewall'] || $block) && (! local_user()) && (! remote_user())) {
1286                         $location = $pdesc = $gender = $marital = $homepage = False;
1287                 }
1288
1289                 $firstname = ((strpos($profile['name'],' '))
1290                                 ? trim(substr($profile['name'],0,strpos($profile['name'],' '))) : $profile['name']);
1291                 $lastname = (($firstname === $profile['name']) ? '' : trim(substr($profile['name'],strlen($firstname))));
1292
1293                 $diaspora = array(
1294                         'podloc' => $a->get_baseurl(),
1295                         'searchable' => (($profile['publish'] && $profile['net-publish']) ? 'true' : 'false' ),
1296                         'nickname' => $profile['nickname'],
1297                         'fullname' => $profile['name'],
1298                         'firstname' => $firstname,
1299                         'lastname' => $lastname,
1300                         'photo300' => $a->get_cached_avatar_image($a->get_baseurl() . '/photo/custom/300/' . $profile['uid'] . '.jpg'),
1301                         'photo100' => $a->get_cached_avatar_image($a->get_baseurl() . '/photo/custom/100/' . $profile['uid'] . '.jpg'),
1302                         'photo50' => $a->get_cached_avatar_image($a->get_baseurl() . '/photo/custom/50/'  . $profile['uid'] . '.jpg'),
1303                 );
1304
1305                 if (!$block){
1306                         $contact_block = contact_block();
1307                 }
1308
1309
1310                 $tpl = get_markup_template('profile_vcard.tpl');
1311
1312                 $o .= replace_macros($tpl, array(
1313                         '$profile' => $profile,
1314                         '$connect'  => $connect,
1315                         '$wallmessage' => $wallmessage,
1316                         '$location' => template_escape($location),
1317                         '$gender'   => $gender,
1318                         '$pdesc'        => $pdesc,
1319                         '$marital'  => $marital,
1320                         '$homepage' => $homepage,
1321                         '$diaspora' => $diaspora,
1322                         '$contact_block' => $contact_block,
1323                 ));
1324
1325
1326                 $arr = array('profile' => &$profile, 'entry' => &$o);
1327
1328                 call_hooks('profile_sidebar', $arr);
1329
1330                 return $o;
1331         }
1332 }
1333
1334
1335 if(! function_exists('get_birthdays')) {
1336         function get_birthdays() {
1337
1338                 $a = get_app();
1339                 $o = '';
1340
1341                 if(! local_user() || $a->is_mobile || $a->is_tablet)
1342                         return $o;
1343
1344 //              $mobile_detect = new Mobile_Detect();
1345 //              $is_mobile = $mobile_detect->isMobile() || $mobile_detect->isTablet();
1346
1347 //              if($is_mobile)
1348 //                      return $o;
1349
1350                 $bd_format = t('g A l F d') ; // 8 AM Friday January 18
1351                 $bd_short = t('F d');
1352
1353                 $r = q("SELECT `event`.*, `event`.`id` AS `eid`, `contact`.* FROM `event`
1354                                 LEFT JOIN `contact` ON `contact`.`id` = `event`.`cid`
1355                                 WHERE `event`.`uid` = %d AND `type` = 'birthday' AND `start` < '%s' AND `finish` > '%s'
1356                                 ORDER BY `start` ASC ",
1357                                 intval(local_user()),
1358                                 dbesc(datetime_convert('UTC','UTC','now + 6 days')),
1359                                 dbesc(datetime_convert('UTC','UTC','now'))
1360                 );
1361
1362                 if($r && count($r)) {
1363                         $total = 0;
1364                         $now = strtotime('now');
1365                         $cids = array();
1366
1367                         $istoday = false;
1368                         foreach($r as $rr) {
1369                                 if(strlen($rr['name']))
1370                                         $total ++;
1371                                 if((strtotime($rr['start'] . ' +00:00') < $now) && (strtotime($rr['finish'] . ' +00:00') > $now))
1372                                         $istoday = true;
1373                         }
1374                         $classtoday = $istoday ? ' birthday-today ' : '';
1375                         if($total) {
1376                                 foreach($r as &$rr) {
1377                                         if(! strlen($rr['name']))
1378                                                 continue;
1379
1380                                         // avoid duplicates
1381
1382                                         if(in_array($rr['cid'],$cids))
1383                                                 continue;
1384                                         $cids[] = $rr['cid'];
1385
1386                                         $today = (((strtotime($rr['start'] . ' +00:00') < $now) && (strtotime($rr['finish'] . ' +00:00') > $now)) ? true : false);
1387                                         $sparkle = '';
1388                                         $url = $rr['url'];
1389                                         if($rr['network'] === NETWORK_DFRN) {
1390                                                 $sparkle = " sparkle";
1391                                                 $url = $a->get_baseurl() . '/redir/'  . $rr['cid'];
1392                                         }
1393
1394                                         $rr['link'] = $url;
1395                                         $rr['title'] = $rr['name'];
1396                                         $rr['date'] = day_translate(datetime_convert('UTC', $a->timezone, $rr['start'], $rr['adjust'] ? $bd_format : $bd_short)) . (($today) ?  ' ' . t('[today]') : '');
1397                                         $rr['startime'] = Null;
1398                                         $rr['today'] = $today;
1399
1400                                 }
1401                         }
1402                 }
1403                 $tpl = get_markup_template("birthdays_reminder.tpl");
1404                 return replace_macros($tpl, array(
1405                         '$baseurl' => $a->get_baseurl(),
1406                         '$classtoday' => $classtoday,
1407                         '$count' => $total,
1408                         '$event_reminders' => t('Birthday Reminders'),
1409                         '$event_title' => t('Birthdays this week:'),
1410                         '$events' => $r,
1411                         '$lbr' => '{',  // raw brackets mess up if/endif macro processing
1412                         '$rbr' => '}'
1413
1414                 ));
1415         }
1416 }
1417
1418
1419 if(! function_exists('get_events')) {
1420         function get_events() {
1421
1422                 require_once('include/bbcode.php');
1423
1424                 $a = get_app();
1425
1426                 if(! local_user() || $a->is_mobile || $a->is_tablet)
1427                         return $o;
1428
1429
1430 //              $mobile_detect = new Mobile_Detect();
1431 //              $is_mobile = $mobile_detect->isMobile() || $mobile_detect->isTablet();
1432
1433 //              if($is_mobile)
1434 //                      return $o;
1435
1436                 $bd_format = t('g A l F d') ; // 8 AM Friday January 18
1437                 $bd_short = t('F d');
1438
1439                 $r = q("SELECT `event`.* FROM `event`
1440                                 WHERE `event`.`uid` = %d AND `type` != 'birthday' AND `start` < '%s' AND `start` > '%s'
1441                                 ORDER BY `start` ASC ",
1442                                 intval(local_user()),
1443                                 dbesc(datetime_convert('UTC','UTC','now + 6 days')),
1444                                 dbesc(datetime_convert('UTC','UTC','now - 1 days'))
1445                 );
1446
1447                 if($r && count($r)) {
1448                         $now = strtotime('now');
1449                         $istoday = false;
1450                         foreach($r as $rr) {
1451                                 if(strlen($rr['name']))
1452                                         $total ++;
1453
1454                                 $strt = datetime_convert('UTC',$rr['convert'] ? $a->timezone : 'UTC',$rr['start'],'Y-m-d');
1455                                 if($strt === datetime_convert('UTC',$a->timezone,'now','Y-m-d'))
1456                                         $istoday = true;
1457                         }
1458                         $classtoday = (($istoday) ? 'event-today' : '');
1459
1460
1461                         foreach($r as &$rr) {
1462                                 if($rr['adjust'])
1463                                         $md = datetime_convert('UTC',$a->timezone,$rr['start'],'Y/m');
1464                                 else
1465                                         $md = datetime_convert('UTC','UTC',$rr['start'],'Y/m');
1466                                 $md .= "/#link-".$rr['id'];
1467
1468                                 $title = substr(strip_tags(bbcode($rr['desc'])),0,32) . '... ';
1469                                 if(! $title)
1470                                         $title = t('[No description]');
1471
1472                                 $strt = datetime_convert('UTC',$rr['convert'] ? $a->timezone : 'UTC',$rr['start']);
1473                                 $today = ((substr($strt,0,10) === datetime_convert('UTC',$a->timezone,'now','Y-m-d')) ? true : false);
1474
1475                                 $rr['link'] = $md;
1476                                 $rr['title'] = $title;
1477                                 $rr['date'] = day_translate(datetime_convert('UTC', $rr['adjust'] ? $a->timezone : 'UTC', $rr['start'], $bd_format)) . (($today) ?  ' ' . t('[today]') : '');
1478                                 $rr['startime'] = $strt;
1479                                 $rr['today'] = $today;
1480                         }
1481                 }
1482
1483                 $tpl = get_markup_template("events_reminder.tpl");
1484                 return replace_macros($tpl, array(
1485                         '$baseurl' => $a->get_baseurl(),
1486                         '$classtoday' => $classtoday,
1487                         '$count' => count($r),
1488                         '$event_reminders' => t('Event Reminders'),
1489                         '$event_title' => t('Events this week:'),
1490                         '$events' => $r,
1491                 ));
1492         }
1493 }
1494
1495
1496 /**
1497  *
1498  * Wrap calls to proc_close(proc_open()) and call hook
1499  * so plugins can take part in process :)
1500  *
1501  * args:
1502  * $cmd program to run
1503  *  next args are passed as $cmd command line
1504  *
1505  * e.g.: proc_run("ls","-la","/tmp");
1506  *
1507  * $cmd and string args are surrounded with ""
1508  */
1509
1510 if(! function_exists('proc_run')) {
1511         function proc_run($cmd){
1512
1513                 $a = get_app();
1514
1515                 $args = func_get_args();
1516
1517                 $newargs = array();
1518                 if(! count($args))
1519                         return;
1520
1521                 // expand any arrays
1522
1523                 foreach($args as $arg) {
1524                         if(is_array($arg)) {
1525                                 foreach($arg as $n) {
1526                                         $newargs[] = $n;
1527                                 }
1528                         }
1529                         else
1530                                 $newargs[] = $arg;
1531                 }
1532
1533                 $args = $newargs;
1534
1535                 $arr = array('args' => $args, 'run_cmd' => true);
1536
1537                 call_hooks("proc_run", $arr);
1538                 if(! $arr['run_cmd'])
1539                         return;
1540
1541                 if(count($args) && $args[0] === 'php')
1542                         $args[0] = ((x($a->config,'php_path')) && (strlen($a->config['php_path'])) ? $a->config['php_path'] : 'php');
1543
1544         // add baseurl to args. cli scripts can't construct it
1545         $args[] = $a->get_baseurl();
1546
1547         for($x = 0; $x < count($args); $x ++)
1548                         $args[$x] = escapeshellarg($args[$x]);
1549
1550
1551
1552                 $cmdline = implode($args," ");
1553                 if(get_config('system','proc_windows'))
1554                         proc_close(proc_open('cmd /c start /b ' . $cmdline,array(),$foo,dirname(__FILE__)));
1555                 else
1556                         proc_close(proc_open($cmdline." &",array(),$foo,dirname(__FILE__)));
1557         }
1558 }
1559
1560 if(! function_exists('current_theme')) {
1561         function current_theme(){
1562                 $app_base_themes = array('duepuntozero', 'dispy', 'quattro');
1563
1564                 $a = get_app();
1565
1566 //              $mobile_detect = new Mobile_Detect();
1567 //              $is_mobile = $mobile_detect->isMobile() || $mobile_detect->isTablet();
1568                 $is_mobile = $a->is_mobile || $a->is_tablet;
1569
1570                 if($is_mobile) {
1571                         if(isset($_SESSION['show-mobile']) && !$_SESSION['show-mobile']) {
1572                                 $system_theme = '';
1573                                 $theme_name = '';
1574                         }
1575                         else {
1576                                 $system_theme = ((isset($a->config['system']['mobile-theme'])) ? $a->config['system']['mobile-theme'] : '');
1577                                 $theme_name = ((isset($_SESSION) && x($_SESSION,'mobile-theme')) ? $_SESSION['mobile-theme'] : $system_theme);
1578
1579                                 if($theme_name === '---') {
1580                                         // user has selected to have the mobile theme be the same as the normal one
1581                                         $system_theme = '';
1582                                         $theme_name = '';
1583                                 }
1584                         }
1585                 }
1586                 if(!$is_mobile || ($system_theme === '' && $theme_name === '')) {
1587                         $system_theme = ((isset($a->config['system']['theme'])) ? $a->config['system']['theme'] : '');
1588                         $theme_name = ((isset($_SESSION) && x($_SESSION,'theme')) ? $_SESSION['theme'] : $system_theme);
1589                 }
1590
1591                 if($theme_name &&
1592                                 (file_exists('view/theme/' . $theme_name . '/style.css') ||
1593                                                 file_exists('view/theme/' . $theme_name . '/style.php')))
1594                         return($theme_name);
1595
1596                 foreach($app_base_themes as $t) {
1597                         if(file_exists('view/theme/' . $t . '/style.css')||
1598                                         file_exists('view/theme/' . $t . '/style.php'))
1599                                 return($t);
1600                 }
1601
1602                 $fallback = array_merge(glob('view/theme/*/style.css'),glob('view/theme/*/style.php'));
1603                 if(count($fallback))
1604                         return (str_replace('view/theme/','', substr($fallback[0],0,-10)));
1605
1606         }
1607 }
1608
1609 /*
1610  * Return full URL to theme which is currently in effect.
1611 * Provide a sane default if nothing is chosen or the specified theme does not exist.
1612 */
1613 if(! function_exists('current_theme_url')) {
1614         function current_theme_url() {
1615                 global $a;
1616                 $t = current_theme();
1617                 if (file_exists('view/theme/' . $t . '/style.php'))
1618                         return($a->get_baseurl() . '/view/theme/' . $t . '/style.pcss');
1619                 return($a->get_baseurl() . '/view/theme/' . $t . '/style.css');
1620         }
1621 }
1622
1623 if(! function_exists('feed_birthday')) {
1624         function feed_birthday($uid,$tz) {
1625
1626                 /**
1627                  *
1628                  * Determine the next birthday, but only if the birthday is published
1629                  * in the default profile. We _could_ also look for a private profile that the
1630                  * recipient can see, but somebody could get mad at us if they start getting
1631                  * public birthday greetings when they haven't made this info public.
1632                  *
1633                  * Assuming we are able to publish this info, we are then going to convert
1634                  * the start time from the owner's timezone to UTC.
1635                  *
1636                  * This will potentially solve the problem found with some social networks
1637                  * where birthdays are converted to the viewer's timezone and salutations from
1638                  * elsewhere in the world show up on the wrong day. We will convert it to the
1639                  * viewer's timezone also, but first we are going to convert it from the birthday
1640                  * person's timezone to GMT - so the viewer may find the birthday starting at
1641                  * 6:00PM the day before, but that will correspond to midnight to the birthday person.
1642                  *
1643                  */
1644
1645
1646                 $birthday = '';
1647
1648                 if(! strlen($tz))
1649                         $tz = 'UTC';
1650
1651                 $p = q("SELECT `dob` FROM `profile` WHERE `is-default` = 1 AND `uid` = %d LIMIT 1",
1652                                 intval($uid)
1653                 );
1654
1655                 if($p && count($p)) {
1656                         $tmp_dob = substr($p[0]['dob'],5);
1657                         if(intval($tmp_dob)) {
1658                                 $y = datetime_convert($tz,$tz,'now','Y');
1659                                 $bd = $y . '-' . $tmp_dob . ' 00:00';
1660                                 $t_dob = strtotime($bd);
1661                                 $now = strtotime(datetime_convert($tz,$tz,'now'));
1662                                 if($t_dob < $now)
1663                                         $bd = $y + 1 . '-' . $tmp_dob . ' 00:00';
1664                                 $birthday = datetime_convert($tz,'UTC',$bd,ATOM_TIME);
1665                         }
1666                 }
1667
1668                 return $birthday;
1669         }
1670 }
1671
1672 if(! function_exists('is_site_admin')) {
1673         function is_site_admin() {
1674                 $a = get_app();
1675                 if(local_user() && x($a->user,'email') && x($a->config,'admin_email') && ($a->user['email'] === $a->config['admin_email']))
1676                         return true;
1677                 return false;
1678         }
1679 }
1680
1681
1682 if(! function_exists('load_contact_links')) {
1683         function load_contact_links($uid) {
1684
1685                 $a = get_app();
1686
1687                 $ret = array();
1688
1689                 if(! $uid || x($a->contacts,'empty'))
1690                         return;
1691
1692                 $r = q("SELECT `id`,`network`,`url`,`thumb` FROM `contact` WHERE `uid` = %d AND `self` = 0 AND `blocked` = 0 ",
1693                                 intval($uid)
1694                 );
1695                 if(count($r)) {
1696                         foreach($r as $rr){
1697                                 $url = normalise_link($rr['url']);
1698                                 $ret[$url] = $rr;
1699                         }
1700                 }
1701                 else
1702                         $ret['empty'] = true;
1703                 $a->contacts = $ret;
1704                 return;
1705         }
1706 }
1707
1708 if(! function_exists('profile_tabs')){
1709         function profile_tabs($a, $is_owner=False, $nickname=Null){
1710                 //echo "<pre>"; var_dump($a->user); killme();
1711
1712                 if (is_null($nickname))
1713                         $nickname  = $a->user['nickname'];
1714
1715                 if(x($_GET,'tab'))
1716                         $tab = notags(trim($_GET['tab']));
1717
1718                 $url = $a->get_baseurl() . '/profile/' . $nickname;
1719
1720                 $tabs = array(
1721                         array(
1722                                 'label'=>t('Status'),
1723                                 'url' => $url,
1724                                 'sel' => ((!isset($tab)&&$a->argv[0]=='profile')?'active':''),
1725                                 'title' => t('Status Messages and Posts'),
1726                                 'id' => 'status-tab',
1727                         ),
1728                         array(
1729                                 'label' => t('Profile'),
1730                                 'url'   => $url.'/?tab=profile',
1731                                 'sel'   => ((isset($tab) && $tab=='profile')?'active':''),
1732                                 'title' => t('Profile Details'),
1733                                 'id' => 'profile-tab',
1734                         ),
1735                         array(
1736                                 'label' => t('Photos'),
1737                                 'url'   => $a->get_baseurl() . '/photos/' . $nickname,
1738                                 'sel'   => ((!isset($tab)&&$a->argv[0]=='photos')?'active':''),
1739                                 'title' => t('Photo Albums'),
1740                                 'id' => 'photo-tab',
1741                         ),
1742                 );
1743
1744                 if ($is_owner){
1745                         $tabs[] = array(
1746                                 'label' => t('Events'),
1747                                 'url'   => $a->get_baseurl() . '/events',
1748                                 'sel'   =>((!isset($tab)&&$a->argv[0]=='events')?'active':''),
1749                                 'title' => t('Events and Calendar'),
1750                                 'id' => 'events-tab',
1751                         );
1752                         $tabs[] = array(
1753                                 'label' => t('Personal Notes'),
1754                                 'url'   => $a->get_baseurl() . '/notes',
1755                                 'sel'   =>((!isset($tab)&&$a->argv[0]=='notes')?'active':''),
1756                                 'title' => t('Only You Can See This'),
1757                                 'id' => 'notes-tab',
1758                         );
1759                 }
1760
1761
1762                 $arr = array('is_owner' => $is_owner, 'nickname' => $nickname, 'tab' => (($tab) ? $tab : false), 'tabs' => $tabs);
1763                 call_hooks('profile_tabs', $arr);
1764
1765                 $tpl = get_markup_template('common_tabs.tpl');
1766
1767                 return replace_macros($tpl,array('$tabs' => $arr['tabs']));
1768         }
1769 }
1770
1771 function get_my_url() {
1772         if(x($_SESSION,'my_url'))
1773                 return $_SESSION['my_url'];
1774         return false;
1775 }
1776
1777 function zrl_init(&$a) {
1778         $tmp_str = get_my_url();
1779         if(validate_url($tmp_str)) {
1780                 proc_run('php','include/gprobe.php',bin2hex($tmp_str));
1781                 $arr = array('zrl' => $tmp_str, 'url' => $a->cmd);
1782                 call_hooks('zrl_init',$arr);
1783         }
1784 }
1785
1786 function zrl($s,$force = false) {
1787         if(! strlen($s))
1788                 return $s;
1789         if((! strpos($s,'/profile/')) && (! $force))
1790                 return $s;
1791         if($force && substr($s,-1,1) !== '/')
1792                 $s = $s . '/';
1793         $achar = strpos($s,'?') ? '&' : '?';
1794         $mine = get_my_url();
1795         if($mine and ! link_compare($mine,$s))
1796                 return $s . $achar . 'zrl=' . urlencode($mine);
1797         return $s;
1798 }
1799
1800 /**
1801 * returns querystring as string from a mapped array
1802 *
1803 * @param params Array
1804 * @return string
1805 */
1806 function build_querystring($params, $name=null) {
1807     $ret = "";
1808     foreach($params as $key=>$val) {
1809         if(is_array($val)) {
1810             if($name==null) {
1811                 $ret .= build_querystring($val, $key);
1812             } else {
1813                 $ret .= build_querystring($val, $name."[$key]");
1814             }
1815         } else {
1816             $val = urlencode($val);
1817             if($name!=null) {
1818                 $ret.=$name."[$key]"."=$val&";
1819             } else {
1820                 $ret.= "$key=$val&";
1821             }
1822         }
1823     }
1824     return $ret;
1825 }
1826
1827 /**
1828 * Returns the complete URL of the current page, e.g.: http(s)://something.com/network
1829 *
1830 * Taken from http://webcheatsheet.com/php/get_current_page_url.php
1831 */
1832 function curPageURL() {
1833         $pageURL = 'http';
1834         if ($_SERVER["HTTPS"] == "on") {$pageURL .= "s";}
1835         $pageURL .= "://";
1836         if ($_SERVER["SERVER_PORT"] != "80" && $_SERVER["SERVER_PORT"] != "443") {
1837                 $pageURL .= $_SERVER["SERVER_NAME"].":".$_SERVER["SERVER_PORT"].$_SERVER["REQUEST_URI"];
1838         } else {
1839                 $pageURL .= $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
1840         }
1841         return $pageURL;
1842 }
1843
1844 function random_digits($digits) {
1845         $rn = '';
1846         for($i = 0; $i < $digits; $i++) {
1847                 $rn .= rand(0,9);
1848         }
1849         return $rn;
1850 }
1851
1852 function get_cachefile($file, $writemode = true) {
1853         $cache = get_config("system","itemcache");
1854
1855         if ($cache == "")
1856                 return("");
1857
1858         if (!is_dir($cache))
1859                 return("");
1860
1861         $subfolder = $cache."/".substr($file, 0, 2);
1862
1863         $cachepath = $subfolder."/".$file;
1864
1865         if ($writemode) {
1866                 if (!is_dir($subfolder)) {
1867                         mkdir($subfolder);
1868                         chmod($subfolder, 0777);
1869                 }
1870         }
1871
1872         return($cachepath);
1873 }
1874
1875 function clear_cache($basepath = "", $path = "") {
1876         if ($path == "") {
1877                 $basepath = get_config('system','itemcache');
1878                 $path = $basepath;
1879         }
1880
1881         if (($path == "") OR (!is_dir($path)))
1882                 return;
1883
1884         if (substr(realpath($path), 0, strlen($basepath)) != $basepath)
1885                 return;
1886
1887         $cachetime = (int)get_config('system','itemcache_duration');
1888         if ($cachetime == 0)
1889                 $cachetime = 86400;
1890
1891         if ($dh = opendir($path)) {
1892                 while (($file = readdir($dh)) !== false) {
1893                         $fullpath = $path."/".$file;
1894                         if ((filetype($fullpath) == "dir") and ($file != ".") and ($file != ".."))
1895                                 clear_cache($basepath, $fullpath);
1896                         if ((filetype($fullpath) == "file") and filectime($fullpath) < (time() - $cachetime))
1897                                 unlink($fullpath);
1898                 }
1899                 closedir($dh);
1900         }
1901 }