5 define ( 'BUILD_ID' , 1003 );
7 define ( 'EOL', "<br />\r\n");
8 define ( 'ATOM_TIME', 'Y-m-d\TH:i:s\Z' );
10 define ( 'REGISTER_CLOSED', 0);
11 define ( 'REGISTER_APPROVE', 1);
12 define ( 'REGISTER_OPEN', 2);
16 define ( 'REL_VIP', 1);
17 define ( 'REL_FAN', 2);
18 define ( 'REL_BUD', 3);
20 define ( 'NOTIFY_INTRO', 0x0001 );
21 define ( 'NOTIFY_CONFIRM', 0x0002 );
22 define ( 'NOTIFY_WALL', 0x0004 );
23 define ( 'NOTIFY_COMMENT', 0x0008 );
24 define ( 'NOTIFY_MAIL', 0x0010 );
26 define ( 'NAMESPACE_DFRN' , 'http://purl.org/macgirvin/dfrn/1.0' );
27 define ( 'NAMESPACE_THREAD' , 'http://purl.org/syndication/thread/1.0' );
28 define ( 'NAMESPACE_TOMB' , 'http://purl.org/atompub/tombstones/1.0' );
29 define ( 'NAMESPACE_ACTIVITY', 'http://activitystrea.ms/spec/1.0/' );
30 define ( 'NAMESPACE_ACTIVITY_SCHEMA', 'http://activitystrea.ms/schema/1.0/');
32 define ( 'ACTIVITY_LIKE', NAMESPACE_ACTIVITY_SCHEMA . 'like' );
33 define ( 'ACTIVITY_DISLIKE', NAMESPACE_DFRN . '/dislike' );
34 define ( 'ACTIVITY_OBJ_HEART', NAMESPACE_DFRN . '/heart' );
36 define ( 'ACTIVITY_FRIEND', NAMESPACE_ACTIVITY_SCHEMA . 'make-friend' );
37 define ( 'ACTIVITY_POST', NAMESPACE_ACTIVITY_SCHEMA . 'post' );
38 define ( 'ACTIVITY_UPDATE', NAMESPACE_ACTIVITY_SCHEMA . 'update' );
40 define ( 'ACTIVITY_OBJ_COMMENT', NAMESPACE_ACTIVITY_SCHEMA . 'comment' );
41 define ( 'ACTIVITY_OBJ_NOTE', NAMESPACE_ACTIVITY_SCHEMA . 'note' );
42 define ( 'ACTIVITY_OBJ_PERSON', NAMESPACE_ACTIVITY_SCHEMA . 'person' );
43 define ( 'ACTIVITY_OBJ_PHOTO', NAMESPACE_ACTIVITY_SCHEMA . 'photo' );
44 define ( 'ACTIVITY_OBJ_P_PHOTO', NAMESPACE_ACTIVITY_SCHEMA . 'profile-photo' );
45 define ( 'ACTIVITY_OBJ_ALBUM', NAMESPACE_ACTIVITY_SCHEMA . 'photo-album' );
47 define ( 'GRAVITY_PARENT', 0);
48 define ( 'GRAVITY_LIKE', 3);
49 define ( 'GRAVITY_COMMENT', 6);
52 if(! class_exists('App')) {
55 public $module_loaded = false;
64 public $error = false;
78 function __construct() {
80 $this->config = array();
81 $this->page = array();
82 $this->pager= array();
84 $this->scheme = ((isset($_SERVER['HTTPS'])
85 && ($_SERVER['HTTPS'])) ? 'https' : 'http' );
86 $this->hostname = str_replace('www.','',
87 $_SERVER['SERVER_NAME']);
88 set_include_path("include/$this->hostname"
89 . PATH_SEPARATOR . 'include'
90 . PATH_SEPARATOR . '.' );
92 if(substr($_SERVER['QUERY_STRING'],0,2) == "q=")
93 $_SERVER['QUERY_STRING'] = substr($_SERVER['QUERY_STRING'],2);
94 $this->cmd = trim($_GET['q'],'/');
97 $this->argv = explode('/',$this->cmd);
98 $this->argc = count($this->argv);
99 if((array_key_exists('0',$this->argv)) && strlen($this->argv[0])) {
100 $this->module = $this->argv[0];
103 $this->module = 'home';
106 if($this->cmd == '.well-known/host-meta')
107 require_once('include/hostxrd.php');
109 $this->pager['page'] = ((x($_GET,'page')) ? $_GET['page'] : 1);
110 $this->pager['itemspage'] = 50;
111 $this->pager['start'] = ($this->pager['page'] * $this->pager['itemspage']) - $this->pager['itemspage'];
112 $this->pager['total'] = 0;
115 function get_baseurl($ssl = false) {
116 if(strlen($this->baseurl))
117 return $this->baseurl;
119 $this->baseurl = (($ssl) ? 'https' : $this->scheme) . "://" . $this->hostname
120 . ((isset($this->path) && strlen($this->path))
121 ? '/' . $this->path : '' );
122 return $this->baseurl;
125 function set_baseurl($url) {
126 $this->baseurl = $url;
127 $this->hostname = basename($url);
130 function get_hostname() {
131 return $this->hostname;
134 function set_hostname($h) {
135 $this->hostname = $h;
138 function set_path($p) {
139 $this->path = ltrim(trim($p),'/');
142 function get_path() {
146 function set_pager_total($n) {
147 $this->pager['total'] = intval($n);
150 function set_pager_itemspage($n) {
151 $this->pager['itemspage'] = intval($n);
152 $this->pager['start'] = ($this->pager['page'] * $this->pager['itemspage']) - $this->pager['itemspage'];
156 function init_pagehead() {
157 $tpl = load_view_file("view/head.tpl");
158 $this->page['htmlhead'] = replace_macros($tpl,array(
159 '$baseurl' => $this->get_baseurl()
166 if(! function_exists('x')) {
167 function x($s,$k = NULL) {
169 if((is_array($s)) && (array_key_exists($k,$s))) {
187 if(! function_exists('system_unavailable')) {
188 function system_unavailable() {
189 include('system_unavailable.php');
194 if(! function_exists('check_config')) {
195 function check_config(&$a) {
197 load_config('system');
199 $build = get_config('system','build');
201 $build = set_config('system','build',BUILD_ID);
203 $url = get_config('system','url');
205 $url = set_config('system','url',$a->get_baseurl());
207 if($build != BUILD_ID) {
208 $stored = intval($build);
209 $current = intval(BUILD_ID);
210 if(($stored < $current) && file_exists('update.php')) {
212 // We're reporting a different version than what is currently installed.
213 // Run any existing update scripts to bring the database up to current.
215 require_once('update.php');
216 for($x = $stored; $x < $current; $x ++) {
217 if(function_exists('update_' . $x)) {
218 $func = 'update_' . $x;
222 set_config('system','build', BUILD_ID);
230 if(! function_exists('replace_macros')) {
231 function replace_macros($s,$r) {
236 if(is_array($r) && count($r)) {
237 foreach ($r as $k => $v ) {
242 return str_replace($search,$replace,$s);
246 if(! function_exists('load_translation_table')) {
247 function load_translation_table($lang) {
252 if(! function_exists('t')) {
257 return $a->strings[$s];
261 if(! function_exists('fetch_url')) {
262 function fetch_url($url,$binary = false) {
263 $ch = curl_init($url);
264 if(! $ch) return false;
266 curl_setopt($ch, CURLOPT_HEADER, 0);
267 curl_setopt($ch, CURLOPT_FOLLOWLOCATION,true);
268 curl_setopt($ch, CURLOPT_MAXREDIRS,8);
269 curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
270 $prx = get_config('system','proxy');
272 curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 1);
273 curl_setopt($ch, CURLOPT_PROXY, $prx);
274 $prxusr = get_config('system','proxyuser');
276 curl_setopt($ch, CURLOPT_PROXYUSERPWD, $prxusr);
279 curl_setopt($ch, CURLOPT_BINARYTRANSFER,1);
287 if(! function_exists('post_url')) {
288 function post_url($url,$params) {
289 $ch = curl_init($url);
290 if(! $ch) return false;
292 curl_setopt($ch, CURLOPT_HEADER, 0);
293 curl_setopt($ch, CURLOPT_FOLLOWLOCATION,true);
294 curl_setopt($ch, CURLOPT_MAXREDIRS,8);
295 curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
296 curl_setopt($ch, CURLOPT_POST,1);
297 curl_setopt($ch, CURLOPT_POSTFIELDS,$params);
298 $prx = get_config('system','proxy');
300 curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 1);
301 curl_setopt($ch, CURLOPT_PROXY, $prx);
302 $prxusr = get_config('system','proxyuser');
304 curl_setopt($ch, CURLOPT_PROXYUSERPWD, $prxusr);
313 if(! function_exists('random_string')) {
314 function random_string() {
315 return(hash('sha256',uniqid(rand(),true)));
318 if(! function_exists('notags')) {
319 function notags($string) {
320 // protect against :<> with high-bit set
321 return(str_replace(array("<",">","\xBA","\xBC","\xBE"), array('[',']','','',''), $string));
324 if(! function_exists('escape_tags')) {
325 function escape_tags($string) {
327 return(htmlspecialchars($string));
330 if(! function_exists('login')) {
331 function login($register = false) {
333 $register_html = (($register) ? load_view_file("view/register-link.tpl") : "");
336 if(x($_SESSION,'authenticated')) {
337 $o = load_view_file("view/logout.tpl");
340 $o = load_view_file("view/login.tpl");
342 $o = replace_macros($o,array('$register_html' => $register_html ));
348 if(! function_exists('autoname')) {
349 function autoname($len) {
351 $vowels = array('a','a','ai','au','e','e','e','ee','ea','i','ie','o','ou','u');
352 if(mt_rand(0,5) == 4)
370 's','sc','sh','sm','sp','st',
378 $midcons = array('ck','ct','gn','ld','lf','lm','lt','mb','mm', 'mn','mp',
379 'nd','ng','nk','nt','rn','rp','rt');
381 $noend = array('bl', 'br', 'cl','cr','dr','fl','fr','gl','gr',
382 'kh', 'kl','kr','mn','pl','pr','rh','tr','qu','wh');
384 $start = mt_rand(0,2);
392 for ($x = 0; $x < $len; $x ++) {
393 $r = mt_rand(0,count($table) - 1);
396 if($table == $vowels)
397 $table = array_merge($cons,$midcons);
403 $word = substr($word,0,$len);
405 foreach($noend as $noe) {
406 if((strlen($word) > 2) && (substr($word,-2) == $noe)) {
407 $word = substr($word,0,-1);
411 if(substr($word,-1) == 'q')
412 $word = substr($word,0,-1);
416 if(! function_exists('killme')) {
418 session_write_close();
422 if(! function_exists('goaway')) {
423 function goaway($s) {
424 header("Location: $s");
429 if(! function_exists('xml_status')) {
430 function xml_status($st) {
431 header( "Content-type: text/xml" );
432 echo '<?xml version="1.0" encoding="UTF-8"?>'."\r\n";
433 echo "<result><status>$st</status></result>\r\n";
437 if(! function_exists('local_user')) {
438 function local_user() {
439 if((x($_SESSION,'authenticated')) && (x($_SESSION,'uid')))
440 return $_SESSION['uid'];
444 if(! function_exists('remote_user')) {
445 function remote_user() {
446 if((x($_SESSION,'authenticated')) && (x($_SESSION,'visitor_id')))
447 return $_SESSION['visitor_id'];
451 if(! function_exists('notice')) {
452 function notice($s) {
454 $_SESSION['sysmsg'] .= $s;
458 if(! function_exists('get_max_import_size')) {
459 function get_max_import_size() {
461 return ((x($a->config,'max_import_size')) ? $a->config['max_import_size'] : 0 );
464 if(! function_exists('xmlify')) {
465 function xmlify($str) {
468 for($x = 0; $x < strlen($str); $x ++) {
499 $buffer = trim($buffer);
503 if(! function_exists('unxmlify')) {
504 function unxmlify($s) {
505 $ret = str_replace('&','&', $s);
506 $ret = str_replace(array('<','>','"','''),array('<','>','"',"'"),$ret);
510 if(! function_exists('hex2bin')) {
511 function hex2bin($s) {
512 return(pack("H*",$s));
516 if(! function_exists('paginate')) {
517 function paginate(&$a) {
519 $stripped = ereg_replace("(&page=[0-9]*)","",$_SERVER['QUERY_STRING']);
520 $stripped = str_replace('q=','',$stripped);
521 $stripped = trim($stripped,'/');
522 $url = $a->get_baseurl() . '/' . $stripped;
525 if($a->pager['total'] > $a->pager['itemspage']) {
526 $o .= '<div class="pager">';
527 if($a->pager['page'] != 1)
528 $o .= '<span class="pager_prev">'."<a href=\"$url".'&page='.($a->pager['page'] - 1).'">' . t('prev') . '</a></span> ';
530 $o .= "<span class=\"pager_first\"><a href=\"$url"."&page=1\">" . t('first') . "</a></span> ";
532 $numpages = $a->pager['total'] / $a->pager['itemspage'];
535 $numstop = $numpages;
538 $numstart = (($pagenum > 7) ? ($pagenum - 7) : 1);
539 $numstop = (($pagenum > ($numpages - 7)) ? $numpages : ($numstart + 14));
542 for($i = $numstart; $i <= $numstop; $i++){
543 if($i == $a->pager['page'])
544 $o .= '<span class="pager_current">'.(($i < 10) ? ' '.$i : $i);
546 $o .= "<span class=\"pager_n\"><a href=\"$url"."&page=$i\">".(($i < 10) ? ' '.$i : $i)."</a>";
550 if(($a->pager['total'] % $a->pager['itemspage']) != 0) {
551 if($i == $a->pager['page'])
552 $o .= '<span class="pager_current">'.(($i < 10) ? ' '.$i : $i);
554 $o .= "<span class=\"pager_n\"><a href=\"$url"."&page=$i\">".(($i < 10) ? ' '.$i : $i)."</a>";
558 $lastpage = (($numpages > intval($numpages)) ? intval($numpages)+1 : $numpages);
559 $o .= "<span class=\"pager_last\"><a href=\"$url"."&page=$lastpage\">" . t('last') . "</a></span> ";
561 if(($a->pager['total'] - ($a->pager['itemspage'] * $a->pager['page'])) > 0)
562 $o .= '<span class="pager_next">'."<a href=\"$url"."&page=".($a->pager['page'] + 1).'">' . t('next') . '</a></span>';
563 $o .= '</div>'."\r\n";
568 if(! function_exists('expand_acl')) {
569 function expand_acl($s) {
572 $a = explode('<',$s);
573 for($x = 0; $x < count($a); $x ++) {
574 $a[$x] = intval(str_replace(array('<','>'),array('',''),$a[$x]));
581 if(! function_exists('sanitise_acl')) {
582 function sanitise_acl(&$item) {
584 $item = '<' . intval(notags(trim($item))) . '>';
589 if(! function_exists('load_config')) {
590 function load_config($family) {
592 $r = q("SELECT * FROM `config` WHERE `cat` = '%s'",
598 $a->config[$family][$k] = $rr['v'];
604 if(! function_exists('get_config')) {
605 function get_config($family, $key, $instore = false) {
610 if(isset($a->config[$family][$key])) {
611 if($a->config[$family][$key] === '!<unset>!') {
614 return $a->config[$family][$key];
617 $ret = q("SELECT `v` FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
622 $a->config[$family][$key] = $ret[0]['v'];
626 $a->config[$family][$key] = '!<unset>!';
631 if(! function_exists('set_config')) {
632 function set_config($family,$key,$value) {
635 $a->config[$family][$key] = $value;
637 if(get_config($family,$key,true) === false) {
638 $ret = q("INSERT INTO `config` ( `cat`, `k`, `v` ) VALUES ( '%s', '%s', '%s' ) ",
647 $ret = q("UPDATE `config` SET `v` = '%s' WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
657 if(! function_exists('convert_xml_element_to_array')) {
658 function convert_xml_element_to_array($xml_element, &$recursion_depth=0) {
660 // If we're getting too deep, bail out
661 if ($recursion_depth > 512) {
665 if (!is_string($xml_element) &&
666 !is_array($xml_element) &&
667 (get_class($xml_element) == 'SimpleXMLElement')) {
668 $xml_element_copy = $xml_element;
669 $xml_element = get_object_vars($xml_element);
672 if (is_array($xml_element)) {
673 $result_array = array();
674 if (count($xml_element) <= 0) {
675 return (trim(strval($xml_element_copy)));
678 foreach($xml_element as $key=>$value) {
681 $result_array[strtolower($key)] =
682 convert_xml_element_to_array($value, $recursion_depth);
685 if ($recursion_depth == 0) {
686 $temp_array = $result_array;
687 $result_array = array(
688 strtolower($xml_element_copy->getName()) => $temp_array,
692 return ($result_array);
695 return (trim(strval($xml_element)));
700 if(! function_exists('webfinger')) {
701 function webfinger($s) {
702 if(! strstr($s,'@')) {
705 $host = substr($s,strpos($s,'@') + 1);
706 $url = 'http://' . $host . '/.well-known/host-meta' ;
707 $xml = fetch_url($url);
710 $h = simplexml_load_string($xml);
711 $arr = convert_xml_element_to_array($h);
713 if(! isset($arr['xrd']['link']))
716 $link = $arr['xrd']['link'];
717 if(! isset($link[0]))
718 $links = array($link);
722 foreach($links as $link)
723 if($link['@attributes']['rel'] && $link['@attributes']['rel'] == 'lrdd')
724 $tpl = $link['@attributes']['template'];
725 if((empty($tpl)) || (! strpos($tpl, '{uri}')))
728 $pxrd = str_replace('{uri}', urlencode('acct://'.$s), $tpl);
730 $xml = fetch_url($pxrd);
733 $h = simplexml_load_string($xml);
734 $arr = convert_xml_element_to_array($h);
736 if(! isset($arr['xrd']['link']))
739 $link = $arr['xrd']['link'];
740 if(! isset($link[0]))
741 $links = array($link);
745 foreach($links as $link)
746 if($link['@attributes']['rel'] == NAMESPACE_DFRN)
747 return $link['@attributes']['href'];
751 if(! function_exists('perms2str')) {
752 function perms2str($p) {
756 array_walk($tmp,'sanitise_acl');
757 $ret = implode('',$tmp);
762 if(! function_exists('item_new_uri')) {
763 function item_new_uri($hostname,$uid) {
767 $hash = random_string();
769 $uri = "urn:X-dfrn:" . $hostname . ':' . $uid . ':' . $hash;
771 $r = q("SELECT `id` FROM `item` WHERE `uri` = '%s' LIMIT 1",
775 } while($dups == true);
779 if(! function_exists('photo_new_resource')) {
780 function photo_new_resource() {
784 $resource = hash('md5',uniqid(mt_rand(),true));
785 $r = q("SELECT `id` FROM `photo` WHERE `resource-id` = '%s' LIMIT 1",
790 } while($found == true);
796 if(! function_exists('get_uid')) {
798 return ((x($_SESSION,'uid')) ? intval($_SESSION['uid']) : 0) ;
801 if(! function_exists('validate_url')) {
802 function validate_url(&$url) {
803 if(substr($url,0,4) != 'http')
804 $url = 'http://' . $url;
805 $h = parse_url($url);
810 if(! checkdnsrr($h['host'], 'ANY')) {
816 if(! function_exists('allowed_url')) {
817 function allowed_url($url) {
819 $h = parse_url($url);
825 $str_allowed = get_config('system','allowed_sites');
831 $host = strtolower($h['host']);
833 // always allow our own site
835 if($host == strtolower($_SERVER['SERVER_NAME']))
838 $fnmatch = function_exists('fnmatch');
839 $allowed = explode(',',$str_allowed);
841 if(count($allowed)) {
842 foreach($allowed as $a) {
843 $pat = strtolower(trim($a));
844 if(($fnmatch && fnmatch($pat,$host)) || ($pat == $host)) {
853 if(! function_exists('allowed_email')) {
854 function allowed_email($email) {
857 $domain = strtolower(substr($email,strpos($email,'@') + 1));
861 $str_allowed = get_config('system','allowed_email');
867 $fnmatch = function_exists('fnmatch');
868 $allowed = explode(',',$str_allowed);
870 if(count($allowed)) {
871 foreach($allowed as $a) {
872 $pat = strtolower(trim($a));
873 if(($fnmatch && fnmatch($pat,$host)) || ($pat == $host)) {
883 if(! function_exists('format_like')) {
884 function format_like($cnt,$arr,$type,$id) {
886 $o .= $arr[0] . (($type == 'like') ? t(' likes this.') : t(' doesn\'t like this.')) . EOL ;
888 $o .= '<span class="fakelink" onclick="openClose(\'' . $type . 'list-' . $id . '\');" >'
889 . $cnt . ' ' . t('people') . '</span> ' . (($type == 'like') ? t('like this.') : t('don\'t like this.')) . EOL ;
890 $total = count($arr);
892 $arr = array_slice($arr,0,74);
894 $arr[count($arr)-1] = t('and') . ' ' . $arr[count($arr)-1];
895 $str = implode(', ', $arr);
897 $str .= t(', and ') . $total - 75 . t(' other people');
898 $str .= (($type == 'like') ? t(' like this.') : t(' don\'t like this.'));
899 $o .= '<div id="' . $type . 'list-' . $id . '" style="display: none;" >' . $str . '</div>';
904 if(! function_exists('load_view_file')) {
905 function load_view_file($s) {
908 $lang = get_config('system','language');
909 if($lang && file_exists("$d/$lang/$b"))
910 return file_get_contents("$d/$lang/$b");
911 return file_get_contents($s);