facebook/facebook.php

   1 <?php
   2 /**
   3  * Name: Facebook Connector
   4  * Version: 1.1
   5  * Author: Mike Macgirvin <http://macgirvin.com/profile/mike>
   6  *         Tobias Hößl <https://github.com/CatoTH/>
   7  */
   8
   9 /**
  10  * Installing the Friendica/Facebook connector
  11  *
  12  * 1. register an API key for your site from developer.facebook.com
  13  *   a. We'd be very happy if you include "Friendica" in the application name
  14  *      to increase name recognition. The Friendica icons are also present
  15  *      in the images directory and may be uploaded as a Facebook app icon.
  16  *      Use images/friendica-16.jpg for the Icon and images/friendica-128.jpg for the Logo.
  17  *   b. The url should be your site URL with a trailing slash.
  18  *      Friendica is a software application and does not require a Privacy Policy
  19  *      or Terms of Service, though your installation of it might. Facebook may require
  20  *      that you provide a Privacy Policy, which we find ironic.
  21  *   c. Set the following values in your .htconfig.php file
  22  *         $a->config['facebook']['appid'] = 'xxxxxxxxxxx';
  23  *         $a->config['facebook']['appsecret'] = 'xxxxxxxxxxxxxxx';
  24  *      Replace with the settings Facebook gives you.
  25  *   d. Navigate to Set Web->Site URL & Domain -> Website Settings.  Set
  26  *      Site URL to yoursubdomain.yourdomain.com. Set Site Domain to your
  27  *      yourdomain.com.
  28  * 2. (This step is now obsolete. Enable the plugin via the Admin panel.)
  29  *     Enable the facebook plugin by including it in .htconfig.php - e.g.
  30  *     $a->config['system']['addon'] = 'plugin1,plugin2,facebook';
  31  * 3. Visit the Facebook Settings section of the "Settings->Plugin Settings" page.
  32  *    and click 'Install Facebook Connector'.
  33  * 4. This will ask you to login to Facebook and grant permission to the
  34  *    plugin to do its stuff. Allow it to do so.
  35  * 5. Optional step: If you want to use Facebook Real Time Updates (so new messages
  36  *    and new contacts are added ~1min after they are postet / added on FB), go to
  37  *    Settings -> plugins -> facebook and press the "Activate Real-Time Updates"-button.
  38  * 6. You're done. To turn it off visit the Plugin Settings page again and
  39  *    'Remove Facebook posting'.
  40  *
  41  * Vidoes and embeds will not be posted if there is no other content. Links
  42  * and images will be converted to a format suitable for the Facebook API and
  43  * long posts truncated - with a link to view the full post.
  44  *
  45  * Facebook contacts will not be able to view private photos, as they are not able to
  46  * authenticate to your site to establish identity. We will address this
  47  * in a future release.
  48  */
  49
  50  /** TODO
  51  * - Implement a method for the administrator to delete all configuration data the plugin has created,
  52  *   e.g. the app_access_token
  53  * - Implement a configuration option to set the polling interval system-wide
  54  */
  55
  56 // Size of maximum post length increased
  57 // see http://www.facebook.com/schrep/posts/203969696349811
  58 // define('FACEBOOK_MAXPOSTLEN', 420);
  59 define('FACEBOOK_MAXPOSTLEN', 63206);
  60 define('FACEBOOK_SESSION_ERR_NOTIFICATION_INTERVAL', 259200); // 3 days
  61
  62 function facebook_install() {
  63         register_hook('post_local',       'addon/facebook/facebook.php', 'facebook_post_local');
  64         register_hook('notifier_normal',  'addon/facebook/facebook.php', 'facebook_post_hook');
  65         register_hook('jot_networks',     'addon/facebook/facebook.php', 'facebook_jot_nets');
  66         register_hook('connector_settings',  'addon/facebook/facebook.php', 'facebook_plugin_settings');
  67         register_hook('cron',             'addon/facebook/facebook.php', 'facebook_cron');
  68         register_hook('enotify',          'addon/facebook/facebook.php', 'facebook_enotify');
  69         register_hook('queue_predeliver', 'addon/facebook/facebook.php', 'fb_queue_hook');
  70 }
  71
  72
  73 function facebook_uninstall() {
  74         unregister_hook('post_local',       'addon/facebook/facebook.php', 'facebook_post_local');
  75         unregister_hook('notifier_normal',  'addon/facebook/facebook.php', 'facebook_post_hook');
  76         unregister_hook('jot_networks',     'addon/facebook/facebook.php', 'facebook_jot_nets');
  77         unregister_hook('connector_settings',  'addon/facebook/facebook.php', 'facebook_plugin_settings');
  78         unregister_hook('cron',             'addon/facebook/facebook.php', 'facebook_cron');
  79         unregister_hook('enotify',          'addon/facebook/facebook.php', 'facebook_enotify');
  80         unregister_hook('queue_predeliver', 'addon/facebook/facebook.php', 'fb_queue_hook');
  81
  82         // hook moved
  83         unregister_hook('post_local_end',  'addon/facebook/facebook.php', 'facebook_post_hook');
  84         unregister_hook('plugin_settings',  'addon/facebook/facebook.php', 'facebook_plugin_settings');
  85 }
  86
  87
  88 /* declare the facebook_module function so that /facebook url requests will land here */
  89
  90 function facebook_module() {}
  91
  92
  93
  94 // If a->argv[1] is a nickname, this is a callback from Facebook oauth requests.
  95 // If $_REQUEST["realtime_cb"] is set, this is a callback from the Real-Time Updates API
  96
  97 function facebook_init(&$a) {
  98
  99         if (x($_REQUEST, "realtime_cb") && x($_REQUEST, "realtime_cb")) {
 100                 logger("facebook_init: Facebook Real-Time callback called", LOGGER_DEBUG);
 101
 102                 if (x($_REQUEST, "hub_verify_token")) {
 103                         // this is the verification callback while registering for real time updates
 104
 105                         $verify_token = get_config('facebook', 'cb_verify_token');
 106                         if ($verify_token != $_REQUEST["hub_verify_token"]) {
 107                                 logger('facebook_init: Wrong Facebook Callback Verifier - expected ' . $verify_token . ', got ' . $_REQUEST["hub_verify_token"]);
 108                                 return;
 109                         }
 110
 111                         if (x($_REQUEST, "hub_challenge")) {
 112                                 logger('facebook_init: Answering Challenge: ' . $_REQUEST["hub_challenge"], LOGGER_DATA);
 113                                 echo $_REQUEST["hub_challenge"];
 114                                 die();
 115                         }
 116                 }
 117
 118                 require_once('include/items.php');
 119
 120                 // this is a status update
 121                 $content = file_get_contents("php://input");
 122                 if (is_numeric($content)) $content = file_get_contents("php://input");
 123                 $js = json_decode($content);
 124                 logger(print_r($js, true), LOGGER_DATA);
 125
 126                 if (!isset($js->object) || $js->object != "user" || !isset($js->entry)) {
 127                         logger('facebook_init: Could not parse Real-Time Update data', LOGGER_DEBUG);
 128                         return;
 129                 }
 130
 131                 $affected_users = array("feed" => array(), "friends" => array());
 132
 133                 foreach ($js->entry as $entry) {
 134                         $fbuser = $entry->uid;
 135                         foreach ($entry->changed_fields as $field) {
 136                                 if (!isset($affected_users[$field])) {
 137                                         logger('facebook_init: Unknown field "' . $field . '"');
 138                                         continue;
 139                                 }
 140                                 if (in_array($fbuser, $affected_users[$field])) continue;
 141
 142                                 $r = q("SELECT `uid` FROM `pconfig` WHERE `cat` = 'facebook' AND `k` = 'self_id' AND `v` = '%s' LIMIT 1", dbesc($fbuser));
 143                                 if(! count($r))
 144                                         continue;
 145                                 $uid = $r[0]['uid'];
 146
 147                                 $access_token = get_pconfig($uid,'facebook','access_token');
 148                                 if(! $access_token)
 149                                         return;
 150
 151                                 switch ($field) {
 152                                         case "feed":
 153                                                 logger('facebook_init: FB-User ' . $fbuser . ' / feed', LOGGER_DEBUG);
 154
 155                                                 if(! get_pconfig($uid,'facebook','no_wall')) {
 156                                                         $private_wall = intval(get_pconfig($uid,'facebook','private_wall'));
 157                                                         $s = fetch_url('https://graph.facebook.com/me/feed?access_token=' . $access_token);
 158                                                         if($s) {
 159                                                                 $j = json_decode($s);
 160                                                                 if (isset($j->data)) {
 161                                                                         logger('facebook_init: wall: ' . print_r($j,true), LOGGER_DATA);
 162                                                                         fb_consume_stream($uid,$j,($private_wall) ? false : true);
 163                                                                 } else {
 164                                                                         logger('facebook_init: wall: got no data from Facebook: ' . print_r($j,true), LOGGER_NORMAL);
 165                                                                 }
 166                                                         }
 167                                                 }
 168
 169                                         break;
 170                                         case "friends":
 171                                                 logger('facebook_init: FB-User ' . $fbuser . ' / friends', LOGGER_DEBUG);
 172
 173                                                 fb_get_friends($uid, false);
 174                                                 set_pconfig($uid,'facebook','friend_check',time());
 175                                         break;
 176                                         default:
 177                                                 logger('facebook_init: Unknown callback field for ' . $fbuser, LOGGER_NORMAL);
 178                                 }
 179                                 $affected_users[$field][] = $fbuser;
 180                         }
 181                 }
 182         }
 183
 184
 185         if($a->argc != 2)
 186                 return;
 187         $nick = $a->argv[1];
 188         if(strlen($nick))
 189                 $r = q("SELECT `uid` FROM `user` WHERE `nickname` = '%s' LIMIT 1",
 190                                 dbesc($nick)
 191                 );
 192         if(! count($r))
 193                 return;
 194
 195         $uid           = $r[0]['uid'];
 196         $auth_code     = (x($_GET, 'code') ? $_GET['code'] : '');
 197         $error         = (x($_GET, 'error_description') ? $_GET['error_description'] : '');
 198
 199
 200         if($error)
 201                 logger('facebook_init: Error: ' . $error);
 202
 203         if($auth_code && $uid) {
 204
 205                 $appid = get_config('facebook','appid');
 206                 $appsecret = get_config('facebook', 'appsecret');
 207
 208                 $x = fetch_url('https://graph.facebook.com/oauth/access_token?client_id='
 209                         . $appid . '&client_secret=' . $appsecret . '&redirect_uri='
 210                         . urlencode($a->get_baseurl() . '/facebook/' . $nick)
 211                         . '&code=' . $auth_code);
 212
 213                 logger('facebook_init: returned access token: ' . $x, LOGGER_DATA);
 214
 215                 if(strpos($x,'access_token=') !== false) {
 216                         $token = str_replace('access_token=', '', $x);
 217                         if(strpos($token,'&') !== false)
 218                                 $token = substr($token,0,strpos($token,'&'));
 219                         set_pconfig($uid,'facebook','access_token',$token);
 220                         set_pconfig($uid,'facebook','post','1');
 221                         if(get_pconfig($uid,'facebook','no_linking') === false)
 222                                 set_pconfig($uid,'facebook','no_linking',1);
 223                         fb_get_self($uid);
 224                         fb_get_friends($uid, true);
 225                         fb_consume_all($uid);
 226
 227                 }
 228
 229         }
 230
 231 }
 232
 233
 234 function fb_get_self($uid) {
 235         $access_token = get_pconfig($uid,'facebook','access_token');
 236         if(! $access_token)
 237                 return;
 238         $s = fetch_url('https://graph.facebook.com/me/?access_token=' . $access_token);
 239         if($s) {
 240                 $j = json_decode($s);
 241                 set_pconfig($uid,'facebook','self_id',(string) $j->id);
 242         }
 243 }
 244
 245 function fb_get_friends_sync_new($uid, $access_token, $person) {
 246         $link = 'http://facebook.com/profile.php?id=' . $person->id;
 247
 248         $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `url` = '%s' LIMIT 1",
 249                 intval($uid),
 250                 dbesc($link)
 251         );
 252
 253         if (count($r) == 0) {
 254                 logger('fb_get_friends: new contact found: ' . $link, LOGGER_DEBUG);
 255
 256                 fb_get_friends_sync_full($uid, $access_token, $person);
 257         }
 258 }
 259
 260 function fb_get_friends_sync_full($uid, $access_token, $person) {
 261         $s = fetch_url('https://graph.facebook.com/' . $person->id . '?access_token=' . $access_token);
 262         if($s) {
 263                 $jp = json_decode($s);
 264                 logger('fb_get_friends: info: ' . print_r($jp,true), LOGGER_DATA);
 265
 266                 // always use numeric link for consistency
 267
 268                 $jp->link = 'http://facebook.com/profile.php?id=' . $person->id;
 269
 270                 // check if we already have a contact
 271
 272                 $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `url` = '%s' LIMIT 1",
 273                         intval($uid),
 274                         dbesc($jp->link)
 275                 );
 276
 277                 if(count($r)) {
 278
 279                         // check that we have all the photos, this has been known to fail on occasion
 280
 281                         if((! $r[0]['photo']) || (! $r[0]['thumb']) || (! $r[0]['micro'])) {
 282                                 require_once("Photo.php");
 283
 284                                 $photos = import_profile_photo('https://graph.facebook.com/' . $jp->id . '/picture', $uid, $r[0]['id']);
 285
 286                                 $r = q("UPDATE `contact` SET `photo` = '%s',
 287                                         `thumb` = '%s',
 288                                         `micro` = '%s',
 289                                         `name-date` = '%s',
 290                                         `uri-date` = '%s',
 291                                         `avatar-date` = '%s'
 292                                         WHERE `id` = %d LIMIT 1
 293                                 ",
 294                                         dbesc($photos[0]),
 295                                         dbesc($photos[1]),
 296                                         dbesc($photos[2]),
 297                                         dbesc(datetime_convert()),
 298                                         dbesc(datetime_convert()),
 299                                         dbesc(datetime_convert()),
 300                                         intval($r[0]['id'])
 301                                 );
 302                         }
 303                         return;
 304                 }
 305                 else {
 306
 307                         // create contact record
 308                         $r = q("INSERT INTO `contact` ( `uid`, `created`, `url`, `nurl`, `addr`, `alias`, `notify`, `poll`,
 309                                 `name`, `nick`, `photo`, `network`, `rel`, `priority`,
 310                                 `writable`, `blocked`, `readonly`, `pending` )
 311                                 VALUES ( %d, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', %d, %d, %d, 0, 0, 0 ) ",
 312                                 intval($uid),
 313                                 dbesc(datetime_convert()),
 314                                 dbesc($jp->link),
 315                                 dbesc(normalise_link($jp->link)),
 316                                 dbesc(''),
 317                                 dbesc(''),
 318                                 dbesc($jp->id),
 319                                 dbesc('facebook ' . $jp->id),
 320                                 dbesc($jp->name),
 321                                 dbesc(($jp->nickname) ? $jp->nickname : strtolower($jp->first_name)),
 322                                 dbesc('https://graph.facebook.com/' . $jp->id . '/picture'),
 323                                 dbesc(NETWORK_FACEBOOK),
 324                                 intval(CONTACT_IS_FRIEND),
 325                                 intval(1),
 326                                 intval(1)
 327                         );
 328                 }
 329
 330                 $r = q("SELECT * FROM `contact` WHERE `url` = '%s' AND `uid` = %d LIMIT 1",
 331                         dbesc($jp->link),
 332                         intval($uid)
 333                 );
 334
 335                 if(! count($r)) {
 336                         return;
 337                 }
 338
 339                 $contact = $r[0];
 340                 $contact_id  = $r[0]['id'];
 341
 342                 require_once("Photo.php");
 343
 344                 $photos = import_profile_photo($r[0]['photo'],$uid,$contact_id);
 345
 346                 $r = q("UPDATE `contact` SET `photo` = '%s',
 347                         `thumb` = '%s',
 348                         `micro` = '%s',
 349                         `name-date` = '%s',
 350                         `uri-date` = '%s',
 351                         `avatar-date` = '%s'
 352                         WHERE `id` = %d LIMIT 1
 353                 ",
 354                         dbesc($photos[0]),
 355                         dbesc($photos[1]),
 356                         dbesc($photos[2]),
 357                         dbesc(datetime_convert()),
 358                         dbesc(datetime_convert()),
 359                         dbesc(datetime_convert()),
 360                         intval($contact_id)
 361                 );
 362
 363         }
 364 }
 365
 366 // if $fullsync is true, only new contacts are searched for
 367
 368 function fb_get_friends($uid, $fullsync = true) {
 369
 370         $r = q("SELECT `uid` FROM `user` WHERE `uid` = %d AND `account_expired` = 0 LIMIT 1",
 371                 intval($uid)
 372         );
 373         if(! count($r))
 374                 return;
 375
 376         $access_token = get_pconfig($uid,'facebook','access_token');
 377
 378         $no_linking = get_pconfig($uid,'facebook','no_linking');
 379         if($no_linking)
 380                 return;
 381
 382         if(! $access_token)
 383                 return;
 384         $s = fetch_url('https://graph.facebook.com/me/friends?access_token=' . $access_token);
 385         if($s) {
 386                 logger('facebook: fb_get_friends: ' . $s, LOGGER_DATA);
 387                 $j = json_decode($s);
 388                 logger('facebook: fb_get_friends: json: ' . print_r($j,true), LOGGER_DATA);
 389                 if(! $j->data)
 390                         return;
 391                 foreach($j->data as $person)
 392                         if ($fullsync)
 393                                 fb_get_friends_sync_full($uid, $access_token, $person);
 394                         else
 395                                 fb_get_friends_sync_new($uid, $access_token, $person);
 396         }
 397 }
 398
 399 // This is the POST method to the facebook settings page
 400 // Content is posted to Facebook in the function facebook_post_hook()
 401
 402 function facebook_post(&$a) {
 403
 404         $uid = local_user();
 405         if($uid){
 406
 407                 $value = ((x($_POST,'post_by_default')) ? intval($_POST['post_by_default']) : 0);
 408                 set_pconfig($uid,'facebook','post_by_default', $value);
 409
 410                 $no_linking = get_pconfig($uid,'facebook','no_linking');
 411
 412                 $no_wall = ((x($_POST,'facebook_no_wall')) ? intval($_POST['facebook_no_wall']) : 0);
 413                 set_pconfig($uid,'facebook','no_wall',$no_wall);
 414
 415                 $private_wall = ((x($_POST,'facebook_private_wall')) ? intval($_POST['facebook_private_wall']) : 0);
 416                 set_pconfig($uid,'facebook','private_wall',$private_wall);
 417
 418
 419                 set_pconfig($uid,'facebook','blocked_apps',escape_tags(trim($_POST['blocked_apps'])));
 420
 421                 $linkvalue = ((x($_POST,'facebook_linking')) ? intval($_POST['facebook_linking']) : 0);
 422                 set_pconfig($uid,'facebook','no_linking', (($linkvalue) ? 0 : 1));
 423
 424                 // FB linkage was allowed but has just been turned off - remove all FB contacts and posts
 425
 426                 if((! intval($no_linking)) && (! intval($linkvalue))) {
 427                         $r = q("SELECT `id` FROM `contact` WHERE `uid` = %d AND `network` = '%s' ",
 428                                 intval($uid),
 429                                 dbesc(NETWORK_FACEBOOK)
 430                         );
 431                         if(count($r)) {
 432                                 require_once('include/Contact.php');
 433                                 foreach($r as $rr)
 434                                         contact_remove($rr['id']);
 435                         }
 436                 }
 437                 elseif(intval($no_linking) && intval($linkvalue)) {
 438                         // FB linkage is now allowed - import stuff.
 439                         fb_get_self($uid);
 440                         fb_get_friends($uid, true);
 441                         fb_consume_all($uid);
 442                 }
 443
 444                 info( t('Settings updated.') . EOL);
 445         }
 446
 447         return;
 448 }
 449
 450 // Facebook settings form
 451
 452 function facebook_content(&$a) {
 453
 454         if(! local_user()) {
 455                 notice( t('Permission denied.') . EOL);
 456                 return '';
 457         }
 458
 459         if($a->argc > 1 && $a->argv[1] === 'remove') {
 460                 del_pconfig(local_user(),'facebook','post');
 461                 info( t('Facebook disabled') . EOL);
 462         }
 463
 464         if($a->argc > 1 && $a->argv[1] === 'friends') {
 465                 fb_get_friends(local_user(), true);
 466                 info( t('Updating contacts') . EOL);
 467         }
 468
 469         $o = '';
 470
 471         $fb_installed = false;
 472         if (get_pconfig(local_user(),'facebook','post')) {
 473                 $access_token = get_pconfig(local_user(),'facebook','access_token');
 474                 if ($access_token) {
 475                         $private_wall = intval(get_pconfig($uid,'facebook','private_wall'));
 476                         $s = fetch_url('https://graph.facebook.com/me/feed?access_token=' . $access_token);
 477                         if($s) {
 478                                 $j = json_decode($s);
 479                                 if (isset($j->data)) $fb_installed = true;
 480                         }
 481                 }
 482         }
 483
 484         $appid = get_config('facebook','appid');
 485
 486         if(! $appid) {
 487                 notice( t('Facebook API key is missing.') . EOL);
 488                 return '';
 489         }
 490
 491         $a->page['htmlhead'] .= '<link rel="stylesheet" type="text/css" href="'
 492                 . $a->get_baseurl() . '/addon/facebook/facebook.css' . '" media="all" />' . "\r\n";
 493
 494         $o .= '<h3>' . t('Facebook Connect') . '</h3>';
 495
 496         if(! $fb_installed) {
 497                 $o .= '<div id="facebook-enable-wrapper">';
 498
 499                 $o .= '<a href="https://www.facebook.com/dialog/oauth?client_id=' . $appid . '&redirect_uri='
 500                         . $a->get_baseurl() . '/facebook/' . $a->user['nickname'] . '&scope=publish_stream,read_stream,offline_access">' . t('Install Facebook connector for this account.') . '</a>';
 501                 $o .= '</div>';
 502         }
 503
 504         if($fb_installed) {
 505                 $o .= '<div id="facebook-disable-wrapper">';
 506
 507                 $o .= '<a href="' . $a->get_baseurl() . '/facebook/remove' . '">' . t('Remove Facebook connector') . '</a></div>';
 508
 509                 $o .= '<div id="facebook-enable-wrapper">';
 510
 511                 $o .= '<a href="https://www.facebook.com/dialog/oauth?client_id=' . $appid . '&redirect_uri='
 512                         . $a->get_baseurl() . '/facebook/' . $a->user['nickname'] . '&scope=publish_stream,read_stream,offline_access">' . t('Re-authenticate [This is necessary whenever your Facebook password is changed.]') . '</a>';
 513                 $o .= '</div>';
 514
 515                 $o .= '<div id="facebook-post-default-form">';
 516                 $o .= '<form action="facebook" method="post" >';
 517                 $post_by_default = get_pconfig(local_user(),'facebook','post_by_default');
 518                 $checked = (($post_by_default) ? ' checked="checked" ' : '');
 519                 $o .= '<input type="checkbox" name="post_by_default" value="1"' . $checked . '/>' . ' ' . t('Post to Facebook by default') . EOL;
 520
 521                 $no_linking = get_pconfig(local_user(),'facebook','no_linking');
 522                 $checked = (($no_linking) ? '' : ' checked="checked" ');
 523                 $o .= '<input type="checkbox" name="facebook_linking" value="1"' . $checked . '/>' . ' ' . t('Link all your Facebook friends and conversations on this website') . EOL ;
 524
 525                 $o .= '<p>' . t('Facebook conversations consist of your <em>profile wall</em> and your friend <em>stream</em>.');
 526                 $o .= ' ' . t('On this website, your Facebook friend stream is only visible to you.');
 527                 $o .= ' ' . t('The following settings determine the privacy of your Facebook profile wall on this website.') . '</p>';
 528
 529                 $private_wall = get_pconfig(local_user(),'facebook','private_wall');
 530                 $checked = (($private_wall) ? ' checked="checked" ' : '');
 531                 $o .= '<input type="checkbox" name="facebook_private_wall" value="1"' . $checked . '/>' . ' ' . t('On this website your Facebook profile wall conversations will only be visible to you') . EOL ;
 532
 533
 534                 $no_wall = get_pconfig(local_user(),'facebook','no_wall');
 535                 $checked = (($no_wall) ? ' checked="checked" ' : '');
 536                 $o .= '<input type="checkbox" name="facebook_no_wall" value="1"' . $checked . '/>' . ' ' . t('Do not import your Facebook profile wall conversations') . EOL ;
 537
 538                 $o .= '<p>' . t('If you choose to link conversations and leave both of these boxes unchecked, your Facebook profile wall will be merged with your profile wall on this website and your privacy settings on this website will be used to determine who may see the conversations.') . '</p>';
 539
 540
 541                 $blocked_apps = get_pconfig(local_user(),'facebook','blocked_apps');
 542
 543                 $o .= '<div><label id="blocked-apps-label" for="blocked-apps">' . t('Comma separated applications to ignore') . ' </label></div>';
 544         $o .= '<div><textarea id="blocked-apps" name="blocked_apps" >' . htmlspecialchars($blocked_apps) . '</textarea></div>';
 545
 546                 $o .= '<input type="submit" name="submit" value="' . t('Submit') . '" /></form></div>';
 547         }
 548
 549         return $o;
 550 }
 551
 552
 553
 554 function facebook_cron($a,$b) {
 555
 556         $last = get_config('facebook','last_poll');
 557
 558         $poll_interval = intval(get_config('facebook','poll_interval'));
 559         if(! $poll_interval)
 560                 $poll_interval = 3600;
 561
 562         if($last) {
 563                 $next = $last + $poll_interval;
 564                 if($next > time())
 565                         return;
 566         }
 567
 568         logger('facebook_cron');
 569
 570
 571         // Find the FB users on this site and randomize in case one of them
 572         // uses an obscene amount of memory. It may kill this queue run
 573         // but hopefully we'll get a few others through on each run.
 574
 575         $r = q("SELECT * FROM `pconfig` WHERE `cat` = 'facebook' AND `k` = 'post' AND `v` = '1' ORDER BY RAND() ");
 576         if(count($r)) {
 577                 foreach($r as $rr) {
 578                         if(get_pconfig($rr['uid'],'facebook','no_linking'))
 579                                 continue;
 580                         $ab = intval(get_config('system','account_abandon_days'));
 581                         if($ab > 0) {
 582                                 $z = q("SELECT `uid` FROM `user` WHERE `uid` = %d AND `login_date` > UTC_TIMESTAMP() - INTERVAL %d DAY LIMIT 1",
 583                                         intval($rr['uid']),
 584                                         intval($ab)
 585                                 );
 586                                 if(! count($z))
 587                                         continue;
 588                         }
 589
 590                         // check for new friends once a day
 591                         $last_friend_check = get_pconfig($rr['uid'],'facebook','friend_check');
 592                         if($last_friend_check)
 593                                 $next_friend_check = $last_friend_check + 86400;
 594                         if($next_friend_check <= time()) {
 595                                 fb_get_friends($rr['uid'], true);
 596                                 set_pconfig($rr['uid'],'facebook','friend_check',time());
 597                         }
 598                         fb_consume_all($rr['uid']);
 599                 }
 600         }
 601
 602         if (get_config('facebook', 'realtime_active') == 1) {
 603                 if (!facebook_check_realtime_active()) {
 604
 605                         logger('facebook_cron: Facebook is not sending Real-Time Updates any more, although it is supposed to. Trying to fix it...', LOGGER_NORMAL);
 606                         facebook_subscription_add_users();
 607
 608                         if (facebook_check_realtime_active())
 609                                 logger('facebook_cron: Successful', LOGGER_NORMAL);
 610                         else {
 611                                 logger('facebook_cron: Failed', LOGGER_NORMAL);
 612
 613                                 if(strlen($a->config['admin_email']) && !get_config('facebook', 'realtime_err_mailsent')) {
 614                                         $res = mail($a->config['admin_email'], t('Problems with Facebook Real-Time Updates'),
 615                                                 "Hi!\n\nThere's a problem with the Facebook Real-Time Updates that cannot be solved automatically. Maybe a permission issue?\n\nPlease try to re-activate it on " . $a->config["system"]["url"] . "/admin/plugins/facebook\n\nThis e-mail will only be sent once.",
 616                                                 'From: ' . t('Administrator') . '@' . $_SERVER['SERVER_NAME'] . "\n"
 617                                                 . 'Content-type: text/plain; charset=UTF-8' . "\n"
 618                                                 . 'Content-transfer-encoding: 8bit'
 619                                         );
 620
 621                                         set_config('facebook', 'realtime_err_mailsent', 1);
 622                                 }
 623                         }
 624                 } else { // !facebook_check_realtime_active()
 625                         del_config('facebook', 'realtime_err_mailsent');
 626                 }
 627         }
 628
 629         set_config('facebook','last_poll', time());
 630
 631 }
 632
 633
 634
 635 function facebook_plugin_settings(&$a,&$b) {
 636
 637         $b .= '<div class="settings-block">';
 638         $b .= '<h3>' . t('Facebook') . '</h3>';
 639         $b .= '<a href="facebook">' . t('Facebook Connector Settings') . '</a><br />';
 640         $b .= '</div>';
 641
 642 }
 643
 644
 645 function facebook_plugin_admin(&$a, &$o){
 646         $o = '<input type="hidden" name="form_security_token" value="' . get_form_security_token("fbsave") . '">';
 647
 648         $o .= '<h4>' . t('Facebook API Key') . '</h4>';
 649
 650         $appid  = get_config('facebook', 'appid'  );
 651         $appsecret = get_config('facebook', 'appsecret' );
 652
 653         $o .= '<label for="fb_appid">' . t('App-ID / API-Key') . '</label><input name="appid" type="text" value="' . escape_tags($appid ? $appid : "") . '"><br style="clear: both;">';
 654         $o .= '<label for="fb_appsecret">' . t('Application secret') . '</label><input name="appsecret" type="text" value="' . escape_tags($appsecret ? $appsecret : "") . '"><br style="clear: both;">';
 655         $o .= '<input type="submit" name="fb_save_keys" value="' . t('Save') . '">';
 656
 657         if ($appid && $appsecret) {
 658                 $o .= '<h4>' . t('Real-Time Updates') . '</h4>';
 659
 660                 $activated = facebook_check_realtime_active();
 661                 if ($activated) {
 662                         $o .= t('Real-Time Updates are activated.') . '<br><br>';
 663                         $o .= '<input type="submit" name="real_time_deactivate" value="' . t('Deactivate Real-Time Updates') . '">';
 664                 } else {
 665                         $o .= t('Real-Time Updates not activated.') . '<br><input type="submit" name="real_time_activate" value="' . t('Activate Real-Time Updates') . '">';
 666                 }
 667         }
 668 }
 669
 670 function facebook_plugin_admin_post(&$a, &$o){
 671         check_form_security_token_redirectOnErr('/admin/plugins/facebook', 'fbsave');
 672
 673         if (x($_REQUEST,'fb_save_keys')) {
 674                 set_config('facebook', 'appid', $_REQUEST['appid']);
 675                 set_config('facebook', 'appsecret', $_REQUEST['appsecret']);
 676                 del_config('facebook', 'app_access_token');
 677                 info(t('The new values have been saved.'));
 678         }
 679         if (x($_REQUEST,'real_time_activate')) {
 680                 facebook_subscription_add_users();
 681         }
 682         if (x($_REQUEST,'real_time_deactivate')) {
 683                 facebook_subscription_del_users();
 684         }
 685 }
 686
 687 function facebook_jot_nets(&$a,&$b) {
 688         if(! local_user())
 689                 return;
 690
 691         $fb_post = get_pconfig(local_user(),'facebook','post');
 692         if(intval($fb_post) == 1) {
 693                 $fb_defpost = get_pconfig(local_user(),'facebook','post_by_default');
 694                 $selected = ((intval($fb_defpost) == 1) ? ' checked="checked" ' : '');
 695                 $b .= '<div class="profile-jot-net"><input type="checkbox" name="facebook_enable"' . $selected . ' value="1" /> '
 696                         . t('Post to Facebook') . '</div>';
 697         }
 698 }
 699
 700
 701 function facebook_post_hook(&$a,&$b) {
 702
 703
 704         if($b['deleted'] || ($b['created'] !== $b['edited']))
 705                 return;
 706
 707         /**
 708          * Post to Facebook stream
 709          */
 710
 711         require_once('include/group.php');
 712         require_once('include/html2plain.php');
 713
 714         logger('Facebook post');
 715
 716         $reply = false;
 717         $likes = false;
 718
 719         $toplevel = (($b['id'] == $b['parent']) ? true : false);
 720
 721
 722         $linking = ((get_pconfig($b['uid'],'facebook','no_linking')) ? 0 : 1);
 723
 724         if((! $toplevel) && ($linking)) {
 725                 $r = q("SELECT * FROM `item` WHERE `id` = %d AND `uid` = %d LIMIT 1",
 726                         intval($b['parent']),
 727                         intval($b['uid'])
 728                 );
 729                 if(count($r) && substr($r[0]['uri'],0,4) === 'fb::')
 730                         $reply = substr($r[0]['uri'],4);
 731                 elseif(count($r) && substr($r[0]['extid'],0,4) === 'fb::')
 732                         $reply = substr($r[0]['extid'],4);
 733                 else
 734                         return;
 735
 736                 $u = q("SELECT * FROM user where uid = %d limit 1",
 737                         intval($b['uid'])
 738                 );
 739                 if(! count($u))
 740                         return;
 741
 742                 // only accept comments from the item owner. Other contacts are unknown to FB.
 743
 744                 if(! link_compare($b['author-link'], $a->get_baseurl() . '/profile/' . $u[0]['nickname']))
 745                         return;
 746
 747
 748                 logger('facebook reply id=' . $reply);
 749         }
 750
 751         if(strstr($b['postopts'],'facebook') || ($b['private']) || ($reply)) {
 752
 753                 if($b['private'] && $reply === false) {
 754                         $allow_people = expand_acl($b['allow_cid']);
 755                         $allow_groups = expand_groups(expand_acl($b['allow_gid']));
 756                         $deny_people  = expand_acl($b['deny_cid']);
 757                         $deny_groups  = expand_groups(expand_acl($b['deny_gid']));
 758
 759                         $recipients = array_unique(array_merge($allow_people,$allow_groups));
 760                         $deny = array_unique(array_merge($deny_people,$deny_groups));
 761
 762                         $allow_str = dbesc(implode(', ',$recipients));
 763                         if($allow_str) {
 764                                 $r = q("SELECT `notify` FROM `contact` WHERE `id` IN ( $allow_str ) AND `network` = 'face'");
 765                                 $allow_arr = array();
 766                                 if(count($r))
 767                                         foreach($r as $rr)
 768                                                 $allow_arr[] = $rr['notify'];
 769                         }
 770
 771                         $deny_str = dbesc(implode(', ',$deny));
 772                         if($deny_str) {
 773                                 $r = q("SELECT `notify` FROM `contact` WHERE `id` IN ( $deny_str ) AND `network` = 'face'");
 774                                 $deny_arr = array();
 775                                 if(count($r))
 776                                         foreach($r as $rr)
 777                                                 $deny_arr[] = $rr['notify'];
 778                         }
 779
 780                         if(count($deny_arr) && (! count($allow_arr))) {
 781
 782                                 // One or more FB folks were denied access but nobody on FB was specifically allowed access.
 783                                 // This might cause the post to be open to public on Facebook, but only to selected members
 784                                 // on another network. Since this could potentially leak a post to somebody who was denied,
 785                                 // we will skip posting it to Facebook with a slightly vague but relevant message that will
 786                                 // hopefully lead somebody to this code comment for a better explanation of what went wrong.
 787
 788                                 notice( t('Post to Facebook cancelled because of multi-network access permission conflict.') . EOL);
 789                                 return;
 790                         }
 791
 792
 793                         // if it's a private message but no Facebook members are allowed or denied, skip Facebook post
 794
 795                         if((! count($allow_arr)) && (! count($deny_arr)))
 796                                 return;
 797                 }
 798
 799                 if($b['verb'] == ACTIVITY_LIKE)
 800                         $likes = true;
 801
 802
 803                 $appid  = get_config('facebook', 'appid'  );
 804                 $secret = get_config('facebook', 'appsecret' );
 805
 806                 if($appid && $secret) {
 807
 808                         logger('facebook: have appid+secret');
 809
 810                         $fb_token  = get_pconfig($b['uid'],'facebook','access_token');
 811
 812
 813                         // post to facebook if it's a public post and we've ticked the 'post to Facebook' box,
 814                         // or it's a private message with facebook participants
 815                         // or it's a reply or likes action to an existing facebook post
 816
 817                         if($fb_token && ($toplevel || $b['private'] || $reply)) {
 818                                 logger('facebook: able to post');
 819                                 require_once('library/facebook.php');
 820                                 require_once('include/bbcode.php');
 821
 822                                 $msg = $b['body'];
 823
 824                                 logger('Facebook post: original msg=' . $msg, LOGGER_DATA);
 825
 826                                 // make links readable before we strip the code
 827
 828                                 // unless it's a dislike - just send the text as a comment
 829
 830                                 if($b['verb'] == ACTIVITY_DISLIKE)
 831                                         $msg = trim(strip_tags(bbcode($msg)));
 832
 833                                 // Old code
 834                                 /*$search_str = $a->get_baseurl() . '/search';
 835
 836                                 if(preg_match("/\[url=(.*?)\](.*?)\[\/url\]/is",$msg,$matches)) {
 837
 838                                         // don't use hashtags for message link
 839
 840                                         if(strpos($matches[2],$search_str) === false) {
 841                                                 $link = $matches[1];
 842                                                 if(substr($matches[2],0,5) != '[img]')
 843                                                         $linkname = $matches[2];
 844                                         }
 845                                 }
 846
 847                                 // strip tag links to avoid link clutter, this really should be
 848                                 // configurable because we're losing information
 849
 850                                 $msg = preg_replace("/\#\[url=(.*?)\](.*?)\[\/url\]/is",'#$2',$msg);
 851
 852                                 // provide the link separately for normal links
 853                                 $msg = preg_replace("/\[url=(.*?)\](.*?)\[\/url\]/is",'$2 $1',$msg);
 854
 855                                 if(preg_match("/\[img\](.*?)\[\/img\]/is",$msg,$matches))
 856                                         $image = $matches[1];
 857
 858                                 $msg = preg_replace("/\[img\](.*?)\[\/img\]/is", t('Image: ') . '$1', $msg);
 859
 860                                 if((strpos($link,z_root()) !== false) && (! $image))
 861                                         $image = $a->get_baseurl() . '/images/friendica-64.jpg';
 862
 863                                 $msg = trim(strip_tags(bbcode($msg)));*/
 864
 865                                 // New code
 866
 867                                 // Looking for the first image
 868                                 $image = '';
 869                                 if(preg_match("/\[img\=([0-9]*)x([0-9]*)\](.*?)\[\/img\]/is",$b['body'],$matches))
 870                                         $image = $matches[3];
 871
 872                                 if ($image != '')
 873                                         if(preg_match("/\[img\](.*?)\[\/img\]/is",$b['body'],$matches))
 874                                                 $image = $matches[1];
 875
 876                                 // Checking for a bookmark element
 877                                 $body = $b['body'];
 878                                 if (strpos($body, "[bookmark") !== false) {
 879                                         // splitting the text in two parts:
 880                                         // before and after the bookmark
 881                                         $pos = strpos($body, "[bookmark");
 882                                         $body1 = substr($body, 0, $pos);
 883                                         $body2 = substr($body, $pos);
 884
 885                                         // Removing the bookmark and all quotes after the bookmark
 886                                         // they are mostly only the content after the bookmark.
 887                                         $body2 = preg_replace("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism",'',$body2);
 888                                         $body2 = preg_replace("/\[quote\=([^\]]*)\](.*?)\[\/quote\]/ism",'',$body2);
 889                                         $body2 = preg_replace("/\[quote\](.*?)\[\/quote\]/ism",'',$body2);
 890
 891                                         $body = $body1.$body2;
 892                                 }
 893
 894                                 // At first convert the text to html
 895                                 $html = bbcode($body);
 896
 897                                 // Then convert it to plain text
 898                                 $msg = trim($b['title']." \n\n".html2plain($html, 0, true));
 899                                 $msg = html_entity_decode($msg,ENT_QUOTES,'UTF-8');
 900
 901                                 // Removing multiple newlines
 902                                 while (strpos($msg, "\n\n\n") !== false)
 903                                         $msg = str_replace("\n\n\n", "\n\n", $msg);
 904
 905                                 // add any attachments as text urls
 906                                 $arr = explode(',',$b['attach']);
 907
 908                                 if(count($arr)) {
 909                                         $msg .= "\n";
 910                                         foreach($arr as $r) {
 911                                                 $matches = false;
 912                                                 $cnt = preg_match('|\[attach\]href=\"(.*?)\" size=\"(.*?)\" type=\"(.*?)\" title=\"(.*?)\"\[\/attach\]|',$r,$matches);
 913                                                 if($cnt) {
 914                                                         $msg .= "\n".$matches[1];
 915                                                 }
 916                                         }
 917                                 }
 918
 919                                 $link = '';
 920                                 $linkname = '';
 921                                 // look for bookmark-bbcode and handle it with priority
 922                                 if(preg_match("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/is",$b['body'],$matches)) {
 923                                         $link = $matches[1];
 924                                         $linkname = $matches[2];
 925                                 }
 926
 927                                 // If there is no bookmark element then take the first link
 928                                 if ($link == '') {
 929                                         $links = collecturls($html);
 930                                         if (sizeof($links) > 0) {
 931                                                 reset($links);
 932                                                 $link = current($links);
 933                                         }
 934                                 }
 935
 936                                 // Remove trailing and leading spaces
 937                                 $msg = trim($msg);
 938
 939                                 // Since facebook increased the maxpostlen massively this never should happen again :)
 940                                 if (strlen($msg) > FACEBOOK_MAXPOSTLEN) {
 941                                         $shortlink = "";
 942                                         require_once('library/slinky.php');
 943
 944                                         $display_url = $b['plink'];
 945
 946                                         $slinky = new Slinky( $display_url );
 947                                         // setup a cascade of shortening services
 948                                         // try to get a short link from these services
 949                                         // in the order ur1.ca, trim, id.gd, tinyurl
 950                                         $slinky->set_cascade( array( new Slinky_UR1ca(), new Slinky_Trim(), new Slinky_IsGd(), new Slinky_TinyURL() ) );
 951                                         $shortlink = $slinky->short();
 952                                         // the new message will be shortened such that "... $shortlink"
 953                                         // will fit into the character limit
 954                                         $msg = substr($msg, 0, FACEBOOK_MAXPOSTLEN - strlen($shortlink) - 4);
 955                                         $msg .= '... ' . $shortlink;
 956                                 }
 957
 958                                 // Fallback - if message is empty
 959                                 if(!strlen($msg))
 960                                         $msg = $linkname;
 961
 962                                 if(!strlen($msg))
 963                                         $msg = $link;
 964
 965                                 if(!strlen($msg))
 966                                         $msg = $image;
 967
 968                                 // If there is nothing to post then exit
 969                                 if(!strlen($msg))
 970                                         return;
 971
 972                                 logger('Facebook post: msg=' . $msg, LOGGER_DATA);
 973
 974                                 if($likes) {
 975                                         $postvars = array('access_token' => $fb_token);
 976                                 }
 977                                 else {
 978                                         $postvars = array(
 979                                                 'access_token' => $fb_token,
 980                                                 'message' => $msg
 981                                         );
 982                                         if(isset($image))
 983                                                 $postvars['picture'] = $image;
 984                                         if(isset($link))
 985                                                 $postvars['link'] = $link;
 986                                         if(isset($linkname))
 987                                                 $postvars['name'] = $linkname;
 988                                 }
 989
 990                                 if(($b['private']) && ($toplevel)) {
 991                                         $postvars['privacy'] = '{"value": "CUSTOM", "friends": "SOME_FRIENDS"';
 992                                         if(count($allow_arr))
 993                                                 $postvars['privacy'] .= ',"allow": "' . implode(',',$allow_arr) . '"';
 994                                         if(count($deny_arr))
 995                                                 $postvars['privacy'] .= ',"deny": "' . implode(',',$deny_arr) . '"';
 996                                         $postvars['privacy'] .= '}';
 997
 998                                 }
 999
1000                                 if($reply) {
1001                                         $url = 'https://graph.facebook.com/' . $reply . '/' . (($likes) ? 'likes' : 'comments');
1002                                 }
1003                                 else {
1004                                         $url = 'https://graph.facebook.com/me/feed';
1005                                         if($b['plink'])
1006                                                 $postvars['actions'] = '{"name": "' . t('View on Friendica') . '", "link": "' .  $b['plink'] . '"}';
1007                                 }
1008
1009                                 logger('facebook: post to ' . $url);
1010                                 logger('facebook: postvars: ' . print_r($postvars,true));
1011
1012                                 // "test_mode" prevents anything from actually being posted.
1013                                 // Otherwise, let's do it.
1014
1015                                 if(! get_config('facebook','test_mode')) {
1016                                         $x = post_url($url, $postvars);
1017                                         logger('Facebook post returns: ' . $x, LOGGER_DEBUG);
1018
1019                                         $retj = json_decode($x);
1020                                         if($retj->id) {
1021                                                 q("UPDATE `item` SET `extid` = '%s' WHERE `id` = %d LIMIT 1",
1022                                                         dbesc('fb::' . $retj->id),
1023                                                         intval($b['id'])
1024                                                 );
1025                                         }
1026                                         else {
1027                                                 if(! $likes) {
1028                                                         $s = serialize(array('url' => $url, 'item' => $b['id'], 'post' => $postvars));
1029                                                         require_once('include/queue_fn.php');
1030                                                         add_to_queue($a->contact,NETWORK_FACEBOOK,$s);
1031                                                         notice( t('Facebook post failed. Queued for retry.') . EOL);
1032                                                 }
1033
1034                                                 if (isset($retj->error) && $retj->error->type == "OAuthException" && $retj->error->code == 190) {
1035                                                         logger('Facebook session has expired due to changed password.', LOGGER_DEBUG);
1036
1037                                                         $last_notification = get_pconfig($b['uid'], 'facebook', 'session_expired_mailsent');
1038                                                         if (!$last_notification || $last_notification < (time() - FACEBOOK_SESSION_ERR_NOTIFICATION_INTERVAL)) {
1039                                                                 require_once('include/enotify.php');
1040
1041                                                                 $r = q("SELECT * FROM `user` WHERE `uid` = %d LIMIT 1", intval($b['uid']) );
1042                                                                 notification(array(
1043                                                                         'uid' => $b['uid'],
1044                                                                         'type' => NOTIFY_SYSTEM,
1045                                                                         'system_type' => 'facebook_connection_invalid',
1046                                                                         'language'     => $r[0]['language'],
1047                                                                         'to_name'      => $r[0]['username'],
1048                                                                         'to_email'     => $r[0]['email'],
1049                                                                         'source_name'  => t('Administrator'),
1050                                                                         'source_link'  => $a->config["system"]["url"],
1051                                                                         'source_photo' => $a->config["system"]["url"] . '/images/person-80.jpg',
1052                                                                 ));
1053
1054                                                                 set_pconfig($b['uid'], 'facebook', 'session_expired_mailsent', time());
1055                                                         } else logger('Facebook: No notification, as the last one was sent on ' . $last_notification, LOGGER_DEBUG);
1056                                                 }
1057                                         }
1058                                 }
1059                         }
1060                 }
1061         }
1062 }
1063
1064 function facebook_enotify(&$app, &$data) {
1065         if (x($data, 'params') && $data['params']['type'] == NOTIFY_SYSTEM && x($data['params'], 'system_type') && $data['params']['system_type'] == 'facebook_connection_invalid') {
1066                 $data['itemlink'] = '/facebook';
1067                 $data['epreamble'] = $data['preamble'] = t('Your Facebook connection became invalid. Please Re-authenticate.');
1068                 $data['subject'] = t('Facebook connection became invalid');
1069                 $data['body'] = sprintf( t("Hi %1\$s,\n\nThe connection between your accounts on %2\$s and Facebook became invalid. This usually happens after you change your Facebook-password. To enable the connection again, you have to %3\$sre-authenticate the Facebook-connector%4\$s."), $data['params']['to_name'], "[url=" . $app->config["system"]["url"] . "]" . $app->config["sitename"] . "[/url]", "[url=" . $app->config["system"]["url"] . "/facebook]", "[/url]");
1070         }
1071 }
1072
1073 function facebook_post_local(&$a,&$b) {
1074
1075         // Figure out if Facebook posting is enabled for this post and file it in 'postopts'
1076         // where we will discover it during background delivery.
1077
1078         // This can only be triggered by a local user posting to their own wall.
1079
1080         if((local_user()) && (local_user() == $b['uid'])) {
1081
1082                 $fb_post   = intval(get_pconfig(local_user(),'facebook','post'));
1083                 $fb_enable = (($fb_post && x($_REQUEST,'facebook_enable')) ? intval($_REQUEST['facebook_enable']) : 0);
1084
1085                 // if API is used, default to the chosen settings
1086                 if($_REQUEST['api_source'] && intval(get_pconfig(local_user(),'facebook','post_by_default')))
1087                         $fb_enable = 1;
1088
1089                 if(! $fb_enable)
1090                         return;
1091
1092                 if(strlen($b['postopts']))
1093                         $b['postopts'] .= ',';
1094                 $b['postopts'] .= 'facebook';
1095         }
1096 }
1097
1098
1099 function fb_queue_hook(&$a,&$b) {
1100
1101         $qi = q("SELECT * FROM `queue` WHERE `network` = '%s'",
1102                 dbesc(NETWORK_FACEBOOK)
1103         );
1104         if(! count($qi))
1105                 return;
1106
1107         require_once('include/queue_fn.php');
1108
1109         foreach($qi as $x) {
1110                 if($x['network'] !== NETWORK_FACEBOOK)
1111                         continue;
1112
1113                 logger('facebook_queue: run');
1114
1115                 $r = q("SELECT `user`.* FROM `user` LEFT JOIN `contact` on `contact`.`uid` = `user`.`uid`
1116                         WHERE `contact`.`self` = 1 AND `contact`.`id` = %d LIMIT 1",
1117                         intval($x['cid'])
1118                 );
1119                 if(! count($r))
1120                         continue;
1121
1122                 $user = $r[0];
1123
1124                 $appid  = get_config('facebook', 'appid'  );
1125                 $secret = get_config('facebook', 'appsecret' );
1126
1127                 if($appid && $secret) {
1128                         $fb_post   = intval(get_pconfig($user['uid'],'facebook','post'));
1129                         $fb_token  = get_pconfig($user['uid'],'facebook','access_token');
1130
1131                         if($fb_post && $fb_token) {
1132                                 logger('facebook_queue: able to post');
1133                                 require_once('library/facebook.php');
1134
1135                                 $z = unserialize($x['content']);
1136                                 $item = $z['item'];
1137                                 $j = post_url($z['url'],$z['post']);
1138
1139                                 $retj = json_decode($j);
1140                                 if($retj->id) {
1141                                         q("UPDATE `item` SET `extid` = '%s' WHERE `id` = %d LIMIT 1",
1142                                                 dbesc('fb::' . $retj->id),
1143                                                 intval($item)
1144                                         );
1145                                         logger('facebook_queue: success: ' . $j);
1146                                         remove_queue_item($x['id']);
1147                                 }
1148                                 else {
1149                                         logger('facebook_queue: failed: ' . $j);
1150                                         update_queue_time($x['id']);
1151                                 }
1152                         }
1153                 }
1154         }
1155 }
1156
1157 function fb_consume_all($uid) {
1158
1159         require_once('include/items.php');
1160
1161         $access_token = get_pconfig($uid,'facebook','access_token');
1162         if(! $access_token)
1163                 return;
1164
1165         if(! get_pconfig($uid,'facebook','no_wall')) {
1166                 $private_wall = intval(get_pconfig($uid,'facebook','private_wall'));
1167                 $s = fetch_url('https://graph.facebook.com/me/feed?access_token=' . $access_token);
1168                 if($s) {
1169                         $j = json_decode($s);
1170                         if (isset($j->data)) {
1171                                 logger('fb_consume_stream: wall: ' . print_r($j,true), LOGGER_DATA);
1172                                 fb_consume_stream($uid,$j,($private_wall) ? false : true);
1173                         } else {
1174                                 logger('fb_consume_stream: wall: got no data from Facebook: ' . print_r($j,true), LOGGER_NORMAL);
1175                         }
1176                 }
1177         }
1178         $s = fetch_url('https://graph.facebook.com/me/home?access_token=' . $access_token);
1179         if($s) {
1180                 $j = json_decode($s);
1181                 if (isset($j->data)) {
1182                         logger('fb_consume_stream: feed: ' . print_r($j,true), LOGGER_DATA);
1183                         fb_consume_stream($uid,$j,false);
1184                 } else {
1185                         logger('fb_consume_stream: feed: got no data from Facebook: ' . print_r($j,true), LOGGER_NORMAL);
1186                 }
1187         }
1188
1189 }
1190
1191 function fb_get_photo($uid,$link) {
1192         $access_token = get_pconfig($uid,'facebook','access_token');
1193         if(! $access_token || (! stristr($link,'facebook.com/photo.php')))
1194                 return "\n" . '[url=' . $link . ']' . t('link') . '[/url]';
1195         $ret = preg_match('/fbid=([0-9]*)/',$link,$match);
1196         if($ret)
1197                 $photo_id = $match[1];
1198         $x = fetch_url('https://graph.facebook.com/' . $photo_id . '?access_token=' . $access_token);
1199         $j = json_decode($x);
1200         if($j->picture)
1201                 return "\n\n" . '[url=' . $link . '][img]' . $j->picture . '[/img][/url]';
1202         else
1203                 return "\n" . '[url=' . $link . ']' . t('link') . '[/url]';
1204 }
1205
1206 function fb_consume_stream($uid,$j,$wall = false) {
1207
1208         $a = get_app();
1209
1210
1211         $user = q("SELECT * FROM `user` WHERE `uid` = %d AND `account_expired` = 0 LIMIT 1",
1212                 intval($uid)
1213         );
1214         if(! count($user))
1215                 return;
1216
1217         $my_local_url = $a->get_baseurl() . '/profile/' . $user[0]['nickname'];
1218
1219         $no_linking = get_pconfig($uid,'facebook','no_linking');
1220         if($no_linking)
1221                 return;
1222
1223         $self = q("SELECT * FROM `contact` WHERE `self` = 1 AND `uid` = %d LIMIT 1",
1224                 intval($uid)
1225         );
1226
1227         $blocked_apps = get_pconfig($uid,'facebook','blocked_apps');
1228         $blocked_apps_arr = explode(',',$blocked_apps);
1229
1230         $self_id = get_pconfig($uid,'facebook','self_id');
1231         if(! count($j->data) || (! strlen($self_id)))
1232                 return;
1233
1234         foreach($j->data as $entry) {
1235                 logger('fb_consume: entry: ' . print_r($entry,true), LOGGER_DATA);
1236                 $datarray = array();
1237
1238                 $r = q("SELECT * FROM `item` WHERE ( `uri` = '%s' OR `extid` = '%s') AND `uid` = %d LIMIT 1",
1239                                 dbesc('fb::' . $entry->id),
1240                                 dbesc('fb::' . $entry->id),
1241                                 intval($uid)
1242                 );
1243                 if(count($r)) {
1244                         $post_exists = true;
1245                         $orig_post = $r[0];
1246                         $top_item = $r[0]['id'];
1247                 }
1248                 else {
1249                         $post_exists = false;
1250                         $orig_post = null;
1251                 }
1252
1253                 if(! $orig_post) {
1254                         $datarray['gravity'] = 0;
1255                         $datarray['uid'] = $uid;
1256                         $datarray['wall'] = (($wall) ? 1 : 0);
1257                         $datarray['uri'] = $datarray['parent-uri'] = 'fb::' . $entry->id;
1258                         $from = $entry->from;
1259                         if($from->id == $self_id)
1260                                 $datarray['contact-id'] = $self[0]['id'];
1261                         else {
1262                                 $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d AND `blocked` = 0 AND `readonly` = 0 LIMIT 1",
1263                                         dbesc($from->id),
1264                                         intval($uid)
1265                                 );
1266                                 if(count($r))
1267                                         $datarray['contact-id'] = $r[0]['id'];
1268                         }
1269
1270                         // don't store post if we don't have a contact
1271
1272                         if(! x($datarray,'contact-id')) {
1273                                 logger('no contact: post ignored');
1274                                 continue;
1275                         }
1276
1277                         $datarray['verb'] = ACTIVITY_POST;
1278                         if($wall) {
1279                                 $datarray['owner-name'] = $self[0]['name'];
1280                                 $datarray['owner-link'] = $self[0]['url'];
1281                                 $datarray['owner-avatar'] = $self[0]['thumb'];
1282                         }
1283                         if(isset($entry->application) && isset($entry->application->name) && strlen($entry->application->name))
1284                                 $datarray['app'] = strip_tags($entry->application->name);
1285                         else
1286                                 $datarray['app'] = 'facebook';
1287
1288                         $found_blocked = false;
1289
1290                         if(count($blocked_apps_arr)) {
1291                                 foreach($blocked_apps_arr as $bad_appl) {
1292                                         if(strlen(trim($bad_appl)) && (stristr($datarray['app'],trim($bad_appl)))) {
1293                                                 $found_blocked = true;
1294                                         }
1295                                 }
1296                         }
1297
1298                         if($found_blocked) {
1299                                 logger('facebook: blocking application: ' . $datarray['app']);
1300                                 continue;
1301                         }
1302
1303                         $datarray['author-name'] = $from->name;
1304                         $datarray['author-link'] = 'http://facebook.com/profile.php?id=' . $from->id;
1305                         $datarray['author-avatar'] = 'https://graph.facebook.com/' . $from->id . '/picture';
1306                         $datarray['plink'] = $datarray['author-link'] . '&v=wall&story_fbid=' . substr($entry->id,strpos($entry->id,'_') + 1);
1307
1308                         $datarray['body'] = escape_tags($entry->message);
1309
1310                         if($entry->picture && $entry->link) {
1311                                 $datarray['body'] .= "\n\n" . '[url=' . $entry->link . '][img]' . $entry->picture . '[/img][/url]';
1312                         }
1313                         else {
1314                                 if($entry->picture)
1315                                         $datarray['body'] .= "\n\n" . '[img]' . $entry->picture . '[/img]';
1316                                 // if just a link, it may be a wall photo - check
1317                                 if($entry->link)
1318                                         $datarray['body'] .= fb_get_photo($uid,$entry->link);
1319                         }
1320                         if($entry->name)
1321                                 $datarray['body'] .= "\n" . $entry->name;
1322                         if($entry->caption)
1323                                 $datarray['body'] .= "\n" . $entry->caption;
1324                         if($entry->description)
1325                                 $datarray['body'] .= "\n" . $entry->description;
1326                         $datarray['created'] = datetime_convert('UTC','UTC',$entry->created_time);
1327                         $datarray['edited'] = datetime_convert('UTC','UTC',$entry->updated_time);
1328
1329                         // If the entry has a privacy policy, we cannot assume who can or cannot see it,
1330                         // as the identities are from a foreign system. Mark it as private to the owner.
1331
1332                         if($entry->privacy && $entry->privacy->value !== 'EVERYONE') {
1333                                 $datarray['private'] = 1;
1334                                 $datarray['allow_cid'] = '<' . $self[0]['id'] . '>';
1335                         }
1336
1337                         if(trim($datarray['body']) == '') {
1338                                 logger('facebook: empty body');
1339                                 continue;
1340                         }
1341
1342                         $top_item = item_store($datarray);
1343                         $r = q("SELECT * FROM `item` WHERE `id` = %d AND `uid` = %d LIMIT 1",
1344                                 intval($top_item),
1345                                 intval($uid)
1346                         );
1347                         if(count($r)) {
1348                                 $orig_post = $r[0];
1349                                 logger('fb: new top level item posted');
1350                         }
1351                 }
1352
1353                 if(isset($entry->likes) && isset($entry->likes->data))
1354                         $likers = $entry->likes->data;
1355                 else
1356                         $likers = null;
1357
1358                 if(isset($entry->comments) && isset($entry->comments->data))
1359                         $comments = $entry->comments->data;
1360                 else
1361                         $comments = null;
1362
1363                 if(is_array($likers)) {
1364                         foreach($likers as $likes) {
1365
1366                                 if(! $orig_post)
1367                                         continue;
1368
1369                                 // If we posted the like locally, it will be found with our url, not the FB url.
1370
1371                                 $second_url = (($likes->id == $self_id) ? $self[0]['url'] : 'http://facebook.com/profile.php?id=' . $likes->id);
1372
1373                                 $r = q("SELECT * FROM `item` WHERE `parent-uri` = '%s' AND `uid` = %d AND `verb` = '%s'
1374                                         AND ( `author-link` = '%s' OR `author-link` = '%s' ) LIMIT 1",
1375                                         dbesc($orig_post['uri']),
1376                                         intval($uid),
1377                                         dbesc(ACTIVITY_LIKE),
1378                                         dbesc('http://facebook.com/profile.php?id=' . $likes->id),
1379                                         dbesc($second_url)
1380                                 );
1381
1382                                 if(count($r))
1383                                         continue;
1384
1385                                 $likedata = array();
1386                                 $likedata['parent'] = $top_item;
1387                                 $likedata['verb'] = ACTIVITY_LIKE;
1388                                 $likedata['gravity'] = 3;
1389                                 $likedata['uid'] = $uid;
1390                                 $likedata['wall'] = (($wall) ? 1 : 0);
1391                                 $likedata['uri'] = item_new_uri($a->get_baseurl(), $uid);
1392                                 $likedata['parent-uri'] = $orig_post['uri'];
1393                                 if($likes->id == $self_id)
1394                                         $likedata['contact-id'] = $self[0]['id'];
1395                                 else {
1396                                         $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d AND `blocked` = 0 AND `readonly` = 0 LIMIT 1",
1397                                                 dbesc($likes->id),
1398                                                 intval($uid)
1399                                         );
1400                                         if(count($r))
1401                                                 $likedata['contact-id'] = $r[0]['id'];
1402                                 }
1403                                 if(! x($likedata,'contact-id'))
1404                                         $likedata['contact-id'] = $orig_post['contact-id'];
1405
1406                                 $likedata['app'] = 'facebook';
1407                                 $likedata['verb'] = ACTIVITY_LIKE;
1408                                 $likedata['author-name'] = $likes->name;
1409                                 $likedata['author-link'] = 'http://facebook.com/profile.php?id=' . $likes->id;
1410                                 $likedata['author-avatar'] = 'https://graph.facebook.com/' . $likes->id . '/picture';
1411
1412                                 $author  = '[url=' . $likedata['author-link'] . ']' . $likedata['author-name'] . '[/url]';
1413                                 $objauthor =  '[url=' . $orig_post['author-link'] . ']' . $orig_post['author-name'] . '[/url]';
1414                                 $post_type = t('status');
1415                         $plink = '[url=' . $orig_post['plink'] . ']' . $post_type . '[/url]';
1416                                 $likedata['object-type'] = ACTIVITY_OBJ_NOTE;
1417
1418                                 $likedata['body'] = sprintf( t('%1$s likes %2$s\'s %3$s'), $author, $objauthor, $plink);
1419                                 $likedata['object'] = '<object><type>' . ACTIVITY_OBJ_NOTE . '</type><local>1</local>' .
1420                                         '<id>' . $orig_post['uri'] . '</id><link>' . xmlify('<link rel="alternate" type="text/html" href="' . xmlify($orig_post['plink']) . '" />') . '</link><title>' . $orig_post['title'] . '</title><content>' . $orig_post['body'] . '</content></object>';
1421
1422                                 $item = item_store($likedata);
1423                         }
1424                 }
1425                 if(is_array($comments)) {
1426                         foreach($comments as $cmnt) {
1427
1428                                 if(! $orig_post)
1429                                         continue;
1430
1431                                 $r = q("SELECT * FROM `item` WHERE `uid` = %d AND ( `uri` = '%s' OR `extid` = '%s' ) LIMIT 1",
1432                                         intval($uid),
1433                                         dbesc('fb::' . $cmnt->id),
1434                                         dbesc('fb::' . $cmnt->id)
1435                                 );
1436                                 if(count($r))
1437                                         continue;
1438
1439                                 $cmntdata = array();
1440                                 $cmntdata['parent'] = $top_item;
1441                                 $cmntdata['verb'] = ACTIVITY_POST;
1442                                 $cmntdata['gravity'] = 6;
1443                                 $cmntdata['uid'] = $uid;
1444                                 $cmntdata['wall'] = (($wall) ? 1 : 0);
1445                                 $cmntdata['uri'] = 'fb::' . $cmnt->id;
1446                                 $cmntdata['parent-uri'] = $orig_post['uri'];
1447                                 if($cmnt->from->id == $self_id) {
1448                                         $cmntdata['contact-id'] = $self[0]['id'];
1449                                 }
1450                                 else {
1451                                         $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d LIMIT 1",
1452                                                 dbesc($cmnt->from->id),
1453                                                 intval($uid)
1454                                         );
1455                                         if(count($r)) {
1456                                                 $cmntdata['contact-id'] = $r[0]['id'];
1457                                                 if($r[0]['blocked'] || $r[0]['readonly'])
1458                                                         continue;
1459                                         }
1460                                 }
1461                                 if(! x($cmntdata,'contact-id'))
1462                                         $cmntdata['contact-id'] = $orig_post['contact-id'];
1463
1464                                 $cmntdata['app'] = 'facebook';
1465                                 $cmntdata['created'] = datetime_convert('UTC','UTC',$cmnt->created_time);
1466                                 $cmntdata['edited']  = datetime_convert('UTC','UTC',$cmnt->created_time);
1467                                 $cmntdata['verb'] = ACTIVITY_POST;
1468                                 $cmntdata['author-name'] = $cmnt->from->name;
1469                                 $cmntdata['author-link'] = 'http://facebook.com/profile.php?id=' . $cmnt->from->id;
1470                                 $cmntdata['author-avatar'] = 'https://graph.facebook.com/' . $cmnt->from->id . '/picture';
1471                                 $cmntdata['body'] = $cmnt->message;
1472                                 $item = item_store($cmntdata);
1473
1474                                 $myconv = q("SELECT `author-link`, `author-avatar`, `parent` FROM `item` WHERE `parent-uri` = '%s' AND `uid` = %d AND `parent` != 0 ",
1475                                         dbesc($orig_post['uri']),
1476                                         intval($uid)
1477                                 );
1478
1479                                 if(count($myconv)) {
1480                                         $importer_url = $a->get_baseurl() . '/profile/' . $user[0]['nickname'];
1481
1482                                         foreach($myconv as $conv) {
1483
1484                                                 // now if we find a match, it means we're in this conversation
1485
1486                                                 if(! link_compare($conv['author-link'],$importer_url))
1487                                                         continue;
1488
1489                                                 require_once('include/enotify.php');
1490
1491                                                 $conv_parent = $conv['parent'];
1492
1493                                                 notification(array(
1494                                                         'type'         => NOTIFY_COMMENT,
1495                                                         'notify_flags' => $user[0]['notify-flags'],
1496                                                         'language'     => $user[0]['language'],
1497                                                         'to_name'      => $user[0]['username'],
1498                                                         'to_email'     => $user[0]['email'],
1499                                                         'uid'          => $user[0]['uid'],
1500                                                         'item'         => $cmntdata,
1501                                                         'link'             => $a->get_baseurl() . '/display/' . $importer['nickname'] . '/' . $item,
1502                                                         'source_name'  => $cmntdata['author-name'],
1503                                                         'source_link'  => $cmntdata['author-link'],
1504                                                         'source_photo' => $cmntdata['author-avatar'],
1505                                                         'verb'         => ACTIVITY_POST,
1506                                                         'otype'        => 'item',
1507                                                         'parent'       => $conv_parent,
1508                                                 ));
1509
1510                                                 // only send one notification
1511                                                 break;
1512                                         }
1513                                 }
1514                         }
1515                 }
1516         }
1517 }
1518
1519
1520 function fb_get_app_access_token() {
1521
1522         $acc_token = get_config('facebook','app_access_token');
1523
1524         if ($acc_token !== false) return $acc_token;
1525
1526         $appid = get_config('facebook','appid');
1527         $appsecret = get_config('facebook', 'appsecret');
1528
1529         if ($appid === false || $appsecret === false) {
1530                 logger('fb_get_app_access_token: appid and/or appsecret not set', LOGGER_DEBUG);
1531                 return false;
1532         }
1533         logger('https://graph.facebook.com/oauth/access_token?client_id=' . $appid . '&client_secret=' . $appsecret . '&grant_type=client_credentials', LOGGER_DATA);
1534         $x = fetch_url('https://graph.facebook.com/oauth/access_token?client_id=' . $appid . '&client_secret=' . $appsecret . '&grant_type=client_credentials');
1535
1536         if(strpos($x,'access_token=') !== false) {
1537                 logger('fb_get_app_access_token: returned access token: ' . $x, LOGGER_DATA);
1538
1539                 $token = str_replace('access_token=', '', $x);
1540                 if(strpos($token,'&') !== false)
1541                         $token = substr($token,0,strpos($token,'&'));
1542
1543                 if ($token == "") {
1544                         logger('fb_get_app_access_token: empty token: ' . $x, LOGGER_DEBUG);
1545                         return false;
1546                 }
1547                 set_config('facebook','app_access_token',$token);
1548                 return $token;
1549         } else {
1550                 logger('fb_get_app_access_token: response did not contain an access_token: ' . $x, LOGGER_DATA);
1551                 return false;
1552         }
1553 }
1554
1555 function facebook_subscription_del_users() {
1556         $a = get_app();
1557         $access_token = fb_get_app_access_token();
1558
1559         $url = "https://graph.facebook.com/" . get_config('facebook', 'appid'  ) . "/subscriptions?access_token=" . $access_token;
1560         facebook_delete_url($url);
1561
1562         del_config('facebook', 'realtime_active');
1563 }
1564
1565 function facebook_subscription_add_users($second_try = false) {
1566         $a = get_app();
1567         $access_token = fb_get_app_access_token();
1568
1569         $url = "https://graph.facebook.com/" . get_config('facebook', 'appid'  ) . "/subscriptions?access_token=" . $access_token;
1570
1571         list($usec, $sec) = explode(" ", microtime());
1572         $verify_token = sha1($usec . $sec . rand(0, 999999999));
1573         set_config('facebook', 'cb_verify_token', $verify_token);
1574
1575         $cb = $a->get_baseurl() . '/facebook/?realtime_cb=1';
1576
1577         $j = post_url($url,array(
1578                 "object" => "user",
1579                 "fields" => "feed,friends",
1580                 "callback_url" => $cb,
1581                 "verify_token" => $verify_token,
1582         ));
1583         del_config('facebook', 'cb_verify_token');
1584
1585         if ($j) {
1586                 $x = json_decode($j);
1587                 logger("Facebook reponse: " . $j, LOGGER_DATA);
1588                 if (isset($x->error)) {
1589                         logger('facebook_subscription_add_users: got an error: ' . $j);
1590                         if ($x->error->type == "OAuthException" && $x->error->code == 190) {
1591                                 del_config('facebook', 'app_access_token');
1592                                 if ($second_try === false) facebook_subscription_add_users(true);
1593                         }
1594                 } else {
1595                         logger('facebook_subscription_add_users: sucessful');
1596                         if (facebook_check_realtime_active()) set_config('facebook', 'realtime_active', 1);
1597                 }
1598         };
1599 }
1600
1601 function facebook_subscriptions_get() {
1602
1603         $access_token = fb_get_app_access_token();
1604         if (!$access_token) return null;
1605
1606         $url = "https://graph.facebook.com/" . get_config('facebook', 'appid'  ) . "/subscriptions?access_token=" . $access_token;
1607         $j = fetch_url($url);
1608         $ret = null;
1609         if ($j) {
1610                 $x = json_decode($j);
1611                 if (isset($x->data)) $ret = $x->data;
1612         }
1613         return $ret;
1614 }
1615
1616
1617 function facebook_check_realtime_active() {
1618         $ret = facebook_subscriptions_get();
1619         if (is_null($ret)) return false;
1620         if (is_array($ret)) foreach ($ret as $re) if (is_object($re) && $re->object == "user") return true;
1621         return false;
1622 }
1623
1624
1625
1626
1627 // DELETE-request to $url
1628
1629 if(! function_exists('facebook_delete_url')) {
1630 function facebook_delete_url($url,$headers = null, &$redirects = 0, $timeout = 0) {
1631         $a = get_app();
1632         $ch = curl_init($url);
1633         if(($redirects > 8) || (! $ch))
1634                 return false;
1635
1636         curl_setopt($ch, CURLOPT_HEADER, true);
1637         curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
1638         curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "DELETE");
1639         curl_setopt($ch, CURLOPT_USERAGENT, "Friendica");
1640
1641         if(intval($timeout)) {
1642                 curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
1643         }
1644         else {
1645                 $curl_time = intval(get_config('system','curl_timeout'));
1646                 curl_setopt($ch, CURLOPT_TIMEOUT, (($curl_time !== false) ? $curl_time : 60));
1647         }
1648
1649         if(defined('LIGHTTPD')) {
1650                 if(!is_array($headers)) {
1651                         $headers = array('Expect:');
1652                 } else {
1653                         if(!in_array('Expect:', $headers)) {
1654                                 array_push($headers, 'Expect:');
1655                         }
1656                 }
1657         }
1658         if($headers)
1659                 curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
1660
1661         $check_cert = get_config('system','verifyssl');
1662         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, (($check_cert) ? true : false));
1663         $prx = get_config('system','proxy');
1664         if(strlen($prx)) {
1665                 curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 1);
1666                 curl_setopt($ch, CURLOPT_PROXY, $prx);
1667                 $prxusr = get_config('system','proxyuser');
1668                 if(strlen($prxusr))
1669                         curl_setopt($ch, CURLOPT_PROXYUSERPWD, $prxusr);
1670         }
1671
1672         $a->set_curl_code(0);
1673
1674         // don't let curl abort the entire application
1675         // if it throws any errors.
1676
1677         $s = @curl_exec($ch);
1678
1679         $base = $s;
1680         $curl_info = curl_getinfo($ch);
1681         $http_code = $curl_info['http_code'];
1682
1683         $header = '';
1684
1685         // Pull out multiple headers, e.g. proxy and continuation headers
1686         // allow for HTTP/2.x without fixing code
1687
1688         while(preg_match('/^HTTP\/[1-2].+? [1-5][0-9][0-9]/',$base)) {
1689                 $chunk = substr($base,0,strpos($base,"\r\n\r\n")+4);
1690                 $header .= $chunk;
1691                 $base = substr($base,strlen($chunk));
1692         }
1693
1694         if($http_code == 301 || $http_code == 302 || $http_code == 303) {
1695         $matches = array();
1696         preg_match('/(Location:|URI:)(.*?)\n/', $header, $matches);
1697         $url = trim(array_pop($matches));
1698         $url_parsed = @parse_url($url);
1699         if (isset($url_parsed)) {
1700             $redirects++;
1701             return delete_url($url,$headers,$redirects,$timeout);
1702         }
1703     }
1704         $a->set_curl_code($http_code);
1705         $body = substr($s,strlen($header));
1706
1707         $a->set_curl_headers($header);
1708
1709         curl_close($ch);
1710         return($body);
1711 }}