facebook/facebook.php

   1 <?php
   2 /**
   3  * Name: Facebook Connector
   4  * Version: 1.2
   5  * Author: Mike Macgirvin <http://macgirvin.com/profile/mike>
   6  *         Tobias Hößl <https://github.com/CatoTH/>
   7  */
   8
   9 /**
  10  * Installing the Friendica/Facebook connector
  11  *
  12  * Detailed instructions how to use this plugin can be found at
  13  * https://github.com/friendica/friendica/wiki/How-to:-Friendica%E2%80%99s-Facebook-connector
  14  *
  15  * Vidoes and embeds will not be posted if there is no other content. Links
  16  * and images will be converted to a format suitable for the Facebook API and
  17  * long posts truncated - with a link to view the full post.
  18  *
  19  * Facebook contacts will not be able to view private photos, as they are not able to
  20  * authenticate to your site to establish identity. We will address this
  21  * in a future release.
  22  */
  23
  24  /** TODO
  25  * - Implement a method for the administrator to delete all configuration data the plugin has created,
  26  *   e.g. the app_access_token
  27  */
  28
  29 // Size of maximum post length increased
  30 // see http://www.facebook.com/schrep/posts/203969696349811
  31 // define('FACEBOOK_MAXPOSTLEN', 420);
  32 define('FACEBOOK_MAXPOSTLEN', 63206);
  33 define('FACEBOOK_SESSION_ERR_NOTIFICATION_INTERVAL', 259200); // 3 days
  34 define('FACEBOOK_DEFAULT_POLL_INTERVAL', 60); // given in minutes
  35 define('FACEBOOK_MIN_POLL_INTERVAL', 5);
  36
  37 require_once('include/security.php');
  38
  39 function facebook_install() {
  40         register_hook('post_local',       'addon/facebook/facebook.php', 'facebook_post_local');
  41         register_hook('notifier_normal',  'addon/facebook/facebook.php', 'facebook_post_hook');
  42         register_hook('jot_networks',     'addon/facebook/facebook.php', 'facebook_jot_nets');
  43         register_hook('connector_settings',  'addon/facebook/facebook.php', 'facebook_plugin_settings');
  44         register_hook('cron',             'addon/facebook/facebook.php', 'facebook_cron');
  45         register_hook('enotify',          'addon/facebook/facebook.php', 'facebook_enotify');
  46         register_hook('queue_predeliver', 'addon/facebook/facebook.php', 'fb_queue_hook');
  47 }
  48
  49
  50 function facebook_uninstall() {
  51         unregister_hook('post_local',       'addon/facebook/facebook.php', 'facebook_post_local');
  52         unregister_hook('notifier_normal',  'addon/facebook/facebook.php', 'facebook_post_hook');
  53         unregister_hook('jot_networks',     'addon/facebook/facebook.php', 'facebook_jot_nets');
  54         unregister_hook('connector_settings',  'addon/facebook/facebook.php', 'facebook_plugin_settings');
  55         unregister_hook('cron',             'addon/facebook/facebook.php', 'facebook_cron');
  56         unregister_hook('enotify',          'addon/facebook/facebook.php', 'facebook_enotify');
  57         unregister_hook('queue_predeliver', 'addon/facebook/facebook.php', 'fb_queue_hook');
  58
  59         // hook moved
  60         unregister_hook('post_local_end',  'addon/facebook/facebook.php', 'facebook_post_hook');
  61         unregister_hook('plugin_settings',  'addon/facebook/facebook.php', 'facebook_plugin_settings');
  62 }
  63
  64
  65 /* declare the facebook_module function so that /facebook url requests will land here */
  66
  67 function facebook_module() {}
  68
  69
  70
  71 // If a->argv[1] is a nickname, this is a callback from Facebook oauth requests.
  72 // If $_REQUEST["realtime_cb"] is set, this is a callback from the Real-Time Updates API
  73
  74 /**
  75  * @param App $a
  76  */
  77 function facebook_init(&$a) {
  78
  79         if (x($_REQUEST, "realtime_cb") && x($_REQUEST, "realtime_cb")) {
  80                 logger("facebook_init: Facebook Real-Time callback called", LOGGER_DEBUG);
  81
  82                 if (x($_REQUEST, "hub_verify_token")) {
  83                         // this is the verification callback while registering for real time updates
  84
  85                         $verify_token = get_config('facebook', 'cb_verify_token');
  86                         if ($verify_token != $_REQUEST["hub_verify_token"]) {
  87                                 logger('facebook_init: Wrong Facebook Callback Verifier - expected ' . $verify_token . ', got ' . $_REQUEST["hub_verify_token"]);
  88                                 return;
  89                         }
  90
  91                         if (x($_REQUEST, "hub_challenge")) {
  92                                 logger('facebook_init: Answering Challenge: ' . $_REQUEST["hub_challenge"], LOGGER_DATA);
  93                                 echo $_REQUEST["hub_challenge"];
  94                                 die();
  95                         }
  96                 }
  97
  98                 require_once('include/items.php');
  99
 100                 // this is a status update
 101                 $content = file_get_contents("php://input");
 102                 if (is_numeric($content)) $content = file_get_contents("php://input");
 103                 $js = json_decode($content);
 104                 logger(print_r($js, true), LOGGER_DATA);
 105
 106                 if (!isset($js->object) || $js->object != "user" || !isset($js->entry)) {
 107                         logger('facebook_init: Could not parse Real-Time Update data', LOGGER_DEBUG);
 108                         return;
 109                 }
 110
 111                 $affected_users = array("feed" => array(), "friends" => array());
 112
 113                 foreach ($js->entry as $entry) {
 114                         $fbuser = $entry->uid;
 115                         foreach ($entry->changed_fields as $field) {
 116                                 if (!isset($affected_users[$field])) {
 117                                         logger('facebook_init: Unknown field "' . $field . '"');
 118                                         continue;
 119                                 }
 120                                 if (in_array($fbuser, $affected_users[$field])) continue;
 121
 122                                 $r = q("SELECT `uid` FROM `pconfig` WHERE `cat` = 'facebook' AND `k` = 'self_id' AND `v` = '%s' LIMIT 1", dbesc($fbuser));
 123                                 if(! count($r))
 124                                         continue;
 125                                 $uid = $r[0]['uid'];
 126
 127                                 $access_token = get_pconfig($uid,'facebook','access_token');
 128                                 if(! $access_token)
 129                                         return;
 130
 131                                 switch ($field) {
 132                                         case "feed":
 133                                                 logger('facebook_init: FB-User ' . $fbuser . ' / feed', LOGGER_DEBUG);
 134
 135                                                 if(! get_pconfig($uid,'facebook','no_wall')) {
 136                                                         $private_wall = intval(get_pconfig($uid,'facebook','private_wall'));
 137                                                         $s = fetch_url('https://graph.facebook.com/me/feed?access_token=' . $access_token);
 138                                                         if($s) {
 139                                                                 $j = json_decode($s);
 140                                                                 if (isset($j->data)) {
 141                                                                         logger('facebook_init: wall: ' . print_r($j,true), LOGGER_DATA);
 142                                                                         fb_consume_stream($uid,$j,($private_wall) ? false : true);
 143                                                                 } else {
 144                                                                         logger('facebook_init: wall: got no data from Facebook: ' . print_r($j,true), LOGGER_NORMAL);
 145                                                                 }
 146                                                         }
 147                                                 }
 148
 149                                         break;
 150                                         case "friends":
 151                                                 logger('facebook_init: FB-User ' . $fbuser . ' / friends', LOGGER_DEBUG);
 152
 153                                                 fb_get_friends($uid, false);
 154                                                 set_pconfig($uid,'facebook','friend_check',time());
 155                                         break;
 156                                         default:
 157                                                 logger('facebook_init: Unknown callback field for ' . $fbuser, LOGGER_NORMAL);
 158                                 }
 159                                 $affected_users[$field][] = $fbuser;
 160                         }
 161                 }
 162         }
 163
 164
 165         if($a->argc != 2)
 166                 return;
 167         $nick = $a->argv[1];
 168         if(strlen($nick))
 169                 $r = q("SELECT `uid` FROM `user` WHERE `nickname` = '%s' LIMIT 1",
 170                                 dbesc($nick)
 171                 );
 172         if(!(isset($r) && count($r)))
 173                 return;
 174
 175         $uid           = $r[0]['uid'];
 176         $auth_code     = (x($_GET, 'code') ? $_GET['code'] : '');
 177         $error         = (x($_GET, 'error_description') ? $_GET['error_description'] : '');
 178
 179
 180         if($error)
 181                 logger('facebook_init: Error: ' . $error);
 182
 183         if($auth_code && $uid) {
 184
 185                 $appid = get_config('facebook','appid');
 186                 $appsecret = get_config('facebook', 'appsecret');
 187
 188                 $x = fetch_url('https://graph.facebook.com/oauth/access_token?client_id='
 189                         . $appid . '&client_secret=' . $appsecret . '&redirect_uri='
 190                         . urlencode($a->get_baseurl() . '/facebook/' . $nick)
 191                         . '&code=' . $auth_code);
 192
 193                 logger('facebook_init: returned access token: ' . $x, LOGGER_DATA);
 194
 195                 if(strpos($x,'access_token=') !== false) {
 196                         $token = str_replace('access_token=', '', $x);
 197                         if(strpos($token,'&') !== false)
 198                                 $token = substr($token,0,strpos($token,'&'));
 199                         set_pconfig($uid,'facebook','access_token',$token);
 200                         set_pconfig($uid,'facebook','post','1');
 201                         if(get_pconfig($uid,'facebook','no_linking') === false)
 202                                 set_pconfig($uid,'facebook','no_linking',1);
 203                         fb_get_self($uid);
 204                         fb_get_friends($uid, true);
 205                         fb_consume_all($uid);
 206
 207                 }
 208
 209         }
 210
 211 }
 212
 213
 214 /**
 215  * @param int $uid
 216  */
 217 function fb_get_self($uid) {
 218         $access_token = get_pconfig($uid,'facebook','access_token');
 219         if(! $access_token)
 220                 return;
 221         $s = fetch_url('https://graph.facebook.com/me/?access_token=' . $access_token);
 222         if($s) {
 223                 $j = json_decode($s);
 224                 set_pconfig($uid,'facebook','self_id',(string) $j->id);
 225         }
 226 }
 227
 228 /**
 229  * @param int $uid
 230  * @param string $access_token
 231  * @param array $persons
 232  */
 233 function fb_get_friends_sync_new($uid, $access_token, $persons) {
 234     $persons_todo = array();
 235     foreach ($persons as $person) {
 236         $link = 'http://facebook.com/profile.php?id=' . $person->id;
 237
 238         $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `url` = '%s' LIMIT 1",
 239             intval($uid),
 240             dbesc($link)
 241         );
 242
 243         if (count($r) == 0) {
 244             logger('fb_get_friends: new contact found: ' . $link, LOGGER_DEBUG);
 245             $persons_todo[] = $person;
 246         }
 247
 248         if (count($persons_todo) > 0) fb_get_friends_sync_full($uid, $access_token, $persons_todo);
 249     }
 250 }
 251
 252 /**
 253  * @param int $uid
 254  * @param object $contact
 255  */
 256 function fb_get_friends_sync_parsecontact($uid, $contact) {
 257     $contact->link = 'http://facebook.com/profile.php?id=' . $contact->id;
 258
 259     // If its a page then set the first name from the username
 260     if (!$contact->first_name and $contact->username)
 261         $contact->first_name = $contact->username;
 262
 263     // check if we already have a contact
 264
 265     $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `url` = '%s' LIMIT 1",
 266         intval($uid),
 267         dbesc($contact->link)
 268     );
 269
 270     if(count($r)) {
 271
 272         // check that we have all the photos, this has been known to fail on occasion
 273
 274         if((! $r[0]['photo']) || (! $r[0]['thumb']) || (! $r[0]['micro'])) {
 275             require_once("Photo.php");
 276
 277             $photos = import_profile_photo('https://graph.facebook.com/' . $contact->id . '/picture', $uid, $r[0]['id']);
 278
 279             q("UPDATE `contact` SET `photo` = '%s',
 280                                         `thumb` = '%s',
 281                                         `micro` = '%s',
 282                                         `name-date` = '%s',
 283                                         `uri-date` = '%s',
 284                                         `avatar-date` = '%s'
 285                                         WHERE `id` = %d LIMIT 1
 286                                 ",
 287                 dbesc($photos[0]),
 288                 dbesc($photos[1]),
 289                 dbesc($photos[2]),
 290                 dbesc(datetime_convert()),
 291                 dbesc(datetime_convert()),
 292                 dbesc(datetime_convert()),
 293                 intval($r[0]['id'])
 294             );
 295         }
 296         return;
 297     }
 298     else {
 299
 300         // create contact record
 301         q("INSERT INTO `contact` ( `uid`, `created`, `url`, `nurl`, `addr`, `alias`, `notify`, `poll`,
 302                                 `name`, `nick`, `photo`, `network`, `rel`, `priority`,
 303                                 `writable`, `blocked`, `readonly`, `pending` )
 304                                 VALUES ( %d, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', %d, %d, %d, 0, 0, 0 ) ",
 305             intval($uid),
 306             dbesc(datetime_convert()),
 307             dbesc($contact->link),
 308             dbesc(normalise_link($contact->link)),
 309             dbesc(''),
 310             dbesc(''),
 311             dbesc($contact->id),
 312             dbesc('facebook ' . $contact->id),
 313             dbesc($contact->name),
 314             dbesc(($contact->nickname) ? $contact->nickname : strtolower($contact->first_name)),
 315             dbesc('https://graph.facebook.com/' . $contact->id . '/picture'),
 316             dbesc(NETWORK_FACEBOOK),
 317             intval(CONTACT_IS_FRIEND),
 318             intval(1),
 319             intval(1)
 320         );
 321     }
 322
 323     $r = q("SELECT * FROM `contact` WHERE `url` = '%s' AND `uid` = %d LIMIT 1",
 324         dbesc($contact->link),
 325         intval($uid)
 326     );
 327
 328     if(! count($r)) {
 329         return;
 330     }
 331
 332     $contact_id  = $r[0]['id'];
 333
 334     require_once("Photo.php");
 335
 336     $photos = import_profile_photo($r[0]['photo'],$uid,$contact_id);
 337
 338     q("UPDATE `contact` SET `photo` = '%s',
 339                         `thumb` = '%s',
 340                         `micro` = '%s',
 341                         `name-date` = '%s',
 342                         `uri-date` = '%s',
 343                         `avatar-date` = '%s'
 344                         WHERE `id` = %d LIMIT 1
 345                 ",
 346         dbesc($photos[0]),
 347         dbesc($photos[1]),
 348         dbesc($photos[2]),
 349         dbesc(datetime_convert()),
 350         dbesc(datetime_convert()),
 351         dbesc(datetime_convert()),
 352         intval($contact_id)
 353     );
 354 }
 355
 356 /**
 357  * @param int $uid
 358  * @param string $access_token
 359  * @param array $persons
 360  */
 361 function fb_get_friends_sync_full($uid, $access_token, $persons) {
 362     if (count($persons) == 0) return;
 363     $nums = Ceil(count($persons) / 50);
 364     for ($i = 0; $i < $nums; $i++) {
 365         $batch_request = array();
 366         for ($j = $i * 50; $j < ($i+1) * 50 && $j < count($persons); $j++) $batch_request[] = array('method'=>'GET', 'relative_url'=>$persons[$j]->id);
 367         $s = post_url('https://graph.facebook.com/', array('access_token' => $access_token, 'batch' => json_encode($batch_request)));
 368         if($s) {
 369             $results = json_decode($s);
 370             logger('fb_get_friends: info: ' . print_r($results,true), LOGGER_DATA);
 371             foreach ($results as $contact) {
 372                 if ($contact->code != 200) logger('fb_get_friends: not found: ' . print_r($contact,true), LOGGER_DEBUG);
 373                 else fb_get_friends_sync_parsecontact($uid, json_decode($contact->body));
 374             }
 375         }
 376     }
 377 }
 378
 379
 380
 381 // if $fullsync is true, only new contacts are searched for
 382
 383 /**
 384  * @param int $uid
 385  * @param bool $fullsync
 386  */
 387 function fb_get_friends($uid, $fullsync = true) {
 388
 389         $r = q("SELECT `uid` FROM `user` WHERE `uid` = %d AND `account_expired` = 0 LIMIT 1",
 390                 intval($uid)
 391         );
 392         if(! count($r))
 393                 return;
 394
 395         $access_token = get_pconfig($uid,'facebook','access_token');
 396
 397         $no_linking = get_pconfig($uid,'facebook','no_linking');
 398         if($no_linking)
 399                 return;
 400
 401         if(! $access_token)
 402                 return;
 403         $s = fetch_url('https://graph.facebook.com/me/friends?access_token=' . $access_token);
 404         if($s) {
 405                 logger('facebook: fb_get_friends: ' . $s, LOGGER_DATA);
 406                 $j = json_decode($s);
 407                 logger('facebook: fb_get_friends: json: ' . print_r($j,true), LOGGER_DATA);
 408                 if(! $j->data)
 409                         return;
 410
 411             $persons_todo = array();
 412         foreach($j->data as $person) $persons_todo[] = $person;
 413
 414         if ($fullsync)
 415             fb_get_friends_sync_full($uid, $access_token, $persons_todo);
 416         else
 417             fb_get_friends_sync_new($uid, $access_token, $persons_todo);
 418         }
 419 }
 420
 421 // This is the POST method to the facebook settings page
 422 // Content is posted to Facebook in the function facebook_post_hook()
 423
 424 /**
 425  * @param App $a
 426  */
 427 function facebook_post(&$a) {
 428
 429         $uid = local_user();
 430         if($uid){
 431
 432                 $value = ((x($_POST,'post_by_default')) ? intval($_POST['post_by_default']) : 0);
 433                 set_pconfig($uid,'facebook','post_by_default', $value);
 434
 435                 $no_linking = get_pconfig($uid,'facebook','no_linking');
 436
 437                 $no_wall = ((x($_POST,'facebook_no_wall')) ? intval($_POST['facebook_no_wall']) : 0);
 438                 set_pconfig($uid,'facebook','no_wall',$no_wall);
 439
 440                 $private_wall = ((x($_POST,'facebook_private_wall')) ? intval($_POST['facebook_private_wall']) : 0);
 441                 set_pconfig($uid,'facebook','private_wall',$private_wall);
 442
 443
 444                 set_pconfig($uid,'facebook','blocked_apps',escape_tags(trim($_POST['blocked_apps'])));
 445
 446                 $linkvalue = ((x($_POST,'facebook_linking')) ? intval($_POST['facebook_linking']) : 0);
 447                 set_pconfig($uid,'facebook','no_linking', (($linkvalue) ? 0 : 1));
 448
 449                 // FB linkage was allowed but has just been turned off - remove all FB contacts and posts
 450
 451                 if((! intval($no_linking)) && (! intval($linkvalue))) {
 452                         $r = q("SELECT `id` FROM `contact` WHERE `uid` = %d AND `network` = '%s' ",
 453                                 intval($uid),
 454                                 dbesc(NETWORK_FACEBOOK)
 455                         );
 456                         if(count($r)) {
 457                                 require_once('include/Contact.php');
 458                                 foreach($r as $rr)
 459                                         contact_remove($rr['id']);
 460                         }
 461                 }
 462                 elseif(intval($no_linking) && intval($linkvalue)) {
 463                         // FB linkage is now allowed - import stuff.
 464                         fb_get_self($uid);
 465                         fb_get_friends($uid, true);
 466                         fb_consume_all($uid);
 467                 }
 468
 469                 info( t('Settings updated.') . EOL);
 470         }
 471
 472         return;
 473 }
 474
 475 // Facebook settings form
 476
 477 /**
 478  * @param App $a
 479  * @return string
 480  */
 481 function facebook_content(&$a) {
 482
 483         if(! local_user()) {
 484                 notice( t('Permission denied.') . EOL);
 485                 return '';
 486         }
 487
 488         if($a->argc > 1 && $a->argv[1] === 'remove') {
 489                 del_pconfig(local_user(),'facebook','post');
 490                 info( t('Facebook disabled') . EOL);
 491         }
 492
 493         if($a->argc > 1 && $a->argv[1] === 'friends') {
 494                 fb_get_friends(local_user(), true);
 495                 info( t('Updating contacts') . EOL);
 496         }
 497
 498         $o = '';
 499
 500         $fb_installed = false;
 501         if (get_pconfig(local_user(),'facebook','post')) {
 502                 $access_token = get_pconfig(local_user(),'facebook','access_token');
 503                 if ($access_token) {
 504                         $s = fetch_url('https://graph.facebook.com/me/feed?access_token=' . $access_token);
 505                         if($s) {
 506                                 $j = json_decode($s);
 507                                 if (isset($j->data)) $fb_installed = true;
 508                         }
 509                 }
 510         }
 511
 512         $appid = get_config('facebook','appid');
 513
 514         if(! $appid) {
 515                 notice( t('Facebook API key is missing.') . EOL);
 516                 return '';
 517         }
 518
 519         $a->page['htmlhead'] .= '<link rel="stylesheet" type="text/css" href="'
 520                 . $a->get_baseurl() . '/addon/facebook/facebook.css' . '" media="all" />' . "\r\n";
 521
 522         $o .= '<h3>' . t('Facebook Connect') . '</h3>';
 523
 524         if(! $fb_installed) {
 525                 $o .= '<div id="facebook-enable-wrapper">';
 526
 527                 $o .= '<a href="https://www.facebook.com/dialog/oauth?client_id=' . $appid . '&redirect_uri='
 528                         . $a->get_baseurl() . '/facebook/' . $a->user['nickname'] . '&scope=publish_stream,read_stream,offline_access">' . t('Install Facebook connector for this account.') . '</a>';
 529                 $o .= '</div>';
 530         }
 531
 532         if($fb_installed) {
 533                 $o .= '<div id="facebook-disable-wrapper">';
 534
 535                 $o .= '<a href="' . $a->get_baseurl() . '/facebook/remove' . '">' . t('Remove Facebook connector') . '</a></div>';
 536
 537                 $o .= '<div id="facebook-enable-wrapper">';
 538
 539                 $o .= '<a href="https://www.facebook.com/dialog/oauth?client_id=' . $appid . '&redirect_uri='
 540                         . $a->get_baseurl() . '/facebook/' . $a->user['nickname'] . '&scope=publish_stream,read_stream,offline_access">' . t('Re-authenticate [This is necessary whenever your Facebook password is changed.]') . '</a>';
 541                 $o .= '</div>';
 542
 543                 $o .= '<div id="facebook-post-default-form">';
 544                 $o .= '<form action="facebook" method="post" >';
 545                 $post_by_default = get_pconfig(local_user(),'facebook','post_by_default');
 546                 $checked = (($post_by_default) ? ' checked="checked" ' : '');
 547                 $o .= '<input type="checkbox" name="post_by_default" value="1"' . $checked . '/>' . ' ' . t('Post to Facebook by default') . EOL;
 548
 549                 $no_linking = get_pconfig(local_user(),'facebook','no_linking');
 550                 $checked = (($no_linking) ? '' : ' checked="checked" ');
 551                 $o .= '<input type="checkbox" name="facebook_linking" value="1"' . $checked . '/>' . ' ' . t('Link all your Facebook friends and conversations on this website') . EOL ;
 552
 553                 $o .= '<p>' . t('Facebook conversations consist of your <em>profile wall</em> and your friend <em>stream</em>.');
 554                 $o .= ' ' . t('On this website, your Facebook friend stream is only visible to you.');
 555                 $o .= ' ' . t('The following settings determine the privacy of your Facebook profile wall on this website.') . '</p>';
 556
 557                 $private_wall = get_pconfig(local_user(),'facebook','private_wall');
 558                 $checked = (($private_wall) ? ' checked="checked" ' : '');
 559                 $o .= '<input type="checkbox" name="facebook_private_wall" value="1"' . $checked . '/>' . ' ' . t('On this website your Facebook profile wall conversations will only be visible to you') . EOL ;
 560
 561
 562                 $no_wall = get_pconfig(local_user(),'facebook','no_wall');
 563                 $checked = (($no_wall) ? ' checked="checked" ' : '');
 564                 $o .= '<input type="checkbox" name="facebook_no_wall" value="1"' . $checked . '/>' . ' ' . t('Do not import your Facebook profile wall conversations') . EOL ;
 565
 566                 $o .= '<p>' . t('If you choose to link conversations and leave both of these boxes unchecked, your Facebook profile wall will be merged with your profile wall on this website and your privacy settings on this website will be used to determine who may see the conversations.') . '</p>';
 567
 568
 569                 $blocked_apps = get_pconfig(local_user(),'facebook','blocked_apps');
 570
 571                 $o .= '<div><label id="blocked-apps-label" for="blocked-apps">' . t('Comma separated applications to ignore') . ' </label></div>';
 572         $o .= '<div><textarea id="blocked-apps" name="blocked_apps" >' . htmlspecialchars($blocked_apps) . '</textarea></div>';
 573
 574                 $o .= '<input type="submit" name="submit" value="' . t('Submit') . '" /></form></div>';
 575         }
 576
 577         return $o;
 578 }
 579
 580
 581 /**
 582  * @param App $a
 583  * @param null|object $b
 584  * @return mixed
 585  */
 586 function facebook_cron($a,$b) {
 587
 588         $last = get_config('facebook','last_poll');
 589
 590         $poll_interval = intval(get_config('facebook','poll_interval'));
 591         if(! $poll_interval)
 592                 $poll_interval = FACEBOOK_DEFAULT_POLL_INTERVAL;
 593
 594         if($last) {
 595                 $next = $last + $poll_interval;
 596                 if($next > time())
 597                         return;
 598         }
 599
 600         logger('facebook_cron');
 601
 602
 603         // Find the FB users on this site and randomize in case one of them
 604         // uses an obscene amount of memory. It may kill this queue run
 605         // but hopefully we'll get a few others through on each run.
 606
 607         $r = q("SELECT * FROM `pconfig` WHERE `cat` = 'facebook' AND `k` = 'post' AND `v` = '1' ORDER BY RAND() ");
 608         if(count($r)) {
 609                 foreach($r as $rr) {
 610                         if(get_pconfig($rr['uid'],'facebook','no_linking'))
 611                                 continue;
 612                         $ab = intval(get_config('system','account_abandon_days'));
 613                         if($ab > 0) {
 614                                 $z = q("SELECT `uid` FROM `user` WHERE `uid` = %d AND `login_date` > UTC_TIMESTAMP() - INTERVAL %d DAY LIMIT 1",
 615                                         intval($rr['uid']),
 616                                         intval($ab)
 617                                 );
 618                                 if(! count($z))
 619                                         continue;
 620                         }
 621
 622                         // check for new friends once a day
 623                         $last_friend_check = get_pconfig($rr['uid'],'facebook','friend_check');
 624                         if($last_friend_check)
 625                                 $next_friend_check = $last_friend_check + 86400;
 626                         else
 627                             $next_friend_check = 0;
 628                         if($next_friend_check <= time()) {
 629                                 fb_get_friends($rr['uid'], true);
 630                                 set_pconfig($rr['uid'],'facebook','friend_check',time());
 631                         }
 632                         fb_consume_all($rr['uid']);
 633                 }
 634         }
 635
 636         if (get_config('facebook', 'realtime_active') == 1) {
 637                 if (!facebook_check_realtime_active()) {
 638
 639                         logger('facebook_cron: Facebook is not sending Real-Time Updates any more, although it is supposed to. Trying to fix it...', LOGGER_NORMAL);
 640                         facebook_subscription_add_users();
 641
 642                         if (facebook_check_realtime_active())
 643                                 logger('facebook_cron: Successful', LOGGER_NORMAL);
 644                         else {
 645                                 logger('facebook_cron: Failed', LOGGER_NORMAL);
 646
 647                                 if(strlen($a->config['admin_email']) && !get_config('facebook', 'realtime_err_mailsent')) {
 648                                         mail($a->config['admin_email'], t('Problems with Facebook Real-Time Updates'),
 649                                                 "Hi!\n\nThere's a problem with the Facebook Real-Time Updates that cannot be solved automatically. Maybe a permission issue?\n\nPlease try to re-activate it on " . $a->config["system"]["url"] . "/admin/plugins/facebook\n\nThis e-mail will only be sent once.",
 650                                                 'From: ' . t('Administrator') . '@' . $_SERVER['SERVER_NAME'] . "\n"
 651                                                 . 'Content-type: text/plain; charset=UTF-8' . "\n"
 652                                                 . 'Content-transfer-encoding: 8bit'
 653                                         );
 654
 655                                         set_config('facebook', 'realtime_err_mailsent', 1);
 656                                 }
 657                         }
 658                 } else { // !facebook_check_realtime_active()
 659                         del_config('facebook', 'realtime_err_mailsent');
 660                 }
 661         }
 662
 663         set_config('facebook','last_poll', time());
 664
 665 }
 666
 667
 668 /**
 669  * @param App $a
 670  * @param null|object $b
 671  */
 672 function facebook_plugin_settings(&$a,&$b) {
 673
 674         $b .= '<div class="settings-block">';
 675         $b .= '<h3>' . t('Facebook') . '</h3>';
 676         $b .= '<a href="facebook">' . t('Facebook Connector Settings') . '</a><br />';
 677         $b .= '</div>';
 678
 679 }
 680
 681
 682 /**
 683  * @param App $a
 684  * @param null|object $o
 685  */
 686 function facebook_plugin_admin(&$a, &$o){
 687
 688
 689         $o = '<input type="hidden" name="form_security_token" value="' . get_form_security_token("fbsave") . '">';
 690
 691         $o .= '<h4>' . t('Facebook API Key') . '</h4>';
 692
 693         $appid  = get_config('facebook', 'appid'  );
 694         $appsecret = get_config('facebook', 'appsecret' );
 695         $poll_interval = get_config('facebook', 'poll_interval' );
 696         if (!$poll_interval) $poll_interval = FACEBOOK_DEFAULT_POLL_INTERVAL;
 697
 698         $ret1 = q("SELECT `v` FROM `config` WHERE `cat` = 'facebook' AND `k` = 'appid' LIMIT 1");
 699         $ret2 = q("SELECT `v` FROM `config` WHERE `cat` = 'facebook' AND `k` = 'appsecret' LIMIT 1");
 700         if ((count($ret1) > 0 && $ret1[0]['v'] != $appid) || (count($ret2) > 0 && $ret2[0]['v'] != $appsecret)) $o .= t('Error: it appears that you have specified the App-ID and -Secret in your .htconfig.php file. As long as they are specified there, they cannot be set using this form.<br><br>');
 701
 702         $working_connection = false;
 703         if ($appid && $appsecret) {
 704                 $subs = facebook_subscriptions_get();
 705                 if ($subs === null) $o .= t('Error: the given API Key seems to be incorrect (the application access token could not be retrieved).') . '<br>';
 706                 elseif (is_array($subs)) {
 707                         $o .= t('The given API Key seems to work correctly.') . '<br>';
 708                         $working_connection = true;
 709                 } else $o .= t('The correctness of the API Key could not be detected. Somthing strange\'s going on.') . '<br>';
 710         }
 711
 712         $o .= '<label for="fb_appid">' . t('App-ID / API-Key') . '</label><input name="appid" type="text" value="' . escape_tags($appid ? $appid : "") . '"><br style="clear: both;">';
 713         $o .= '<label for="fb_appsecret">' . t('Application secret') . '</label><input name="appsecret" type="text" value="' . escape_tags($appsecret ? $appsecret : "") . '"><br style="clear: both;">';
 714         $o .= '<label for="fb_poll_interval">' . sprintf(t('Polling Interval (min. %1$s minutes)'), FACEBOOK_MIN_POLL_INTERVAL) . '</label><input name="poll_interval" type="number" min="' . FACEBOOK_MIN_POLL_INTERVAL . '" value="' . $poll_interval . '"><br style="clear: both;">';
 715         $o .= '<input type="submit" name="fb_save_keys" value="' . t('Save') . '">';
 716
 717         if ($working_connection) {
 718                 $o .= '<h4>' . t('Real-Time Updates') . '</h4>';
 719
 720                 $activated = facebook_check_realtime_active();
 721                 if ($activated) {
 722                         $o .= t('Real-Time Updates are activated.') . '<br><br>';
 723                         $o .= '<input type="submit" name="real_time_deactivate" value="' . t('Deactivate Real-Time Updates') . '">';
 724                 } else {
 725                         $o .= t('Real-Time Updates not activated.') . '<br><input type="submit" name="real_time_activate" value="' . t('Activate Real-Time Updates') . '">';
 726                 }
 727         }
 728 }
 729
 730 /**
 731  * @param App $a
 732  * @param null|object $o
 733  */
 734 function facebook_plugin_admin_post(&$a, &$o){
 735         check_form_security_token_redirectOnErr('/admin/plugins/facebook', 'fbsave');
 736
 737         if (x($_REQUEST,'fb_save_keys')) {
 738                 set_config('facebook', 'appid', $_REQUEST['appid']);
 739                 set_config('facebook', 'appsecret', $_REQUEST['appsecret']);
 740                 $poll_interval = IntVal($_REQUEST['poll_interval']);
 741                 if ($poll_interval >= FACEBOOK_MIN_POLL_INTERVAL) set_config('facebook', 'poll_interval', $poll_interval);
 742                 del_config('facebook', 'app_access_token');
 743                 info(t('The new values have been saved.'));
 744         }
 745         if (x($_REQUEST,'real_time_activate')) {
 746                 facebook_subscription_add_users();
 747         }
 748         if (x($_REQUEST,'real_time_deactivate')) {
 749                 facebook_subscription_del_users();
 750         }
 751 }
 752
 753 /**
 754  * @param App $a
 755  * @param object $b
 756  * @return mixed
 757  */
 758 function facebook_jot_nets(&$a,&$b) {
 759         if(! local_user())
 760                 return;
 761
 762         $fb_post = get_pconfig(local_user(),'facebook','post');
 763         if(intval($fb_post) == 1) {
 764                 $fb_defpost = get_pconfig(local_user(),'facebook','post_by_default');
 765                 $selected = ((intval($fb_defpost) == 1) ? ' checked="checked" ' : '');
 766                 $b .= '<div class="profile-jot-net"><input type="checkbox" name="facebook_enable"' . $selected . ' value="1" /> '
 767                         . t('Post to Facebook') . '</div>';
 768         }
 769 }
 770
 771
 772 /**
 773  * @param App $a
 774  * @param object $b
 775  * @return mixed
 776  */
 777 function facebook_post_hook(&$a,&$b) {
 778
 779
 780         if($b['deleted'] || ($b['created'] !== $b['edited']))
 781                 return;
 782
 783         /**
 784          * Post to Facebook stream
 785          */
 786
 787         require_once('include/group.php');
 788         require_once('include/html2plain.php');
 789
 790         logger('Facebook post');
 791
 792         $reply = false;
 793         $likes = false;
 794
 795         $deny_arr = array();
 796         $allow_arr = array();
 797
 798         $toplevel = (($b['id'] == $b['parent']) ? true : false);
 799
 800
 801         $linking = ((get_pconfig($b['uid'],'facebook','no_linking')) ? 0 : 1);
 802
 803         if((! $toplevel) && ($linking)) {
 804                 $r = q("SELECT * FROM `item` WHERE `id` = %d AND `uid` = %d LIMIT 1",
 805                         intval($b['parent']),
 806                         intval($b['uid'])
 807                 );
 808                 if(count($r) && substr($r[0]['uri'],0,4) === 'fb::')
 809                         $reply = substr($r[0]['uri'],4);
 810                 elseif(count($r) && substr($r[0]['extid'],0,4) === 'fb::')
 811                         $reply = substr($r[0]['extid'],4);
 812                 else
 813                         return;
 814
 815                 $u = q("SELECT * FROM user where uid = %d limit 1",
 816                         intval($b['uid'])
 817                 );
 818                 if(! count($u))
 819                         return;
 820
 821                 // only accept comments from the item owner. Other contacts are unknown to FB.
 822
 823                 if(! link_compare($b['author-link'], $a->get_baseurl() . '/profile/' . $u[0]['nickname']))
 824                         return;
 825
 826
 827                 logger('facebook reply id=' . $reply);
 828         }
 829
 830         if(strstr($b['postopts'],'facebook') || ($b['private']) || ($reply)) {
 831
 832                 if($b['private'] && $reply === false) {
 833                         $allow_people = expand_acl($b['allow_cid']);
 834                         $allow_groups = expand_groups(expand_acl($b['allow_gid']));
 835                         $deny_people  = expand_acl($b['deny_cid']);
 836                         $deny_groups  = expand_groups(expand_acl($b['deny_gid']));
 837
 838                         $recipients = array_unique(array_merge($allow_people,$allow_groups));
 839                         $deny = array_unique(array_merge($deny_people,$deny_groups));
 840
 841                         $allow_str = dbesc(implode(', ',$recipients));
 842                         if($allow_str) {
 843                                 $r = q("SELECT `notify` FROM `contact` WHERE `id` IN ( $allow_str ) AND `network` = 'face'");
 844                                 if(count($r))
 845                                         foreach($r as $rr)
 846                                                 $allow_arr[] = $rr['notify'];
 847                         }
 848
 849                         $deny_str = dbesc(implode(', ',$deny));
 850                         if($deny_str) {
 851                                 $r = q("SELECT `notify` FROM `contact` WHERE `id` IN ( $deny_str ) AND `network` = 'face'");
 852                                 if(count($r))
 853                                         foreach($r as $rr)
 854                                                 $deny_arr[] = $rr['notify'];
 855                         }
 856
 857                         if(count($deny_arr) && (! count($allow_arr))) {
 858
 859                                 // One or more FB folks were denied access but nobody on FB was specifically allowed access.
 860                                 // This might cause the post to be open to public on Facebook, but only to selected members
 861                                 // on another network. Since this could potentially leak a post to somebody who was denied,
 862                                 // we will skip posting it to Facebook with a slightly vague but relevant message that will
 863                                 // hopefully lead somebody to this code comment for a better explanation of what went wrong.
 864
 865                                 notice( t('Post to Facebook cancelled because of multi-network access permission conflict.') . EOL);
 866                                 return;
 867                         }
 868
 869
 870                         // if it's a private message but no Facebook members are allowed or denied, skip Facebook post
 871
 872                         if((! count($allow_arr)) && (! count($deny_arr)))
 873                                 return;
 874                 }
 875
 876                 if($b['verb'] == ACTIVITY_LIKE)
 877                         $likes = true;
 878
 879
 880                 $appid  = get_config('facebook', 'appid'  );
 881                 $secret = get_config('facebook', 'appsecret' );
 882
 883                 if($appid && $secret) {
 884
 885                         logger('facebook: have appid+secret');
 886
 887                         $fb_token  = get_pconfig($b['uid'],'facebook','access_token');
 888
 889
 890                         // post to facebook if it's a public post and we've ticked the 'post to Facebook' box,
 891                         // or it's a private message with facebook participants
 892                         // or it's a reply or likes action to an existing facebook post
 893
 894                         if($fb_token && ($toplevel || $b['private'] || $reply)) {
 895                                 logger('facebook: able to post');
 896                                 require_once('library/facebook.php');
 897                                 require_once('include/bbcode.php');
 898
 899                                 $msg = $b['body'];
 900
 901                                 logger('Facebook post: original msg=' . $msg, LOGGER_DATA);
 902
 903                                 // make links readable before we strip the code
 904
 905                                 // unless it's a dislike - just send the text as a comment
 906
 907                                 // if($b['verb'] == ACTIVITY_DISLIKE)
 908                                 //      $msg = trim(strip_tags(bbcode($msg)));
 909
 910                                 // Old code
 911                                 /*$search_str = $a->get_baseurl() . '/search';
 912
 913                                 if(preg_match("/\[url=(.*?)\](.*?)\[\/url\]/is",$msg,$matches)) {
 914
 915                                         // don't use hashtags for message link
 916
 917                                         if(strpos($matches[2],$search_str) === false) {
 918                                                 $link = $matches[1];
 919                                                 if(substr($matches[2],0,5) != '[img]')
 920                                                         $linkname = $matches[2];
 921                                         }
 922                                 }
 923
 924                                 // strip tag links to avoid link clutter, this really should be
 925                                 // configurable because we're losing information
 926
 927                                 $msg = preg_replace("/\#\[url=(.*?)\](.*?)\[\/url\]/is",'#$2',$msg);
 928
 929                                 // provide the link separately for normal links
 930                                 $msg = preg_replace("/\[url=(.*?)\](.*?)\[\/url\]/is",'$2 $1',$msg);
 931
 932                                 if(preg_match("/\[img\](.*?)\[\/img\]/is",$msg,$matches))
 933                                         $image = $matches[1];
 934
 935                                 $msg = preg_replace("/\[img\](.*?)\[\/img\]/is", t('Image: ') . '$1', $msg);
 936
 937                                 if((strpos($link,z_root()) !== false) && (! $image))
 938                                         $image = $a->get_baseurl() . '/images/friendica-64.jpg';
 939
 940                                 $msg = trim(strip_tags(bbcode($msg)));*/
 941
 942                                 // New code
 943
 944                                 // Looking for the first image
 945                                 $image = '';
 946                                 if(preg_match("/\[img\=([0-9]*)x([0-9]*)\](.*?)\[\/img\]/is",$b['body'],$matches))
 947                                         $image = $matches[3];
 948
 949                                 if ($image == '')
 950                                         if(preg_match("/\[img\](.*?)\[\/img\]/is",$b['body'],$matches))
 951                                                 $image = $matches[1];
 952
 953                                 // Checking for a bookmark element
 954                                 $body = $b['body'];
 955                                 if (strpos($body, "[bookmark") !== false) {
 956                                         // splitting the text in two parts:
 957                                         // before and after the bookmark
 958                                         $pos = strpos($body, "[bookmark");
 959                                         $body1 = substr($body, 0, $pos);
 960                                         $body2 = substr($body, $pos);
 961
 962                                         // Removing the bookmark and all quotes after the bookmark
 963                                         // they are mostly only the content after the bookmark.
 964                                         $body2 = preg_replace("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism",'',$body2);
 965                                         $body2 = preg_replace("/\[quote\=([^\]]*)\](.*?)\[\/quote\]/ism",'',$body2);
 966                                         $body2 = preg_replace("/\[quote\](.*?)\[\/quote\]/ism",'',$body2);
 967
 968                                         $body = $body1.$body2;
 969                                 }
 970
 971                                 // At first convert the text to html
 972                                 $html = bbcode($body);
 973
 974                                 // Then convert it to plain text
 975                                 $msg = trim($b['title']." \n\n".html2plain($html, 0, true));
 976                                 $msg = html_entity_decode($msg,ENT_QUOTES,'UTF-8');
 977
 978                                 // Removing multiple newlines
 979                                 while (strpos($msg, "\n\n\n") !== false)
 980                                         $msg = str_replace("\n\n\n", "\n\n", $msg);
 981
 982                                 // add any attachments as text urls
 983                                 $arr = explode(',',$b['attach']);
 984
 985                                 if(count($arr)) {
 986                                         $msg .= "\n";
 987                                         foreach($arr as $r) {
 988                                                 $matches = false;
 989                                                 $cnt = preg_match('|\[attach\]href=\"(.*?)\" size=\"(.*?)\" type=\"(.*?)\" title=\"(.*?)\"\[\/attach\]|',$r,$matches);
 990                                                 if($cnt) {
 991                                                         $msg .= "\n".$matches[1];
 992                                                 }
 993                                         }
 994                                 }
 995
 996                                 $link = '';
 997                                 $linkname = '';
 998                                 // look for bookmark-bbcode and handle it with priority
 999                                 if(preg_match("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/is",$b['body'],$matches)) {
1000                                         $link = $matches[1];
1001                                         $linkname = $matches[2];
1002                                 }
1003
1004                                 // If there is no bookmark element then take the first link
1005                                 if ($link == '') {
1006                                         $links = collecturls($html);
1007                                         if (sizeof($links) > 0) {
1008                                                 reset($links);
1009                                                 $link = current($links);
1010                                         }
1011                                 }
1012
1013                                 // Remove trailing and leading spaces
1014                                 $msg = trim($msg);
1015
1016                                 // Since facebook increased the maxpostlen massively this never should happen again :)
1017                                 if (strlen($msg) > FACEBOOK_MAXPOSTLEN) {
1018                                         require_once('library/slinky.php');
1019
1020                                         $display_url = $b['plink'];
1021
1022                                         $slinky = new Slinky( $display_url );
1023                                         // setup a cascade of shortening services
1024                                         // try to get a short link from these services
1025                                         // in the order ur1.ca, trim, id.gd, tinyurl
1026                                         $slinky->set_cascade( array( new Slinky_UR1ca(), new Slinky_Trim(), new Slinky_IsGd(), new Slinky_TinyURL() ) );
1027                                         $shortlink = $slinky->short();
1028                                         // the new message will be shortened such that "... $shortlink"
1029                                         // will fit into the character limit
1030                                         $msg = substr($msg, 0, FACEBOOK_MAXPOSTLEN - strlen($shortlink) - 4);
1031                                         $msg .= '... ' . $shortlink;
1032                                 }
1033
1034                                 // Fallback - if message is empty
1035                                 if(!strlen($msg))
1036                                         $msg = $link;
1037
1038                                 if(!strlen($msg))
1039                                         $msg = $image;
1040
1041                                 if(!strlen($msg))
1042                                         $msg = $linkname;
1043
1044                                 // If there is nothing to post then exit
1045                                 if(!strlen($msg))
1046                                         return;
1047
1048                                 logger('Facebook post: msg=' . $msg, LOGGER_DATA);
1049
1050                                 if($likes) {
1051                                         $postvars = array('access_token' => $fb_token);
1052                                 }
1053                                 else {
1054                                         $postvars = array(
1055                                                 'access_token' => $fb_token,
1056                                                 'message' => $msg
1057                                         );
1058                                         if(isset($image)) {
1059                                                 $postvars['picture'] = $image;
1060                                                 //$postvars['type'] = "photo";
1061                                         }
1062                                         if(isset($link)) {
1063                                                 $postvars['link'] = $link;
1064                                                 //$postvars['type'] = "link";
1065                                         }
1066                                         if(isset($linkname))
1067                                                 $postvars['name'] = $linkname;
1068                                 }
1069
1070                                 if(($b['private']) && ($toplevel)) {
1071                                         $postvars['privacy'] = '{"value": "CUSTOM", "friends": "SOME_FRIENDS"';
1072                                         if(count($allow_arr))
1073                                                 $postvars['privacy'] .= ',"allow": "' . implode(',',$allow_arr) . '"';
1074                                         if(count($deny_arr))
1075                                                 $postvars['privacy'] .= ',"deny": "' . implode(',',$deny_arr) . '"';
1076                                         $postvars['privacy'] .= '}';
1077
1078                                 }
1079
1080                                 if($reply) {
1081                                         $url = 'https://graph.facebook.com/' . $reply . '/' . (($likes) ? 'likes' : 'comments');
1082                                 } else if (($link != "")  or ($image != "") or ($b['title'] == '') or (strlen($msg) < 500)) {
1083                                         $url = 'https://graph.facebook.com/me/feed';
1084                                         if($b['plink'])
1085                                                 $postvars['actions'] = '{"name": "' . t('View on Friendica') . '", "link": "' .  $b['plink'] . '"}';
1086                                 } else {
1087                                         // if its only a message and a subject and the message is larger than 500 characters then post it as note
1088                                         $postvars = array(
1089                                                 'access_token' => $fb_token,
1090                                                 'message' => bbcode($b['body']),
1091                                                 'subject' => $b['title'],
1092                                         );
1093                                         $url = 'https://graph.facebook.com/me/notes';
1094                                 }
1095
1096                                 logger('facebook: post to ' . $url);
1097                                 logger('facebook: postvars: ' . print_r($postvars,true));
1098
1099                                 // "test_mode" prevents anything from actually being posted.
1100                                 // Otherwise, let's do it.
1101
1102                                 if(! get_config('facebook','test_mode')) {
1103                                         $x = post_url($url, $postvars);
1104                                         logger('Facebook post returns: ' . $x, LOGGER_DEBUG);
1105
1106                                         $retj = json_decode($x);
1107                                         if($retj->id) {
1108                                                 q("UPDATE `item` SET `extid` = '%s' WHERE `id` = %d LIMIT 1",
1109                                                         dbesc('fb::' . $retj->id),
1110                                                         intval($b['id'])
1111                                                 );
1112                                         }
1113                                         else {
1114                                                 if(! $likes) {
1115                                                         $s = serialize(array('url' => $url, 'item' => $b['id'], 'post' => $postvars));
1116                                                         require_once('include/queue_fn.php');
1117                                                         add_to_queue($a->contact,NETWORK_FACEBOOK,$s);
1118                                                         notice( t('Facebook post failed. Queued for retry.') . EOL);
1119                                                 }
1120
1121                                                 if (isset($retj->error) && $retj->error->type == "OAuthException" && $retj->error->code == 190) {
1122                                                         logger('Facebook session has expired due to changed password.', LOGGER_DEBUG);
1123
1124                                                         $last_notification = get_pconfig($b['uid'], 'facebook', 'session_expired_mailsent');
1125                                                         if (!$last_notification || $last_notification < (time() - FACEBOOK_SESSION_ERR_NOTIFICATION_INTERVAL)) {
1126                                                                 require_once('include/enotify.php');
1127
1128                                                                 $r = q("SELECT * FROM `user` WHERE `uid` = %d LIMIT 1", intval($b['uid']) );
1129                                                                 notification(array(
1130                                                                         'uid' => $b['uid'],
1131                                                                         'type' => NOTIFY_SYSTEM,
1132                                                                         'system_type' => 'facebook_connection_invalid',
1133                                                                         'language'     => $r[0]['language'],
1134                                                                         'to_name'      => $r[0]['username'],
1135                                                                         'to_email'     => $r[0]['email'],
1136                                                                         'source_name'  => t('Administrator'),
1137                                                                         'source_link'  => $a->config["system"]["url"],
1138                                                                         'source_photo' => $a->config["system"]["url"] . '/images/person-80.jpg',
1139                                                                 ));
1140
1141                                                                 set_pconfig($b['uid'], 'facebook', 'session_expired_mailsent', time());
1142                                                         } else logger('Facebook: No notification, as the last one was sent on ' . $last_notification, LOGGER_DEBUG);
1143                                                 }
1144                                         }
1145                                 }
1146                         }
1147                 }
1148         }
1149 }
1150
1151 /**
1152  * @param App $app
1153  * @param object $data
1154  */
1155 function facebook_enotify(&$app, &$data) {
1156         if (x($data, 'params') && $data['params']['type'] == NOTIFY_SYSTEM && x($data['params'], 'system_type') && $data['params']['system_type'] == 'facebook_connection_invalid') {
1157                 $data['itemlink'] = '/facebook';
1158                 $data['epreamble'] = $data['preamble'] = t('Your Facebook connection became invalid. Please Re-authenticate.');
1159                 $data['subject'] = t('Facebook connection became invalid');
1160                 $data['body'] = sprintf( t("Hi %1\$s,\n\nThe connection between your accounts on %2\$s and Facebook became invalid. This usually happens after you change your Facebook-password. To enable the connection again, you have to %3\$sre-authenticate the Facebook-connector%4\$s."), $data['params']['to_name'], "[url=" . $app->config["system"]["url"] . "]" . $app->config["sitename"] . "[/url]", "[url=" . $app->config["system"]["url"] . "/facebook]", "[/url]");
1161         }
1162 }
1163
1164 /**
1165  * @param App $a
1166  * @param object $b
1167  */
1168 function facebook_post_local(&$a,&$b) {
1169
1170         // Figure out if Facebook posting is enabled for this post and file it in 'postopts'
1171         // where we will discover it during background delivery.
1172
1173         // This can only be triggered by a local user posting to their own wall.
1174
1175         if((local_user()) && (local_user() == $b['uid'])) {
1176
1177                 $fb_post   = intval(get_pconfig(local_user(),'facebook','post'));
1178                 $fb_enable = (($fb_post && x($_REQUEST,'facebook_enable')) ? intval($_REQUEST['facebook_enable']) : 0);
1179
1180                 // if API is used, default to the chosen settings
1181                 if($_REQUEST['api_source'] && intval(get_pconfig(local_user(),'facebook','post_by_default')))
1182                         $fb_enable = 1;
1183
1184                 if(! $fb_enable)
1185                         return;
1186
1187                 if(strlen($b['postopts']))
1188                         $b['postopts'] .= ',';
1189                 $b['postopts'] .= 'facebook';
1190         }
1191 }
1192
1193
1194 /**
1195  * @param App $a
1196  * @param object $b
1197  */
1198 function fb_queue_hook(&$a,&$b) {
1199
1200         $qi = q("SELECT * FROM `queue` WHERE `network` = '%s'",
1201                 dbesc(NETWORK_FACEBOOK)
1202         );
1203         if(! count($qi))
1204                 return;
1205
1206         require_once('include/queue_fn.php');
1207
1208         foreach($qi as $x) {
1209                 if($x['network'] !== NETWORK_FACEBOOK)
1210                         continue;
1211
1212                 logger('facebook_queue: run');
1213
1214                 $r = q("SELECT `user`.* FROM `user` LEFT JOIN `contact` on `contact`.`uid` = `user`.`uid`
1215                         WHERE `contact`.`self` = 1 AND `contact`.`id` = %d LIMIT 1",
1216                         intval($x['cid'])
1217                 );
1218                 if(! count($r))
1219                         continue;
1220
1221                 $user = $r[0];
1222
1223                 $appid  = get_config('facebook', 'appid'  );
1224                 $secret = get_config('facebook', 'appsecret' );
1225
1226                 if($appid && $secret) {
1227                         $fb_post   = intval(get_pconfig($user['uid'],'facebook','post'));
1228                         $fb_token  = get_pconfig($user['uid'],'facebook','access_token');
1229
1230                         if($fb_post && $fb_token) {
1231                                 logger('facebook_queue: able to post');
1232                                 require_once('library/facebook.php');
1233
1234                                 $z = unserialize($x['content']);
1235                                 $item = $z['item'];
1236                                 $j = post_url($z['url'],$z['post']);
1237
1238                                 $retj = json_decode($j);
1239                                 if($retj->id) {
1240                                         q("UPDATE `item` SET `extid` = '%s' WHERE `id` = %d LIMIT 1",
1241                                                 dbesc('fb::' . $retj->id),
1242                                                 intval($item)
1243                                         );
1244                                         logger('facebook_queue: success: ' . $j);
1245                                         remove_queue_item($x['id']);
1246                                 }
1247                                 else {
1248                                         logger('facebook_queue: failed: ' . $j);
1249                                         update_queue_time($x['id']);
1250                                 }
1251                         }
1252                 }
1253         }
1254 }
1255
1256 /**
1257  * @param string $access_token
1258  * @param int $since
1259  * @return object
1260  */
1261 function fb_get_timeline($access_token, &$since) {
1262
1263     $entries = new stdClass();
1264         $entries->data = array();
1265         $newest = 0;
1266
1267         $url = 'https://graph.facebook.com/me/home?access_token='.$access_token;
1268
1269         if ($since != 0)
1270                 $url .= "&since=".$since;
1271
1272         do {
1273                 $s = fetch_url($url);
1274                 $j = json_decode($s);
1275                 $oldestdate = time();
1276                 if (isset($j->data))
1277                         foreach ($j->data as $entry) {
1278                                 $created = strtotime($entry->created_time);
1279
1280                                 if ($newest < $created)
1281                                         $newest = $created;
1282
1283                                 if ($created >= $since)
1284                                         $entries->data[] = $entry;
1285
1286                                 if ($created <= $oldestdate)
1287                                         $oldestdate = $created;
1288                         }
1289                 else
1290                         break;
1291
1292                 $url = (isset($j->paging) && isset($j->paging->next) ? $j->paging->next : '');
1293
1294         } while (($oldestdate > $since) and ($since != 0) and ($url != ''));
1295
1296         if ($newest > $since)
1297                 $since = $newest;
1298
1299         return($entries);
1300 }
1301
1302 /**
1303  * @param int $uid
1304  */
1305 function fb_consume_all($uid) {
1306
1307         require_once('include/items.php');
1308
1309         $access_token = get_pconfig($uid,'facebook','access_token');
1310         if(! $access_token)
1311                 return;
1312
1313         if(! get_pconfig($uid,'facebook','no_wall')) {
1314                 $private_wall = intval(get_pconfig($uid,'facebook','private_wall'));
1315                 $s = fetch_url('https://graph.facebook.com/me/feed?access_token=' . $access_token);
1316                 if($s) {
1317                         $j = json_decode($s);
1318                         if (isset($j->data)) {
1319                                 logger('fb_consume_stream: wall: ' . print_r($j,true), LOGGER_DATA);
1320                                 fb_consume_stream($uid,$j,($private_wall) ? false : true);
1321                         } else {
1322                                 logger('fb_consume_stream: wall: got no data from Facebook: ' . print_r($j,true), LOGGER_NORMAL);
1323                         }
1324                 }
1325         }
1326         // Get the last date
1327         $lastdate = get_pconfig($uid,'facebook','lastdate');
1328         // fetch all items since the last date
1329         $j = fb_get_timeline($access_token, $lastdate);
1330         if (isset($j->data)) {
1331                 logger('fb_consume_stream: feed: ' . print_r($j,true), LOGGER_DATA);
1332                 fb_consume_stream($uid,$j,false);
1333
1334                 // Write back the last date
1335                 set_pconfig($uid,'facebook','lastdate', $lastdate);
1336         } else
1337                 logger('fb_consume_stream: feed: got no data from Facebook: ' . print_r($j,true), LOGGER_NORMAL);
1338 }
1339
1340 /**
1341  * @param int $uid
1342  * @param string $link
1343  * @return string
1344  */
1345 function fb_get_photo($uid,$link) {
1346         $access_token = get_pconfig($uid,'facebook','access_token');
1347         if(! $access_token || (! stristr($link,'facebook.com/photo.php')))
1348                 return "";
1349                 //return "\n" . '[url=' . $link . ']' . t('link') . '[/url]';
1350         $ret = preg_match('/fbid=([0-9]*)/',$link,$match);
1351         if($ret)
1352                 $photo_id = $match[1];
1353         else
1354             return "";
1355         $x = fetch_url('https://graph.facebook.com/' . $photo_id . '?access_token=' . $access_token);
1356         $j = json_decode($x);
1357         if($j->picture)
1358                 return "\n\n" . '[url=' . $link . '][img]' . $j->picture . '[/img][/url]';
1359         //else
1360         //      return "\n" . '[url=' . $link . ']' . t('link') . '[/url]';
1361         return "";
1362 }
1363
1364 /**
1365  * @param int $uid
1366  * @param object $j
1367  * @param bool $wall
1368  */
1369 function fb_consume_stream($uid,$j,$wall = false) {
1370
1371         $a = get_app();
1372
1373
1374         $user = q("SELECT * FROM `user` WHERE `uid` = %d AND `account_expired` = 0 LIMIT 1",
1375                 intval($uid)
1376         );
1377         if(! count($user))
1378                 return;
1379
1380         // $my_local_url = $a->get_baseurl() . '/profile/' . $user[0]['nickname'];
1381
1382         $no_linking = get_pconfig($uid,'facebook','no_linking');
1383         if($no_linking)
1384                 return;
1385
1386         $self = q("SELECT * FROM `contact` WHERE `self` = 1 AND `uid` = %d LIMIT 1",
1387                 intval($uid)
1388         );
1389
1390         $blocked_apps = get_pconfig($uid,'facebook','blocked_apps');
1391         $blocked_apps_arr = explode(',',$blocked_apps);
1392
1393         $self_id = get_pconfig($uid,'facebook','self_id');
1394         if(! count($j->data) || (! strlen($self_id)))
1395                 return;
1396
1397     $top_item = 0;
1398
1399     foreach($j->data as $entry) {
1400                 logger('fb_consume: entry: ' . print_r($entry,true), LOGGER_DATA);
1401                 $datarray = array();
1402
1403                 $r = q("SELECT * FROM `item` WHERE ( `uri` = '%s' OR `extid` = '%s') AND `uid` = %d LIMIT 1",
1404                                 dbesc('fb::' . $entry->id),
1405                                 dbesc('fb::' . $entry->id),
1406                                 intval($uid)
1407                 );
1408                 if(count($r)) {
1409                         $orig_post = $r[0];
1410                         $top_item = $r[0]['id'];
1411                 }
1412                 else {
1413                         $orig_post = null;
1414                 }
1415
1416                 if(! $orig_post) {
1417                         $datarray['gravity'] = 0;
1418                         $datarray['uid'] = $uid;
1419                         $datarray['wall'] = (($wall) ? 1 : 0);
1420                         $datarray['uri'] = $datarray['parent-uri'] = 'fb::' . $entry->id;
1421                         $from = $entry->from;
1422                         if($from->id == $self_id)
1423                                 $datarray['contact-id'] = $self[0]['id'];
1424                         else {
1425                                 // Looking if user is known - if not he is added
1426                                 $access_token = get_pconfig($uid, 'facebook', 'access_token');
1427                                 fb_get_friends_sync_new($uid, $access_token, array($from));
1428
1429                                 $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d AND `blocked` = 0 AND `readonly` = 0 LIMIT 1",
1430                                         dbesc($from->id),
1431                                         intval($uid)
1432                                 );
1433                                 if(count($r))
1434                                         $datarray['contact-id'] = $r[0]['id'];
1435                         }
1436
1437                         // don't store post if we don't have a contact
1438                         if(! x($datarray,'contact-id')) {
1439                                 logger('facebook: no contact '.$from->name.' '.$from->id.'. post ignored');
1440                                 continue;
1441                         }
1442
1443                         $datarray['verb'] = ACTIVITY_POST;
1444                         if($wall) {
1445                                 $datarray['owner-name'] = $self[0]['name'];
1446                                 $datarray['owner-link'] = $self[0]['url'];
1447                                 $datarray['owner-avatar'] = $self[0]['thumb'];
1448                         }
1449                         if(isset($entry->application) && isset($entry->application->name) && strlen($entry->application->name))
1450                                 $datarray['app'] = strip_tags($entry->application->name);
1451                         else
1452                                 $datarray['app'] = 'facebook';
1453
1454                         $found_blocked = false;
1455
1456                         if(count($blocked_apps_arr)) {
1457                                 foreach($blocked_apps_arr as $bad_appl) {
1458                                         if(strlen(trim($bad_appl)) && (stristr($datarray['app'],trim($bad_appl)))) {
1459                                                 $found_blocked = true;
1460                                         }
1461                                 }
1462                         }
1463
1464                         if($found_blocked) {
1465                                 logger('facebook: blocking application: ' . $datarray['app']);
1466                                 continue;
1467                         }
1468
1469                         $datarray['author-name'] = $from->name;
1470                         $datarray['author-link'] = 'http://facebook.com/profile.php?id=' . $from->id;
1471                         $datarray['author-avatar'] = 'https://graph.facebook.com/' . $from->id . '/picture';
1472                         $datarray['plink'] = $datarray['author-link'] . '&v=wall&story_fbid=' . substr($entry->id,strpos($entry->id,'_') + 1);
1473
1474                         logger('facebook: post '.$entry->id.' from '.$from->name);
1475
1476                         $datarray['body'] = (isset($entry->message) ? escape_tags($entry->message) : '');
1477
1478                         if(isset($entry->name) and isset($entry->link))
1479                                 $datarray['body'] .= "\n\n[bookmark=".$entry->link."]".$entry->name."[/bookmark]";
1480                         elseif (isset($entry->name))
1481                                 $datarray['body'] .= "\n\n[b]" . $entry->name."[/b]";
1482
1483                         if(isset($entry->caption)) {
1484                                 if(!isset($entry->name) and isset($entry->link))
1485                                         $datarray['body'] .= "\n\n[bookmark=".$entry->link."]".$entry->caption."[/bookmark]";
1486                                 else
1487                                         $datarray['body'] .= "[i]" . $entry->caption."[/i]\n";
1488                         }
1489
1490                         if(!isset($entry->caption) and !isset($entry->name)) {
1491                                 if (isset($entry->link))
1492                                         $datarray['body'] .= "\n[url]".$entry->link."[/url]\n";
1493                                 else
1494                                         $datarray['body'] .= "\n";
1495                         }
1496
1497                         $quote = "";
1498                         if(isset($entry->description))
1499                                 $quote = $entry->description;
1500
1501                         if (isset($entry->properties))
1502                                 foreach ($entry->properties as $property)
1503                                         $quote .= "\n".$property->name.": [url=".$property->href."]".$property->text."[/url]";
1504
1505                         if ($quote)
1506                                 $datarray['body'] .= "\n[quote]".$quote."[/quote]";
1507
1508                         // Only import the picture when the message is no video
1509                         // oembed display a picture of the video as well
1510                         if ($entry->type != "video") {
1511                                 if(isset($entry->picture) && isset($entry->link)) {
1512                                         $datarray['body'] .= "\n" . '[url=' . $entry->link . '][img]'.$entry->picture.'[/img][/url]';
1513                                 }
1514                                 else {
1515                                         if(isset($entry->picture))
1516                                                 $datarray['body'] .= "\n" . '[img]' . $entry->picture . '[/img]';
1517                                         // if just a link, it may be a wall photo - check
1518                                         if(isset($entry->link))
1519                                                 $datarray['body'] .= fb_get_photo($uid,$entry->link);
1520                                 }
1521                         }
1522
1523                         if (($datarray['app'] == "Events") and isset($entry->actions))
1524                                 foreach ($entry->actions as $action)
1525                                         if ($action->name == "View")
1526                                                 $datarray['body'] .= " [url=".$action->link."]".$entry->story."[/url]";
1527
1528                         // Just as a test - to see if these are the missing entries
1529                         //if(trim($datarray['body']) == '')
1530                         //      $datarray['body'] = $entry->story;
1531
1532                         // Adding the "story" text to see if there are useful data in it (testing)
1533                         //if (($datarray['app'] != "Events") and $entry->story)
1534                         //      $datarray['body'] .= "\n".$entry->story;
1535
1536                         if(trim($datarray['body']) == '') {
1537                                 logger('facebook: empty body '.$entry->id.' '.print_r($entry, true));
1538                                 continue;
1539                         }
1540
1541                         $datarray['body'] .= "\n";
1542
1543                         if (isset($entry->icon))
1544                                 $datarray['body'] .= "[img]".$entry->icon."[/img] &nbsp; ";
1545
1546                         if (isset($entry->actions))
1547                                 foreach ($entry->actions as $action)
1548                                         if (($action->name != "Comment") and ($action->name != "Like"))
1549                                                 $datarray['body'] .= "[url=".$action->link."]".$action->name."[/url] &nbsp; ";
1550
1551                         $datarray['body'] = trim($datarray['body']);
1552
1553                         //if(($datarray['body'] != '') and ($uid == 1))
1554                         //      $datarray['body'] .= "[noparse]".print_r($entry, true)."[/noparse]";
1555
1556             if (isset($entry->place)) {
1557                             if ($entry->place->name or $entry->place->location->street or
1558                                     $entry->place->location->city or $entry->place->location->Denmark) {
1559                                     $datarray['coord'] = '';
1560                                     if ($entry->place->name)
1561                                             $datarray['coord'] .= $entry->place->name;
1562                                     if ($entry->place->location->street)
1563                                             $datarray['coord'] .= $entry->place->location->street;
1564                                     if ($entry->place->location->city)
1565                                             $datarray['coord'] .= " ".$entry->place->location->city;
1566                                     if ($entry->place->location->country)
1567                                             $datarray['coord'] .= " ".$entry->place->location->country;
1568                             } else if ($entry->place->location->latitude and $entry->place->location->longitude)
1569                                     $datarray['coord'] = substr($entry->place->location->latitude, 0, 8)
1570                                                         .' '.substr($entry->place->location->longitude, 0, 8);
1571             }
1572                         $datarray['created'] = datetime_convert('UTC','UTC',$entry->created_time);
1573                         $datarray['edited'] = datetime_convert('UTC','UTC',$entry->updated_time);
1574
1575                         // If the entry has a privacy policy, we cannot assume who can or cannot see it,
1576                         // as the identities are from a foreign system. Mark it as private to the owner.
1577
1578                         if(isset($entry->privacy) && $entry->privacy->value !== 'EVERYONE') {
1579                                 $datarray['private'] = 1;
1580                                 $datarray['allow_cid'] = '<' . $self[0]['id'] . '>';
1581                         }
1582
1583                         $top_item = item_store($datarray);
1584                         $r = q("SELECT * FROM `item` WHERE `id` = %d AND `uid` = %d LIMIT 1",
1585                                 intval($top_item),
1586                                 intval($uid)
1587                         );
1588                         if(count($r)) {
1589                                 $orig_post = $r[0];
1590                                 logger('fb: new top level item posted');
1591                         }
1592                 }
1593
1594                 if(isset($entry->likes) && isset($entry->likes->data))
1595                         $likers = $entry->likes->data;
1596                 else
1597                         $likers = null;
1598
1599                 if(isset($entry->comments) && isset($entry->comments->data))
1600                         $comments = $entry->comments->data;
1601                 else
1602                         $comments = null;
1603
1604                 if(is_array($likers)) {
1605                         foreach($likers as $likes) {
1606
1607                                 if(! $orig_post)
1608                                         continue;
1609
1610                                 // If we posted the like locally, it will be found with our url, not the FB url.
1611
1612                                 $second_url = (($likes->id == $self_id) ? $self[0]['url'] : 'http://facebook.com/profile.php?id=' . $likes->id);
1613
1614                                 $r = q("SELECT * FROM `item` WHERE `parent-uri` = '%s' AND `uid` = %d AND `verb` = '%s'
1615                                         AND ( `author-link` = '%s' OR `author-link` = '%s' ) LIMIT 1",
1616                                         dbesc($orig_post['uri']),
1617                                         intval($uid),
1618                                         dbesc(ACTIVITY_LIKE),
1619                                         dbesc('http://facebook.com/profile.php?id=' . $likes->id),
1620                                         dbesc($second_url)
1621                                 );
1622
1623                                 if(count($r))
1624                                         continue;
1625
1626                                 $likedata = array();
1627                                 $likedata['parent'] = $top_item;
1628                                 $likedata['verb'] = ACTIVITY_LIKE;
1629                                 $likedata['gravity'] = 3;
1630                                 $likedata['uid'] = $uid;
1631                                 $likedata['wall'] = (($wall) ? 1 : 0);
1632                                 $likedata['uri'] = item_new_uri($a->get_baseurl(), $uid);
1633                                 $likedata['parent-uri'] = $orig_post['uri'];
1634                                 if($likes->id == $self_id)
1635                                         $likedata['contact-id'] = $self[0]['id'];
1636                                 else {
1637                                         $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d AND `blocked` = 0 AND `readonly` = 0 LIMIT 1",
1638                                                 dbesc($likes->id),
1639                                                 intval($uid)
1640                                         );
1641                                         if(count($r))
1642                                                 $likedata['contact-id'] = $r[0]['id'];
1643                                 }
1644                                 if(! x($likedata,'contact-id'))
1645                                         $likedata['contact-id'] = $orig_post['contact-id'];
1646
1647                                 $likedata['app'] = 'facebook';
1648                                 $likedata['verb'] = ACTIVITY_LIKE;
1649                                 $likedata['author-name'] = $likes->name;
1650                                 $likedata['author-link'] = 'http://facebook.com/profile.php?id=' . $likes->id;
1651                                 $likedata['author-avatar'] = 'https://graph.facebook.com/' . $likes->id . '/picture';
1652
1653                                 $author  = '[url=' . $likedata['author-link'] . ']' . $likedata['author-name'] . '[/url]';
1654                                 $objauthor =  '[url=' . $orig_post['author-link'] . ']' . $orig_post['author-name'] . '[/url]';
1655                                 $post_type = t('status');
1656                         $plink = '[url=' . $orig_post['plink'] . ']' . $post_type . '[/url]';
1657                                 $likedata['object-type'] = ACTIVITY_OBJ_NOTE;
1658
1659                                 $likedata['body'] = sprintf( t('%1$s likes %2$s\'s %3$s'), $author, $objauthor, $plink);
1660                                 $likedata['object'] = '<object><type>' . ACTIVITY_OBJ_NOTE . '</type><local>1</local>' .
1661                                         '<id>' . $orig_post['uri'] . '</id><link>' . xmlify('<link rel="alternate" type="text/html" href="' . xmlify($orig_post['plink']) . '" />') . '</link><title>' . $orig_post['title'] . '</title><content>' . $orig_post['body'] . '</content></object>';
1662
1663                                 item_store($likedata);
1664                         }
1665                 }
1666                 if(is_array($comments)) {
1667                         foreach($comments as $cmnt) {
1668
1669                                 if(! $orig_post)
1670                                         continue;
1671
1672                                 $r = q("SELECT * FROM `item` WHERE `uid` = %d AND ( `uri` = '%s' OR `extid` = '%s' ) LIMIT 1",
1673                                         intval($uid),
1674                                         dbesc('fb::' . $cmnt->id),
1675                                         dbesc('fb::' . $cmnt->id)
1676                                 );
1677                                 if(count($r))
1678                                         continue;
1679
1680                                 $cmntdata = array();
1681                                 $cmntdata['parent'] = $top_item;
1682                                 $cmntdata['verb'] = ACTIVITY_POST;
1683                                 $cmntdata['gravity'] = 6;
1684                                 $cmntdata['uid'] = $uid;
1685                                 $cmntdata['wall'] = (($wall) ? 1 : 0);
1686                                 $cmntdata['uri'] = 'fb::' . $cmnt->id;
1687                                 $cmntdata['parent-uri'] = $orig_post['uri'];
1688                                 if($cmnt->from->id == $self_id) {
1689                                         $cmntdata['contact-id'] = $self[0]['id'];
1690                                 }
1691                                 else {
1692                                         $r = q("SELECT * FROM `contact` WHERE `notify` = '%s' AND `uid` = %d LIMIT 1",
1693                                                 dbesc($cmnt->from->id),
1694                                                 intval($uid)
1695                                         );
1696                                         if(count($r)) {
1697                                                 $cmntdata['contact-id'] = $r[0]['id'];
1698                                                 if($r[0]['blocked'] || $r[0]['readonly'])
1699                                                         continue;
1700                                         }
1701                                 }
1702                                 if(! x($cmntdata,'contact-id'))
1703                                         $cmntdata['contact-id'] = $orig_post['contact-id'];
1704
1705                                 $cmntdata['app'] = 'facebook';
1706                                 $cmntdata['created'] = datetime_convert('UTC','UTC',$cmnt->created_time);
1707                                 $cmntdata['edited']  = datetime_convert('UTC','UTC',$cmnt->created_time);
1708                                 $cmntdata['verb'] = ACTIVITY_POST;
1709                                 $cmntdata['author-name'] = $cmnt->from->name;
1710                                 $cmntdata['author-link'] = 'http://facebook.com/profile.php?id=' . $cmnt->from->id;
1711                                 $cmntdata['author-avatar'] = 'https://graph.facebook.com/' . $cmnt->from->id . '/picture';
1712                                 $cmntdata['body'] = $cmnt->message;
1713                                 $item = item_store($cmntdata);
1714
1715                                 $myconv = q("SELECT `author-link`, `author-avatar`, `parent` FROM `item` WHERE `parent-uri` = '%s' AND `uid` = %d AND `parent` != 0 ",
1716                                         dbesc($orig_post['uri']),
1717                                         intval($uid)
1718                                 );
1719
1720                                 if(count($myconv)) {
1721                                         $importer_url = $a->get_baseurl() . '/profile/' . $user[0]['nickname'];
1722
1723                                         foreach($myconv as $conv) {
1724
1725                                                 // now if we find a match, it means we're in this conversation
1726
1727                                                 if(! link_compare($conv['author-link'],$importer_url))
1728                                                         continue;
1729
1730                                                 require_once('include/enotify.php');
1731
1732                                                 $conv_parent = $conv['parent'];
1733
1734                                                 notification(array(
1735                                                         'type'         => NOTIFY_COMMENT,
1736                                                         'notify_flags' => $user[0]['notify-flags'],
1737                                                         'language'     => $user[0]['language'],
1738                                                         'to_name'      => $user[0]['username'],
1739                                                         'to_email'     => $user[0]['email'],
1740                                                         'uid'          => $user[0]['uid'],
1741                                                         'item'         => $cmntdata,
1742                                                         'link'             => $a->get_baseurl() . '/display/' . $user[0]['nickname'] . '/' . $item,
1743                                                         'source_name'  => $cmntdata['author-name'],
1744                                                         'source_link'  => $cmntdata['author-link'],
1745                                                         'source_photo' => $cmntdata['author-avatar'],
1746                                                         'verb'         => ACTIVITY_POST,
1747                                                         'otype'        => 'item',
1748                                                         'parent'       => $conv_parent,
1749                                                 ));
1750
1751                                                 // only send one notification
1752                                                 break;
1753                                         }
1754                                 }
1755                         }
1756                 }
1757         }
1758 }
1759
1760
1761 /**
1762  * @return bool|string
1763  */
1764 function fb_get_app_access_token() {
1765
1766         $acc_token = get_config('facebook','app_access_token');
1767
1768         if ($acc_token !== false) return $acc_token;
1769
1770         $appid = get_config('facebook','appid');
1771         $appsecret = get_config('facebook', 'appsecret');
1772
1773         if ($appid === false || $appsecret === false) {
1774                 logger('fb_get_app_access_token: appid and/or appsecret not set', LOGGER_DEBUG);
1775                 return false;
1776         }
1777         logger('https://graph.facebook.com/oauth/access_token?client_id=' . $appid . '&client_secret=' . $appsecret . '&grant_type=client_credentials', LOGGER_DATA);
1778         $x = fetch_url('https://graph.facebook.com/oauth/access_token?client_id=' . $appid . '&client_secret=' . $appsecret . '&grant_type=client_credentials');
1779
1780         if(strpos($x,'access_token=') !== false) {
1781                 logger('fb_get_app_access_token: returned access token: ' . $x, LOGGER_DATA);
1782
1783                 $token = str_replace('access_token=', '', $x);
1784                 if(strpos($token,'&') !== false)
1785                         $token = substr($token,0,strpos($token,'&'));
1786
1787                 if ($token == "") {
1788                         logger('fb_get_app_access_token: empty token: ' . $x, LOGGER_DEBUG);
1789                         return false;
1790                 }
1791                 set_config('facebook','app_access_token',$token);
1792                 return $token;
1793         } else {
1794                 logger('fb_get_app_access_token: response did not contain an access_token: ' . $x, LOGGER_DATA);
1795                 return false;
1796         }
1797 }
1798
1799 function facebook_subscription_del_users() {
1800         $a = get_app();
1801         $access_token = fb_get_app_access_token();
1802
1803         $url = "https://graph.facebook.com/" . get_config('facebook', 'appid'  ) . "/subscriptions?access_token=" . $access_token;
1804         facebook_delete_url($url);
1805
1806         if (!facebook_check_realtime_active()) del_config('facebook', 'realtime_active');
1807 }
1808
1809 /**
1810  * @param bool $second_try
1811  */
1812 function facebook_subscription_add_users($second_try = false) {
1813         $a = get_app();
1814         $access_token = fb_get_app_access_token();
1815
1816         $url = "https://graph.facebook.com/" . get_config('facebook', 'appid'  ) . "/subscriptions?access_token=" . $access_token;
1817
1818         list($usec, $sec) = explode(" ", microtime());
1819         $verify_token = sha1($usec . $sec . rand(0, 999999999));
1820         set_config('facebook', 'cb_verify_token', $verify_token);
1821
1822         $cb = $a->get_baseurl() . '/facebook/?realtime_cb=1';
1823
1824         $j = post_url($url,array(
1825                 "object" => "user",
1826                 "fields" => "feed,friends",
1827                 "callback_url" => $cb,
1828                 "verify_token" => $verify_token,
1829         ));
1830         del_config('facebook', 'cb_verify_token');
1831
1832         if ($j) {
1833                 $x = json_decode($j);
1834                 logger("Facebook reponse: " . $j, LOGGER_DATA);
1835                 if (isset($x->error)) {
1836                         logger('facebook_subscription_add_users: got an error: ' . $j);
1837                         if ($x->error->type == "OAuthException" && $x->error->code == 190) {
1838                                 del_config('facebook', 'app_access_token');
1839                                 if ($second_try === false) facebook_subscription_add_users(true);
1840                         }
1841                 } else {
1842                         logger('facebook_subscription_add_users: sucessful');
1843                         if (facebook_check_realtime_active()) set_config('facebook', 'realtime_active', 1);
1844                 }
1845         };
1846 }
1847
1848 /**
1849  * @return null|array
1850  */
1851 function facebook_subscriptions_get() {
1852
1853         $access_token = fb_get_app_access_token();
1854         if (!$access_token) return null;
1855
1856         $url = "https://graph.facebook.com/" . get_config('facebook', 'appid'  ) . "/subscriptions?access_token=" . $access_token;
1857         $j = fetch_url($url);
1858         $ret = null;
1859         if ($j) {
1860                 $x = json_decode($j);
1861                 if (isset($x->data)) $ret = $x->data;
1862         }
1863         return $ret;
1864 }
1865
1866
1867 /**
1868  * @return bool
1869  */
1870 function facebook_check_realtime_active() {
1871         $ret = facebook_subscriptions_get();
1872         if (is_null($ret)) return false;
1873         if (is_array($ret)) foreach ($ret as $re) if (is_object($re) && $re->object == "user") return true;
1874         return false;
1875 }
1876
1877
1878
1879
1880 // DELETE-request to $url
1881
1882 if(! function_exists('facebook_delete_url')) {
1883     /**
1884      * @param string $url
1885      * @param null|array $headers
1886      * @param int $redirects
1887      * @param int $timeout
1888      * @return bool|string
1889      */
1890     function facebook_delete_url($url,$headers = null, &$redirects = 0, $timeout = 0) {
1891         $a = get_app();
1892         $ch = curl_init($url);
1893         if(($redirects > 8) || (! $ch))
1894                 return false;
1895
1896         curl_setopt($ch, CURLOPT_HEADER, true);
1897         curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
1898         curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "DELETE");
1899         curl_setopt($ch, CURLOPT_USERAGENT, "Friendica");
1900
1901         if(intval($timeout)) {
1902                 curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
1903         }
1904         else {
1905                 $curl_time = intval(get_config('system','curl_timeout'));
1906                 curl_setopt($ch, CURLOPT_TIMEOUT, (($curl_time !== false) ? $curl_time : 60));
1907         }
1908
1909         if(defined('LIGHTTPD')) {
1910                 if(!is_array($headers)) {
1911                         $headers = array('Expect:');
1912                 } else {
1913                         if(!in_array('Expect:', $headers)) {
1914                                 array_push($headers, 'Expect:');
1915                         }
1916                 }
1917         }
1918         if($headers)
1919                 curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
1920
1921         $check_cert = get_config('system','verifyssl');
1922         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, (($check_cert) ? true : false));
1923         $prx = get_config('system','proxy');
1924         if(strlen($prx)) {
1925                 curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 1);
1926                 curl_setopt($ch, CURLOPT_PROXY, $prx);
1927                 $prxusr = get_config('system','proxyuser');
1928                 if(strlen($prxusr))
1929                         curl_setopt($ch, CURLOPT_PROXYUSERPWD, $prxusr);
1930         }
1931
1932         $a->set_curl_code(0);
1933
1934         // don't let curl abort the entire application
1935         // if it throws any errors.
1936
1937         $s = @curl_exec($ch);
1938
1939         $base = $s;
1940         $curl_info = curl_getinfo($ch);
1941         $http_code = $curl_info['http_code'];
1942
1943         $header = '';
1944
1945         // Pull out multiple headers, e.g. proxy and continuation headers
1946         // allow for HTTP/2.x without fixing code
1947
1948         while(preg_match('/^HTTP\/[1-2].+? [1-5][0-9][0-9]/',$base)) {
1949                 $chunk = substr($base,0,strpos($base,"\r\n\r\n")+4);
1950                 $header .= $chunk;
1951                 $base = substr($base,strlen($chunk));
1952         }
1953
1954         if($http_code == 301 || $http_code == 302 || $http_code == 303) {
1955         $matches = array();
1956         preg_match('/(Location:|URI:)(.*?)\n/', $header, $matches);
1957         $url = trim(array_pop($matches));
1958         $url_parsed = @parse_url($url);
1959         if (isset($url_parsed)) {
1960             $redirects++;
1961             return facebook_delete_url($url,$headers,$redirects,$timeout);
1962         }
1963     }
1964         $a->set_curl_code($http_code);
1965         $body = substr($s,strlen($header));
1966
1967         $a->set_curl_headers($header);
1968
1969         curl_close($ch);
1970         return($body);
1971 }}