]> git.mxchange.org Git - friendica.git/blob - include/acl_selectors.php
Security t()
[friendica.git] / include / acl_selectors.php
1 <?php
2 /**
3  * @file include/acl_selectors.php
4  */
5 use Friendica\App;
6 use Friendica\Content\Feature;
7 use Friendica\Content\Widget;
8 use Friendica\Core\Addon;
9 use Friendica\Core\Config;
10 use Friendica\Core\L10n;
11 use Friendica\Database\DBM;
12 use Friendica\Model\Contact;
13 use Friendica\Model\GContact;
14
15 require_once "mod/proxy.php";
16
17 /**
18  * @package acl_selectors
19  */
20 function group_select($selname,$selclass,$preselected = false,$size = 4) {
21
22         $a = get_app();
23
24         $o = '';
25
26         $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"$size\" >\r\n";
27
28         $r = q("SELECT `id`, `name` FROM `group` WHERE NOT `deleted` AND `uid` = %d ORDER BY `name` ASC",
29                 intval(local_user())
30         );
31
32
33         $arr = ['group' => $r, 'entry' => $o];
34
35         // e.g. 'network_pre_group_deny', 'profile_pre_group_allow'
36
37         Addon::callHooks($a->module . '_pre_' . $selname, $arr);
38
39         if (DBM::is_result($r)) {
40                 foreach ($r as $rr) {
41                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
42                                 $selected = " selected=\"selected\" ";
43                         } else {
44                                 $selected = '';
45                         }
46
47                         $trimmed = mb_substr($rr['name'],0,12);
48
49                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}\" >$trimmed</option>\r\n";
50                 }
51
52         }
53         $o .= "</select>\r\n";
54
55         Addon::callHooks($a->module . '_post_' . $selname, $o);
56
57
58         return $o;
59 }
60
61 /// @TODO find proper type-hints
62 function contact_selector($selname, $selclass, $options, $preselected = false)
63 {
64         $a = get_app();
65
66         $mutual = false;
67         $networks = null;
68         $single = false;
69         $exclude = false;
70         $size = 4;
71
72         if (is_array($options)) {
73                 if (x($options, 'size'))
74                         $size = $options['size'];
75
76                 if (x($options, 'mutual_friends')) {
77                         $mutual = true;
78                 }
79                 if (x($options, 'single')) {
80                         $single = true;
81                 }
82                 if (x($options, 'multiple')) {
83                         $single = false;
84                 }
85                 if (x($options, 'exclude')) {
86                         $exclude = $options['exclude'];
87                 }
88
89                 if (x($options, 'networks')) {
90                         switch ($options['networks']) {
91                                 case 'DFRN_ONLY':
92                                         $networks = [NETWORK_DFRN];
93                                         break;
94                                 case 'PRIVATE':
95                                         if (is_array($a->user) && $a->user['prvnets']) {
96                                                 $networks = [NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA];
97                                         } else {
98                                                 $networks = [NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA];
99                                         }
100                                         break;
101                                 case 'TWO_WAY':
102                                         if (is_array($a->user) && $a->user['prvnets']) {
103                                                 $networks = [NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA];
104                                         } else {
105                                                 $networks = [NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA, NETWORK_OSTATUS];
106                                         }
107                                         break;
108                                 default: /// @TODO Maybe log this call?
109                                         break;
110                         }
111                 }
112         }
113
114         $x = ['options' => $options, 'size' => $size, 'single' => $single, 'mutual' => $mutual, 'exclude' => $exclude, 'networks' => $networks];
115
116         Addon::callHooks('contact_select_options', $x);
117
118         $o = '';
119
120         $sql_extra = '';
121
122         if (x($x, 'mutual')) {
123                 $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));
124         }
125
126         if (x($x, 'exclude')) {
127                 $sql_extra .= sprintf(" AND `id` != %d ", intval($x['exclude']));
128         }
129
130         if (is_array($x['networks']) && count($x['networks'])) {
131                 /// @TODO rewrite to foreach()
132                 for ($y = 0; $y < count($x['networks']) ; $y ++) {
133                         $x['networks'][$y] = "'" . dbesc($x['networks'][$y]) . "'";
134                 }
135                 $str_nets = implode(',', $x['networks']);
136                 $sql_extra .= " AND `network` IN ( $str_nets ) ";
137         }
138
139         $tabindex = (x($options, 'tabindex') ? "tabindex=\"" . $options["tabindex"] . "\"" : "");
140
141         if ($x['single']) {
142                 $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"" . $x['size'] . "\" $tabindex >\r\n";
143         } else {
144                 $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"" . $x['size'] . "$\" $tabindex >\r\n";
145         }
146
147         $r = q("SELECT `id`, `name`, `url`, `network` FROM `contact`
148                 WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
149                 $sql_extra
150                 ORDER BY `name` ASC ",
151                 intval(local_user())
152         );
153
154
155         $arr = ['contact' => $r, 'entry' => $o];
156
157         // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
158
159         Addon::callHooks($a->module . '_pre_' . $selname, $arr);
160
161         if (DBM::is_result($r)) {
162                 foreach ($r as $rr) {
163                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
164                                 $selected = " selected=\"selected\" ";
165                         } else {
166                                 $selected = '';
167                         }
168
169                         $trimmed = mb_substr($rr['name'],0,20);
170
171                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}|{$rr['url']}\" >$trimmed</option>\r\n";
172                 }
173
174         }
175
176         $o .= "</select>\r\n";
177
178         Addon::callHooks($a->module . '_post_' . $selname, $o);
179
180         return $o;
181 }
182
183
184
185 function contact_select($selname, $selclass, $preselected = false, $size = 4, $privmail = false, $celeb = false, $privatenet = false, $tabindex = null) {
186
187         require_once "include/bbcode.php";
188
189         $a = get_app();
190
191         $o = '';
192
193         // When used for private messages, we limit correspondence to mutual DFRN/Friendica friends and the selector
194         // to one recipient. By default our selector allows multiple selects amongst all contacts.
195
196         $sql_extra = '';
197
198         if ($privmail || $celeb) {
199                 $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));
200         }
201
202         if ($privmail) {
203                 $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s') ",
204                                         NETWORK_DFRN, NETWORK_DIASPORA);
205         } elseif ($privatenet) {
206                 $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s', '%s', '%s') ",
207                                         NETWORK_DFRN, NETWORK_MAIL, NETWORK_FACEBOOK, NETWORK_DIASPORA);
208         }
209
210         $tabindex = ($tabindex > 0 ? "tabindex=\"$tabindex\"" : "");
211
212         if ($privmail && $preselected) {
213                 $sql_extra .= " AND `id` IN (".implode(",", $preselected).")";
214                 $hidepreselected = ' style="display: none;"';
215         } else {
216                 $hidepreselected = "";
217         }
218
219         if ($privmail) {
220                 $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"$size\" $tabindex $hidepreselected>\r\n";
221         } else {
222                 $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"$size\" $tabindex >\r\n";
223         }
224
225         $r = q("SELECT `id`, `name`, `url`, `network` FROM `contact`
226                 WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
227                 $sql_extra
228                 ORDER BY `name` ASC ",
229                 intval(local_user())
230         );
231
232
233         $arr = ['contact' => $r, 'entry' => $o];
234
235         // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
236
237         Addon::callHooks($a->module . '_pre_' . $selname, $arr);
238
239         $receiverlist = [];
240
241         if (DBM::is_result($r)) {
242                 foreach ($r as $rr) {
243                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
244                                 $selected = " selected=\"selected\" ";
245                         } else {
246                                 $selected = '';
247                         }
248
249                         if ($privmail) {
250                                 $trimmed = GetProfileUsername($rr['url'], $rr['name'], false);
251                         } else {
252                                 $trimmed = mb_substr($rr['name'],0,20);
253                         }
254
255                         $receiverlist[] = $trimmed;
256
257                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}|{$rr['url']}\" >$trimmed</option>\r\n";
258                 }
259
260         }
261
262         $o .= "</select>\r\n";
263
264         if ($privmail && $preselected) {
265                 $o .= implode(", ", $receiverlist);
266         }
267
268         Addon::callHooks($a->module . '_post_' . $selname, $o);
269
270         return $o;
271 }
272
273
274 function fixacl(&$item) {
275         $item = intval(str_replace(['<', '>'], ['', ''], $item));
276 }
277
278 function prune_deadguys($arr) {
279
280         if (! $arr) {
281                 return $arr;
282         }
283
284         $str = dbesc(implode(',', $arr));
285
286         $r = q("SELECT `id` FROM `contact` WHERE `id` IN ( " . $str . ") AND `blocked` = 0 AND `pending` = 0 AND `archive` = 0 ");
287
288         if (DBM::is_result($r)) {
289                 $ret = [];
290                 foreach ($r as $rr) {
291                         $ret[] = intval($rr['id']);
292                 }
293                 return $ret;
294         }
295
296         return [];
297 }
298
299
300 function get_acl_permissions($user = null) {
301         $allow_cid = $allow_gid = $deny_cid = $deny_gid = false;
302
303         if (is_array($user)) {
304                 $allow_cid = ((strlen($user['allow_cid']))
305                         ? explode('><', $user['allow_cid']) : [] );
306                 $allow_gid = ((strlen($user['allow_gid']))
307                         ? explode('><', $user['allow_gid']) : [] );
308                 $deny_cid  = ((strlen($user['deny_cid']))
309                         ? explode('><', $user['deny_cid']) : [] );
310                 $deny_gid  = ((strlen($user['deny_gid']))
311                         ? explode('><', $user['deny_gid']) : [] );
312                 array_walk($allow_cid,'fixacl');
313                 array_walk($allow_gid,'fixacl');
314                 array_walk($deny_cid,'fixacl');
315                 array_walk($deny_gid,'fixacl');
316         }
317
318         $allow_cid = prune_deadguys($allow_cid);
319
320         return [
321                 'allow_cid' => $allow_cid,
322                 'allow_gid' => $allow_gid,
323                 'deny_cid' => $deny_cid,
324                 'deny_gid' => $deny_gid,
325         ];
326 }
327
328
329 function populate_acl($user = null, $show_jotnets = false) {
330
331         $perms = get_acl_permissions($user);
332
333         $jotnets = '';
334         if ($show_jotnets) {
335                 $mail_disabled = ((function_exists('imap_open') && (! Config::get('system','imap_disabled'))) ? 0 : 1);
336
337                 $mail_enabled = false;
338                 $pubmail_enabled = false;
339
340                 if (! $mail_disabled) {
341                         $r = q("SELECT `pubmail` FROM `mailacct` WHERE `uid` = %d AND `server` != '' LIMIT 1",
342                                 intval(local_user())
343                         );
344                         if (DBM::is_result($r)) {
345                                 $mail_enabled = true;
346                                 if (intval($r[0]['pubmail'])) {
347                                         $pubmail_enabled = true;
348                                 }
349                         }
350                 }
351
352                 if (!$user['hidewall']) {
353                         if ($mail_enabled) {
354                                 $selected = (($pubmail_enabled) ? ' checked="checked" ' : '');
355                                 $jotnets .= '<div class="profile-jot-net"><input type="checkbox" name="pubmail_enable"' . $selected . ' value="1" /> ' . L10n::t("Post to Email") . '</div>';
356                         }
357
358                         Addon::callHooks('jot_networks', $jotnets);
359                 } else {
360                         $jotnets .= sprintf(L10n::t('Connectors disabled, since "%s" is enabled.'),
361                                             L10n::t('Hide your profile details from unknown viewers?'));
362                 }
363         }
364
365         $tpl = get_markup_template("acl_selector.tpl");
366         $o = replace_macros($tpl, [
367                 '$showall'=> L10n::t("Visible to everybody"),
368                 '$show' => L10n::t("show"),
369                 '$hide'  => L10n::t("don't show"),
370                 '$allowcid' => json_encode($perms['allow_cid']),
371                 '$allowgid' => json_encode($perms['allow_gid']),
372                 '$denycid' => json_encode($perms['deny_cid']),
373                 '$denygid' => json_encode($perms['deny_gid']),
374                 '$networks' => $show_jotnets,
375                 '$emailcc' => L10n::t('CC: email addresses'),
376                 '$emtitle' => L10n::t('Example: bob@example.com, mary@example.com'),
377                 '$jotnets' => $jotnets,
378                 '$aclModalTitle' => L10n::t('Permissions'),
379                 '$aclModalDismiss' => L10n::t('Close'),
380                 '$features' => [
381                 'aclautomention' => (Feature::isEnabled($user['uid'], "aclautomention") ? "true" : "false")
382                 ],
383         ]);
384
385
386         return $o;
387
388 }
389
390 function acl_lookup(App $a, $out_type = 'json')
391 {
392         if (!local_user()) {
393                 return '';
394         }
395
396         $start   = defaults($_REQUEST, 'start'       , 0);
397         $count   = defaults($_REQUEST, 'count'       , 100);
398         $search  = defaults($_REQUEST, 'search'      , '');
399         $type    = defaults($_REQUEST, 'type'        , '');
400         $conv_id = defaults($_REQUEST, 'conversation', null);
401
402         // For use with jquery.textcomplete for private mail completion
403         if (x($_REQUEST, 'query')) {
404                 if (! $type) {
405                         $type = 'm';
406                 }
407                 $search = $_REQUEST['query'];
408         }
409
410         logger("Searching for ".$search." - type ".$type, LOGGER_DEBUG);
411
412         if ($search != '') {
413                 $sql_extra = "AND `name` LIKE '%%".dbesc($search)."%%'";
414                 $sql_extra2 = "AND (`attag` LIKE '%%".dbesc($search)."%%' OR `name` LIKE '%%".dbesc($search)."%%' OR `nick` LIKE '%%".dbesc($search)."%%')";
415         } else {
416                 /// @TODO Avoid these needless else blocks by putting variable-initialization atop of if()
417                 $sql_extra = $sql_extra2 = "";
418         }
419
420         // count groups and contacts
421         if ($type == '' || $type == 'g') {
422                 $r = q("SELECT COUNT(*) AS g FROM `group` WHERE `deleted` = 0 AND `uid` = %d $sql_extra",
423                         intval(local_user())
424                 );
425                 $group_count = (int)$r[0]['g'];
426         } else {
427                 $group_count = 0;
428         }
429
430         $sql_extra2 .= " ".Widget::unavailableNetworks();
431
432         if ($type == '' || $type == 'c') {
433                 // autocomplete for editor mentions
434                 $r = q("SELECT COUNT(*) AS c FROM `contact`
435                                 WHERE `uid` = %d AND NOT `self`
436                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
437                                 AND `success_update` >= `failure_update`
438                                 AND `notify` != '' $sql_extra2" ,
439                         intval(local_user())
440                 );
441                 $contact_count = (int)$r[0]['c'];
442         } elseif ($type == 'f') {
443                 // autocomplete for editor mentions of forums
444                 $r = q("SELECT COUNT(*) AS c FROM `contact`
445                                 WHERE `uid` = %d AND NOT `self`
446                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
447                                 AND (`forum` OR `prv`)
448                                 AND `success_update` >= `failure_update`
449                                 AND `notify` != '' $sql_extra2" ,
450                         intval(local_user())
451                 );
452                 $contact_count = (int)$r[0]['c'];
453         } elseif ($type == 'm') {
454                 // autocomplete for Private Messages
455                 $r = q("SELECT COUNT(*) AS c FROM `contact`
456                                 WHERE `uid` = %d AND NOT `self`
457                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
458                                 AND `success_update` >= `failure_update`
459                                 AND `network` IN ('%s', '%s') $sql_extra2" ,
460                         intval(local_user()),
461                         dbesc(NETWORK_DFRN),
462                         dbesc(NETWORK_DIASPORA)
463                 );
464                 $contact_count = (int)$r[0]['c'];
465
466         } elseif ($type == 'a') {
467                 // autocomplete for Contacts
468                 $r = q("SELECT COUNT(*) AS c FROM `contact`
469                                 WHERE `uid` = %d AND NOT `self`
470                                 AND NOT `pending` $sql_extra2" ,
471                         intval(local_user())
472                 );
473                 $contact_count = (int)$r[0]['c'];
474         } else {
475                 $contact_count = 0;
476         }
477
478         $tot = $group_count + $contact_count;
479
480         $groups = [];
481         $contacts = [];
482
483         if ($type == '' || $type == 'g') {
484                 /// @todo We should cache this query.
485                 // This can be done when we can delete cache entries via wildcard
486                 $r = q("SELECT `group`.`id`, `group`.`name`, GROUP_CONCAT(DISTINCT `group_member`.`contact-id` SEPARATOR ',') AS uids
487                                 FROM `group`
488                                 INNER JOIN `group_member` ON `group_member`.`gid`=`group`.`id`
489                                 WHERE NOT `group`.`deleted` AND `group`.`uid` = %d
490                                         $sql_extra
491                                 GROUP BY `group`.`name`, `group`.`id`
492                                 ORDER BY `group`.`name`
493                                 LIMIT %d,%d",
494                         intval(local_user()),
495                         intval($start),
496                         intval($count)
497                 );
498
499                 foreach ($r as $g) {
500                         $groups[] = [
501                                 "type"  => "g",
502                                 "photo" => "images/twopeople.png",
503                                 "name"  => htmlentities($g['name']),
504                                 "id"    => intval($g['id']),
505                                 "uids"  => array_map("intval", explode(",",$g['uids'])),
506                                 "link"  => '',
507                                 "forum" => '0'
508                         ];
509                 }
510                 if ((count($groups) > 0) && ($search == "")) {
511                         $groups[] = ["separator" => true];
512                 }
513         }
514
515         if ($type == '') {
516                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv`, (`prv` OR `forum`) AS `frm` FROM `contact`
517                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
518                         AND `success_update` >= `failure_update` AND NOT (`network` IN ('%s', '%s'))
519                         $sql_extra2
520                         ORDER BY `name` ASC ",
521                         intval(local_user()),
522                         dbesc(NETWORK_OSTATUS), dbesc(NETWORK_STATUSNET)
523                 );
524         } elseif ($type == 'c') {
525                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
526                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
527                         AND `success_update` >= `failure_update` AND NOT (`network` IN ('%s'))
528                         $sql_extra2
529                         ORDER BY `name` ASC ",
530                         intval(local_user()),
531                         dbesc(NETWORK_STATUSNET)
532                 );
533         } elseif ($type == 'f') {
534                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
535                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
536                         AND `success_update` >= `failure_update` AND NOT (`network` IN ('%s'))
537                         AND (`forum` OR `prv`)
538                         $sql_extra2
539                         ORDER BY `name` ASC ",
540                         intval(local_user()),
541                         dbesc(NETWORK_STATUSNET)
542                 );
543         } elseif ($type == 'm') {
544                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr` FROM `contact`
545                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive`
546                         AND `success_update` >= `failure_update` AND `network` IN ('%s', '%s')
547                         $sql_extra2
548                         ORDER BY `name` ASC ",
549                         intval(local_user()),
550                         dbesc(NETWORK_DFRN),
551                         dbesc(NETWORK_DIASPORA)
552                 );
553         } elseif ($type == 'a') {
554                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
555                         WHERE `uid` = %d AND `pending` = 0 AND `success_update` >= `failure_update`
556                         $sql_extra2
557                         ORDER BY `name` ASC ",
558                         intval(local_user())
559                 );
560         } elseif ($type == 'x') {
561                 // autocomplete for global contact search (e.g. navbar search)
562                 $r = navbar_complete($a);
563                 $contacts = [];
564                 if ($r) {
565                         foreach ($r as $g) {
566                                 $contacts[] = [
567                                         'photo'   => proxy_url($g['photo'], false, PROXY_SIZE_MICRO),
568                                         'name'    => $g['name'],
569                                         'nick'    => (x($g['addr']) ? $g['addr'] : $g['url']),
570                                         'network' => $g['network'],
571                                         'link'    => $g['url'],
572                                         'forum'   => (x($g['community']) ? 1 : 0),
573                                 ];
574                         }
575                 }
576                 $o = [
577                         'start' => $start,
578                         'count' => $count,
579                         'items' => $contacts,
580                 ];
581                 echo json_encode($o);
582                 killme();
583         } else {
584                 $r = [];
585         }
586
587         if (DBM::is_result($r)) {
588                 $forums = [];
589                 foreach ($r as $g) {
590                         $entry = [
591                                 'type'    => 'c',
592                                 'photo'   => proxy_url($g['micro'], false, PROXY_SIZE_MICRO),
593                                 'name'    => htmlentities($g['name']),
594                                 'id'      => intval($g['id']),
595                                 'network' => $g['network'],
596                                 'link'    => $g['url'],
597                                 'nick'    => htmlentities(($g['attag']) ? $g['attag'] : $g['nick']),
598                                 'addr'    => htmlentities(($g['addr']) ? $g['addr'] : $g['url']),
599                                 'forum'   => ((x($g, 'forum') || x($g, 'prv')) ? 1 : 0),
600                         ];
601                         if ($entry['forum']) {
602                                 $forums[] = $entry;
603                         } else {
604                                 $contacts[] = $entry;
605                         }
606                 }
607                 if (count($forums) > 0) {
608                         if ($search == "") {
609                                 $forums[] = ["separator" => true];
610                         }
611                         $contacts = array_merge($forums, $contacts);
612                 }
613         }
614
615         $items = array_merge($groups, $contacts);
616
617         if ($conv_id) {
618                 /*
619                  * if $conv_id is set, get unknown contacts in thread
620                  * but first get known contacts url to filter them out
621                  */
622                 $known_contacts = array_map(
623                         function ($i) {
624                                 return dbesc($i['link']);
625                         }
626                 , $contacts);
627
628                 $unknown_contacts = [];
629                 $r = q("SELECT `author-link`
630                                 FROM `item` WHERE `parent` = %d
631                                         AND (`author-name` LIKE '%%%s%%' OR `author-link` LIKE '%%%s%%')
632                                         AND `author-link` NOT IN ('%s')
633                                 GROUP BY `author-link`, `author-avatar`, `author-name`
634                                 ORDER BY `author-name` ASC
635                                 ",
636                                 intval($conv_id),
637                                 dbesc($search),
638                                 dbesc($search),
639                                 implode("', '", $known_contacts)
640                 );
641                 if (DBM::is_result($r)) {
642                         foreach ($r as $row) {
643                                 $contact = Contact::getDetailsByURL($row['author-link']);
644
645                                 if (count($contact) > 0) {
646                                         $unknown_contacts[] = [
647                                                 'type'    => 'c',
648                                                 'photo'   => proxy_url($contact['micro'], false, PROXY_SIZE_MICRO),
649                                                 'name'    => htmlentities($contact['name']),
650                                                 'id'      => intval($contact['cid']),
651                                                 'network' => $contact['network'],
652                                                 'link'    => $contact['url'],
653                                                 'nick'    => htmlentities($contact['nick'] ? : $contact['addr']),
654                                                 'addr'    => htmlentities(($contact['addr']) ? $contact['addr'] : $contact['url']),
655                                                 'forum'   => $contact['forum']
656                                         ];
657                                 }
658                         }
659                 }
660
661                 $items = array_merge($items, $unknown_contacts);
662                 $tot += count($unknown_contacts);
663         }
664
665         $results = [
666                 'tot'      => $tot,
667                 'start'    => $start,
668                 'count'    => $count,
669                 'groups'   => $groups,
670                 'contacts' => $contacts,
671                 'items'    => $items,
672                 'type'     => $type,
673                 'search'   => $search,
674         ];
675
676         Addon::callHooks('acl_lookup_end', $results);
677
678         if ($out_type === 'html') {
679                 $o = [
680                         'tot'      => $results['tot'],
681                         'start'    => $results['start'],
682                         'count'    => $results['count'],
683                         'groups'   => $results['groups'],
684                         'contacts' => $results['contacts'],
685                 ];
686                 return $o;
687         }
688
689         $o = [
690                 'tot'   => $results['tot'],
691                 'start' => $results['start'],
692                 'count' => $results['count'],
693                 'items' => $results['items'],
694         ];
695
696         echo json_encode($o);
697
698         killme();
699 }
700 /**
701  * @brief Searching for global contacts for autocompletion
702  *
703  * @param App $a
704  * @return array with the search results
705  */
706 function navbar_complete(App $a) {
707
708 //      logger('navbar_complete');
709
710         if ((Config::get('system','block_public')) && (! local_user()) && (! remote_user())) {
711                 return;
712         }
713
714         // check if searching in the local global contact table is enabled
715         $localsearch = Config::get('system','poco_local_search');
716
717         $search = $prefix.notags(trim($_REQUEST['search']));
718         $mode = $_REQUEST['smode'];
719
720         // don't search if search term has less than 2 characters
721         if (! $search || mb_strlen($search) < 2) {
722                 return [];
723         }
724
725         if (substr($search,0,1) === '@') {
726                 $search = substr($search,1);
727         }
728
729         if ($localsearch) {
730                 $x = GContact::searchByName($search, $mode);
731                 return $x;
732         }
733
734         if (! $localsearch) {
735                 $p = (($a->pager['page'] != 1) ? '&p=' . $a->pager['page'] : '');
736
737                 $x = z_fetch_url(get_server() . '/lsearch?f=' . $p .  '&search=' . urlencode($search));
738                 if ($x['success']) {
739                         $j = json_decode($x['body'],true);
740                         if ($j && isset($j['results'])) {
741                                 return $j['results'];
742                         }
743                 }
744         }
745
746         /// @TODO Not needed here?
747         return;
748 }