include/acl_selectors.php

   1 <?php
   2 /**
   3  * @file include/acl_selectors.php
   4  */
   5 use Friendica\App;
   6 use Friendica\Content\Feature;
   7 use Friendica\Core\Config;
   8 use Friendica\Database\DBM;
   9 use Friendica\Model\Contact;
  10 use Friendica\Model\GContact;
  11
  12 require_once "include/contact_selectors.php";
  13 require_once "include/contact_widgets.php";
  14 require_once "mod/proxy.php";
  15
  16 /**
  17  * @package acl_selectors
  18  */
  19 function group_select($selname,$selclass,$preselected = false,$size = 4) {
  20
  21         $a = get_app();
  22
  23         $o = '';
  24
  25         $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"$size\" >\r\n";
  26
  27         $r = q("SELECT `id`, `name` FROM `group` WHERE NOT `deleted` AND `uid` = %d ORDER BY `name` ASC",
  28                 intval(local_user())
  29         );
  30
  31
  32         $arr = array('group' => $r, 'entry' => $o);
  33
  34         // e.g. 'network_pre_group_deny', 'profile_pre_group_allow'
  35
  36         call_hooks($a->module . '_pre_' . $selname, $arr);
  37
  38         if (DBM::is_result($r)) {
  39                 foreach ($r as $rr) {
  40                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
  41                                 $selected = " selected=\"selected\" ";
  42                         } else {
  43                                 $selected = '';
  44                         }
  45
  46                         $trimmed = mb_substr($rr['name'],0,12);
  47
  48                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}\" >$trimmed</option>\r\n";
  49                 }
  50
  51         }
  52         $o .= "</select>\r\n";
  53
  54         call_hooks($a->module . '_post_' . $selname, $o);
  55
  56
  57         return $o;
  58 }
  59
  60 /// @TODO find proper type-hints
  61 function contact_selector($selname, $selclass, $options, $preselected = false)
  62 {
  63         $a = get_app();
  64
  65         $mutual = false;
  66         $networks = null;
  67         $single = false;
  68         $exclude = false;
  69         $size = 4;
  70
  71         if (is_array($options)) {
  72                 if (x($options, 'size'))
  73                         $size = $options['size'];
  74
  75                 if (x($options, 'mutual_friends')) {
  76                         $mutual = true;
  77                 }
  78                 if (x($options, 'single')) {
  79                         $single = true;
  80                 }
  81                 if (x($options, 'multiple')) {
  82                         $single = false;
  83                 }
  84                 if (x($options, 'exclude')) {
  85                         $exclude = $options['exclude'];
  86                 }
  87
  88                 if (x($options, 'networks')) {
  89                         switch ($options['networks']) {
  90                                 case 'DFRN_ONLY':
  91                                         $networks = array(NETWORK_DFRN);
  92                                         break;
  93                                 case 'PRIVATE':
  94                                         if (is_array($a->user) && $a->user['prvnets']) {
  95                                                 $networks = array(NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA);
  96                                         } else {
  97                                                 $networks = array(NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA);
  98                                         }
  99                                         break;
 100                                 case 'TWO_WAY':
 101                                         if (is_array($a->user) && $a->user['prvnets']) {
 102                                                 $networks = array(NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA);
 103                                         } else {
 104                                                 $networks = array(NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA, NETWORK_OSTATUS);
 105                                         }
 106                                         break;
 107                                 default: /// @TODO Maybe log this call?
 108                                         break;
 109                         }
 110                 }
 111         }
 112
 113         $x = array('options' => $options, 'size' => $size, 'single' => $single, 'mutual' => $mutual, 'exclude' => $exclude, 'networks' => $networks);
 114
 115         call_hooks('contact_select_options', $x);
 116
 117         $o = '';
 118
 119         $sql_extra = '';
 120
 121         if (x($x, 'mutual')) {
 122                 $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));
 123         }
 124
 125         if (x($x, 'exclude')) {
 126                 $sql_extra .= sprintf(" AND `id` != %d ", intval($x['exclude']));
 127         }
 128
 129         if (is_array($x['networks']) && count($x['networks'])) {
 130                 /// @TODO rewrite to foreach()
 131                 for ($y = 0; $y < count($x['networks']) ; $y ++) {
 132                         $x['networks'][$y] = "'" . dbesc($x['networks'][$y]) . "'";
 133                 }
 134                 $str_nets = implode(',', $x['networks']);
 135                 $sql_extra .= " AND `network` IN ( $str_nets ) ";
 136         }
 137
 138         $tabindex = (x($options, 'tabindex') ? "tabindex=\"" . $options["tabindex"] . "\"" : "");
 139
 140         if ($x['single']) {
 141                 $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"" . $x['size'] . "\" $tabindex >\r\n";
 142         } else {
 143                 $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"" . $x['size'] . "$\" $tabindex >\r\n";
 144         }
 145
 146         $r = q("SELECT `id`, `name`, `url`, `network` FROM `contact`
 147                 WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 148                 $sql_extra
 149                 ORDER BY `name` ASC ",
 150                 intval(local_user())
 151         );
 152
 153
 154         $arr = array('contact' => $r, 'entry' => $o);
 155
 156         // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
 157
 158         call_hooks($a->module . '_pre_' . $selname, $arr);
 159
 160         if (DBM::is_result($r)) {
 161                 foreach ($r as $rr) {
 162                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
 163                                 $selected = " selected=\"selected\" ";
 164                         } else {
 165                                 $selected = '';
 166                         }
 167
 168                         $trimmed = mb_substr($rr['name'],0,20);
 169
 170                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}|{$rr['url']}\" >$trimmed</option>\r\n";
 171                 }
 172
 173         }
 174
 175         $o .= "</select>\r\n";
 176
 177         call_hooks($a->module . '_post_' . $selname, $o);
 178
 179         return $o;
 180 }
 181
 182
 183
 184 function contact_select($selname, $selclass, $preselected = false, $size = 4, $privmail = false, $celeb = false, $privatenet = false, $tabindex = null) {
 185
 186         require_once "include/bbcode.php";
 187
 188         $a = get_app();
 189
 190         $o = '';
 191
 192         // When used for private messages, we limit correspondence to mutual DFRN/Friendica friends and the selector
 193         // to one recipient. By default our selector allows multiple selects amongst all contacts.
 194
 195         $sql_extra = '';
 196
 197         if ($privmail || $celeb) {
 198                 $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));
 199         }
 200
 201         if ($privmail) {
 202                 $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s') ",
 203                                         NETWORK_DFRN, NETWORK_DIASPORA);
 204         } elseif ($privatenet) {
 205                 $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s', '%s', '%s') ",
 206                                         NETWORK_DFRN, NETWORK_MAIL, NETWORK_FACEBOOK, NETWORK_DIASPORA);
 207         }
 208
 209         $tabindex = ($tabindex > 0 ? "tabindex=\"$tabindex\"" : "");
 210
 211         if ($privmail && $preselected) {
 212                 $sql_extra .= " AND `id` IN (".implode(",", $preselected).")";
 213                 $hidepreselected = ' style="display: none;"';
 214         } else {
 215                 $hidepreselected = "";
 216         }
 217
 218         if ($privmail) {
 219                 $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"$size\" $tabindex $hidepreselected>\r\n";
 220         } else {
 221                 $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"$size\" $tabindex >\r\n";
 222         }
 223
 224         $r = q("SELECT `id`, `name`, `url`, `network` FROM `contact`
 225                 WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 226                 $sql_extra
 227                 ORDER BY `name` ASC ",
 228                 intval(local_user())
 229         );
 230
 231
 232         $arr = array('contact' => $r, 'entry' => $o);
 233
 234         // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
 235
 236         call_hooks($a->module . '_pre_' . $selname, $arr);
 237
 238         $receiverlist = array();
 239
 240         if (DBM::is_result($r)) {
 241                 foreach ($r as $rr) {
 242                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
 243                                 $selected = " selected=\"selected\" ";
 244                         } else {
 245                                 $selected = '';
 246                         }
 247
 248                         if ($privmail) {
 249                                 $trimmed = GetProfileUsername($rr['url'], $rr['name'], false);
 250                         } else {
 251                                 $trimmed = mb_substr($rr['name'],0,20);
 252                         }
 253
 254                         $receiverlist[] = $trimmed;
 255
 256                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}|{$rr['url']}\" >$trimmed</option>\r\n";
 257                 }
 258
 259         }
 260
 261         $o .= "</select>\r\n";
 262
 263         if ($privmail && $preselected) {
 264                 $o .= implode(", ", $receiverlist);
 265         }
 266
 267         call_hooks($a->module . '_post_' . $selname, $o);
 268
 269         return $o;
 270 }
 271
 272
 273 function fixacl(&$item) {
 274         $item = intval(str_replace(array('<', '>'), array('', ''), $item));
 275 }
 276
 277 function prune_deadguys($arr) {
 278
 279         if (! $arr) {
 280                 return $arr;
 281         }
 282
 283         $str = dbesc(implode(',', $arr));
 284
 285         $r = q("SELECT `id` FROM `contact` WHERE `id` IN ( " . $str . ") AND `blocked` = 0 AND `pending` = 0 AND `archive` = 0 ");
 286
 287         if (DBM::is_result($r)) {
 288                 $ret = array();
 289                 foreach ($r as $rr) {
 290                         $ret[] = intval($rr['id']);
 291                 }
 292                 return $ret;
 293         }
 294
 295         return array();
 296 }
 297
 298
 299 function get_acl_permissions($user = null) {
 300         $allow_cid = $allow_gid = $deny_cid = $deny_gid = false;
 301
 302         if (is_array($user)) {
 303                 $allow_cid = ((strlen($user['allow_cid']))
 304                         ? explode('><', $user['allow_cid']) : array() );
 305                 $allow_gid = ((strlen($user['allow_gid']))
 306                         ? explode('><', $user['allow_gid']) : array() );
 307                 $deny_cid  = ((strlen($user['deny_cid']))
 308                         ? explode('><', $user['deny_cid']) : array() );
 309                 $deny_gid  = ((strlen($user['deny_gid']))
 310                         ? explode('><', $user['deny_gid']) : array() );
 311                 array_walk($allow_cid,'fixacl');
 312                 array_walk($allow_gid,'fixacl');
 313                 array_walk($deny_cid,'fixacl');
 314                 array_walk($deny_gid,'fixacl');
 315         }
 316
 317         $allow_cid = prune_deadguys($allow_cid);
 318
 319         return array(
 320                 'allow_cid' => $allow_cid,
 321                 'allow_gid' => $allow_gid,
 322                 'deny_cid' => $deny_cid,
 323                 'deny_gid' => $deny_gid,
 324         );
 325 }
 326
 327
 328 function populate_acl($user = null, $show_jotnets = false) {
 329
 330         $perms = get_acl_permissions($user);
 331
 332         $jotnets = '';
 333         if ($show_jotnets) {
 334                 $mail_disabled = ((function_exists('imap_open') && (! Config::get('system','imap_disabled'))) ? 0 : 1);
 335
 336                 $mail_enabled = false;
 337                 $pubmail_enabled = false;
 338
 339                 if (! $mail_disabled) {
 340                         $r = q("SELECT `pubmail` FROM `mailacct` WHERE `uid` = %d AND `server` != '' LIMIT 1",
 341                                 intval(local_user())
 342                         );
 343                         if (DBM::is_result($r)) {
 344                                 $mail_enabled = true;
 345                                 if (intval($r[0]['pubmail'])) {
 346                                         $pubmail_enabled = true;
 347                                 }
 348                         }
 349                 }
 350
 351                 if (!$user['hidewall']) {
 352                         if ($mail_enabled) {
 353                                 $selected = (($pubmail_enabled) ? ' checked="checked" ' : '');
 354                                 $jotnets .= '<div class="profile-jot-net"><input type="checkbox" name="pubmail_enable"' . $selected . ' value="1" /> ' . t("Post to Email") . '</div>';
 355                         }
 356
 357                         call_hooks('jot_networks', $jotnets);
 358                 } else {
 359                         $jotnets .= sprintf(t('Connectors disabled, since "%s" is enabled.'),
 360                                             t('Hide your profile details from unknown viewers?'));
 361                 }
 362         }
 363
 364         $tpl = get_markup_template("acl_selector.tpl");
 365         $o = replace_macros($tpl, array(
 366                 '$showall'=> t("Visible to everybody"),
 367                 '$show' => t("show"),
 368                 '$hide'  => t("don't show"),
 369                 '$allowcid' => json_encode($perms['allow_cid']),
 370                 '$allowgid' => json_encode($perms['allow_gid']),
 371                 '$denycid' => json_encode($perms['deny_cid']),
 372                 '$denygid' => json_encode($perms['deny_gid']),
 373                 '$networks' => $show_jotnets,
 374                 '$emailcc' => t('CC: email addresses'),
 375                 '$emtitle' => t('Example: bob@example.com, mary@example.com'),
 376                 '$jotnets' => $jotnets,
 377                 '$aclModalTitle' => t('Permissions'),
 378                 '$aclModalDismiss' => t('Close'),
 379                 '$features' => array(
 380                 'aclautomention' => (Feature::isEnabled($user['uid'], "aclautomention") ? "true" : "false")
 381                 ),
 382         ));
 383
 384
 385         return $o;
 386
 387 }
 388
 389 function acl_lookup(App $a, $out_type = 'json') {
 390
 391         if (!local_user()) {
 392                 return '';
 393         }
 394
 395         $start  =       (x($_REQUEST,'start')           ? $_REQUEST['start']            : 0);
 396         $count  =       (x($_REQUEST,'count')           ? $_REQUEST['count']            : 100);
 397         $search  =      (x($_REQUEST,'search')          ? $_REQUEST['search']           : "");
 398         $type   =       (x($_REQUEST,'type')            ? $_REQUEST['type']             : "");
 399         $mode   =       (x($_REQUEST,'smode')           ? $_REQUEST['smode']            : "");
 400         $conv_id =      (x($_REQUEST,'conversation')    ? $_REQUEST['conversation']     : null);
 401
 402         // For use with jquery.textcomplete for private mail completion
 403
 404         if (x($_REQUEST, 'query') && strlen($_REQUEST['query'])) {
 405                 if (! $type) {
 406                         $type = 'm';
 407                 }
 408                 $search = $_REQUEST['query'];
 409         }
 410
 411         logger("Searching for ".$search." - type ".$type, LOGGER_DEBUG);
 412
 413         if ($search != "") {
 414                 $sql_extra = "AND `name` LIKE '%%".dbesc($search)."%%'";
 415                 $sql_extra2 = "AND (`attag` LIKE '%%".dbesc($search)."%%' OR `name` LIKE '%%".dbesc($search)."%%' OR `nick` LIKE '%%".dbesc($search)."%%')";
 416         } else {
 417                 /// @TODO Avoid these needless else blocks by putting variable-initialization atop of if()
 418                 $sql_extra = $sql_extra2 = "";
 419         }
 420
 421         // count groups and contacts
 422         if ($type == '' || $type == 'g') {
 423                 $r = q("SELECT COUNT(*) AS g FROM `group` WHERE `deleted` = 0 AND `uid` = %d $sql_extra",
 424                         intval(local_user())
 425                 );
 426                 $group_count = (int)$r[0]['g'];
 427         } else {
 428                 $group_count = 0;
 429         }
 430
 431         $sql_extra2 .= " ".unavailable_networks();
 432
 433         if ($type == '' || $type == 'c') {
 434                 // autocomplete for editor mentions
 435                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 436                                 WHERE `uid` = %d AND NOT `self`
 437                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 438                                 AND `success_update` >= `failure_update`
 439                                 AND `notify` != '' $sql_extra2" ,
 440                         intval(local_user())
 441                 );
 442                 $contact_count = (int)$r[0]['c'];
 443         } elseif ($type == 'f') {
 444                 // autocomplete for editor mentions of forums
 445                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 446                                 WHERE `uid` = %d AND NOT `self`
 447                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 448                                 AND (`forum` OR `prv`)
 449                                 AND `success_update` >= `failure_update`
 450                                 AND `notify` != '' $sql_extra2" ,
 451                         intval(local_user())
 452                 );
 453                 $contact_count = (int)$r[0]['c'];
 454         } elseif ($type == 'm') {
 455                 // autocomplete for Private Messages
 456
 457                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 458                                 WHERE `uid` = %d AND NOT `self`
 459                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 460                                 AND `success_update` >= `failure_update`
 461                                 AND `network` IN ('%s', '%s') $sql_extra2" ,
 462                         intval(local_user()),
 463                         dbesc(NETWORK_DFRN),
 464                         dbesc(NETWORK_DIASPORA)
 465                 );
 466                 $contact_count = (int)$r[0]['c'];
 467
 468         } elseif ($type == 'a') {
 469
 470                 // autocomplete for Contacts
 471
 472                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 473                                 WHERE `uid` = %d AND NOT `self`
 474                                 AND NOT `pending` $sql_extra2" ,
 475                         intval(local_user())
 476                 );
 477                 $contact_count = (int)$r[0]['c'];
 478
 479         } else {
 480                 $contact_count = 0;
 481         }
 482
 483
 484         $tot = $group_count+$contact_count;
 485
 486         $groups = array();
 487         $contacts = array();
 488
 489         if ($type == '' || $type == 'g') {
 490
 491                 /// @todo We should cache this query.
 492                 // This can be done when we can delete cache entries via wildcard
 493                 $r = q("SELECT `group`.`id`, `group`.`name`, GROUP_CONCAT(DISTINCT `group_member`.`contact-id` SEPARATOR ',') AS uids
 494                                 FROM `group`
 495                                 INNER JOIN `group_member` ON `group_member`.`gid`=`group`.`id`
 496                                 WHERE NOT `group`.`deleted` AND `group`.`uid` = %d
 497                                         $sql_extra
 498                                 GROUP BY `group`.`name`, `group`.`id`
 499                                 ORDER BY `group`.`name`
 500                                 LIMIT %d,%d",
 501                         intval(local_user()),
 502                         intval($start),
 503                         intval($count)
 504                 );
 505
 506                 foreach ($r as $g) {
 507 //              logger('acl: group: ' . $g['name'] . ' members: ' . $g['uids']);
 508                         $groups[] = array(
 509                                 "type"  => "g",
 510                                 "photo" => "images/twopeople.png",
 511                                 "name"  => htmlentities($g['name']),
 512                                 "id"    => intval($g['id']),
 513                                 "uids"  => array_map("intval", explode(",",$g['uids'])),
 514                                 "link"  => '',
 515                                 "forum" => '0'
 516                         );
 517                 }
 518                 if ((count($groups) > 0) && ($search == "")) {
 519                         $groups[] = array("separator" => true);
 520                 }
 521         }
 522
 523         if ($type == '') {
 524
 525                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv`, (`prv` OR `forum`) AS `frm` FROM `contact`
 526                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 527                         AND `success_update` >= `failure_update` AND NOT (`network` IN ('%s', '%s'))
 528                         $sql_extra2
 529                         ORDER BY `name` ASC ",
 530                         intval(local_user()),
 531                         dbesc(NETWORK_OSTATUS), dbesc(NETWORK_STATUSNET)
 532                 );
 533         } elseif ($type == 'c') {
 534                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 535                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 536                         AND `success_update` >= `failure_update` AND NOT (`network` IN ('%s'))
 537                         $sql_extra2
 538                         ORDER BY `name` ASC ",
 539                         intval(local_user()),
 540                         dbesc(NETWORK_STATUSNET)
 541                 );
 542         } elseif ($type == 'f') {
 543                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 544                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 545                         AND `success_update` >= `failure_update` AND NOT (`network` IN ('%s'))
 546                         AND (`forum` OR `prv`)
 547                         $sql_extra2
 548                         ORDER BY `name` ASC ",
 549                         intval(local_user()),
 550                         dbesc(NETWORK_STATUSNET)
 551                 );
 552         } elseif ($type == 'm') {
 553                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr` FROM `contact`
 554                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 555                         AND `success_update` >= `failure_update` AND `network` IN ('%s', '%s')
 556                         $sql_extra2
 557                         ORDER BY `name` ASC ",
 558                         intval(local_user()),
 559                         dbesc(NETWORK_DFRN),
 560                         dbesc(NETWORK_DIASPORA)
 561                 );
 562         } elseif ($type == 'a') {
 563                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 564                         WHERE `uid` = %d AND `pending` = 0 AND `success_update` >= `failure_update`
 565                         $sql_extra2
 566                         ORDER BY `name` ASC ",
 567                         intval(local_user())
 568                 );
 569         } elseif ($type == 'x') {
 570                 // autocomplete for global contact search (e.g. navbar search)
 571                 $r = navbar_complete($a);
 572                 $contacts = array();
 573                 if ($r) {
 574                         foreach ($r as $g) {
 575                                 $contacts[] = array(
 576                                         'photo'   => proxy_url($g['photo'], false, PROXY_SIZE_MICRO),
 577                                         'name'    => $g['name'],
 578                                         'nick'    => (x($g['addr']) ? $g['addr'] : $g['url']),
 579                                         'network' => $g['network'],
 580                                         'link'    => $g['url'],
 581                                         'forum'   => (x($g['community']) ? 1 : 0),
 582                                 );
 583                         }
 584                 }
 585                 $o = array(
 586                         'start' => $start,
 587                         'count' => $count,
 588                         'items' => $contacts,
 589                 );
 590                 echo json_encode($o);
 591                 killme();
 592         } else {
 593                 $r = array();
 594         }
 595
 596
 597         if (DBM::is_result($r)) {
 598                 $forums = array();
 599                 foreach ($r as $g) {
 600                         $entry = array(
 601                                 'type'    => 'c',
 602                                 'photo'   => proxy_url($g['micro'], false, PROXY_SIZE_MICRO),
 603                                 'name'    => htmlentities($g['name']),
 604                                 'id'      => intval($g['id']),
 605                                 'network' => $g['network'],
 606                                 'link'    => $g['url'],
 607                                 'nick'    => htmlentities(($g['attag']) ? $g['attag'] : $g['nick']),
 608                                 'addr'    => htmlentities(($g['addr']) ? $g['addr'] : $g['url']),
 609                                 'forum'   => ((x($g, 'forum') || x($g, 'prv')) ? 1 : 0),
 610                         );
 611                         if ($entry['forum']) {
 612                                 $forums[] = $entry;
 613                         } else {
 614                                 $contacts[] = $entry;
 615                         }
 616                 }
 617                 if (count($forums) > 0) {
 618                         if ($search == "") {
 619                                 $forums[] = array("separator" => true);
 620                         }
 621                         $contacts = array_merge($forums, $contacts);
 622                 }
 623         }
 624
 625         $items = array_merge($groups, $contacts);
 626
 627         if ($conv_id) {
 628                 /*
 629                  * if $conv_id is set, get unknown contacts in thread
 630                  * but first get known contacts url to filter them out
 631                  */
 632                 $known_contacts = array_map(
 633                         function ($i) {
 634                                 return dbesc($i['link']);
 635                         }
 636                 , $contacts);
 637
 638                 $unknown_contacts = array();
 639                 $r = q("SELECT `author-link`
 640                                 FROM `item` WHERE `parent` = %d
 641                                         AND (`author-name` LIKE '%%%s%%' OR `author-link` LIKE '%%%s%%')
 642                                         AND `author-link` NOT IN ('%s')
 643                                 GROUP BY `author-link`, `author-avatar`, `author-name`
 644                                 ORDER BY `author-name` ASC
 645                                 ",
 646                                 intval($conv_id),
 647                                 dbesc($search),
 648                                 dbesc($search),
 649                                 implode("', '", $known_contacts)
 650                 );
 651                 if (DBM::is_result($r)) {
 652                         foreach ($r as $row) {
 653                                 $contact = Contact::getDetailsByURL($row['author-link']);
 654
 655                                 if (count($contact) > 0) {
 656                                         $unknown_contacts[] = array(
 657                                                 'type'    => 'c',
 658                                                 'photo'   => proxy_url($contact['micro'], false, PROXY_SIZE_MICRO),
 659                                                 'name'    => htmlentities($contact['name']),
 660                                                 'id'      => intval($contact['cid']),
 661                                                 'network' => $contact['network'],
 662                                                 'link'    => $contact['url'],
 663                                                 'nick'    => htmlentities($contact['nick'] ? : $contact['addr']),
 664                                                 'addr'    => htmlentities(($contact['addr']) ? $contact['addr'] : $contact['url']),
 665                                                 'forum'   => $contact['forum']
 666                                         );
 667                                 }
 668                         }
 669                 }
 670
 671                 $items = array_merge($items, $unknown_contacts);
 672                 $tot += count($unknown_contacts);
 673         }
 674
 675         $results = array(
 676                 'tot'      => $tot,
 677                 'start'    => $start,
 678                 'count'    => $count,
 679                 'groups'   => $groups,
 680                 'contacts' => $contacts,
 681                 'items'    => $items,
 682                 'type'     => $type,
 683                 'search'   => $search,
 684         );
 685
 686         call_hooks('acl_lookup_end', $results);
 687
 688         if ($out_type === 'html') {
 689                 $o = array(
 690                         'tot'      => $results['tot'],
 691                         'start'    => $results['start'],
 692                         'count'    => $results['count'],
 693                         'groups'   => $results['groups'],
 694                         'contacts' => $results['contacts'],
 695                 );
 696                 return $o;
 697         }
 698
 699         $o = array(
 700                 'tot'   => $results['tot'],
 701                 'start' => $results['start'],
 702                 'count' => $results['count'],
 703                 'items' => $results['items'],
 704         );
 705
 706         echo json_encode($o);
 707
 708         killme();
 709 }
 710 /**
 711  * @brief Searching for global contacts for autocompletion
 712  *
 713  * @param App $a
 714  * @return array with the search results
 715  */
 716 function navbar_complete(App $a) {
 717
 718 //      logger('navbar_complete');
 719
 720         if ((Config::get('system','block_public')) && (! local_user()) && (! remote_user())) {
 721                 return;
 722         }
 723
 724         // check if searching in the local global contact table is enabled
 725         $localsearch = Config::get('system','poco_local_search');
 726
 727         $search = $prefix.notags(trim($_REQUEST['search']));
 728         $mode = $_REQUEST['smode'];
 729
 730         // don't search if search term has less than 2 characters
 731         if (! $search || mb_strlen($search) < 2) {
 732                 return array();
 733         }
 734
 735         if (substr($search,0,1) === '@') {
 736                 $search = substr($search,1);
 737         }
 738
 739         if ($localsearch) {
 740                 $x = GContact::searchByName($search, $mode);
 741                 return $x;
 742         }
 743
 744         if (! $localsearch) {
 745                 $p = (($a->pager['page'] != 1) ? '&p=' . $a->pager['page'] : '');
 746
 747                 $x = z_fetch_url(get_server() . '/lsearch?f=' . $p .  '&search=' . urlencode($search));
 748                 if ($x['success']) {
 749                         $j = json_decode($x['body'],true);
 750                         if ($j && isset($j['results'])) {
 751                                 return $j['results'];
 752                         }
 753                 }
 754         }
 755
 756         /// @TODO Not needed here?
 757         return;
 758 }