include/acl_selectors.php

   1 <?php
   2
   3 /**
   4  * @file include/acl_selectors.php
   5  */
   6
   7 use Friendica\App;
   8
   9 require_once "include/contact_selectors.php";
  10 require_once "include/contact_widgets.php";
  11 require_once "include/DirSearch.php";
  12 require_once "include/features.php";
  13 require_once "mod/proxy.php";
  14
  15
  16 /**
  17  * @package acl_selectors
  18  */
  19 function group_select($selname,$selclass,$preselected = false,$size = 4) {
  20
  21         $a = get_app();
  22
  23         $o = '';
  24
  25         $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"$size\" >\r\n";
  26
  27         $r = q("SELECT `id`, `name` FROM `group` WHERE NOT `deleted` AND `uid` = %d ORDER BY `name` ASC",
  28                 intval(local_user())
  29         );
  30
  31
  32         $arr = array('group' => $r, 'entry' => $o);
  33
  34         // e.g. 'network_pre_group_deny', 'profile_pre_group_allow'
  35
  36         call_hooks($a->module . '_pre_' . $selname, $arr);
  37
  38         if (dbm::is_result($r)) {
  39                 foreach ($r as $rr) {
  40                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
  41                                 $selected = " selected=\"selected\" ";
  42                         } else {
  43                                 $selected = '';
  44                         }
  45
  46                         $trimmed = mb_substr($rr['name'],0,12);
  47
  48                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}\" >$trimmed</option>\r\n";
  49                 }
  50
  51         }
  52         $o .= "</select>\r\n";
  53
  54         call_hooks($a->module . '_post_' . $selname, $o);
  55
  56
  57         return $o;
  58 }
  59
  60 /// @TODO after an optional parameter, no mandadory parameter can follow
  61 /// @TODO find proper type-hints
  62 function contact_selector($selname, $selclass, $preselected = false, $options) {
  63
  64         $a = get_app();
  65
  66         $mutual = false;
  67         $networks = null;
  68         $single = false;
  69         $exclude = false;
  70         $size = 4;
  71
  72         if (is_array($options)) {
  73                 if (x($options, 'size'))
  74                         $size = $options['size'];
  75
  76                 if (x($options, 'mutual_friends')) {
  77                         $mutual = true;
  78                 }
  79                 if (x($options, 'single')) {
  80                         $single = true;
  81                 }
  82                 if (x($options, 'multiple')) {
  83                         $single = false;
  84                 }
  85                 if (x($options, 'exclude')) {
  86                         $exclude = $options['exclude'];
  87                 }
  88
  89                 if (x($options, 'networks')) {
  90                         switch ($options['networks']) {
  91                                 case 'DFRN_ONLY':
  92                                         $networks = array(NETWORK_DFRN);
  93                                         break;
  94                                 case 'PRIVATE':
  95                                         if (is_array($a->user) && $a->user['prvnets']) {
  96                                                 $networks = array(NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA);
  97                                         } else {
  98                                                 $networks = array(NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA);
  99                                         }
 100                                         break;
 101                                 case 'TWO_WAY':
 102                                         if (is_array($a->user) && $a->user['prvnets']) {
 103                                                 $networks = array(NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA);
 104                                         } else {
 105                                                 $networks = array(NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA, NETWORK_OSTATUS);
 106                                         }
 107                                         break;
 108                                 default: /// @TODO Maybe log this call?
 109                                         break;
 110                         }
 111                 }
 112         }
 113
 114         $x = array('options' => $options, 'size' => $size, 'single' => $single, 'mutual' => $mutual, 'exclude' => $exclude, 'networks' => $networks);
 115
 116         call_hooks('contact_select_options', $x);
 117
 118         $o = '';
 119
 120         $sql_extra = '';
 121
 122         if (x($x, 'mutual')) {
 123                 $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));
 124         }
 125
 126         if (x($x, 'exclude')) {
 127                 $sql_extra .= sprintf(" AND `id` != %d ", intval($x['exclude']));
 128         }
 129
 130         if (is_array($x['networks']) && count($x['networks'])) {
 131                 /// @TODO rewrite to foreach()
 132                 for ($y = 0; $y < count($x['networks']) ; $y ++) {
 133                         $x['networks'][$y] = "'" . dbesc($x['networks'][$y]) . "'";
 134                 }
 135                 $str_nets = implode(',', $x['networks']);
 136                 $sql_extra .= " AND `network` IN ( $str_nets ) ";
 137         }
 138
 139         $tabindex = (x($options, 'tabindex') ? "tabindex=\"" . $options["tabindex"] . "\"" : "");
 140
 141         if ($x['single']) {
 142                 $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"" . $x['size'] . "\" $tabindex >\r\n";
 143         } else {
 144                 $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"" . $x['size'] . "$\" $tabindex >\r\n";
 145         }
 146
 147         $r = q("SELECT `id`, `name`, `url`, `network` FROM `contact`
 148                 WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 149                 $sql_extra
 150                 ORDER BY `name` ASC ",
 151                 intval(local_user())
 152         );
 153
 154
 155         $arr = array('contact' => $r, 'entry' => $o);
 156
 157         // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
 158
 159         call_hooks($a->module . '_pre_' . $selname, $arr);
 160
 161         if (dbm::is_result($r)) {
 162                 foreach ($r as $rr) {
 163                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
 164                                 $selected = " selected=\"selected\" ";
 165                         } else {
 166                                 $selected = '';
 167                         }
 168
 169                         $trimmed = mb_substr($rr['name'],0,20);
 170
 171                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}|{$rr['url']}\" >$trimmed</option>\r\n";
 172                 }
 173
 174         }
 175
 176         $o .= "</select>\r\n";
 177
 178         call_hooks($a->module . '_post_' . $selname, $o);
 179
 180         return $o;
 181 }
 182
 183
 184
 185 function contact_select($selname, $selclass, $preselected = false, $size = 4, $privmail = false, $celeb = false, $privatenet = false, $tabindex = null) {
 186
 187         require_once "include/bbcode.php";
 188
 189         $a = get_app();
 190
 191         $o = '';
 192
 193         // When used for private messages, we limit correspondence to mutual DFRN/Friendica friends and the selector
 194         // to one recipient. By default our selector allows multiple selects amongst all contacts.
 195
 196         $sql_extra = '';
 197
 198         if ($privmail || $celeb) {
 199                 $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));
 200         }
 201
 202         if ($privmail) {
 203                 $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s') ",
 204                                         NETWORK_DFRN, NETWORK_DIASPORA);
 205         } elseif ($privatenet) {
 206                 $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s', '%s', '%s') ",
 207                                         NETWORK_DFRN, NETWORK_MAIL, NETWORK_FACEBOOK, NETWORK_DIASPORA);
 208         }
 209
 210         $tabindex = ($tabindex > 0 ? "tabindex=\"$tabindex\"" : "");
 211
 212         if ($privmail AND $preselected) {
 213                 $sql_extra .= " AND `id` IN (".implode(",", $preselected).")";
 214                 $hidepreselected = ' style="display: none;"';
 215         } else {
 216                 $hidepreselected = "";
 217         }
 218
 219         if ($privmail) {
 220                 $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"$size\" $tabindex $hidepreselected>\r\n";
 221         } else {
 222                 $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"$size\" $tabindex >\r\n";
 223         }
 224
 225         $r = q("SELECT `id`, `name`, `url`, `network` FROM `contact`
 226                 WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 227                 $sql_extra
 228                 ORDER BY `name` ASC ",
 229                 intval(local_user())
 230         );
 231
 232
 233         $arr = array('contact' => $r, 'entry' => $o);
 234
 235         // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
 236
 237         call_hooks($a->module . '_pre_' . $selname, $arr);
 238
 239         $receiverlist = array();
 240
 241         if (dbm::is_result($r)) {
 242                 foreach ($r as $rr) {
 243                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
 244                                 $selected = " selected=\"selected\" ";
 245                         } else {
 246                                 $selected = '';
 247                         }
 248
 249                         if ($privmail) {
 250                                 $trimmed = GetProfileUsername($rr['url'], $rr['name'], false);
 251                         } else {
 252                                 $trimmed = mb_substr($rr['name'],0,20);
 253                         }
 254
 255                         $receiverlist[] = $trimmed;
 256
 257                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}|{$rr['url']}\" >$trimmed</option>\r\n";
 258                 }
 259
 260         }
 261
 262         $o .= "</select>\r\n";
 263
 264         if ($privmail AND $preselected) {
 265                 $o .= implode(", ", $receiverlist);
 266         }
 267
 268         call_hooks($a->module . '_post_' . $selname, $o);
 269
 270         return $o;
 271 }
 272
 273
 274 function fixacl(&$item) {
 275         $item = intval(str_replace(array('<', '>'), array('', ''), $item));
 276 }
 277
 278 function prune_deadguys($arr) {
 279
 280         if (! $arr) {
 281                 return $arr;
 282         }
 283
 284         $str = dbesc(implode(',', $arr));
 285
 286         $r = q("SELECT `id` FROM `contact` WHERE `id` IN ( " . $str . ") AND `blocked` = 0 AND `pending` = 0 AND `archive` = 0 ");
 287
 288         if (dbm::is_result($r)) {
 289                 $ret = array();
 290                 foreach ($r as $rr) {
 291                         $ret[] = intval($rr['id']);
 292                 }
 293                 return $ret;
 294         }
 295
 296         return array();
 297 }
 298
 299
 300 function get_acl_permissions($user = null) {
 301         $allow_cid = $allow_gid = $deny_cid = $deny_gid = false;
 302
 303         if (is_array($user)) {
 304                 $allow_cid = ((strlen($user['allow_cid']))
 305                         ? explode('><', $user['allow_cid']) : array() );
 306                 $allow_gid = ((strlen($user['allow_gid']))
 307                         ? explode('><', $user['allow_gid']) : array() );
 308                 $deny_cid  = ((strlen($user['deny_cid']))
 309                         ? explode('><', $user['deny_cid']) : array() );
 310                 $deny_gid  = ((strlen($user['deny_gid']))
 311                         ? explode('><', $user['deny_gid']) : array() );
 312                 array_walk($allow_cid,'fixacl');
 313                 array_walk($allow_gid,'fixacl');
 314                 array_walk($deny_cid,'fixacl');
 315                 array_walk($deny_gid,'fixacl');
 316         }
 317
 318         $allow_cid = prune_deadguys($allow_cid);
 319
 320         return array(
 321                 'allow_cid' => $allow_cid,
 322                 'allow_gid' => $allow_gid,
 323                 'deny_cid' => $deny_cid,
 324                 'deny_gid' => $deny_gid,
 325         );
 326 }
 327
 328
 329 function populate_acl($user = null, $show_jotnets = false) {
 330
 331         $perms = get_acl_permissions($user);
 332
 333         $jotnets = '';
 334         if ($show_jotnets) {
 335                 $mail_disabled = ((function_exists('imap_open') && (! get_config('system','imap_disabled'))) ? 0 : 1);
 336
 337                 $mail_enabled = false;
 338                 $pubmail_enabled = false;
 339
 340                 if (! $mail_disabled) {
 341                         $r = q("SELECT `pubmail` FROM `mailacct` WHERE `uid` = %d AND `server` != '' LIMIT 1",
 342                                 intval(local_user())
 343                         );
 344                         if (dbm::is_result($r)) {
 345                                 $mail_enabled = true;
 346                                 if (intval($r[0]['pubmail'])) {
 347                                         $pubmail_enabled = true;
 348                                 }
 349                         }
 350                 }
 351
 352                 if (!$user['hidewall']) {
 353                         if ($mail_enabled) {
 354                                 $selected = (($pubmail_enabled) ? ' checked="checked" ' : '');
 355                                 $jotnets .= '<div class="profile-jot-net"><input type="checkbox" name="pubmail_enable"' . $selected . ' value="1" /> ' . t("Post to Email") . '</div>';
 356                         }
 357
 358                         call_hooks('jot_networks', $jotnets);
 359                 } else {
 360                         $jotnets .= sprintf(t('Connectors disabled, since "%s" is enabled.'),
 361                                             t('Hide your profile details from unknown viewers?'));
 362                 }
 363         }
 364
 365         $tpl = get_markup_template("acl_selector.tpl");
 366         $o = replace_macros($tpl, array(
 367                 '$showall'=> t("Visible to everybody"),
 368                 '$show' => t("show"),
 369                 '$hide'  => t("don't show"),
 370                 '$allowcid' => json_encode($perms['allow_cid']),
 371                 '$allowgid' => json_encode($perms['allow_gid']),
 372                 '$denycid' => json_encode($perms['deny_cid']),
 373                 '$denygid' => json_encode($perms['deny_gid']),
 374                 '$networks' => $show_jotnets,
 375                 '$emailcc' => t('CC: email addresses'),
 376                 '$emtitle' => t('Example: bob@example.com, mary@example.com'),
 377                 '$jotnets' => $jotnets,
 378                 '$aclModalTitle' => t('Permissions'),
 379                 '$aclModalDismiss' => t('Close'),
 380                 '$features' => array(
 381                 'aclautomention' => (feature_enabled($user['uid'], "aclautomention") ? "true" : "false")
 382                 ),
 383         ));
 384
 385
 386         return $o;
 387
 388 }
 389
 390 function construct_acl_data(App $a, $user) {
 391
 392         // Get group and contact information for html ACL selector
 393         $acl_data = acl_lookup($a, 'html');
 394
 395         $user_defaults = get_acl_permissions($user);
 396
 397         if ($acl_data['groups']) {
 398                 foreach ($acl_data['groups'] as $key => $group) {
 399                         // Add a "selected" flag to groups that are posted to by default
 400                         if ($user_defaults['allow_gid'] &&
 401                                         in_array($group['id'], $user_defaults['allow_gid']) && !in_array($group['id'], $user_defaults['deny_gid']) ) {
 402                                 $acl_data['groups'][$key]['selected'] = 1;
 403                         } else {
 404                                 $acl_data['groups'][$key]['selected'] = 0;
 405                         }
 406                 }
 407         }
 408         if ($acl_data['contacts']) {
 409                 foreach ($acl_data['contacts'] as $key => $contact) {
 410                         // Add a "selected" flag to groups that are posted to by default
 411                         if ($user_defaults['allow_cid'] &&
 412                                         in_array($contact['id'], $user_defaults['allow_cid']) && !in_array($contact['id'], $user_defaults['deny_cid']) ) {
 413                                 $acl_data['contacts'][$key]['selected'] = 1;
 414                         } else {
 415                                 $acl_data['contacts'][$key]['selected'] = 0;
 416                         }
 417                 }
 418         }
 419
 420         return $acl_data;
 421
 422 }
 423
 424 function acl_lookup(App $a, $out_type = 'json') {
 425
 426         if (!local_user()) {
 427                 return '';
 428         }
 429
 430         $start  =       (x($_REQUEST,'start')           ? $_REQUEST['start']            : 0);
 431         $count  =       (x($_REQUEST,'count')           ? $_REQUEST['count']            : 100);
 432         $search  =      (x($_REQUEST,'search')          ? $_REQUEST['search']           : "");
 433         $type   =       (x($_REQUEST,'type')            ? $_REQUEST['type']             : "");
 434         $mode   =       (x($_REQUEST,'smode')           ? $_REQUEST['smode']            : "");
 435         $conv_id =      (x($_REQUEST,'conversation')    ? $_REQUEST['conversation']     : null);
 436
 437         // For use with jquery.textcomplete for private mail completion
 438
 439         if (x($_REQUEST, 'query') && strlen($_REQUEST['query'])) {
 440                 if (! $type) {
 441                         $type = 'm';
 442                 }
 443                 $search = $_REQUEST['query'];
 444         }
 445
 446         logger("Searching for ".$search." - type ".$type, LOGGER_DEBUG);
 447
 448         if ($search != "") {
 449                 $sql_extra = "AND `name` LIKE '%%".dbesc($search)."%%'";
 450                 $sql_extra2 = "AND (`attag` LIKE '%%".dbesc($search)."%%' OR `name` LIKE '%%".dbesc($search)."%%' OR `nick` LIKE '%%".dbesc($search)."%%')";
 451         } else {
 452                 /// @TODO Avoid these needless else blocks by putting variable-initialization atop of if()
 453                 $sql_extra = $sql_extra2 = "";
 454         }
 455
 456         // count groups and contacts
 457         if ($type == '' || $type == 'g') {
 458                 $r = q("SELECT COUNT(*) AS g FROM `group` WHERE `deleted` = 0 AND `uid` = %d $sql_extra",
 459                         intval(local_user())
 460                 );
 461                 $group_count = (int)$r[0]['g'];
 462         } else {
 463                 $group_count = 0;
 464         }
 465
 466         $sql_extra2 .= " ".unavailable_networks();
 467
 468         if ($type == '' || $type == 'c') {
 469                 // autocomplete for editor mentions
 470                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 471                                 WHERE `uid` = %d AND NOT `self`
 472                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 473                                 AND `notify` != '' $sql_extra2" ,
 474                         intval(local_user())
 475                 );
 476                 $contact_count = (int)$r[0]['c'];
 477         }
 478         elseif ($type == 'm') {
 479
 480                 // autocomplete for Private Messages
 481
 482                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 483                                 WHERE `uid` = %d AND NOT `self`
 484                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 485                                 AND `network` IN ('%s','%s','%s') $sql_extra2" ,
 486                         intval(local_user()),
 487                         dbesc(NETWORK_DFRN),
 488                         dbesc(NETWORK_ZOT),
 489                         dbesc(NETWORK_DIASPORA)
 490                 );
 491                 $contact_count = (int)$r[0]['c'];
 492
 493         }
 494         elseif ($type == 'a') {
 495
 496                 // autocomplete for Contacts
 497
 498                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 499                                 WHERE `uid` = %d AND NOT `self`
 500                                 AND NOT `pending` $sql_extra2" ,
 501                         intval(local_user())
 502                 );
 503                 $contact_count = (int)$r[0]['c'];
 504
 505         } else {
 506                 $contact_count = 0;
 507         }
 508
 509
 510         $tot = $group_count+$contact_count;
 511
 512         $groups = array();
 513         $contacts = array();
 514
 515         if ($type == '' || $type == 'g') {
 516
 517                 /// @todo We should cache this query.
 518                 // This can be done when we can delete cache entries via wildcard
 519                 $r = q("SELECT `group`.`id`, `group`.`name`, GROUP_CONCAT(DISTINCT `group_member`.`contact-id` SEPARATOR ',') AS uids
 520                                 FROM `group`
 521                                 INNER JOIN `group_member` ON `group_member`.`gid`=`group`.`id` AND `group_member`.`uid` = `group`.`uid`
 522                                 WHERE NOT `group`.`deleted` AND `group`.`uid` = %d
 523                                         $sql_extra
 524                                 GROUP BY `group`.`name`, `group`.`id`
 525                                 ORDER BY `group`.`name`
 526                                 LIMIT %d,%d",
 527                         intval(local_user()),
 528                         intval($start),
 529                         intval($count)
 530                 );
 531
 532                 foreach ($r as $g) {
 533 //              logger('acl: group: ' . $g['name'] . ' members: ' . $g['uids']);
 534                         $groups[] = array(
 535                                 "type"  => "g",
 536                                 "photo" => "images/twopeople.png",
 537                                 "name"  => htmlentities($g['name']),
 538                                 "id"    => intval($g['id']),
 539                                 "uids"  => array_map("intval", explode(",",$g['uids'])),
 540                                 "link"  => '',
 541                                 "forum" => '0'
 542                         );
 543                 }
 544         }
 545
 546         if ($type == '') {
 547
 548                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 549                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 550                         AND NOT (`network` IN ('%s', '%s'))
 551                         $sql_extra2
 552                         ORDER BY `name` ASC ",
 553                         intval(local_user()),
 554                         dbesc(NETWORK_OSTATUS), dbesc(NETWORK_STATUSNET)
 555                 );
 556         } elseif ($type == 'c') {
 557                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 558                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 559                         AND NOT (`network` IN ('%s'))
 560                         $sql_extra2
 561                         ORDER BY `name` ASC ",
 562                         intval(local_user()),
 563                         dbesc(NETWORK_STATUSNET)
 564                 );
 565         }
 566         elseif ($type == 'm') {
 567                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr` FROM `contact`
 568                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 569                         AND `network` IN ('%s','%s','%s')
 570                         $sql_extra2
 571                         ORDER BY `name` ASC ",
 572                         intval(local_user()),
 573                         dbesc(NETWORK_DFRN),
 574                         dbesc(NETWORK_ZOT),
 575                         dbesc(NETWORK_DIASPORA)
 576                 );
 577         } elseif ($type == 'a') {
 578                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 579                         WHERE `uid` = %d AND `pending` = 0
 580                         $sql_extra2
 581                         ORDER BY `name` ASC ",
 582                         intval(local_user())
 583                 );
 584         } elseif ($type == 'x') {
 585                 // autocomplete for global contact search (e.g. navbar search)
 586                 $r = navbar_complete($a);
 587                 $contacts = array();
 588                 if ($r) {
 589                         foreach ($r as $g) {
 590                                 $contacts[] = array(
 591                                         'photo'   => proxy_url($g['photo'], false, PROXY_SIZE_MICRO),
 592                                         'name'    => $g['name'],
 593                                         'nick'    => (x($g['addr']) ? $g['addr'] : $g['url']),
 594                                         'network' => $g['network'],
 595                                         'link'    => $g['url'],
 596                                         'forum'   => (x($g['community']) ? 1 : 0),
 597                                 );
 598                         }
 599                 }
 600                 $o = array(
 601                         'start' => $start,
 602                         'count' => $count,
 603                         'items' => $contacts,
 604                 );
 605                 echo json_encode($o);
 606                 killme();
 607         } else {
 608                 $r = array();
 609         }
 610
 611
 612         if (dbm::is_result($r)) {
 613                 foreach ($r as $g) {
 614                         $contacts[] = array(
 615                                 'type'    => 'c',
 616                                 'photo'   => proxy_url($g['micro'], false, PROXY_SIZE_MICRO),
 617                                 'name'    => htmlentities($g['name']),
 618                                 'id'      => intval($g['id']),
 619                                 'network' => $g['network'],
 620                                 'link'    => $g['url'],
 621                                 'nick'    => htmlentities(($g['attag']) ? $g['attag'] : $g['nick']),
 622                                 'addr'    => htmlentities(($g['addr']) ? $g['addr'] : $g['url']),
 623                                 'forum'   => ((x($g, 'forum') || x($g, 'prv')) ? 1 : 0),
 624                         );
 625                 }
 626         }
 627
 628         $items = array_merge($groups, $contacts);
 629
 630         if ($conv_id) {
 631                 /*
 632                  * if $conv_id is set, get unknown contacts in thread
 633                  * but first get known contacts url to filter them out
 634                  */
 635                 $known_contacts = array_map(
 636                         function ($i) {
 637                                 return dbesc($i['link']);
 638                         }
 639                 , $contacts);
 640
 641                 $unknown_contacts = array();
 642                 $r = q("SELECT `author-link`
 643                                 FROM `item` WHERE `parent` = %d
 644                                         AND (`author-name` LIKE '%%%s%%' OR `author-link` LIKE '%%%s%%')
 645                                         AND `author-link` NOT IN ('%s')
 646                                 GROUP BY `author-link`, `author-avatar`, `author-name`
 647                                 ORDER BY `author-name` ASC
 648                                 ",
 649                                 intval($conv_id),
 650                                 dbesc($search),
 651                                 dbesc($search),
 652                                 implode("', '", $known_contacts)
 653                 );
 654                 if (dbm::is_result($r)) {
 655                         foreach ($r as $row) {
 656                                 $contact = get_contact_details_by_url($row['author-link']);
 657
 658                                 if (count($contact) > 0) {
 659                                         $unknown_contacts[] = array(
 660                                                 'type'    => 'c',
 661                                                 'photo'   => proxy_url($contact['micro'], false, PROXY_SIZE_MICRO),
 662                                                 'name'    => htmlentities($contact['name']),
 663                                                 'id'      => intval($contact['cid']),
 664                                                 'network' => $contact['network'],
 665                                                 'link'    => $contact['url'],
 666                                                 'nick'    => htmlentities($contact['nick'] ? : $contact['addr']),
 667                                                 'addr'    => htmlentities(($contact['addr']) ? $contact['addr'] : $contact['url']),
 668                                                 'forum'   => $contact['forum']
 669                                         );
 670                                 }
 671                         }
 672                 }
 673
 674                 $items = array_merge($items, $unknown_contacts);
 675                 $tot += count($unknown_contacts);
 676         }
 677
 678         $results = array(
 679                 'tot'      => $tot,
 680                 'start'    => $start,
 681                 'count'    => $count,
 682                 'groups'   => $groups,
 683                 'contacts' => $contacts,
 684                 'items'    => $items,
 685                 'type'     => $type,
 686                 'search'   => $search,
 687         );
 688
 689         call_hooks('acl_lookup_end', $results);
 690
 691         if ($out_type === 'html') {
 692                 $o = array(
 693                         'tot'      => $results['tot'],
 694                         'start'    => $results['start'],
 695                         'count'    => $results['count'],
 696                         'groups'   => $results['groups'],
 697                         'contacts' => $results['contacts'],
 698                 );
 699                 return $o;
 700         }
 701
 702         $o = array(
 703                 'tot'   => $results['tot'],
 704                 'start' => $results['start'],
 705                 'count' => $results['count'],
 706                 'items' => $results['items'],
 707         );
 708
 709         echo json_encode($o);
 710
 711         killme();
 712 }
 713 /**
 714  * @brief Searching for global contacts for autocompletion
 715  *
 716  * @param App $a
 717  * @return array with the search results
 718  */
 719 function navbar_complete(App $a) {
 720
 721 //      logger('navbar_complete');
 722
 723         if ((get_config('system','block_public')) && (! local_user()) && (! remote_user())) {
 724                 return;
 725         }
 726
 727         // check if searching in the local global contact table is enabled
 728         $localsearch = get_config('system','poco_local_search');
 729
 730         $search = $prefix.notags(trim($_REQUEST['search']));
 731         $mode = $_REQUEST['smode'];
 732
 733         // don't search if search term has less than 2 characters
 734         if (! $search || mb_strlen($search) < 2) {
 735                 return array();
 736         }
 737
 738         if (substr($search,0,1) === '@') {
 739                 $search = substr($search,1);
 740         }
 741
 742         if ($localsearch) {
 743                 $x = DirSearch::global_search_by_name($search, $mode);
 744                 return $x;
 745         }
 746
 747         if (! $localsearch) {
 748                 $p = (($a->pager['page'] != 1) ? '&p=' . $a->pager['page'] : '');
 749
 750                 $x = z_fetch_url(get_server().'/lsearch?f=' . $p .  '&search=' . urlencode($search));
 751                 if ($x['success']) {
 752                         $t = 0;
 753                         $j = json_decode($x['body'],true);
 754                         if ($j && $j['results']) {
 755                                 return $j['results'];
 756                         }
 757                 }
 758         }
 759
 760         /// @TODO Not needed here?
 761         return;
 762 }