include/acl_selectors.php

   1 <?php
   2
   3 /**
   4  * @file include/acl_selectors.php
   5  */
   6
   7 require_once "include/contact_selectors.php";
   8 require_once "include/contact_widgets.php";
   9 require_once "include/DirSearch.php";
  10 require_once "include/features.php";
  11 require_once "mod/proxy.php";
  12
  13
  14 /**
  15  * @package acl_selectors
  16  */
  17 function group_select($selname,$selclass,$preselected = false,$size = 4) {
  18
  19         $a = get_app();
  20
  21         $o = '';
  22
  23         $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"$size\" >\r\n";
  24
  25         $r = q("SELECT `id`, `name` FROM `group` WHERE NOT `deleted` AND `uid` = %d ORDER BY `name` ASC",
  26                 intval(local_user())
  27         );
  28
  29
  30         $arr = array('group' => $r, 'entry' => $o);
  31
  32         // e.g. 'network_pre_group_deny', 'profile_pre_group_allow'
  33
  34         call_hooks($a->module . '_pre_' . $selname, $arr);
  35
  36         if (dbm::is_result($r)) {
  37                 foreach ($r as $rr) {
  38                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
  39                                 $selected = " selected=\"selected\" ";
  40                         } else {
  41                                 $selected = '';
  42                         }
  43
  44                         $trimmed = mb_substr($rr['name'],0,12);
  45
  46                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}\" >$trimmed</option>\r\n";
  47                 }
  48
  49         }
  50         $o .= "</select>\r\n";
  51
  52         call_hooks($a->module . '_post_' . $selname, $o);
  53
  54
  55         return $o;
  56 }
  57
  58 /// @TODO after an optional parameter, no mandadory parameter can follow
  59 /// @TODO find proper type-hints
  60 function contact_selector($selname, $selclass, $preselected = false, $options) {
  61
  62         $a = get_app();
  63
  64         $mutual = false;
  65         $networks = null;
  66         $single = false;
  67         $exclude = false;
  68         $size = 4;
  69
  70         if (is_array($options)) {
  71                 if (x($options, 'size'))
  72                         $size = $options['size'];
  73
  74                 if (x($options, 'mutual_friends')) {
  75                         $mutual = true;
  76                 }
  77                 if (x($options, 'single')) {
  78                         $single = true;
  79                 }
  80                 if (x($options, 'multiple')) {
  81                         $single = false;
  82                 }
  83                 if (x($options, 'exclude')) {
  84                         $exclude = $options['exclude'];
  85                 }
  86
  87                 if (x($options, 'networks')) {
  88                         switch ($options['networks']) {
  89                                 case 'DFRN_ONLY':
  90                                         $networks = array(NETWORK_DFRN);
  91                                         break;
  92                                 case 'PRIVATE':
  93                                         if (is_array($a->user) && $a->user['prvnets']) {
  94                                                 $networks = array(NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA);
  95                                         } else {
  96                                                 $networks = array(NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA);
  97                                         }
  98                                         break;
  99                                 case 'TWO_WAY':
 100                                         if (is_array($a->user) && $a->user['prvnets']) {
 101                                                 $networks = array(NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA);
 102                                         } else {
 103                                                 $networks = array(NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA, NETWORK_OSTATUS);
 104                                         }
 105                                         break;
 106                                 default: /// @TODO Maybe log this call?
 107                                         break;
 108                         }
 109                 }
 110         }
 111
 112         $x = array('options' => $options, 'size' => $size, 'single' => $single, 'mutual' => $mutual, 'exclude' => $exclude, 'networks' => $networks);
 113
 114         call_hooks('contact_select_options', $x);
 115
 116         $o = '';
 117
 118         $sql_extra = '';
 119
 120         if (x($x, 'mutual')) {
 121                 $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));
 122         }
 123
 124         if (x($x, 'exclude')) {
 125                 $sql_extra .= sprintf(" AND `id` != %d ", intval($x['exclude']));
 126         }
 127
 128         if (is_array($x['networks']) && count($x['networks'])) {
 129                 /// @TODO rewrite to foreach()
 130                 for ($y = 0; $y < count($x['networks']) ; $y ++) {
 131                         $x['networks'][$y] = "'" . dbesc($x['networks'][$y]) . "'";
 132                 }
 133                 $str_nets = implode(',', $x['networks']);
 134                 $sql_extra .= " AND `network` IN ( $str_nets ) ";
 135         }
 136
 137         $tabindex = (x($options, 'tabindex') ? "tabindex=\"" . $options["tabindex"] . "\"" : "");
 138
 139         if ($x['single']) {
 140                 $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"" . $x['size'] . "\" $tabindex >\r\n";
 141         } else {
 142                 $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"" . $x['size'] . "$\" $tabindex >\r\n";
 143         }
 144
 145         $r = q("SELECT `id`, `name`, `url`, `network` FROM `contact`
 146                 WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 147                 $sql_extra
 148                 ORDER BY `name` ASC ",
 149                 intval(local_user())
 150         );
 151
 152
 153         $arr = array('contact' => $r, 'entry' => $o);
 154
 155         // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
 156
 157         call_hooks($a->module . '_pre_' . $selname, $arr);
 158
 159         if (dbm::is_result($r)) {
 160                 foreach ($r as $rr) {
 161                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
 162                                 $selected = " selected=\"selected\" ";
 163                         } else {
 164                                 $selected = '';
 165                         }
 166
 167                         $trimmed = mb_substr($rr['name'],0,20);
 168
 169                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}|{$rr['url']}\" >$trimmed</option>\r\n";
 170                 }
 171
 172         }
 173
 174         $o .= "</select>\r\n";
 175
 176         call_hooks($a->module . '_post_' . $selname, $o);
 177
 178         return $o;
 179 }
 180
 181
 182
 183 function contact_select($selname, $selclass, $preselected = false, $size = 4, $privmail = false, $celeb = false, $privatenet = false, $tabindex = null) {
 184
 185         require_once "include/bbcode.php";
 186
 187         $a = get_app();
 188
 189         $o = '';
 190
 191         // When used for private messages, we limit correspondence to mutual DFRN/Friendica friends and the selector
 192         // to one recipient. By default our selector allows multiple selects amongst all contacts.
 193
 194         $sql_extra = '';
 195
 196         if ($privmail || $celeb) {
 197                 $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));
 198         }
 199
 200         if ($privmail) {
 201                 $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s') ",
 202                                         NETWORK_DFRN, NETWORK_DIASPORA);
 203         } elseif ($privatenet) {
 204                 $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s', '%s', '%s') ",
 205                                         NETWORK_DFRN, NETWORK_MAIL, NETWORK_FACEBOOK, NETWORK_DIASPORA);
 206         }
 207
 208         $tabindex = ($tabindex > 0 ? "tabindex=\"$tabindex\"" : "");
 209
 210         if ($privmail AND $preselected) {
 211                 $sql_extra .= " AND `id` IN (".implode(",", $preselected).")";
 212                 $hidepreselected = ' style="display: none;"';
 213         } else {
 214                 $hidepreselected = "";
 215         }
 216
 217         if ($privmail) {
 218                 $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"$size\" $tabindex $hidepreselected>\r\n";
 219         } else {
 220                 $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"$size\" $tabindex >\r\n";
 221         }
 222
 223         $r = q("SELECT `id`, `name`, `url`, `network` FROM `contact`
 224                 WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 225                 $sql_extra
 226                 ORDER BY `name` ASC ",
 227                 intval(local_user())
 228         );
 229
 230
 231         $arr = array('contact' => $r, 'entry' => $o);
 232
 233         // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
 234
 235         call_hooks($a->module . '_pre_' . $selname, $arr);
 236
 237         $receiverlist = array();
 238
 239         if (dbm::is_result($r)) {
 240                 foreach ($r as $rr) {
 241                         if ((is_array($preselected)) && in_array($rr['id'], $preselected)) {
 242                                 $selected = " selected=\"selected\" ";
 243                         } else {
 244                                 $selected = '';
 245                         }
 246
 247                         if ($privmail) {
 248                                 $trimmed = GetProfileUsername($rr['url'], $rr['name'], false);
 249                         } else {
 250                                 $trimmed = mb_substr($rr['name'],0,20);
 251                         }
 252
 253                         $receiverlist[] = $trimmed;
 254
 255                         $o .= "<option value=\"{$rr['id']}\" $selected title=\"{$rr['name']}|{$rr['url']}\" >$trimmed</option>\r\n";
 256                 }
 257
 258         }
 259
 260         $o .= "</select>\r\n";
 261
 262         if ($privmail AND $preselected) {
 263                 $o .= implode(", ", $receiverlist);
 264         }
 265
 266         call_hooks($a->module . '_post_' . $selname, $o);
 267
 268         return $o;
 269 }
 270
 271
 272 function fixacl(&$item) {
 273         $item = intval(str_replace(array('<', '>'), array('', ''), $item));
 274 }
 275
 276 function prune_deadguys($arr) {
 277
 278         if (! $arr) {
 279                 return $arr;
 280         }
 281
 282         $str = dbesc(implode(',', $arr));
 283
 284         $r = q("SELECT `id` FROM `contact` WHERE `id` IN ( " . $str . ") AND `blocked` = 0 AND `pending` = 0 AND `archive` = 0 ");
 285
 286         if (dbm::is_result($r)) {
 287                 $ret = array();
 288                 foreach ($r as $rr) {
 289                         $ret[] = intval($rr['id']);
 290                 }
 291                 return $ret;
 292         }
 293
 294         return array();
 295 }
 296
 297
 298 function get_acl_permissions($user = null) {
 299         $allow_cid = $allow_gid = $deny_cid = $deny_gid = false;
 300
 301         if (is_array($user)) {
 302                 $allow_cid = ((strlen($user['allow_cid']))
 303                         ? explode('><', $user['allow_cid']) : array() );
 304                 $allow_gid = ((strlen($user['allow_gid']))
 305                         ? explode('><', $user['allow_gid']) : array() );
 306                 $deny_cid  = ((strlen($user['deny_cid']))
 307                         ? explode('><', $user['deny_cid']) : array() );
 308                 $deny_gid  = ((strlen($user['deny_gid']))
 309                         ? explode('><', $user['deny_gid']) : array() );
 310                 array_walk($allow_cid,'fixacl');
 311                 array_walk($allow_gid,'fixacl');
 312                 array_walk($deny_cid,'fixacl');
 313                 array_walk($deny_gid,'fixacl');
 314         }
 315
 316         $allow_cid = prune_deadguys($allow_cid);
 317
 318         return array(
 319                 'allow_cid' => $allow_cid,
 320                 'allow_gid' => $allow_gid,
 321                 'deny_cid' => $deny_cid,
 322                 'deny_gid' => $deny_gid,
 323         );
 324 }
 325
 326
 327 function populate_acl($user = null, $show_jotnets = false) {
 328
 329         $perms = get_acl_permissions($user);
 330
 331         $jotnets = '';
 332         if ($show_jotnets) {
 333                 $mail_disabled = ((function_exists('imap_open') && (! get_config('system','imap_disabled'))) ? 0 : 1);
 334
 335                 $mail_enabled = false;
 336                 $pubmail_enabled = false;
 337
 338                 if (! $mail_disabled) {
 339                         $r = q("SELECT `pubmail` FROM `mailacct` WHERE `uid` = %d AND `server` != '' LIMIT 1",
 340                                 intval(local_user())
 341                         );
 342                         if (dbm::is_result($r)) {
 343                                 $mail_enabled = true;
 344                                 if (intval($r[0]['pubmail'])) {
 345                                         $pubmail_enabled = true;
 346                                 }
 347                         }
 348                 }
 349
 350                 if (!$user['hidewall']) {
 351                         if ($mail_enabled) {
 352                                 $selected = (($pubmail_enabled) ? ' checked="checked" ' : '');
 353                                 $jotnets .= '<div class="profile-jot-net"><input type="checkbox" name="pubmail_enable"' . $selected . ' value="1" /> ' . t("Post to Email") . '</div>';
 354                         }
 355
 356                         call_hooks('jot_networks', $jotnets);
 357                 } else {
 358                         $jotnets .= sprintf(t('Connectors disabled, since "%s" is enabled.'),
 359                                             t('Hide your profile details from unknown viewers?'));
 360                 }
 361         }
 362
 363         $tpl = get_markup_template("acl_selector.tpl");
 364         $o = replace_macros($tpl, array(
 365                 '$showall'=> t("Visible to everybody"),
 366                 '$show' => t("show"),
 367                 '$hide'  => t("don't show"),
 368                 '$allowcid' => json_encode($perms['allow_cid']),
 369                 '$allowgid' => json_encode($perms['allow_gid']),
 370                 '$denycid' => json_encode($perms['deny_cid']),
 371                 '$denygid' => json_encode($perms['deny_gid']),
 372                 '$networks' => $show_jotnets,
 373                 '$emailcc' => t('CC: email addresses'),
 374                 '$emtitle' => t('Example: bob@example.com, mary@example.com'),
 375                 '$jotnets' => $jotnets,
 376                 '$aclModalTitle' => t('Permissions'),
 377                 '$aclModalDismiss' => t('Close'),
 378                 '$features' => array(
 379                 'aclautomention' => (feature_enabled($user['uid'], "aclautomention") ? "true" : "false")
 380                 ),
 381         ));
 382
 383
 384         return $o;
 385
 386 }
 387
 388 function construct_acl_data(App $a, $user) {
 389
 390         // Get group and contact information for html ACL selector
 391         $acl_data = acl_lookup($a, 'html');
 392
 393         $user_defaults = get_acl_permissions($user);
 394
 395         if ($acl_data['groups']) {
 396                 foreach ($acl_data['groups'] as $key => $group) {
 397                         // Add a "selected" flag to groups that are posted to by default
 398                         if ($user_defaults['allow_gid'] &&
 399                                         in_array($group['id'], $user_defaults['allow_gid']) && !in_array($group['id'], $user_defaults['deny_gid']) ) {
 400                                 $acl_data['groups'][$key]['selected'] = 1;
 401                         } else {
 402                                 $acl_data['groups'][$key]['selected'] = 0;
 403                         }
 404                 }
 405         }
 406         if ($acl_data['contacts']) {
 407                 foreach ($acl_data['contacts'] as $key => $contact) {
 408                         // Add a "selected" flag to groups that are posted to by default
 409                         if ($user_defaults['allow_cid'] &&
 410                                         in_array($contact['id'], $user_defaults['allow_cid']) && !in_array($contact['id'], $user_defaults['deny_cid']) ) {
 411                                 $acl_data['contacts'][$key]['selected'] = 1;
 412                         } else {
 413                                 $acl_data['contacts'][$key]['selected'] = 0;
 414                         }
 415                 }
 416         }
 417
 418         return $acl_data;
 419
 420 }
 421
 422 function acl_lookup(App $a, $out_type = 'json') {
 423
 424         if (!local_user()) {
 425                 return '';
 426         }
 427
 428         $start  =       (x($_REQUEST,'start')           ? $_REQUEST['start']            : 0);
 429         $count  =       (x($_REQUEST,'count')           ? $_REQUEST['count']            : 100);
 430         $search  =      (x($_REQUEST,'search')          ? $_REQUEST['search']           : "");
 431         $type   =       (x($_REQUEST,'type')            ? $_REQUEST['type']             : "");
 432         $mode   =       (x($_REQUEST,'smode')           ? $_REQUEST['smode']            : "");
 433         $conv_id =      (x($_REQUEST,'conversation')    ? $_REQUEST['conversation']     : null);
 434
 435         // For use with jquery.textcomplete for private mail completion
 436
 437         if (x($_REQUEST, 'query') && strlen($_REQUEST['query'])) {
 438                 if (! $type) {
 439                         $type = 'm';
 440                 }
 441                 $search = $_REQUEST['query'];
 442         }
 443
 444         logger("Searching for ".$search." - type ".$type, LOGGER_DEBUG);
 445
 446         if ($search != "") {
 447                 $sql_extra = "AND `name` LIKE '%%".dbesc($search)."%%'";
 448                 $sql_extra2 = "AND (`attag` LIKE '%%".dbesc($search)."%%' OR `name` LIKE '%%".dbesc($search)."%%' OR `nick` LIKE '%%".dbesc($search)."%%')";
 449         } else {
 450                 /// @TODO Avoid these needless else blocks by putting variable-initialization atop of if()
 451                 $sql_extra = $sql_extra2 = "";
 452         }
 453
 454         // count groups and contacts
 455         if ($type == '' || $type == 'g') {
 456                 $r = q("SELECT COUNT(*) AS g FROM `group` WHERE `deleted` = 0 AND `uid` = %d $sql_extra",
 457                         intval(local_user())
 458                 );
 459                 $group_count = (int)$r[0]['g'];
 460         } else {
 461                 $group_count = 0;
 462         }
 463
 464         $sql_extra2 .= " ".unavailable_networks();
 465
 466         if ($type == '' || $type == 'c') {
 467                 // autocomplete for editor mentions
 468                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 469                                 WHERE `uid` = %d AND NOT `self`
 470                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 471                                 AND `notify` != '' $sql_extra2" ,
 472                         intval(local_user())
 473                 );
 474                 $contact_count = (int)$r[0]['c'];
 475         }
 476         elseif ($type == 'm') {
 477
 478                 // autocomplete for Private Messages
 479
 480                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 481                                 WHERE `uid` = %d AND NOT `self`
 482                                 AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 483                                 AND `network` IN ('%s','%s','%s') $sql_extra2" ,
 484                         intval(local_user()),
 485                         dbesc(NETWORK_DFRN),
 486                         dbesc(NETWORK_ZOT),
 487                         dbesc(NETWORK_DIASPORA)
 488                 );
 489                 $contact_count = (int)$r[0]['c'];
 490
 491         }
 492         elseif ($type == 'a') {
 493
 494                 // autocomplete for Contacts
 495
 496                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 497                                 WHERE `uid` = %d AND NOT `self`
 498                                 AND NOT `pending` $sql_extra2" ,
 499                         intval(local_user())
 500                 );
 501                 $contact_count = (int)$r[0]['c'];
 502
 503         } else {
 504                 $contact_count = 0;
 505         }
 506
 507
 508         $tot = $group_count+$contact_count;
 509
 510         $groups = array();
 511         $contacts = array();
 512
 513         if ($type == '' || $type == 'g') {
 514
 515                 /// @todo We should cache this query.
 516                 // This can be done when we can delete cache entries via wildcard
 517                 $r = q("SELECT `group`.`id`, `group`.`name`, GROUP_CONCAT(DISTINCT `group_member`.`contact-id` SEPARATOR ',') AS uids
 518                                 FROM `group`
 519                                 INNER JOIN `group_member` ON `group_member`.`gid`=`group`.`id` AND `group_member`.`uid` = `group`.`uid`
 520                                 WHERE NOT `group`.`deleted` AND `group`.`uid` = %d
 521                                         $sql_extra
 522                                 GROUP BY `group`.`name`
 523                                 ORDER BY `group`.`name`
 524                                 LIMIT %d,%d",
 525                         intval(local_user()),
 526                         intval($start),
 527                         intval($count)
 528                 );
 529
 530                 foreach ($r as $g) {
 531 //              logger('acl: group: ' . $g['name'] . ' members: ' . $g['uids']);
 532                         $groups[] = array(
 533                                 "type"  => "g",
 534                                 "photo" => "images/twopeople.png",
 535                                 "name"  => htmlentities($g['name']),
 536                                 "id"    => intval($g['id']),
 537                                 "uids"  => array_map("intval", explode(",",$g['uids'])),
 538                                 "link"  => '',
 539                                 "forum" => '0'
 540                         );
 541                 }
 542         }
 543
 544         if ($type == '') {
 545
 546                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `forum`, `prv` FROM `contact`
 547                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 548                         AND NOT (`network` IN ('%s', '%s'))
 549                         $sql_extra2
 550                         ORDER BY `name` ASC ",
 551                         intval(local_user()),
 552                         dbesc(NETWORK_OSTATUS), dbesc(NETWORK_STATUSNET)
 553                 );
 554         } elseif ($type == 'c') {
 555                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `forum`, `prv` FROM `contact`
 556                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 557                         AND NOT (`network` IN ('%s'))
 558                         $sql_extra2
 559                         ORDER BY `name` ASC ",
 560                         intval(local_user()),
 561                         dbesc(NETWORK_STATUSNET)
 562                 );
 563         }
 564         elseif ($type == 'm') {
 565                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag` FROM `contact`
 566                         WHERE `uid` = %d AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 567                         AND `network` IN ('%s','%s','%s')
 568                         $sql_extra2
 569                         ORDER BY `name` ASC ",
 570                         intval(local_user()),
 571                         dbesc(NETWORK_DFRN),
 572                         dbesc(NETWORK_ZOT),
 573                         dbesc(NETWORK_DIASPORA)
 574                 );
 575         } elseif ($type == 'a') {
 576                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `forum`, `prv` FROM `contact`
 577                         WHERE `uid` = %d AND `pending` = 0
 578                         $sql_extra2
 579                         ORDER BY `name` ASC ",
 580                         intval(local_user())
 581                 );
 582         } elseif ($type == 'x') {
 583                 // autocomplete for global contact search (e.g. navbar search)
 584                 $r = navbar_complete($a);
 585                 $contacts = array();
 586                 if ($r) {
 587                         foreach ($r as $g) {
 588                                 $contacts[] = array(
 589                                         'photo'   => proxy_url($g['photo'], false, PROXY_SIZE_MICRO),
 590                                         'name'    => $g['name'],
 591                                         'nick'    => (x($g['addr']) ? $g['addr'] : $g['url']),
 592                                         'network' => $g['network'],
 593                                         'link'    => $g['url'],
 594                                         'forum'   => (x($g['community']) ? 1 : 0),
 595                                 );
 596                         }
 597                 }
 598                 $o = array(
 599                         'start' => $start,
 600                         'count' => $count,
 601                         'items' => $contacts,
 602                 );
 603                 echo json_encode($o);
 604                 killme();
 605         } else {
 606                 $r = array();
 607         }
 608
 609
 610         if (dbm::is_result($r)) {
 611                 foreach ($r as $g) {
 612                         $contacts[] = array(
 613                                 'type'    => 'c',
 614                                 'photo'   => proxy_url($g['micro'], false, PROXY_SIZE_MICRO),
 615                                 'name'    => htmlentities($g['name']),
 616                                 'id'      => intval($g['id']),
 617                                 'network' => $g['network'],
 618                                 'link'    => $g['url'],
 619                                 'nick'    => htmlentities(($g['attag']) ? $g['attag'] : $g['nick']),
 620                                 'forum'   => ((x($g, 'forum') || x($g, 'prv')) ? 1 : 0),
 621                         );
 622                 }
 623         }
 624
 625         $items = array_merge($groups, $contacts);
 626
 627         if ($conv_id) {
 628                 /* if $conv_id is set, get unknow contacts in thread */
 629                 /* but first get know contacts url to filter them out */
 630                 function _contact_link($i) { return dbesc($i['link']); }
 631                 $known_contacts = array_map('_contact_link', $contacts);
 632                 $unknow_contacts = array();
 633                 $r = q("SELECT `author-avatar`,`author-name`,`author-link`
 634                                 FROM `item` WHERE `parent` = %d
 635                                         AND (`author-name` LIKE '%%%s%%' OR `author-link` LIKE '%%%s%%')
 636                                         AND `author-link` NOT IN ('%s')
 637                                 GROUP BY `author-link`
 638                                 ORDER BY `author-name` ASC
 639                                 ",
 640                                 intval($conv_id),
 641                                 dbesc($search),
 642                                 dbesc($search),
 643                                 implode("','", $known_contacts)
 644                 );
 645                 if (dbm::is_result($r)) {
 646                         foreach ($r as $row) {
 647                                 // nickname..
 648                                 $up = parse_url($row['author-link']);
 649                                 $nick = explode("/", $up['path']);
 650                                 $nick = $nick[count($nick) - 1];
 651                                 $nick .= "@" . $up['host'];
 652                                 // /nickname
 653                                 $unknow_contacts[] = array(
 654                                         'type'    => 'c',
 655                                         'photo'   => proxy_url($row['author-avatar'], false, PROXY_SIZE_MICRO),
 656                                         'name'    => htmlentities($row['author-name']),
 657                                         'id'      => '',
 658                                         'network' => 'unknown',
 659                                         'link'    => $row['author-link'],
 660                                         'nick'    => htmlentities($nick),
 661                                         'forum'   => false
 662                                 );
 663                         }
 664                 }
 665
 666                 $items = array_merge($items, $unknow_contacts);
 667                 $tot += count($unknow_contacts);
 668         }
 669
 670         $results = array(
 671                 'tot'      => $tot,
 672                 'start'    => $start,
 673                 'count'    => $count,
 674                 'groups'   => $groups,
 675                 'contacts' => $contacts,
 676                 'items'    => $items,
 677                 'type'     => $type,
 678                 'search'   => $search,
 679         );
 680
 681         call_hooks('acl_lookup_end', $results);
 682
 683         if ($out_type === 'html') {
 684                 $o = array(
 685                         'tot'      => $results['tot'],
 686                         'start'    => $results['start'],
 687                         'count'    => $results['count'],
 688                         'groups'   => $results['groups'],
 689                         'contacts' => $results['contacts'],
 690                 );
 691                 return $o;
 692         }
 693
 694         $o = array(
 695                 'tot'   => $results['tot'],
 696                 'start' => $results['start'],
 697                 'count' => $results['count'],
 698                 'items' => $results['items'],
 699         );
 700
 701         echo json_encode($o);
 702
 703         killme();
 704 }
 705 /**
 706  * @brief Searching for global contacts for autocompletion
 707  *
 708  * @param App $a
 709  * @return array with the search results
 710  */
 711 function navbar_complete(App $a) {
 712
 713 //      logger('navbar_complete');
 714
 715         if ((get_config('system','block_public')) && (! local_user()) && (! remote_user())) {
 716                 return;
 717         }
 718
 719         // check if searching in the local global contact table is enabled
 720         $localsearch = get_config('system','poco_local_search');
 721
 722         $search = $prefix.notags(trim($_REQUEST['search']));
 723         $mode = $_REQUEST['smode'];
 724
 725         // don't search if search term has less than 2 characters
 726         if (! $search || mb_strlen($search) < 2) {
 727                 return array();
 728         }
 729
 730         if (substr($search,0,1) === '@') {
 731                 $search = substr($search,1);
 732         }
 733
 734         if ($localsearch) {
 735                 $x = DirSearch::global_search_by_name($search, $mode);
 736                 return $x;
 737         }
 738
 739         if (! $localsearch) {
 740                 $p = (($a->pager['page'] != 1) ? '&p=' . $a->pager['page'] : '');
 741
 742                 $x = z_fetch_url(get_server().'/lsearch?f=' . $p .  '&search=' . urlencode($search));
 743                 if ($x['success']) {
 744                         $t = 0;
 745                         $j = json_decode($x['body'],true);
 746                         if ($j && $j['results']) {
 747                                 return $j['results'];
 748                         }
 749                 }
 750         }
 751
 752         /// @TODO Not needed here?
 753         return;
 754 }