lib/util.php

   1 <?php
   2 /*
   3  * Laconica - a distributed open-source microblogging tool
   4  * Copyright (C) 2008, Controlez-Vous, Inc.
   5  *
   6  * This program is free software: you can redistribute it and/or modify
   7  * it under the terms of the GNU Affero General Public License as published by
   8  * the Free Software Foundation, either version 3 of the License, or
   9  * (at your option) any later version.
  10  *
  11  * This program is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  * GNU Affero General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Affero General Public License
  17  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 /* XXX: break up into separate modules (HTTP, HTML, user, files) */
  21
  22 # Show a server error
  23
  24 function common_server_error($msg, $code=500) {
  25         static $status = array(500 => 'Internal Server Error',
  26                                                    501 => 'Not Implemented',
  27                                                    502 => 'Bad Gateway',
  28                                                    503 => 'Service Unavailable',
  29                                                    504 => 'Gateway Timeout',
  30                                                    505 => 'HTTP Version Not Supported');
  31
  32         if (!array_key_exists($code, $status)) {
  33                 $code = 500;
  34         }
  35
  36         $status_string = $status[$code];
  37
  38         header('HTTP/1.1 '.$code.' '.$status_string);
  39         header('Content-type: text/plain');
  40
  41         print $msg;
  42         print "\n";
  43         exit();
  44 }
  45
  46 # Show a user error
  47 function common_user_error($msg, $code=400) {
  48         static $status = array(400 => 'Bad Request',
  49                                                    401 => 'Unauthorized',
  50                                                    402 => 'Payment Required',
  51                                                    403 => 'Forbidden',
  52                                                    404 => 'Not Found',
  53                                                    405 => 'Method Not Allowed',
  54                                                    406 => 'Not Acceptable',
  55                                                    407 => 'Proxy Authentication Required',
  56                                                    408 => 'Request Timeout',
  57                                                    409 => 'Conflict',
  58                                                    410 => 'Gone',
  59                                                    411 => 'Length Required',
  60                                                    412 => 'Precondition Failed',
  61                                                    413 => 'Request Entity Too Large',
  62                                                    414 => 'Request-URI Too Long',
  63                                                    415 => 'Unsupported Media Type',
  64                                                    416 => 'Requested Range Not Satisfiable',
  65                                                    417 => 'Expectation Failed');
  66
  67         if (!array_key_exists($code, $status)) {
  68                 $code = 400;
  69         }
  70
  71         $status_string = $status[$code];
  72
  73         header('HTTP/1.1 '.$code.' '.$status_string);
  74
  75         common_show_header('Error');
  76         common_element('div', array('class' => 'error'), $msg);
  77         common_show_footer();
  78 }
  79
  80 $xw = null;
  81
  82 # Start an HTML element
  83 function common_element_start($tag, $attrs=NULL) {
  84         global $xw;
  85         $xw->startElement($tag);
  86         if (is_array($attrs)) {
  87                 foreach ($attrs as $name => $value) {
  88                         $xw->writeAttribute($name, $value);
  89                 }
  90         } else if (is_string($attrs)) {
  91                 $xw->writeAttribute('class', $attrs);
  92         }
  93 }
  94
  95 function common_element_end($tag) {
  96         static $empty_tag = array('base', 'meta', 'link', 'hr',
  97                                                           'br', 'param', 'img', 'area',
  98                                                           'input', 'col');
  99         global $xw;
 100         # XXX: check namespace
 101         if (in_array($tag, $empty_tag)) {
 102                 $xw->endElement();
 103         } else {
 104                 $xw->fullEndElement();
 105         }
 106 }
 107
 108 function common_element($tag, $attrs=NULL, $content=NULL) {
 109         common_element_start($tag, $attrs);
 110         global $xw;
 111         if (!is_null($content)) {
 112                 $xw->text($content);
 113         }
 114         common_element_end($tag);
 115 }
 116
 117 function common_start_xml($doc=NULL, $public=NULL, $system=NULL) {
 118         global $xw;
 119         $xw = new XMLWriter();
 120         $xw->openURI('php://output');
 121         $xw->setIndent(true);
 122         $xw->startDocument('1.0', 'UTF-8');
 123         if ($doc) {
 124                 $xw->writeDTD($doc, $public, $system);
 125         }
 126 }
 127
 128 function common_end_xml() {
 129         global $xw;
 130         $xw->endDocument();
 131         $xw->flush();
 132 }
 133
 134 function common_init_language() {
 135         mb_internal_encoding('UTF-8');
 136         $language = common_language();
 137         # So we don't have to make people install the gettext locales
 138         putenv('LANGUAGE='.$language);
 139         putenv('LANG='.$language);
 140         $locale_set = setlocale(LC_ALL, $language . ".utf8",
 141                                                         $language . ".UTF8",
 142                                                         $language . ".utf-8",
 143                                                         $language . ".UTF-8",
 144                                                         $language);
 145         bindtextdomain("laconica", common_config('site','locale_path'));
 146         bind_textdomain_codeset("laconica", "UTF-8");
 147         textdomain("laconica");
 148         setlocale(LC_CTYPE, 'C');
 149         if(!$locale_set) {
 150                 common_log(LOG_INFO,'Language requested:'.$language.' - locale could not be set:',__FILE__);
 151         }
 152 }
 153
 154 define('PAGE_TYPE_PREFS', 'text/html,application/xhtml+xml,application/xml;q=0.3,text/xml;q=0.2');
 155
 156 function common_show_header($pagetitle, $callable=NULL, $data=NULL, $headercall=NULL) {
 157
 158         global $config, $xw;
 159
 160         common_start_html();
 161
 162         common_element_start('head');
 163         common_element('title', NULL,
 164                                    $pagetitle . " - " . $config['site']['name']);
 165         common_element('link', array('rel' => 'stylesheet',
 166                                                                  'type' => 'text/css',
 167                                                                  'href' => theme_path('display.css') . '?version=' . LACONICA_VERSION,
 168                                                                  'media' => 'screen, projection, tv'));
 169         foreach (array(6,7) as $ver) {
 170                 if (file_exists(theme_file('ie'.$ver.'.css'))) {
 171                         # Yes, IE people should be put in jail.
 172                         $xw->writeComment('[if lte IE '.$ver.']><link rel="stylesheet" type="text/css" '.
 173                                                           'href="'.theme_path('ie'.$ver.'.css').'?version='.LACONICA_VERSION.'" /><![endif]');
 174                 }
 175         }
 176
 177         common_element('script', array('type' => 'text/javascript',
 178                                                                    'src' => common_path('js/jquery.min.js')),
 179                                    ' ');
 180         common_element('script', array('type' => 'text/javascript',
 181                                                                    'src' => common_path('js/jquery.form.js')),
 182                                    ' ');
 183         common_element('script', array('type' => 'text/javascript',
 184                                                                    'src' => common_path('js/xbImportNode.js')),
 185                                    ' ');
 186         common_element('script', array('type' => 'text/javascript',
 187                                                                    'src' => common_path('js/util.js?version='.LACONICA_VERSION)),
 188                                    ' ');
 189         common_element('link', array('rel' => 'search', 'type' => 'application/opensearchdescription+xml',
 190                                         'href' =>  common_local_url('opensearch', array('type' => 'people')),
 191                                         'title' => common_config('site', 'name').' People Search'));
 192
 193         common_element('link', array('rel' => 'search', 'type' => 'application/opensearchdescription+xml',
 194                                         'href' =>  common_local_url('opensearch', array('type' => 'notice')),
 195                                         'title' => common_config('site', 'name').' Notice Search'));
 196
 197         if ($callable) {
 198                 if ($data) {
 199                         call_user_func($callable, $data);
 200                 } else {
 201                         call_user_func($callable);
 202                 }
 203         }
 204         common_element_end('head');
 205         common_element_start('body');
 206         common_element_start('div', array('id' => 'wrap'));
 207         common_element_start('div', array('id' => 'header'));
 208         common_nav_menu();
 209         if ((isset($config['site']['logo']) && is_string($config['site']['logo']) && (strlen($config['site']['logo']) > 0))
 210                 || file_exists(theme_file('logo.png')))
 211         {
 212                 common_element_start('a', array('href' => common_local_url('public')));
 213                 common_element('img', array('src' => isset($config['site']['logo']) ?
 214                                                                         ($config['site']['logo']) : theme_path('logo.png'),
 215                                                                         'alt' => $config['site']['name'],
 216                                                                         'id' => 'logo'));
 217                 common_element_end('a');
 218         } else {
 219                 common_element_start('p', array('id' => 'branding'));
 220                 common_element('a', array('href' => common_local_url('public')),
 221                                            $config['site']['name']);
 222                 common_element_end('p');
 223         }
 224
 225         common_element('h1', 'pagetitle', $pagetitle);
 226
 227         if ($headercall) {
 228                 if ($data) {
 229                         call_user_func($headercall, $data);
 230                 } else {
 231                         call_user_func($headercall);
 232                 }
 233         }
 234         common_element_end('div');
 235         common_element_start('div', array('id' => 'content'));
 236 }
 237
 238 function common_start_html($type=NULL) {
 239
 240         if (!$type) {
 241                 $httpaccept = isset($_SERVER['HTTP_ACCEPT']) ? $_SERVER['HTTP_ACCEPT'] : NULL;
 242
 243                 # XXX: allow content negotiation for RDF, RSS, or XRDS
 244
 245                 $type = common_negotiate_type(common_accept_to_prefs($httpaccept),
 246                                                                           common_accept_to_prefs(PAGE_TYPE_PREFS));
 247
 248                 if (!$type) {
 249                         common_user_error(_('This page is not available in a media type you accept'), 406);
 250                         exit(0);
 251                 }
 252         }
 253
 254         header('Content-Type: '.$type);
 255
 256         common_start_xml('html',
 257                                          '-//W3C//DTD XHTML 1.0 Strict//EN',
 258                                          'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd');
 259
 260         # FIXME: correct language for interface
 261
 262         $language = common_language();
 263
 264         common_element_start('html', array('xmlns' => 'http://www.w3.org/1999/xhtml',
 265                                                                            'xml:lang' => $language,
 266                                                                            'lang' => $language));
 267 }
 268
 269 function common_show_footer() {
 270         global $xw, $config;
 271         common_element_end('div'); # content div
 272         common_foot_menu();
 273         common_element_start('div', array('id' => 'footer'));
 274         common_element_start('div', 'laconica');
 275         if (common_config('site', 'broughtby')) {
 276                 $instr = _('**%%site.name%%** is a microblogging service brought to you by [%%site.broughtby%%](%%site.broughtbyurl%%). ');
 277         } else {
 278                 $instr = _('**%%site.name%%** is a microblogging service. ');
 279         }
 280         $instr .= sprintf(_('It runs the [Laconica](http://laconi.ca/) microblogging software, version %s, available under the [GNU Affero General Public License](http://www.fsf.org/licensing/licenses/agpl-3.0.html).'), LACONICA_VERSION);
 281     $output = common_markup_to_html($instr);
 282     common_raw($output);
 283         common_element_end('div');
 284         common_element('img', array('id' => 'cc',
 285                                                                 'src' => $config['license']['image'],
 286                                                                 'alt' => $config['license']['title']));
 287         common_element_start('p');
 288         common_text(_('Unless otherwise specified, contents of this site are copyright by the contributors and available under the '));
 289         common_element('a', array('class' => 'license',
 290                                                           'rel' => 'license',
 291                                                           'href' => $config['license']['url']),
 292                                    $config['license']['title']);
 293         common_text(_('. Contributors should be attributed by full name or nickname.'));
 294         common_element_end('p');
 295         common_element_end('div');
 296         common_element_end('div');
 297         common_element_end('body');
 298         common_element_end('html');
 299         common_end_xml();
 300 }
 301
 302 function common_text($txt) {
 303         global $xw;
 304         $xw->text($txt);
 305 }
 306
 307 function common_raw($xml) {
 308         global $xw;
 309         $xw->writeRaw($xml);
 310 }
 311
 312 function common_nav_menu() {
 313         $user = common_current_user();
 314         common_element_start('ul', array('id' => 'nav'));
 315         if ($user) {
 316                 common_menu_item(common_local_url('all', array('nickname' => $user->nickname)),
 317                                                  _('Home'));
 318         }
 319         common_menu_item(common_local_url('peoplesearch'), _('Search'));
 320         common_menu_item(common_local_url('tags'), _('Tags'));
 321         if ($user) {
 322                 common_menu_item(common_local_url('profilesettings'),
 323                                                  _('Settings'));
 324                 common_menu_item(common_local_url('invite'),
 325                                                  _('Invite'));
 326                 common_menu_item(common_local_url('logout'),
 327                                                  _('Logout'));
 328         } else {
 329                 common_menu_item(common_local_url('login'), _('Login'));
 330                 if (!common_config('site', 'closed')) {
 331                         common_menu_item(common_local_url('register'), _('Register'));
 332                 }
 333                 common_menu_item(common_local_url('openidlogin'), _('OpenID'));
 334         }
 335         common_element_end('ul');
 336 }
 337
 338 function common_foot_menu() {
 339         common_element_start('ul', array('id' => 'nav_sub'));
 340         common_menu_item(common_local_url('doc', array('title' => 'help')),
 341                                          _('Help'));
 342         common_menu_item(common_local_url('doc', array('title' => 'about')),
 343                                          _('About'));
 344         common_menu_item(common_local_url('doc', array('title' => 'faq')),
 345                                          _('FAQ'));
 346         common_menu_item(common_local_url('doc', array('title' => 'privacy')),
 347                                          _('Privacy'));
 348         common_menu_item(common_local_url('doc', array('title' => 'source')),
 349                                          _('Source'));
 350         common_menu_item(common_local_url('doc', array('title' => 'contact')),
 351                                          _('Contact'));
 352         common_element_end('ul');
 353 }
 354
 355 function common_menu_item($url, $text, $title=NULL, $is_selected=false) {
 356         $lattrs = array();
 357         if ($is_selected) {
 358                 $lattrs['class'] = 'current';
 359         }
 360         common_element_start('li', $lattrs);
 361         $attrs['href'] = $url;
 362         if ($title) {
 363                 $attrs['title'] = $title;
 364         }
 365         common_element('a', $attrs, $text);
 366         common_element_end('li');
 367 }
 368
 369 function common_input($id, $label, $value=NULL,$instructions=NULL) {
 370         common_element_start('p');
 371         common_element('label', array('for' => $id), $label);
 372         $attrs = array('name' => $id,
 373                                    'type' => 'text',
 374                                    'class' => 'input_text',
 375                                    'id' => $id);
 376         if ($value) {
 377                 $attrs['value'] = htmlspecialchars($value);
 378         }
 379         common_element('input', $attrs);
 380         if ($instructions) {
 381                 common_element('span', 'input_instructions', $instructions);
 382         }
 383         common_element_end('p');
 384 }
 385
 386 function common_checkbox($id, $label, $checked=false, $instructions=NULL, $value='true', $disabled=false)
 387 {
 388         common_element_start('p');
 389         $attrs = array('name' => $id,
 390                                    'type' => 'checkbox',
 391                                    'class' => 'checkbox',
 392                                    'id' => $id);
 393         if ($value) {
 394                 $attrs['value'] = htmlspecialchars($value);
 395         }
 396         if ($checked) {
 397                 $attrs['checked'] = 'checked';
 398         }
 399         if ($disabled) {
 400                 $attrs['disabled'] = 'true';
 401         }
 402         common_element('input', $attrs);
 403         # XXX: use a <label>
 404         common_text(' ');
 405         common_element('span', 'checkbox_label', $label);
 406         common_text(' ');
 407         if ($instructions) {
 408                 common_element('span', 'input_instructions', $instructions);
 409         }
 410         common_element_end('p');
 411 }
 412
 413 function common_dropdown($id, $label, $content, $instructions=NULL, $blank_select=FALSE, $selected=NULL) {
 414         common_element_start('p');
 415         common_element('label', array('for' => $id), $label);
 416         common_element_start('select', array('id' => $id, 'name' => $id));
 417         if ($blank_select) {
 418                 common_element('option', array('value' => ''));
 419         }
 420         foreach ($content as $value => $option) {
 421                 if ($value == $selected) {
 422                         common_element('option', array('value' => $value, 'selected' => $value), $option);
 423                 } else {
 424                         common_element('option', array('value' => $value), $option);
 425                 }
 426         }
 427         common_element_end('select');
 428         if ($instructions) {
 429                 common_element('span', 'input_instructions', $instructions);
 430         }
 431         common_element_end('p');
 432 }
 433 function common_hidden($id, $value) {
 434         common_element('input', array('name' => $id,
 435                                                                   'type' => 'hidden',
 436                                                                   'id' => $id,
 437                                                                   'value' => $value));
 438 }
 439
 440 function common_password($id, $label, $instructions=NULL) {
 441         common_element_start('p');
 442         common_element('label', array('for' => $id), $label);
 443         $attrs = array('name' => $id,
 444                                    'type' => 'password',
 445                                    'class' => 'password',
 446                                    'id' => $id);
 447         common_element('input', $attrs);
 448         if ($instructions) {
 449                 common_element('span', 'input_instructions', $instructions);
 450         }
 451         common_element_end('p');
 452 }
 453
 454 function common_submit($id, $label, $cls='submit') {
 455         global $xw;
 456         common_element_start('p');
 457         common_element('input', array('type' => 'submit',
 458                                                                   'id' => $id,
 459                                                                   'name' => $id,
 460                                                                   'class' => $cls,
 461                                                                   'value' => $label));
 462         common_element_end('p');
 463 }
 464
 465 function common_textarea($id, $label, $content=NULL, $instructions=NULL) {
 466         common_element_start('p');
 467         common_element('label', array('for' => $id), $label);
 468         common_element('textarea', array('rows' => 3,
 469                                                                          'cols' => 40,
 470                                                                          'name' => $id,
 471                                                                          'id' => $id),
 472                                    ($content) ? $content : '');
 473         if ($instructions) {
 474                 common_element('span', 'input_instructions', $instructions);
 475         }
 476         common_element_end('p');
 477 }
 478
 479 function common_timezone() {
 480         if (common_logged_in()) {
 481                 $user = common_current_user();
 482                 if ($user->timezone) {
 483                         return $user->timezone;
 484                 }
 485         }
 486
 487         global $config;
 488         return $config['site']['timezone'];
 489 }
 490
 491 function common_language() {
 492
 493         // If there is a user logged in and they've set a language preference
 494         // then return that one...
 495         if (common_logged_in()) {
 496                 $user = common_current_user();
 497                 $user_language = $user->language;
 498                 if ($user_language)
 499                         return $user_language;
 500         }
 501
 502         // Otherwise, find the best match for the languages requested by the
 503         // user's browser...
 504         $httplang = isset($_SERVER['HTTP_ACCEPT_LANGUAGE']) ? $_SERVER['HTTP_ACCEPT_LANGUAGE'] : NULL;
 505         if (!empty($httplang)) {
 506                 $language = client_prefered_language($httplang);
 507                 if ($language)
 508                         return $language;
 509         }
 510
 511         // Finally, if none of the above worked, use the site's default...
 512         return common_config('site', 'language');
 513 }
 514 # salted, hashed passwords are stored in the DB
 515
 516 function common_munge_password($password, $id) {
 517         return md5($password . $id);
 518 }
 519
 520 # check if a username exists and has matching password
 521 function common_check_user($nickname, $password) {
 522         # NEVER allow blank passwords, even if they match the DB
 523         if (mb_strlen($password) == 0) {
 524                 return false;
 525         }
 526         $user = User::staticGet('nickname', $nickname);
 527         if (is_null($user)) {
 528                 return false;
 529         } else {
 530                 if (0 == strcmp(common_munge_password($password, $user->id),
 531                                                 $user->password)) {
 532                         return $user;
 533                 } else {
 534                         return false;
 535                 }
 536         }
 537 }
 538
 539 # is the current user logged in?
 540 function common_logged_in() {
 541         return (!is_null(common_current_user()));
 542 }
 543
 544 function common_have_session() {
 545         return (0 != strcmp(session_id(), ''));
 546 }
 547
 548 function common_ensure_session() {
 549         if (!common_have_session()) {
 550                 @session_start();
 551         }
 552 }
 553
 554 # Three kinds of arguments:
 555 # 1) a user object
 556 # 2) a nickname
 557 # 3) NULL to clear
 558
 559 function common_set_user($user) {
 560         if (is_null($user) && common_have_session()) {
 561                 unset($_SESSION['userid']);
 562                 return true;
 563         } else if (is_string($user)) {
 564                 $nickname = $user;
 565                 $user = User::staticGet('nickname', $nickname);
 566         } else if (!($user instanceof User)) {
 567                 return false;
 568         }
 569
 570         if ($user) {
 571                 common_ensure_session();
 572                 $_SESSION['userid'] = $user->id;
 573                 return $user;
 574         }
 575         return false;
 576 }
 577
 578 function common_set_cookie($key, $value, $expiration=0) {
 579         $path = common_config('site', 'path');
 580         $server = common_config('site', 'server');
 581
 582         if ($path && ($path != '/')) {
 583                 $cookiepath = '/' . $path . '/';
 584         } else {
 585                 $cookiepath = '/';
 586         }
 587         return setcookie($key,
 588                          $value,
 589                                  $expiration,
 590                                          $cookiepath,
 591                                      $server);
 592 }
 593
 594 define('REMEMBERME', 'rememberme');
 595 define('REMEMBERME_EXPIRY', 30 * 24 * 60 * 60);
 596
 597 function common_rememberme($user=NULL) {
 598         if (!$user) {
 599                 $user = common_current_user();
 600                 if (!$user) {
 601                         common_debug('No current user to remember', __FILE__);
 602                         return false;
 603                 }
 604         }
 605         $rm = new Remember_me();
 606         $rm->code = common_good_rand(16);
 607         $rm->user_id = $user->id;
 608         $result = $rm->insert();
 609         if (!$result) {
 610                 common_log_db_error($rm, 'INSERT', __FILE__);
 611                 common_debug('Error adding rememberme record for ' . $user->nickname, __FILE__);
 612                 return false;
 613         }
 614         common_log(LOG_INFO, 'adding rememberme cookie for ' . $user->nickname);
 615         common_set_cookie(REMEMBERME,
 616                                           implode(':', array($rm->user_id, $rm->code)),
 617                                           time() + REMEMBERME_EXPIRY);
 618         return true;
 619 }
 620
 621 function common_remembered_user() {
 622         $user = NULL;
 623         # Try to remember
 624         $packed = isset($_COOKIE[REMEMBERME]) ? $_COOKIE[REMEMBERME] : '';
 625         if ($packed) {
 626                 list($id, $code) = explode(':', $packed);
 627                 if ($id && $code) {
 628                         $rm = Remember_me::staticGet($code);
 629                         if ($rm && ($rm->user_id == $id)) {
 630                                 $user = User::staticGet($rm->user_id);
 631                                 if ($user) {
 632                                         # successful!
 633                                         $result = $rm->delete();
 634                                         if (!$result) {
 635                                                 common_log_db_error($rm, 'DELETE', __FILE__);
 636                                                 $user = NULL;
 637                                         } else {
 638                                                 common_log(LOG_INFO, 'logging in ' . $user->nickname . ' using rememberme code ' . $rm->code);
 639                                                 common_set_user($user->nickname);
 640                                                 common_real_login(false);
 641                                                 # We issue a new cookie, so they can log in
 642                                                 # automatically again after this session
 643                                                 common_rememberme($user);
 644                                         }
 645                                 }
 646                         }
 647                 }
 648         }
 649         return $user;
 650 }
 651
 652 # must be called with a valid user!
 653
 654 function common_forgetme() {
 655         common_set_cookie(REMEMBERME, '', 0);
 656 }
 657
 658 # who is the current user?
 659 function common_current_user() {
 660         if (isset($_REQUEST[session_name()]) || (isset($_SESSION['userid']) && $_SESSION['userid'])) {
 661                 common_ensure_session();
 662                 $id = isset($_SESSION['userid']) ? $_SESSION['userid'] : false;
 663                 if ($id) {
 664                         # note: this should cache
 665                         $user = User::staticGet($id);
 666                         return $user;
 667                 }
 668         }
 669         # that didn't work; try to remember
 670         $user = common_remembered_user();
 671         if ($user) {
 672                 common_debug("Got User " . $user->nickname);
 673             common_debug("Faking session on remembered user");
 674             $_SESSION['userid'] = $user->id;
 675         }
 676         return $user;
 677 }
 678
 679 # Logins that are 'remembered' aren't 'real' -- they're subject to
 680 # cookie-stealing. So, we don't let them do certain things. New reg,
 681 # OpenID, and password logins _are_ real.
 682
 683 function common_real_login($real=true) {
 684         common_ensure_session();
 685         $_SESSION['real_login'] = $real;
 686 }
 687
 688 function common_is_real_login() {
 689         return common_logged_in() && $_SESSION['real_login'];
 690 }
 691
 692 # get canonical version of nickname for comparison
 693 function common_canonical_nickname($nickname) {
 694         # XXX: UTF-8 canonicalization (like combining chars)
 695         return strtolower($nickname);
 696 }
 697
 698 # get canonical version of email for comparison
 699 function common_canonical_email($email) {
 700         # XXX: canonicalize UTF-8
 701         # XXX: lcase the domain part
 702         return $email;
 703 }
 704
 705 define('URL_REGEX', '^|[ \t\r\n])((ftp|http|https|gopher|mailto|news|nntp|telnet|wais|file|prospero|aim|webcal):(([A-Za-z0-9$_.+!*(),;/?:@&~=-])|%[A-Fa-f0-9]{2}){2,}(#([a-zA-Z0-9][a-zA-Z0-9$_.+!*(),;/?:@&~=%-]*))?([A-Za-z0-9$_+!*();/?:~-]))');
 706
 707 function common_render_content($text, $notice) {
 708         $r = common_render_text($text);
 709         $id = $notice->profile_id;
 710         $r = preg_replace('/(^|\s+)@([A-Za-z0-9]{1,64})/e', "'\\1@'.common_at_link($id, '\\2')", $r);
 711         $r = preg_replace('/^T ([A-Z0-9]{1,64}) /e', "'T '.common_at_link($id, '\\1').' '", $r);
 712         return $r;
 713 }
 714
 715 function common_render_text($text) {
 716         $r = htmlspecialchars($text);
 717
 718         $r = preg_replace('/[\x{0}-\x{8}\x{b}-\x{c}\x{e}-\x{19}]/', '', $r);
 719         $r = preg_replace_callback('@https?://[^\]>\s]+@', 'common_render_uri_thingy', $r);
 720         $r = preg_replace('/(^|\s+)#([A-Za-z0-9_\-\.]{1,64})/e', "'\\1#'.common_tag_link('\\2')", $r);
 721         # XXX: machine tags
 722         return $r;
 723 }
 724
 725 function common_render_uri_thingy($matches) {
 726         $uri = $matches[0];
 727         $trailer = '';
 728
 729         # Some heuristics for extracting URIs from surrounding punctuation
 730         # Strip from trailing text...
 731         if (preg_match('/^(.*)([,.:"\']+)$/', $uri, $matches)) {
 732                 $uri = $matches[1];
 733                 $trailer = $matches[2];
 734         }
 735
 736         $pairs = array(
 737                 ']' => '[', # technically disallowed in URIs, but used in Java docs
 738                 ')' => '(', # far too frequent in Wikipedia and MSDN
 739         );
 740         $final = substr($uri, -1, 1);
 741         if (isset($pairs[$final])) {
 742                 $openers = substr_count($uri, $pairs[$final]);
 743                 $closers = substr_count($uri, $final);
 744                 if ($closers > $openers) {
 745                         // Assume the paren was opened outside the URI
 746                         $uri = substr($uri, 0, -1);
 747                         $trailer = $final . $trailer;
 748                 }
 749         }
 750         if ($longurl = common_longurl($uri)) {
 751                 $longurl = htmlentities($longurl, ENT_QUOTES, 'UTF-8');
 752                 $title = " title='$longurl'";
 753         }
 754         else $title = '';
 755
 756         return '<a href="' . $uri . '"' . $title . ' class="extlink">' . $uri . '</a>' . $trailer;
 757 }
 758
 759 function common_longurl($uri)  {
 760         $uri_e = urlencode($uri);
 761         $longurl = unserialize(file_get_contents("http://api.longurl.org/v1/expand?format=php&url=$uri_e"));
 762         if (empty($longurl['long_url']) || $uri === $longurl['long_url']) return false;
 763         return stripslashes($longurl['long_url']);
 764 }
 765
 766 function common_shorten_links($text) {
 767     // \s = not a horizontal whitespace character (since PHP 5.2.4)
 768         // RYM this should prevent * preceded URLs from being processed but it its a char
 769 //      $r = preg_replace('@[^*](https?://[^)\]>\s]+)@e', "common_shorten_link('\\1')", $r);
 770         return preg_replace('@https?://[^)\]>\s]+@e', "common_shorten_link('\\0')", $text);
 771 }
 772
 773 function common_shorten_link($long_url) {
 774
 775         $user = common_current_user();
 776
 777         $curlh = curl_init();
 778         curl_setopt($curlh, CURLOPT_CONNECTTIMEOUT, 20); // # seconds to wait
 779         curl_setopt($curlh, CURLOPT_USERAGENT, 'Laconica');
 780         curl_setopt($curlh, CURLOPT_RETURNTRANSFER, true);
 781
 782         switch($user->urlshorteningservice) {
 783         case 'ur1.ca':
 784             $short_url_service = new LilUrl;
 785             $short_url = $short_url_service->shorten($long_url);
 786             break;
 787
 788         case '2tu.us':
 789             $short_url_service = new TightUrl;
 790             $short_url = $short_url_service->shorten($long_url);
 791             break;
 792
 793         case 'ptiturl.com':
 794             $short_url_service = new PtitUrl;
 795             $short_url = $short_url_service->shorten($long_url);
 796             break;
 797
 798         case 'bit.ly':
 799                         curl_setopt($curlh, CURLOPT_URL, 'http://bit.ly/api?method=shorten&long_url='.urlencode($long_url));
 800                         $short_url = current(json_decode(curl_exec($curlh))->results)->hashUrl;
 801             break;
 802
 803                 case 'is.gd':
 804                         curl_setopt($curlh, CURLOPT_URL, 'http://is.gd/api.php?longurl='.urlencode($long_url));
 805                         $short_url = curl_exec($curlh);
 806                         break;
 807                 case 'snipr.com':
 808                         curl_setopt($curlh, CURLOPT_URL, 'http://snipr.com/site/snip?r=simple&link='.urlencode($long_url));
 809                         $short_url = curl_exec($curlh);
 810                         break;
 811                 case 'metamark.net':
 812                         curl_setopt($curlh, CURLOPT_URL, 'http://metamark.net/api/rest/simple?long_url='.urlencode($long_url));
 813                         $short_url = curl_exec($curlh);
 814                         break;
 815                 case 'tinyurl.com':
 816                         curl_setopt($curlh, CURLOPT_URL, 'http://tinyurl.com/api-create.php?url='.urlencode($long_url));
 817                         $short_url = curl_exec($curlh);
 818                         break;
 819                 default:
 820                         $short_url = false;
 821         }
 822
 823         curl_close($curlh);
 824
 825         if ($short_url) {
 826                 return $short_url;
 827         }
 828         return $long_url;
 829 }
 830
 831 function common_xml_safe_str($str) {
 832         $xmlStr = htmlentities(iconv('UTF-8', 'UTF-8//IGNORE', $str), ENT_NOQUOTES, 'UTF-8');
 833
 834         // Replace control, formatting, and surrogate characters with '*', ala Twitter
 835         return preg_replace('/[\p{Cc}\p{Cf}\p{Cs}]/u', '*', $str);
 836 }
 837
 838 function common_tag_link($tag) {
 839         $canonical = common_canonical_tag($tag);
 840         $url = common_local_url('tag', array('tag' => $canonical));
 841         return '<a href="' . htmlspecialchars($url) . '" rel="tag" class="hashlink">' . htmlspecialchars($tag) . '</a>';
 842 }
 843
 844 function common_canonical_tag($tag) {
 845         return strtolower(str_replace(array('-', '_', '.'), '', $tag));
 846 }
 847
 848 function common_at_link($sender_id, $nickname) {
 849         $sender = Profile::staticGet($sender_id);
 850         $recipient = common_relative_profile($sender, common_canonical_nickname($nickname));
 851         if ($recipient) {
 852                 return '<a href="'.htmlspecialchars($recipient->profileurl).'" class="atlink">'.$nickname.'</a>';
 853         } else {
 854                 return $nickname;
 855         }
 856 }
 857
 858 function common_relative_profile($sender, $nickname, $dt=NULL) {
 859         # Try to find profiles this profile is subscribed to that have this nickname
 860         $recipient = new Profile();
 861         # XXX: use a join instead of a subquery
 862         $recipient->whereAdd('EXISTS (SELECT subscribed from subscription where subscriber = '.$sender->id.' and subscribed = id)', 'AND');
 863         $recipient->whereAdd('nickname = "' . trim($nickname) . '"', 'AND');
 864         if ($recipient->find(TRUE)) {
 865                 # XXX: should probably differentiate between profiles with
 866                 # the same name by date of most recent update
 867                 return $recipient;
 868         }
 869         # Try to find profiles that listen to this profile and that have this nickname
 870         $recipient = new Profile();
 871         # XXX: use a join instead of a subquery
 872         $recipient->whereAdd('EXISTS (SELECT subscriber from subscription where subscribed = '.$sender->id.' and subscriber = id)', 'AND');
 873         $recipient->whereAdd('nickname = "' . trim($nickname) . '"', 'AND');
 874         if ($recipient->find(TRUE)) {
 875                 # XXX: should probably differentiate between profiles with
 876                 # the same name by date of most recent update
 877                 return $recipient;
 878         }
 879         # If this is a local user, try to find a local user with that nickname.
 880         $sender = User::staticGet($sender->id);
 881         if ($sender) {
 882                 $recipient_user = User::staticGet('nickname', $nickname);
 883                 if ($recipient_user) {
 884                         return $recipient_user->getProfile();
 885                 }
 886         }
 887         # Otherwise, no links. @messages from local users to remote users,
 888         # or from remote users to other remote users, are just
 889         # outside our ability to make intelligent guesses about
 890         return NULL;
 891 }
 892
 893 // where should the avatar go for this user?
 894
 895 function common_avatar_filename($id, $extension, $size=NULL, $extra=NULL) {
 896         global $config;
 897
 898         if ($size) {
 899                 return $id . '-' . $size . (($extra) ? ('-' . $extra) : '') . $extension;
 900         } else {
 901                 return $id . '-original' . (($extra) ? ('-' . $extra) : '') . $extension;
 902         }
 903 }
 904
 905 function common_avatar_path($filename) {
 906         global $config;
 907         return INSTALLDIR . '/avatar/' . $filename;
 908 }
 909
 910 function common_avatar_url($filename) {
 911         return common_path('avatar/'.$filename);
 912 }
 913
 914 function common_avatar_display_url($avatar) {
 915         $server = common_config('avatar', 'server');
 916         if ($server) {
 917                 return 'http://'.$server.'/'.$avatar->filename;
 918         } else {
 919                 return $avatar->url;
 920         }
 921 }
 922
 923 function common_default_avatar($size) {
 924         static $sizenames = array(AVATAR_PROFILE_SIZE => 'profile',
 925                                                           AVATAR_STREAM_SIZE => 'stream',
 926                                                           AVATAR_MINI_SIZE => 'mini');
 927         return theme_path('default-avatar-'.$sizenames[$size].'.png');
 928 }
 929
 930 function common_local_url($action, $args=NULL, $fragment=NULL) {
 931         $url = NULL;
 932         if (common_config('site','fancy')) {
 933                 $url = common_fancy_url($action, $args);
 934         } else {
 935                 $url = common_simple_url($action, $args);
 936         }
 937         if (!is_null($fragment)) {
 938                 $url .= '#'.$fragment;
 939         }
 940         return $url;
 941 }
 942
 943 function common_fancy_url($action, $args=NULL) {
 944         switch (strtolower($action)) {
 945          case 'public':
 946                 if ($args && isset($args['page'])) {
 947                         return common_path('?page=' . $args['page']);
 948                 } else {
 949                         return common_path('');
 950                 }
 951          case 'publicrss':
 952                 return common_path('rss');
 953          case 'publicxrds':
 954                 return common_path('xrds');
 955          case 'opensearch':
 956                 if ($args && $args['type']) {
 957                         return common_path('opensearch/'.$args['type']);
 958                 } else {
 959                         return common_path('opensearch/people');
 960                 }
 961          case 'doc':
 962                 return common_path('doc/'.$args['title']);
 963          case 'login':
 964          case 'logout':
 965          case 'subscribe':
 966          case 'unsubscribe':
 967          case 'invite':
 968                 return common_path('main/'.$action);
 969          case 'register':
 970                 if ($args && $args['code']) {
 971                         return common_path('main/register/'.$args['code']);
 972                 } else {
 973                         return common_path('main/register');
 974                 }
 975          case 'remotesubscribe':
 976                 if ($args && $args['nickname']) {
 977                         return common_path('main/remote?nickname=' . $args['nickname']);
 978                 } else {
 979                         return common_path('main/remote');
 980                 }
 981          case 'nudge':
 982                 return common_path($args['nickname'].'/nudge');
 983          case 'openidlogin':
 984                 return common_path('main/openid');
 985          case 'profilesettings':
 986                 return common_path('settings/profile');
 987          case 'emailsettings':
 988                 return common_path('settings/email');
 989          case 'openidsettings':
 990                 return common_path('settings/openid');
 991          case 'smssettings':
 992                 return common_path('settings/sms');
 993          case 'twittersettings':
 994                 return common_path('settings/twitter');
 995          case 'othersettings':
 996                 return common_path('settings/other');
 997          case 'newnotice':
 998                 if ($args && $args['replyto']) {
 999                         return common_path('notice/new?replyto='.$args['replyto']);
1000                 } else {
1001                         return common_path('notice/new');
1002                 }
1003          case 'shownotice':
1004                 return common_path('notice/'.$args['notice']);
1005          case 'deletenotice':
1006                 if ($args && $args['notice']) {
1007                         return common_path('notice/delete/'.$args['notice']);
1008                 } else {
1009                         return common_path('notice/delete');
1010                 }
1011          case 'xrds':
1012          case 'foaf':
1013                 return common_path($args['nickname'].'/'.$action);
1014          case 'subscriptions':
1015          case 'subscribers':
1016          case 'all':
1017          case 'replies':
1018          case 'inbox':
1019          case 'outbox':
1020                 if ($args && isset($args['page'])) {
1021                         return common_path($args['nickname'].'/'.$action.'?page=' . $args['page']);
1022                 } else {
1023                         return common_path($args['nickname'].'/'.$action);
1024                 }
1025          case 'allrss':
1026                 return common_path($args['nickname'].'/all/rss');
1027          case 'repliesrss':
1028                 return common_path($args['nickname'].'/replies/rss');
1029          case 'userrss':
1030                 return common_path($args['nickname'].'/rss');
1031          case 'showstream':
1032                 if ($args && isset($args['page'])) {
1033                         return common_path($args['nickname'].'?page=' . $args['page']);
1034                 } else {
1035                         return common_path($args['nickname']);
1036                 }
1037
1038          case 'usertimeline':
1039                 return common_path("api/statuses/user_timeline/".$args['nickname'].".atom");
1040          case 'confirmaddress':
1041                 return common_path('main/confirmaddress/'.$args['code']);
1042          case 'userbyid':
1043                 return common_path('user/'.$args['id']);
1044          case 'recoverpassword':
1045             $path = 'main/recoverpassword';
1046             if ($args['code']) {
1047                 $path .= '/' . $args['code'];
1048                 }
1049             return common_path($path);
1050          case 'imsettings':
1051                 return common_path('settings/im');
1052          case 'peoplesearch':
1053                 return common_path('search/people' . (($args) ? ('?' . http_build_query($args)) : ''));
1054          case 'noticesearch':
1055                 return common_path('search/notice' . (($args) ? ('?' . http_build_query($args)) : ''));
1056          case 'noticesearchrss':
1057                 return common_path('search/notice/rss' . (($args) ? ('?' . http_build_query($args)) : ''));
1058          case 'avatarbynickname':
1059                 return common_path($args['nickname'].'/avatar/'.$args['size']);
1060          case 'tag':
1061             if (isset($args['tag']) && $args['tag']) {
1062                         $path = 'tag/' . $args['tag'];
1063                         unset($args['tag']);
1064                 } else {
1065                         $path = 'tags';
1066                 }
1067                 return common_path($path . (($args) ? ('?' . http_build_query($args)) : ''));
1068          case 'tags':
1069                 return common_path('tags' . (($args) ? ('?' . http_build_query($args)) : ''));
1070          case 'favor':
1071                 return common_path('main/favor');
1072          case 'disfavor':
1073                 return common_path('main/disfavor');
1074          case 'showfavorites':
1075                 if ($args && isset($args['page'])) {
1076                         return common_path($args['nickname'].'/favorites?page=' . $args['page']);
1077                 } else {
1078                         return common_path($args['nickname'].'/favorites');
1079                 }
1080          case 'favoritesrss':
1081                 return common_path($args['nickname'].'/favorites/rss');
1082          case 'showmessage':
1083                 return common_path('message/' . $args['message']);
1084          case 'newmessage':
1085                 return common_path('message/new' . (($args) ? ('?' . http_build_query($args)) : ''));
1086          case 'api':
1087                 # XXX: do fancy URLs for all the API methods
1088                 switch (strtolower($args['apiaction'])) {
1089                  case 'statuses':
1090                         switch (strtolower($args['method'])) {
1091                          case 'user_timeline.rss':
1092                                 return common_path('api/statuses/user_timeline/'.$args['argument'].'.rss');
1093                          case 'user_timeline.atom':
1094                                 return common_path('api/statuses/user_timeline/'.$args['argument'].'.rss');
1095                          case 'user_timeline.rss':
1096                                 return common_path('api/statuses/user_timeline/'.$args['argument'].'.rss');
1097                          case 'user_timeline.atom':
1098                                 return common_path('api/statuses/user_timeline/'.$args['argument'].'.rss');
1099                          default: return common_simple_url($action, $args);
1100                         }
1101                  default: return common_simple_url($action, $args);
1102                 }
1103          case 'sup':
1104                 if ($args && isset($args['seconds'])) {
1105                         return common_path('main/sup?seconds='.$args['seconds']);
1106                 } else {
1107                         return common_path('main/sup');
1108                 }
1109          default:
1110                 return common_simple_url($action, $args);
1111         }
1112 }
1113
1114 function common_simple_url($action, $args=NULL) {
1115         global $config;
1116         /* XXX: pretty URLs */
1117         $extra = '';
1118         if ($args) {
1119                 foreach ($args as $key => $value) {
1120                         $extra .= "&${key}=${value}";
1121                 }
1122         }
1123         return common_path("index.php?action=${action}${extra}");
1124 }
1125
1126 function common_path($relative) {
1127         global $config;
1128         $pathpart = ($config['site']['path']) ? $config['site']['path']."/" : '';
1129         return "http://".$config['site']['server'].'/'.$pathpart.$relative;
1130 }
1131
1132 function common_date_string($dt) {
1133         // XXX: do some sexy date formatting
1134         // return date(DATE_RFC822, $dt);
1135         $t = strtotime($dt);
1136         $now = time();
1137         $diff = $now - $t;
1138
1139         if ($now < $t) { # that shouldn't happen!
1140                 return common_exact_date($dt);
1141         } else if ($diff < 60) {
1142                 return _('a few seconds ago');
1143         } else if ($diff < 92) {
1144                 return _('about a minute ago');
1145         } else if ($diff < 3300) {
1146                 return sprintf(_('about %d minutes ago'), round($diff/60));
1147         } else if ($diff < 5400) {
1148                 return _('about an hour ago');
1149         } else if ($diff < 22 * 3600) {
1150                 return sprintf(_('about %d hours ago'), round($diff/3600));
1151         } else if ($diff < 37 * 3600) {
1152                 return _('about a day ago');
1153         } else if ($diff < 24 * 24 * 3600) {
1154                 return sprintf(_('about %d days ago'), round($diff/(24*3600)));
1155         } else if ($diff < 46 * 24 * 3600) {
1156                 return _('about a month ago');
1157         } else if ($diff < 330 * 24 * 3600) {
1158                 return sprintf(_('about %d months ago'), round($diff/(30*24*3600)));
1159         } else if ($diff < 480 * 24 * 3600) {
1160                 return _('about a year ago');
1161         } else {
1162                 return common_exact_date($dt);
1163         }
1164 }
1165
1166 function common_exact_date($dt) {
1167     static $_utc;
1168     static $_siteTz;
1169
1170     if (!$_utc) {
1171         $_utc = new DateTimeZone('UTC');
1172         $_siteTz = new DateTimeZone(common_timezone());
1173     }
1174
1175         $dateStr = date('d F Y H:i:s', strtotime($dt));
1176         $d = new DateTime($dateStr, $_utc);
1177         $d->setTimezone($_siteTz);
1178         return $d->format(DATE_RFC850);
1179 }
1180
1181 function common_date_w3dtf($dt) {
1182         $dateStr = date('d F Y H:i:s', strtotime($dt));
1183         $d = new DateTime($dateStr, new DateTimeZone('UTC'));
1184         $d->setTimezone(new DateTimeZone(common_timezone()));
1185         return $d->format(DATE_W3C);
1186 }
1187
1188 function common_date_rfc2822($dt) {
1189         $dateStr = date('d F Y H:i:s', strtotime($dt));
1190         $d = new DateTime($dateStr, new DateTimeZone('UTC'));
1191         $d->setTimezone(new DateTimeZone(common_timezone()));
1192         return $d->format('r');
1193 }
1194
1195 function common_date_iso8601($dt) {
1196         $dateStr = date('d F Y H:i:s', strtotime($dt));
1197         $d = new DateTime($dateStr, new DateTimeZone('UTC'));
1198         $d->setTimezone(new DateTimeZone(common_timezone()));
1199         return $d->format('c');
1200 }
1201
1202 function common_sql_now() {
1203         return strftime('%Y-%m-%d %H:%M:%S', time());
1204 }
1205
1206 function common_redirect($url, $code=307) {
1207         static $status = array(301 => "Moved Permanently",
1208                                                    302 => "Found",
1209                                                    303 => "See Other",
1210                                                    307 => "Temporary Redirect");
1211         header("Status: ${code} $status[$code]");
1212         header("Location: $url");
1213
1214         common_start_xml('a',
1215                                          '-//W3C//DTD XHTML 1.0 Strict//EN',
1216                                          'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd');
1217         common_element('a', array('href' => $url), $url);
1218         common_end_xml();
1219     exit;
1220 }
1221
1222 function common_save_replies($notice) {
1223         # Alternative reply format
1224         $tname = false;
1225         if (preg_match('/^T ([A-Z0-9]{1,64}) /', $notice->content, $match)) {
1226                 $tname = $match[1];
1227         }
1228         # extract all @messages
1229         $cnt = preg_match_all('/(?:^|\s)@([a-z0-9]{1,64})/', $notice->content, $match);
1230         if (!$cnt && !$tname) {
1231                 return true;
1232         }
1233         # XXX: is there another way to make an array copy?
1234         $names = ($tname) ? array_unique(array_merge(array(strtolower($tname)), $match[1])) : array_unique($match[1]);
1235         $sender = Profile::staticGet($notice->profile_id);
1236         # store replied only for first @ (what user/notice what the reply directed,
1237         # we assume first @ is it)
1238         for ($i=0; $i<count($names); $i++) {
1239                 $nickname = $names[$i];
1240                 $recipient = common_relative_profile($sender, $nickname, $notice->created);
1241                 if (!$recipient) {
1242                         continue;
1243                 }
1244                 if ($i == 0 && ($recipient->id != $sender->id) && !$notice->reply_to) { # Don't save reply to self
1245                         $reply_for = $recipient;
1246                         $recipient_notice = $reply_for->getCurrentNotice();
1247                         if ($recipient_notice) {
1248                                 $orig = clone($notice);
1249                                 $notice->reply_to = $recipient_notice->id;
1250                                 $notice->update($orig);
1251                         }
1252                 }
1253                 $reply = new Reply();
1254                 $reply->notice_id = $notice->id;
1255                 $reply->profile_id = $recipient->id;
1256                 $id = $reply->insert();
1257                 if (!$id) {
1258                         $last_error = &PEAR::getStaticProperty('DB_DataObject','lastError');
1259                         common_log(LOG_ERR, 'DB error inserting reply: ' . $last_error->message);
1260                         common_server_error(sprintf(_('DB error inserting reply: %s'), $last_error->message));
1261                         return;
1262                 }
1263         }
1264 }
1265
1266 function common_broadcast_notice($notice, $remote=false) {
1267
1268         // Check to see if notice should go to Twitter
1269         $flink = Foreign_link::getForeignLink($notice->profile_id, 1); // 1 == Twitter
1270         if (($flink->noticesync & FOREIGN_NOTICE_SEND) == FOREIGN_NOTICE_SEND) {
1271
1272                 // If it's not a Twitter-style reply, or if the user WANTS to send replies...
1273
1274                 if (!preg_match('/^@[a-zA-Z0-9_]{1,15}\b/u', $notice->content) ||
1275                         (($flink->noticesync & FOREIGN_NOTICE_SEND_REPLY) == FOREIGN_NOTICE_SEND_REPLY)) {
1276
1277                         $result = common_twitter_broadcast($notice, $flink);
1278
1279                         if (!$result) {
1280                                 common_debug('Unable to send notice: ' . $notice->id . ' to Twitter.', __FILE__);
1281                         }
1282                 }
1283         }
1284
1285         if (common_config('queue', 'enabled')) {
1286                 # Do it later!
1287                 return common_enqueue_notice($notice);
1288         } else {
1289                 return common_real_broadcast($notice, $remote);
1290         }
1291 }
1292
1293 function common_twitter_broadcast($notice, $flink) {
1294         global $config;
1295         $success = true;
1296         $fuser = $flink->getForeignUser();
1297         $twitter_user = $fuser->nickname;
1298         $twitter_password = $flink->credentials;
1299         $uri = 'http://www.twitter.com/statuses/update.json';
1300
1301         // XXX: Hack to get around PHP cURL's use of @ being a a meta character
1302         $statustxt = preg_replace('/^@/', ' @', $notice->content);
1303
1304         $options = array(
1305                 CURLOPT_USERPWD                 => "$twitter_user:$twitter_password",
1306                 CURLOPT_POST                    => true,
1307                 CURLOPT_POSTFIELDS              => array(
1308                                                                         'status'        => $statustxt,
1309                                                                         'source'        => $config['integration']['source']
1310                                                                         ),
1311                 CURLOPT_RETURNTRANSFER  => true,
1312                 CURLOPT_FAILONERROR             => true,
1313                 CURLOPT_HEADER                  => false,
1314                 CURLOPT_FOLLOWLOCATION  => true,
1315                 CURLOPT_USERAGENT               => "Laconica",
1316                 CURLOPT_CONNECTTIMEOUT  => 120,  // XXX: Scary!!!! How long should this be?
1317                 CURLOPT_TIMEOUT                 => 120
1318         );
1319
1320         $ch = curl_init($uri);
1321     curl_setopt_array($ch, $options);
1322     $data = curl_exec($ch);
1323     $errmsg = curl_error($ch);
1324
1325         if ($errmsg) {
1326                 common_debug("cURL error: $errmsg - trying to send notice for $twitter_user.",
1327                         __FILE__);
1328                 $success = false;
1329         }
1330
1331         curl_close($ch);
1332
1333         if (!$data) {
1334                 common_debug("No data returned by Twitter's API trying to send update for $twitter_user",
1335                         __FILE__);
1336                 $success = false;
1337         }
1338
1339         // Twitter should return a status
1340         $status = json_decode($data);
1341
1342         if (!$status->id) {
1343                 common_debug("Unexpected data returned by Twitter API trying to send update for $twitter_user",
1344                         __FILE__);
1345                 $success = false;
1346         }
1347
1348         return $success;
1349 }
1350
1351 # Stick the notice on the queue
1352
1353 function common_enqueue_notice($notice) {
1354         foreach (array('jabber', 'omb', 'sms', 'public') as $transport) {
1355                 $qi = new Queue_item();
1356                 $qi->notice_id = $notice->id;
1357                 $qi->transport = $transport;
1358                 $qi->created = $notice->created;
1359         $result = $qi->insert();
1360                 if (!$result) {
1361                         $last_error = &PEAR::getStaticProperty('DB_DataObject','lastError');
1362                         common_log(LOG_ERR, 'DB error inserting queue item: ' . $last_error->message);
1363                         return false;
1364                 }
1365                 common_log(LOG_DEBUG, 'complete queueing notice ID = ' . $notice->id . ' for ' . $transport);
1366         }
1367         return $result;
1368 }
1369
1370 function common_dequeue_notice($notice) {
1371         $qi = Queue_item::staticGet($notice->id);
1372         if ($qi) {
1373                 $result = $qi->delete();
1374                 if (!$result) {
1375                     $last_error = &PEAR::getStaticProperty('DB_DataObject','lastError');
1376                     common_log(LOG_ERR, 'DB error deleting queue item: ' . $last_error->message);
1377                     return false;
1378                 }
1379                 common_log(LOG_DEBUG, 'complete dequeueing notice ID = ' . $notice->id);
1380                 return $result;
1381         } else {
1382             return false;
1383         }
1384 }
1385
1386 function common_real_broadcast($notice, $remote=false) {
1387         $success = true;
1388         if (!$remote) {
1389                 # Make sure we have the OMB stuff
1390                 require_once(INSTALLDIR.'/lib/omb.php');
1391                 $success = omb_broadcast_remote_subscribers($notice);
1392                 if (!$success) {
1393                         common_log(LOG_ERR, 'Error in OMB broadcast for notice ' . $notice->id);
1394                 }
1395         }
1396         if ($success) {
1397                 require_once(INSTALLDIR.'/lib/jabber.php');
1398                 $success = jabber_broadcast_notice($notice);
1399                 if (!$success) {
1400                         common_log(LOG_ERR, 'Error in jabber broadcast for notice ' . $notice->id);
1401                 }
1402         }
1403         if ($success) {
1404                 require_once(INSTALLDIR.'/lib/mail.php');
1405                 $success = mail_broadcast_notice_sms($notice);
1406                 if (!$success) {
1407                         common_log(LOG_ERR, 'Error in sms broadcast for notice ' . $notice->id);
1408                 }
1409         }
1410         if ($success) {
1411                 $success = jabber_public_notice($notice);
1412                 if (!$success) {
1413                         common_log(LOG_ERR, 'Error in public broadcast for notice ' . $notice->id);
1414                 }
1415         }
1416         // XXX: broadcast notices to other IM
1417         return $success;
1418 }
1419
1420 function common_broadcast_profile($profile) {
1421         // XXX: optionally use a queue system like http://code.google.com/p/microapps/wiki/NQDQ
1422         require_once(INSTALLDIR.'/lib/omb.php');
1423         omb_broadcast_profile($profile);
1424         // XXX: Other broadcasts...?
1425         return true;
1426 }
1427
1428 function common_profile_url($nickname) {
1429         return common_local_url('showstream', array('nickname' => $nickname));
1430 }
1431
1432 # Don't call if nobody's logged in
1433
1434 function common_notice_form($action=NULL, $content=NULL) {
1435         $user = common_current_user();
1436         assert(!is_null($user));
1437         common_element_start('form', array('id' => 'status_form',
1438                                                                            'method' => 'post',
1439                                                                            'action' => common_local_url('newnotice')));
1440         common_element_start('p');
1441         common_element('label', array('for' => 'status_textarea',
1442                                                                   'id' => 'status_label'),
1443                                    sprintf(_('What\'s up, %s?'), $user->nickname));
1444     common_element('span', array('id' => 'counter', 'class' => 'counter'), '140');
1445         common_element('textarea', array('id' => 'status_textarea',
1446                                                                          'cols' => 60,
1447                                                                          'rows' => 3,
1448                                                                          'name' => 'status_textarea'),
1449                                    ($content) ? $content : '');
1450         common_hidden('token', common_session_token());
1451         if ($action) {
1452                 common_hidden('returnto', $action);
1453         }
1454         # set by JavaScript
1455         common_hidden('inreplyto', 'false');
1456         common_element('input', array('id' => 'status_submit',
1457                                                                   'name' => 'status_submit',
1458                                                                   'type' => 'submit',
1459                                                                   'value' => _('Send')));
1460         common_element_end('p');
1461         common_element_end('form');
1462 }
1463
1464 # Should make up a reasonable root URL
1465
1466 function common_root_url() {
1467         return common_path('');
1468 }
1469
1470 # returns $bytes bytes of random data as a hexadecimal string
1471 # "good" here is a goal and not a guarantee
1472
1473 function common_good_rand($bytes) {
1474         # XXX: use random.org...?
1475         if (file_exists('/dev/urandom')) {
1476                 return common_urandom($bytes);
1477         } else { # FIXME: this is probably not good enough
1478                 return common_mtrand($bytes);
1479         }
1480 }
1481
1482 function common_urandom($bytes) {
1483         $h = fopen('/dev/urandom', 'rb');
1484         # should not block
1485         $src = fread($h, $bytes);
1486         fclose($h);
1487         $enc = '';
1488         for ($i = 0; $i < $bytes; $i++) {
1489                 $enc .= sprintf("%02x", (ord($src[$i])));
1490         }
1491         return $enc;
1492 }
1493
1494 function common_mtrand($bytes) {
1495         $enc = '';
1496         for ($i = 0; $i < $bytes; $i++) {
1497                 $enc .= sprintf("%02x", mt_rand(0, 255));
1498         }
1499         return $enc;
1500 }
1501
1502 function common_set_returnto($url) {
1503         common_ensure_session();
1504         $_SESSION['returnto'] = $url;
1505 }
1506
1507 function common_get_returnto() {
1508         common_ensure_session();
1509         return $_SESSION['returnto'];
1510 }
1511
1512 function common_timestamp() {
1513         return date('YmdHis');
1514 }
1515
1516 function common_ensure_syslog() {
1517         static $initialized = false;
1518         if (!$initialized) {
1519                 global $config;
1520                 openlog($config['syslog']['appname'], 0, LOG_USER);
1521                 $initialized = true;
1522         }
1523 }
1524
1525 function common_log($priority, $msg, $filename=NULL) {
1526         $logfile = common_config('site', 'logfile');
1527         if ($logfile) {
1528                 $log = fopen($logfile, "a");
1529                 if ($log) {
1530                         static $syslog_priorities = array('LOG_EMERG', 'LOG_ALERT', 'LOG_CRIT', 'LOG_ERR',
1531                                                                                           'LOG_WARNING', 'LOG_NOTICE', 'LOG_INFO', 'LOG_DEBUG');
1532                         $output = date('Y-m-d H:i:s') . ' ' . $syslog_priorities[$priority] . ': ' . $msg . "\n";
1533                         fwrite($log, $output);
1534                         fclose($log);
1535                 }
1536         } else {
1537                 common_ensure_syslog();
1538                 syslog($priority, $msg);
1539         }
1540 }
1541
1542 function common_debug($msg, $filename=NULL) {
1543         if ($filename) {
1544                 common_log(LOG_DEBUG, basename($filename).' - '.$msg);
1545         } else {
1546                 common_log(LOG_DEBUG, $msg);
1547         }
1548 }
1549
1550 function common_log_db_error(&$object, $verb, $filename=NULL) {
1551         $objstr = common_log_objstring($object);
1552         $last_error = &PEAR::getStaticProperty('DB_DataObject','lastError');
1553         common_log(LOG_ERR, $last_error->message . '(' . $verb . ' on ' . $objstr . ')', $filename);
1554 }
1555
1556 function common_log_objstring(&$object) {
1557         if (is_null($object)) {
1558                 return "NULL";
1559         }
1560         $arr = $object->toArray();
1561         $fields = array();
1562         foreach ($arr as $k => $v) {
1563                 $fields[] = "$k='$v'";
1564         }
1565         $objstring = $object->tableName() . '[' . implode(',', $fields) . ']';
1566         return $objstring;
1567 }
1568
1569 function common_valid_http_url($url) {
1570         return Validate::uri($url, array('allowed_schemes' => array('http', 'https')));
1571 }
1572
1573 function common_valid_tag($tag) {
1574         if (preg_match('/^tag:(.*?),(\d{4}(-\d{2}(-\d{2})?)?):(.*)$/', $tag, $matches)) {
1575                 return (Validate::email($matches[1]) ||
1576                                 preg_match('/^([\w-\.]+)$/', $matches[1]));
1577         }
1578         return false;
1579 }
1580
1581 # Does a little before-after block for next/prev page
1582
1583 function common_pagination($have_before, $have_after, $page, $action, $args=NULL) {
1584
1585         if ($have_before || $have_after) {
1586                 common_element_start('div', array('id' => 'pagination'));
1587                 common_element_start('ul', array('id' => 'nav_pagination'));
1588         }
1589
1590         if ($have_before) {
1591                 $pargs = array('page' => $page-1);
1592                 $newargs = ($args) ? array_merge($args,$pargs) : $pargs;
1593
1594                 common_element_start('li', 'before');
1595                 common_element('a', array('href' => common_local_url($action, $newargs)),
1596                                            _('« After'));
1597                 common_element_end('li');
1598         }
1599
1600         if ($have_after) {
1601                 $pargs = array('page' => $page+1);
1602                 $newargs = ($args) ? array_merge($args,$pargs) : $pargs;
1603                 common_element_start('li', 'after');
1604                 common_element('a', array('href' => common_local_url($action, $newargs)),
1605                                                    _('Before »'));
1606                 common_element_end('li');
1607         }
1608
1609         if ($have_before || $have_after) {
1610                 common_element_end('ul');
1611                 common_element_end('div');
1612         }
1613 }
1614
1615 /* Following functions are copied from MediaWiki GlobalFunctions.php
1616  * and written by Evan Prodromou. */
1617
1618 function common_accept_to_prefs($accept, $def = '*/*') {
1619         # No arg means accept anything (per HTTP spec)
1620         if(!$accept) {
1621                 return array($def => 1);
1622         }
1623
1624         $prefs = array();
1625
1626         $parts = explode(',', $accept);
1627
1628         foreach($parts as $part) {
1629                 # FIXME: doesn't deal with params like 'text/html; level=1'
1630                 @list($value, $qpart) = explode(';', $part);
1631                 $match = array();
1632                 if(!isset($qpart)) {
1633                         $prefs[$value] = 1;
1634                 } elseif(preg_match('/q\s*=\s*(\d*\.\d+)/', $qpart, $match)) {
1635                         $prefs[$value] = $match[1];
1636                 }
1637         }
1638
1639         return $prefs;
1640 }
1641
1642 function common_mime_type_match($type, $avail) {
1643         if(array_key_exists($type, $avail)) {
1644                 return $type;
1645         } else {
1646                 $parts = explode('/', $type);
1647                 if(array_key_exists($parts[0] . '/*', $avail)) {
1648                         return $parts[0] . '/*';
1649                 } elseif(array_key_exists('*/*', $avail)) {
1650                         return '*/*';
1651                 } else {
1652                         return NULL;
1653                 }
1654         }
1655 }
1656
1657 function common_negotiate_type($cprefs, $sprefs) {
1658         $combine = array();
1659
1660         foreach(array_keys($sprefs) as $type) {
1661                 $parts = explode('/', $type);
1662                 if($parts[1] != '*') {
1663                         $ckey = common_mime_type_match($type, $cprefs);
1664                         if($ckey) {
1665                                 $combine[$type] = $sprefs[$type] * $cprefs[$ckey];
1666                         }
1667                 }
1668         }
1669
1670         foreach(array_keys($cprefs) as $type) {
1671                 $parts = explode('/', $type);
1672                 if($parts[1] != '*' && !array_key_exists($type, $sprefs)) {
1673                         $skey = common_mime_type_match($type, $sprefs);
1674                         if($skey) {
1675                                 $combine[$type] = $sprefs[$skey] * $cprefs[$type];
1676                         }
1677                 }
1678         }
1679
1680         $bestq = 0;
1681         $besttype = "text/html";
1682
1683         foreach(array_keys($combine) as $type) {
1684                 if($combine[$type] > $bestq) {
1685                         $besttype = $type;
1686                         $bestq = $combine[$type];
1687                 }
1688         }
1689
1690         return $besttype;
1691 }
1692
1693 function common_config($main, $sub) {
1694         global $config;
1695         return isset($config[$main][$sub]) ? $config[$main][$sub] : false;
1696 }
1697
1698 function common_copy_args($from) {
1699         $to = array();
1700         $strip = get_magic_quotes_gpc();
1701         foreach ($from as $k => $v) {
1702                 $to[$k] = ($strip) ? stripslashes($v) : $v;
1703         }
1704         return $to;
1705 }
1706
1707 // Neutralise the evil effects of magic_quotes_gpc in the current request.
1708 // This is used before handing a request off to OAuthRequest::from_request.
1709 function common_remove_magic_from_request() {
1710         if(get_magic_quotes_gpc()) {
1711                 $_POST=array_map('stripslashes',$_POST);
1712                 $_GET=array_map('stripslashes',$_GET);
1713         }
1714 }
1715
1716 function common_user_uri(&$user) {
1717         return common_local_url('userbyid', array('id' => $user->id));
1718 }
1719
1720 function common_notice_uri(&$notice) {
1721         return common_local_url('shownotice',
1722                 array('notice' => $notice->id));
1723 }
1724
1725 # 36 alphanums - lookalikes (0, O, 1, I) = 32 chars = 5 bits
1726
1727 function common_confirmation_code($bits) {
1728         # 36 alphanums - lookalikes (0, O, 1, I) = 32 chars = 5 bits
1729         static $codechars = '23456789ABCDEFGHJKLMNPQRSTUVWXYZ';
1730         $chars = ceil($bits/5);
1731         $code = '';
1732         for ($i = 0; $i < $chars; $i++) {
1733                 # XXX: convert to string and back
1734                 $num = hexdec(common_good_rand(1));
1735                 # XXX: randomness is too precious to throw away almost
1736                 # 40% of the bits we get!
1737                 $code .= $codechars[$num%32];
1738         }
1739         return $code;
1740 }
1741
1742 # convert markup to HTML
1743
1744 function common_markup_to_html($c) {
1745         $c = preg_replace('/%%action.(\w+)%%/e', "common_local_url('\\1')", $c);
1746         $c = preg_replace('/%%doc.(\w+)%%/e', "common_local_url('doc', array('title'=>'\\1'))", $c);
1747         $c = preg_replace('/%%(\w+).(\w+)%%/e', 'common_config(\'\\1\', \'\\2\')', $c);
1748         return Markdown($c);
1749 }
1750
1751 function common_profile_avatar_url($profile, $size=AVATAR_PROFILE_SIZE) {
1752         $avatar = $profile->getAvatar($size);
1753         if ($avatar) {
1754                 return common_avatar_display_url($avatar);
1755         } else {
1756                 return common_default_avatar($size);
1757         }
1758 }
1759
1760 function common_profile_uri($profile) {
1761         if (!$profile) {
1762                 return NULL;
1763         }
1764         $user = User::staticGet($profile->id);
1765         if ($user) {
1766                 return $user->uri;
1767         }
1768
1769         $remote = Remote_profile::staticGet($profile->id);
1770         if ($remote) {
1771                 return $remote->uri;
1772         }
1773         # XXX: this is a very bad profile!
1774         return NULL;
1775 }
1776
1777 function common_canonical_sms($sms) {
1778         # strip non-digits
1779         preg_replace('/\D/', '', $sms);
1780         return $sms;
1781 }
1782
1783 function common_error_handler($errno, $errstr, $errfile, $errline, $errcontext) {
1784     switch ($errno) {
1785      case E_USER_ERROR:
1786                 common_log(LOG_ERR, "[$errno] $errstr ($errfile:$errline)");
1787                 exit(1);
1788                 break;
1789
1790          case E_USER_WARNING:
1791                 common_log(LOG_WARNING, "[$errno] $errstr ($errfile:$errline)");
1792                 break;
1793
1794      case E_USER_NOTICE:
1795                 common_log(LOG_NOTICE, "[$errno] $errstr ($errfile:$errline)");
1796                 break;
1797     }
1798
1799         # FIXME: show error page if we're on the Web
1800     /* Don't execute PHP internal error handler */
1801     return true;
1802 }
1803
1804 function common_session_token() {
1805         common_ensure_session();
1806         if (!array_key_exists('token', $_SESSION)) {
1807                 $_SESSION['token'] = common_good_rand(64);
1808         }
1809         return $_SESSION['token'];
1810 }
1811
1812 function common_disfavor_form($notice) {
1813         common_element_start('form', array('id' => 'disfavor-' . $notice->id,
1814                                                                            'method' => 'post',
1815                                                                            'class' => 'disfavor',
1816                                                                            'action' => common_local_url('disfavor')));
1817
1818         common_element('input', array('type' => 'hidden',
1819                                                                   'name' => 'token-'. $notice->id,
1820                                                                   'id' => 'token-'. $notice->id,
1821                                                                   'class' => 'token',
1822                                                                   'value' => common_session_token()));
1823
1824         common_element('input', array('type' => 'hidden',
1825                                                                   'name' => 'notice',
1826                                                                   'id' => 'notice-n'. $notice->id,
1827                                                                   'class' => 'notice',
1828                                                                   'value' => $notice->id));
1829
1830         common_element('input', array('type' => 'submit',
1831                                                                   'id' => 'disfavor-submit-' . $notice->id,
1832                                                                   'name' => 'disfavor-submit-' . $notice->id,
1833                                                                   'class' => 'disfavor',
1834                                                                   'value' => 'Disfavor favorite',
1835                                                                   'title' => 'Remove this message from favorites'));
1836         common_element_end('form');
1837 }
1838
1839 function common_favor_form($notice) {
1840         common_element_start('form', array('id' => 'favor-' . $notice->id,
1841                                                                            'method' => 'post',
1842                                                                            'class' => 'favor',
1843                                                                            'action' => common_local_url('favor')));
1844
1845         common_element('input', array('type' => 'hidden',
1846                                                                   'name' => 'token-'. $notice->id,
1847                                                                   'id' => 'token-'. $notice->id,
1848                                                                   'class' => 'token',
1849                                                                   'value' => common_session_token()));
1850
1851         common_element('input', array('type' => 'hidden',
1852                                                                   'name' => 'notice',
1853                                                                   'id' => 'notice-n'. $notice->id,
1854                                                                   'class' => 'notice',
1855                                                                   'value' => $notice->id));
1856
1857         common_element('input', array('type' => 'submit',
1858                                                                   'id' => 'favor-submit-' . $notice->id,
1859                                                                   'name' => 'favor-submit-' . $notice->id,
1860                                                                   'class' => 'favor',
1861                                                                   'value' => 'Add to favorites',
1862                                                                   'title' => 'Add this message to favorites'));
1863         common_element_end('form');
1864 }
1865
1866 function common_nudge_form($profile) {
1867         common_element_start('form', array('id' => 'nudge', 'method' => 'post',
1868                                                                            'action' => common_local_url('nudge', array('nickname' => $profile->nickname))));
1869         common_hidden('token', common_session_token());
1870         common_element('input', array('type' => 'submit',
1871                                                                   'class' => 'submit',
1872                                                                   'value' => _('Send a nudge')));
1873         common_element_end('form');
1874 }
1875
1876 function common_nudge_response() {
1877         common_element('p', array('id' => 'nudge_response'), _('Nudge sent!'));
1878 }
1879
1880 function common_cache_key($extra) {
1881         return 'laconica:' . common_keyize(common_config('site', 'name')) . ':' . $extra;
1882 }
1883
1884 function common_keyize($str) {
1885         $str = strtolower($str);
1886         $str = preg_replace('/\s/', '_', $str);
1887         return $str;
1888 }
1889
1890 function common_message_form($content, $user, $to) {
1891
1892         common_element_start('form', array('id' => 'message_form',
1893                                                                            'method' => 'post',
1894                                                                            'action' => common_local_url('newmessage')));
1895
1896         $mutual_users = $user->mutuallySubscribedUsers();
1897
1898         $mutual = array();
1899
1900         while ($mutual_users->fetch()) {
1901                 if ($mutual_users->id != $user->id) {
1902                         $mutual[$mutual_users->id] = $mutual_users->nickname;
1903                 }
1904         }
1905
1906         $mutual_users->free();
1907         unset($mutual_users);
1908
1909         common_dropdown('to', _('To'), $mutual, NULL, FALSE, $to->id);
1910
1911         common_element_start('p');
1912
1913         common_element('textarea', array('id' => 'message_content',
1914                                                                          'cols' => 60,
1915                                                                          'rows' => 3,
1916                                                                          'name' => 'content'),
1917                                    ($content) ? $content : '');
1918
1919         common_element('input', array('id' => 'message_send',
1920                                                                   'name' => 'message_send',
1921                                                                   'type' => 'submit',
1922                                                                   'value' => _('Send')));
1923
1924         common_hidden('token', common_session_token());
1925
1926         common_element_end('p');
1927         common_element_end('form');
1928 }
1929
1930 function common_memcache() {
1931         static $cache = NULL;
1932         if (!common_config('memcached', 'enabled')) {
1933                 return NULL;
1934         } else {
1935                 if (!$cache) {
1936                         $cache = new Memcache();
1937                         $servers = common_config('memcached', 'server');
1938                         if (is_array($servers)) {
1939                                 foreach($servers as $server) {
1940                                         $cache->addServer($server);
1941                                 }
1942                         } else {
1943                                 $cache->addServer($servers);
1944                         }
1945                 }
1946                 return $cache;
1947         }
1948 }