mod/acl.php

   1 <?php
   2 /* ACL selector json backend */
   3 require_once("include/acl_selectors.php");
   4
   5 function acl_init(&$a){
   6         if(!local_user())
   7                 return "";
   8
   9
  10         $start = (x($_REQUEST,'start')?$_REQUEST['start']:0);
  11         $count = (x($_REQUEST,'count')?$_REQUEST['count']:100);
  12         $search = (x($_REQUEST,'search')?$_REQUEST['search']:"");
  13         $type = (x($_REQUEST,'type')?$_REQUEST['type']:"");
  14
  15
  16         if ($search!=""){
  17                 $sql_extra = "AND `name` LIKE '%%".dbesc($search)."%%'";
  18                 $sql_extra2 = "AND (`attag` LIKE '%%".dbesc($search)."%%' OR `name` LIKE '%%".dbesc($search)."%%' OR `nick` LIKE '%%".dbesc($search)."%%')";
  19         } else {
  20                 $sql_extra = $sql_extra2 = "";
  21         }
  22
  23         // count groups and contacts
  24         if ($type=='' || $type=='g'){
  25                 $r = q("SELECT COUNT(`id`) AS g FROM `group` WHERE `deleted` = 0 AND `uid` = %d $sql_extra",
  26                         intval(local_user())
  27                 );
  28                 $group_count = (int)$r[0]['g'];
  29         } else {
  30                 $group_count = 0;
  31         }
  32
  33         if ($type=='' || $type=='c'){
  34                 $r = q("SELECT COUNT(`id`) AS c FROM `contact`
  35                                 WHERE `uid` = %d AND `self` = 0
  36                                 AND `blocked` = 0 AND `pending` = 0 AND `archive` = 0
  37                                 AND `notify` != '' $sql_extra2" ,
  38                         intval(local_user())
  39                 );
  40                 $contact_count = (int)$r[0]['c'];
  41         }
  42         elseif ($type == 'm') {
  43
  44                 // autocomplete for Private Messages
  45
  46                 $r = q("SELECT COUNT(`id`) AS c FROM `contact`
  47                                 WHERE `uid` = %d AND `self` = 0
  48                                 AND `blocked` = 0 AND `pending` = 0 AND `archive` = 0
  49                                 AND `network` IN ('%s','%s','%s') $sql_extra2" ,
  50                         intval(local_user()),
  51                         dbesc(NETWORK_DFRN),
  52                         dbesc(NETWORK_ZOT),
  53                         dbesc(NETWORK_DIASPORA)
  54                 );
  55                 $contact_count = (int)$r[0]['c'];
  56
  57         } else {
  58                 $contact_count = 0;
  59         }
  60
  61         $tot = $group_count+$contact_count;
  62
  63         $groups = array();
  64         $contacts = array();
  65
  66         if ($type=='' || $type=='g'){
  67
  68                 $r = q("SELECT `group`.`id`, `group`.`name`, GROUP_CONCAT(DISTINCT `group_member`.`contact-id` SEPARATOR ',') as uids
  69                                 FROM `group`,`group_member`
  70                                 WHERE `group`.`deleted` = 0 AND `group`.`uid` = %d
  71                                         AND `group_member`.`gid`=`group`.`id`
  72                                         $sql_extra
  73                                 GROUP BY `group`.`id`
  74                                 ORDER BY `group`.`name`
  75                                 LIMIT %d,%d",
  76                         intval(local_user()),
  77                         intval($start),
  78                         intval($count)
  79                 );
  80
  81                 foreach($r as $g){
  82 //              logger('acl: group: ' . $g['name'] . ' members: ' . $g['uids']);
  83                         $groups[] = array(
  84                                 "type"  => "g",
  85                                 "photo" => "images/twopeople.png",
  86                                 "name"  => $g['name'],
  87                                 "id"    => intval($g['id']),
  88                                 "uids"  => array_map("intval", explode(",",$g['uids'])),
  89                                 "link"  => ''
  90                         );
  91                 }
  92         }
  93
  94         if ($type=='' || $type=='c'){
  95
  96                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag` FROM `contact`
  97                         WHERE `uid` = %d AND `self` = 0 AND `blocked` = 0 AND `pending` = 0 AND `archive` = 0 AND `notify` != ''
  98                         $sql_extra2
  99                         ORDER BY `name` ASC ",
 100                         intval(local_user())
 101                 );
 102         }
 103         elseif($type == 'm') {
 104                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag` FROM `contact`
 105                         WHERE `uid` = %d AND `self` = 0 AND `blocked` = 0 AND `pending` = 0 AND `archive` = 0
 106                         AND `network` IN ('%s','%s','%s')
 107                         $sql_extra2
 108                         ORDER BY `name` ASC ",
 109                         intval(local_user()),
 110                         dbesc(NETWORK_DFRN),
 111                         dbesc(NETWORK_ZOT),
 112                         dbesc(NETWORK_DIASPORA)
 113                 );
 114         }
 115         else
 116                 $r = array();
 117
 118         if(count($r)) {
 119                 foreach($r as $g){
 120                         $contacts[] = array(
 121                                 "type"  => "c",
 122                                 "photo" => $g['micro'],
 123                                 "name"  => $g['name'],
 124                                 "id"    => intval($g['id']),
 125                                 "network" => $g['network'],
 126                                 "link" => $g['url'],
 127                                 "nick" => ($g['attag']) ? $g['attag'] : $g['nick'],
 128                         );
 129                 }
 130         }
 131
 132         $items = array_merge($groups, $contacts);
 133
 134         $o = array(
 135                 'tot'   => $tot,
 136                 'start' => $start,
 137                 'count' => $count,
 138                 'items' => $items,
 139         );
 140
 141         echo json_encode($o);
 142
 143         killme();
 144 }
 145
 146