]> git.mxchange.org Git - friendica.git/blob - mod/cal.php
pub calendar - add sql perms to the query (I forgot to do this)
[friendica.git] / mod / cal.php
1 <?php
2 /**
3  * @file mod/cal.php
4  * @brief The calendar module
5  *      This calendar is for profile visitors and contains only the events
6  *      of the profile owner
7  */
8
9 require_once('include/event.php');
10 require_once('include/redir.php');
11
12 function cal_init(&$a) {
13         if($a->argc > 1)
14                 auto_redir($a, $a->argv[1]);
15
16         if((get_config('system','block_public')) && (! local_user()) && (! remote_user())) {
17                 return;
18         }
19
20         nav_set_selected('events');
21
22         $o = '';
23
24         if($a->argc > 1) {
25                 $nick = $a->argv[1];
26                 $user = q("SELECT * FROM `user` WHERE `nickname` = '%s' AND `blocked` = 0 LIMIT 1",
27                         dbesc($nick)
28                 );
29
30                 if(! count($user))
31                         return;
32
33                 $a->data['user'] = $user[0];
34                 $a->profile_uid = $user[0]['uid'];
35
36                 // if it's a json request abort here becaus we don't
37                 // need the widget data
38                 if ($a->argv[2] === 'json')
39                         return;
40
41                 $profile = get_profiledata_by_nick($nick, $a->profile_uid);
42
43                 if((intval($profile['page-flags']) == PAGE_COMMUNITY) || (intval($profile['page-flags']) == PAGE_PRVGROUP))
44                         $account_type = t('Forum');
45                 else
46                         $account_type = "";
47
48                 $tpl = get_markup_template("vcard-widget.tpl");
49
50                 $vcard_widget .= replace_macros($tpl, array(
51                         '$name' => $profile['name'],
52                         '$photo' => $profile['photo'],
53                         '$addr' => (($profile['addr'] != "") ? $profile['addr'] : ""),
54                         '$account_type' => $account_type,
55                         '$pdesc' => (($profile['pdesc'] != "") ? $profile['pdesc'] : ""),
56                 ));
57
58                 $cal_widget = widget_events();
59
60                 if(! x($a->page,'aside'))
61                         $a->page['aside'] = '';
62
63                 $a->page['aside'] .= $vcard_widget;
64                 $a->page['aside'] .= $cal_widget;
65         }
66
67         return;
68 }
69
70 function cal_content(&$a) {
71         nav_set_selected('events');
72
73         $editselect = 'none';
74         if( feature_enabled(local_user(), 'richtext') )
75                 $editselect = 'textareas';
76
77         // First day of the week (0 = Sunday)
78         $firstDay = get_pconfig(local_user(),'system','first_day_of_week');
79         if ($firstDay === false) $firstDay=0;
80
81         // get the translation strings for the callendar
82         $i18n = get_event_strings();
83
84         $htpl = get_markup_template('event_head.tpl');
85         $a->page['htmlhead'] .= replace_macros($htpl,array(
86                 '$baseurl' => $a->get_baseurl(),
87                 '$module_url' => '/cal/' . $a->data['user']['nickname'],
88                 '$modparams' => 2,
89                 '$i18n' => $i18n,
90                 '$editselect' => $editselect
91         ));
92
93         $etpl = get_markup_template('event_end.tpl');
94         $a->page['end'] .= replace_macros($etpl,array(
95                 '$baseurl' => $a->get_baseurl(),
96                 '$editselect' => $editselect
97         ));
98
99         $o ="";
100
101         $mode = 'view';
102         $y = 0;
103         $m = 0;
104         $ignored = ((x($_REQUEST,'ignored')) ? intval($_REQUEST['ignored']) : 0);
105
106         if($a->argc == 4) {
107                 if($a->argv[2] == 'export') {
108                         $mode = 'export';
109                         $format = $a->argv[3];
110                 }
111         }
112
113         //
114         // Setup permissions structures
115         //
116
117         $contact = null;
118         $remote_contact = false;
119         $contact_id = 0;
120
121         $owner_uid = $a->data['user']['uid'];
122         $nick = $a->data['user']['nickname'];
123
124         if(is_array($_SESSION['remote'])) {
125                 foreach($_SESSION['remote'] as $v) {
126                         if($v['uid'] == $a->profile['profile_uid']) {
127                                 $contact_id = $v['cid'];
128                                 break;
129                         }
130                 }
131         }
132         if($contact_id) {
133                 $groups = init_groups_visitor($contact_id);
134                 $r = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1",
135                         intval($contact_id),
136                         intval($a->profile['profile_uid'])
137                 );
138                 if(count($r)) {
139                         $contact = $r[0];
140                         $remote_contact = true;
141                 }
142         }
143         if(! $remote_contact) {
144                 if(local_user()) {
145                         $contact_id = $_SESSION['cid'];
146                         $contact = $a->contact;
147                 }
148         }
149         $is_owner = ((local_user()) && (local_user() == $a->profile['profile_uid']) ? true : false);
150
151         if($a->profile['hidewall'] && (! $is_owner) && (! $remote_contact)) {
152                 notice( t('Access to this profile has been restricted.') . EOL);
153                 return;
154         }
155
156         // get the permissions
157         $sql_perms = item_permissions_sql($owner_uid,$remote_contact,$groups);
158         // we only want to have the events of the profile owner
159         $sql_extra = " AND `event`.`cid` = 0 " . $sql_perms;
160
161         // get the tab navigation bar
162         $tabs .= profile_tabs($a,false, $a->data['user']['nickname']);
163
164         // The view mode part is similiar to /mod/events.php
165         if($mode == 'view') {
166
167
168                 $thisyear = datetime_convert('UTC',date_default_timezone_get(),'now','Y');
169                 $thismonth = datetime_convert('UTC',date_default_timezone_get(),'now','m');
170                 if(! $y)
171                         $y = intval($thisyear);
172                 if(! $m)
173                         $m = intval($thismonth);
174
175                 // Put some limits on dates. The PHP date functions don't seem to do so well before 1900.
176                 // An upper limit was chosen to keep search engines from exploring links millions of years in the future.
177
178                 if($y < 1901)
179                         $y = 1900;
180                 if($y > 2099)
181                         $y = 2100;
182
183                 $nextyear = $y;
184                 $nextmonth = $m + 1;
185                 if($nextmonth > 12) {
186                                 $nextmonth = 1;
187                         $nextyear ++;
188                 }
189
190                 $prevyear = $y;
191                 if($m > 1)
192                         $prevmonth = $m - 1;
193                 else {
194                         $prevmonth = 12;
195                         $prevyear --;
196                 }
197
198                 $dim    = get_dim($y,$m);
199                 $start  = sprintf('%d-%d-%d %d:%d:%d',$y,$m,1,0,0,0);
200                 $finish = sprintf('%d-%d-%d %d:%d:%d',$y,$m,$dim,23,59,59);
201
202
203                 if ($a->argv[2] === 'json'){
204                         if (x($_GET,'start'))   $start = date("Y-m-d h:i:s", $_GET['start']);
205                         if (x($_GET,'end'))     $finish = date("Y-m-d h:i:s", $_GET['end']);
206                 }
207
208                 $start  = datetime_convert('UTC','UTC',$start);
209                 $finish = datetime_convert('UTC','UTC',$finish);
210
211                 $adjust_start = datetime_convert('UTC', date_default_timezone_get(), $start);
212                 $adjust_finish = datetime_convert('UTC', date_default_timezone_get(), $finish);
213
214                 // put the event parametes in an array so we can better transmit them
215                 $event_params = array(
216                         'event_id' => (x($_GET,'id') ? $_GET["id"] : 0),
217                         'start' => $start,
218                         'finish' => $finish,
219                         'adjust_start' => $adjust_start,
220                         'adjust_finish' => $adjust_finish,
221                         'ignored' => $ignored,
222                 );
223
224                 // get events by id or by date
225                 if (x($_GET,'id')){
226                         $r = event_by_id($owner_uid, $event_params, $sql_extra);
227                 } else {
228                         $r = events_by_date($owner_uid, $event_params, $sql_extra);
229                 }
230
231                 $links = array();
232
233                 if(count($r)) {
234                         $r = sort_by_date($r);
235                         foreach($r as $rr) {
236                                 $j = (($rr['adjust']) ? datetime_convert('UTC',date_default_timezone_get(),$rr['start'], 'j') : datetime_convert('UTC','UTC',$rr['start'],'j'));
237                                 if(! x($links,$j))
238                                         $links[$j] = $a->get_baseurl() . '/' . $a->cmd . '#link-' . $j;
239                         }
240                 }
241
242
243                 $events=array();
244
245                 // transform the event in a usable array
246                 if(count($r))
247                         $r = sort_by_date($r);
248                         $events = process_events($r);
249
250                 if ($a->argv[2] === 'json'){
251                         echo json_encode($events); killme();
252                 }
253
254                 // links: array('href', 'text', 'extra css classes', 'title')
255                 if (x($_GET,'id')){
256                         $tpl =  get_markup_template("event.tpl");
257                 } else {
258 //                      if (get_config('experimentals','new_calendar')==1){
259                                 $tpl = get_markup_template("events-js.tpl");
260 //                      } else {
261 //                              $tpl = get_markup_template("events.tpl");
262 //                      }
263                 }
264
265                 // Get rid of dashes in key names, Smarty3 can't handle them
266                 foreach($events as $key => $event) {
267                         $event_item = array();
268                         foreach($event['item'] as $k => $v) {
269                                 $k = str_replace('-','_',$k);
270                                 $event_item[$k] = $v;
271                         }
272                         $events[$key]['item'] = $event_item;
273                 }
274
275                 $o = replace_macros($tpl, array(
276                         '$baseurl'      => $a->get_baseurl(),
277                         '$tabs'         => $tabs,
278                         '$title'        => t('Events'),
279                         '$view'         => t('View'),
280                         '$previus'      => array($a->get_baseurl()."/events/$prevyear/$prevmonth",t('Previous'),'',''),
281                         '$next'         => array($a->get_baseurl()."/events/$nextyear/$nextmonth",t('Next'),'',''),
282                         '$calendar' => cal($y,$m,$links, ' eventcal'),
283
284                         '$events'       => $events,
285
286                         "today" => t("today"),
287                         "month" => t("month"),
288                         "week" => t("week"),
289                         "day" => t("day"),
290
291
292                 ));
293
294                 if (x($_GET,'id')){ echo $o; killme(); }
295
296                 return $o;
297         }
298
299         if($mode == 'export') {
300                 if(! (intval($owner_uid))) {
301                         notice( t('User not found'));
302                         return;
303                 }
304
305                 // Test permissions
306                 if( ((local_user() !== $owner_uid)) && !(feature_enabled($owner_uid, "export_calendar"))) {
307                         notice( t('Permission denied.') . EOL);
308                         return;
309                 }
310
311                 // Get the export data by uid
312                 $evexport = event_export($owner_uid, $format);
313
314                 if ($evexport["success"] == false ) {
315                         if($evexport["content"])
316                                 notice( t('This calendar format is not supported') );
317                         else
318                                 notice( t('No exportable data found'));
319
320                         return;
321                 }
322
323                 // If nothing went wrong we can echo the export content
324                 if ($evexport["success"] == true ) {
325                         header('Content-type: text/calendar');
326                         header('content-disposition: attachment; filename="' . t('calendar') . '-' . $nick . '.' . $evexport["extension"] . '"' );
327                         echo $evexport["content"];
328                         killme();
329                 }
330
331                 return;
332         }
333 }