src/Model/Item.php

   1 <?php
   2
   3 /**
   4  * @file src/Model/Item.php
   5  */
   6
   7 namespace Friendica\Model;
   8
   9 use Friendica\Core\Addon;
  10 use Friendica\Core\Config;
  11 use Friendica\Core\PConfig;
  12 use Friendica\Core\Worker;
  13 use Friendica\Core\System;
  14 use Friendica\Model\Contact;
  15 use Friendica\Model\Conversation;
  16 use Friendica\Model\GContact;
  17 use Friendica\Model\Group;
  18 use Friendica\Model\Term;
  19 use Friendica\Model\User;
  20 use Friendica\Database\DBM;
  21 use Friendica\Protocol\OStatus;
  22 use dba;
  23 use Text_LanguageDetect;
  24
  25 require_once 'include/tags.php';
  26 require_once 'include/threads.php';
  27 require_once 'include/items.php';
  28 require_once 'include/text.php';
  29
  30 class Item
  31 {
  32         /**
  33          * @brief Update existing item entries
  34          *
  35          * @param array $fields The fields that are to be changed
  36          * @param array $condition The condition for finding the item entries
  37          *
  38          * In the future we may have to change permissions as well.
  39          * Then we had to add the user id as third parameter.
  40          *
  41          * A return value of "0" doesn't mean an error - but that 0 rows had been changed.
  42          *
  43          * @return integer|boolean number of affected rows - or "false" if there was an error
  44          */
  45         public static function update(array $fields, array $condition)
  46         {
  47                 if (empty($condition) || empty($fields)) {
  48                         return false;
  49                 }
  50
  51                 $success = dba::update('item', $fields, $condition);
  52
  53                 if (!$success) {
  54                         return false;
  55                 }
  56
  57                 $rows = dba::affected_rows();
  58
  59                 // We cannot simply expand the condition to check for origin entries
  60                 // The condition needn't to be a simple array but could be a complex condition.
  61                 $items = dba::select('item', ['id', 'origin'], $condition);
  62                 while ($item = dba::fetch($items)) {
  63                         // We only need to notfiy others when it is an original entry from us
  64                         if (!$item['origin']) {
  65                                 continue;
  66                         }
  67
  68                         create_tags_from_item($item['id']);
  69                         Term::createFromItem($item['id']);
  70                         update_thread($item['id']);
  71
  72                         Worker::add(PRIORITY_HIGH, "Notifier", 'edit_post', $item['id']);
  73                 }
  74
  75                 return $rows;
  76         }
  77
  78         /**
  79          * @brief Delete an item and notify others about it - if it was ours
  80          *
  81          * @param integer $item_id Item ID that should be delete
  82          *
  83          * @return $boolean success
  84          */
  85         public static function delete($item_id, $priority = PRIORITY_HIGH)
  86         {
  87                 // locate item to be deleted
  88                 $fields = ['id', 'uid', 'parent', 'parent-uri', 'origin', 'deleted', 'file', 'resource-id', 'event-id', 'attach'];
  89                 $item = dba::selectFirst('item', $fields, ['id' => $item_id]);
  90                 if (!DBM::is_result($item)) {
  91                         return false;
  92                 }
  93
  94                 if ($item['deleted']) {
  95                         return false;
  96                 }
  97
  98                 $parent = dba::selectFirst('item', ['origin'], ['id' => $item['parent']]);
  99                 if (!DBM::is_result($parent)) {
 100                         $parent = ['origin' => false];
 101                 }
 102
 103                 logger('delete item: ' . $item['id'], LOGGER_DEBUG);
 104
 105                 // clean up categories and tags so they don't end up as orphans
 106
 107                 $matches = false;
 108                 $cnt = preg_match_all('/<(.*?)>/', $item['file'], $matches, PREG_SET_ORDER);
 109                 if ($cnt) {
 110                         foreach ($matches as $mtch) {
 111                                 file_tag_unsave_file($item['uid'], $item['id'], $mtch[1],true);
 112                         }
 113                 }
 114
 115                 $matches = false;
 116
 117                 $cnt = preg_match_all('/\[(.*?)\]/', $item['file'], $matches, PREG_SET_ORDER);
 118                 if ($cnt) {
 119                         foreach ($matches as $mtch) {
 120                                 file_tag_unsave_file($item['uid'], $item['id'], $mtch[1],false);
 121                         }
 122                 }
 123
 124                 /*
 125                  * If item is a link to a photo resource, nuke all the associated photos
 126                  * (visitors will not have photo resources)
 127                  * This only applies to photos uploaded from the photos page. Photos inserted into a post do not
 128                  * generate a resource-id and therefore aren't intimately linked to the item.
 129                  */
 130                 if (strlen($item['resource-id'])) {
 131                         dba::delete('photo', ['resource-id' => $item['resource-id'], 'uid' => $item['uid']]);
 132                 }
 133
 134                 // If item is a link to an event, nuke the event record.
 135                 if (intval($item['event-id'])) {
 136                         dba::delete('event', ['id' => $item['event-id'], 'uid' => $item['uid']]);
 137                 }
 138
 139                 // If item has attachments, drop them
 140                 foreach (explode(", ", $item['attach']) as $attach) {
 141                         preg_match("|attach/(\d+)|", $attach, $matches);
 142                         dba::delete('attach', ['id' => $matches[1], 'uid' => $item['uid']]);
 143                 }
 144
 145                 // Set the item to "deleted"
 146                 dba::update('item', ['deleted' => true, 'title' => '', 'body' => '',
 147                                         'edited' => datetime_convert(), 'changed' => datetime_convert()],
 148                                 ['id' => $item['id']]);
 149
 150                 create_tags_from_item($item['id']);
 151                 Term::createFromItem($item['id']);
 152                 delete_thread($item['id'], $item['parent-uri']);
 153
 154                 // If it's the parent of a comment thread, kill all the kids
 155                 if ($item['id'] == $item['parent']) {
 156                         $items = dba::select('item', ['id'], ['parent' => $item['parent']]);
 157                         while ($row = dba::fetch($items)) {
 158                                 self::delete($row['id'], $priority);
 159                         }
 160                 }
 161
 162                 // send the notification upstream/downstream
 163                 if ($item['origin'] || $parent['origin']) {
 164                         Worker::add(['priority' => $priority, 'dont_fork' => true], "Notifier", "drop", intval($item['id']));
 165                 }
 166
 167                 return true;
 168         }
 169
 170         public static function insert($arr, $force_parent = false, $notify = false, $dontcache = false)
 171         {
 172                 $a = get_app();
 173
 174                 // If it is a posting where users should get notifications, then define it as wall posting
 175                 if ($notify) {
 176                         $arr['wall'] = 1;
 177                         $arr['type'] = 'wall';
 178                         $arr['origin'] = 1;
 179                         $arr['network'] = NETWORK_DFRN;
 180                         $arr['protocol'] = PROTOCOL_DFRN;
 181
 182                         // We have to avoid duplicates. So we create the GUID in form of a hash of the plink or uri.
 183                         // In difference to the call to "self::guidFromUri" several lines below we add the hash of our own host.
 184                         // This is done because our host is the original creator of the post.
 185                         if (!isset($arr['guid'])) {
 186                                 if (isset($arr['plink'])) {
 187                                         $arr['guid'] = self::guidFromUri($arr['plink'], $a->get_hostname());
 188                                 } elseif (isset($arr['uri'])) {
 189                                         $arr['guid'] = self::guidFromUri($arr['uri'], $a->get_hostname());
 190                                 }
 191                         }
 192                 } else {
 193                         $arr['network'] = trim(defaults($arr, 'network', NETWORK_PHANTOM));
 194                 }
 195
 196                 if ($notify) {
 197                         $guid_prefix = "";
 198                 } elseif ((trim($arr['guid']) == "") && (trim($arr['plink']) != "")) {
 199                         $arr['guid'] = self::guidFromUri($arr['plink']);
 200                 } elseif ((trim($arr['guid']) == "") && (trim($arr['uri']) != "")) {
 201                         $arr['guid'] = self::guidFromUri($arr['uri']);
 202                 } else {
 203                         $parsed = parse_url($arr["author-link"]);
 204                         $guid_prefix = hash("crc32", $parsed["host"]);
 205                 }
 206
 207                 $arr['guid'] = notags(trim(defaults($arr, 'guid', get_guid(32, $guid_prefix))));
 208                 $arr['uri'] = notags(trim(defaults($arr, 'uri', item_new_uri($a->get_hostname(), $uid, $arr['guid']))));
 209
 210                 // Store conversation data
 211                 $arr = Conversation::insert($arr);
 212
 213                 /*
 214                  * If a Diaspora signature structure was passed in, pull it out of the
 215                  * item array and set it aside for later storage.
 216                  */
 217
 218                 $dsprsig = null;
 219                 if (x($arr, 'dsprsig')) {
 220                         $encoded_signature = $arr['dsprsig'];
 221                         $dsprsig = json_decode(base64_decode($arr['dsprsig']));
 222                         unset($arr['dsprsig']);
 223                 }
 224
 225                 // Converting the plink
 226                 /// @TODO Check if this is really still needed
 227                 if ($arr['network'] == NETWORK_OSTATUS) {
 228                         if (isset($arr['plink'])) {
 229                                 $arr['plink'] = OStatus::convertHref($arr['plink']);
 230                         } elseif (isset($arr['uri'])) {
 231                                 $arr['plink'] = OStatus::convertHref($arr['uri']);
 232                         }
 233                 }
 234
 235                 if (x($arr, 'gravity')) {
 236                         $arr['gravity'] = intval($arr['gravity']);
 237                 } elseif ($arr['parent-uri'] === $arr['uri']) {
 238                         $arr['gravity'] = 0;
 239                 } elseif (activity_match($arr['verb'],ACTIVITY_POST)) {
 240                         $arr['gravity'] = 6;
 241                 } else {
 242                         $arr['gravity'] = 6;   // extensible catchall
 243                 }
 244
 245                 $arr['type'] = defaults($arr, 'type', 'remote');
 246
 247                 $uid = intval($arr['uid']);
 248
 249                 // check for create date and expire time
 250                 $expire_interval = Config::get('system', 'dbclean-expire-days', 0);
 251
 252                 $user = dba::selectFirst('user', ['expire'], ['uid' => $uid]);
 253                 if (DBM::is_result($user) && ($user['expire'] > 0) && (($user['expire'] < $expire_interval) || ($expire_interval == 0))) {
 254                         $expire_interval = $user['expire'];
 255                 }
 256
 257                 if (($expire_interval > 0) && !empty($arr['created'])) {
 258                         $expire_date = time() - ($expire_interval * 86400);
 259                         $created_date = strtotime($arr['created']);
 260                         if ($created_date < $expire_date) {
 261                                 logger('item-store: item created ('.date('c', $created_date).') before expiration time ('.date('c', $expire_date).'). ignored. ' . print_r($arr,true), LOGGER_DEBUG);
 262                                 return 0;
 263                         }
 264                 }
 265
 266                 /*
 267                  * Do we already have this item?
 268                  * We have to check several networks since Friendica posts could be repeated
 269                  * via OStatus (maybe Diasporsa as well)
 270                  */
 271                 if (in_array($arr['network'], [NETWORK_DIASPORA, NETWORK_DFRN, NETWORK_OSTATUS, ""])) {
 272                         $r = q("SELECT `id`, `network` FROM `item` WHERE `uri` = '%s' AND `uid` = %d AND `network` IN ('%s', '%s', '%s')  LIMIT 1",
 273                                         dbesc(trim($arr['uri'])),
 274                                         intval($uid),
 275                                         dbesc(NETWORK_DIASPORA),
 276                                         dbesc(NETWORK_DFRN),
 277                                         dbesc(NETWORK_OSTATUS)
 278                                 );
 279                         if (DBM::is_result($r)) {
 280                                 // We only log the entries with a different user id than 0. Otherwise we would have too many false positives
 281                                 if ($uid != 0) {
 282                                         logger("Item with uri ".$arr['uri']." already existed for user ".$uid." with id ".$r[0]["id"]." target network ".$r[0]["network"]." - new network: ".$arr['network']);
 283                                 }
 284
 285                                 return $r[0]["id"];
 286                         }
 287                 }
 288
 289                 self::addLanguageInPostopts($arr);
 290
 291                 $arr['wall']          = intval(defaults($arr, 'wall', 0));
 292                 $arr['extid']         = trim(defaults($arr, 'extid', ''));
 293                 $arr['author-name']   = trim(defaults($arr, 'author-name', ''));
 294                 $arr['author-link']   = trim(defaults($arr, 'author-link', ''));
 295                 $arr['author-avatar'] = trim(defaults($arr, 'author-avatar', ''));
 296                 $arr['owner-name']    = trim(defaults($arr, 'owner-name', ''));
 297                 $arr['owner-link']    = trim(defaults($arr, 'owner-link', ''));
 298                 $arr['owner-avatar']  = trim(defaults($arr, 'owner-avatar', ''));
 299                 $arr['received']      = ((x($arr, 'received') !== false) ? datetime_convert('UTC','UTC', $arr['received']) : datetime_convert());
 300                 $arr['created']       = ((x($arr, 'created') !== false) ? datetime_convert('UTC','UTC', $arr['created']) : $arr['received']);
 301                 $arr['edited']        = ((x($arr, 'edited') !== false) ? datetime_convert('UTC','UTC', $arr['edited']) : $arr['created']);
 302                 $arr['changed']       = ((x($arr, 'changed') !== false) ? datetime_convert('UTC','UTC', $arr['changed']) : $arr['created']);
 303                 $arr['commented']     = ((x($arr, 'commented') !== false) ? datetime_convert('UTC','UTC', $arr['commented']) : $arr['created']);
 304                 $arr['title']         = trim(defaults($arr, 'title', ''));
 305                 $arr['location']      = trim(defaults($arr, 'location', ''));
 306                 $arr['coord']         = trim(defaults($arr, 'coord', ''));
 307                 $arr['visible']       = ((x($arr, 'visible') !== false) ? intval($arr['visible'])         : 1);
 308                 $arr['deleted']       = 0;
 309                 $arr['parent-uri']    = trim(defaults($arr, 'parent-uri', $arr['uri']));
 310                 $arr['verb']          = trim(defaults($arr, 'verb', ''));
 311                 $arr['object-type']   = trim(defaults($arr, 'object-type', ''));
 312                 $arr['object']        = trim(defaults($arr, 'object', ''));
 313                 $arr['target-type']   = trim(defaults($arr, 'target-type', ''));
 314                 $arr['target']        = trim(defaults($arr, 'target', ''));
 315                 $arr['plink']         = trim(defaults($arr, 'plink', ''));
 316                 $arr['allow_cid']     = trim(defaults($arr, 'allow_cid', ''));
 317                 $arr['allow_gid']     = trim(defaults($arr, 'allow_gid', ''));
 318                 $arr['deny_cid']      = trim(defaults($arr, 'deny_cid', ''));
 319                 $arr['deny_gid']      = trim(defaults($arr, 'deny_gid', ''));
 320                 $arr['private']       = intval(defaults($arr, 'private', 0));
 321                 $arr['bookmark']      = intval(defaults($arr, 'bookmark', 0));
 322                 $arr['body']          = trim(defaults($arr, 'body', ''));
 323                 $arr['tag']           = trim(defaults($arr, 'tag', ''));
 324                 $arr['attach']        = trim(defaults($arr, 'attach', ''));
 325                 $arr['app']           = trim(defaults($arr, 'app', ''));
 326                 $arr['origin']        = intval(defaults($arr, 'origin', 0));
 327                 $arr['postopts']      = trim(defaults($arr, 'postopts', ''));
 328                 $arr['resource-id']   = trim(defaults($arr, 'resource-id', ''));
 329                 $arr['event-id']      = intval(defaults($arr, 'event-id', 0));
 330                 $arr['inform']        = trim(defaults($arr, 'inform', ''));
 331                 $arr['file']          = trim(defaults($arr, 'file', ''));
 332
 333                 // When there is no content then we don't post it
 334                 if ($arr['body'].$arr['title'] == '') {
 335                         return 0;
 336                 }
 337
 338                 // Items cannot be stored before they happen ...
 339                 if ($arr['created'] > datetime_convert()) {
 340                         $arr['created'] = datetime_convert();
 341                 }
 342
 343                 // We haven't invented time travel by now.
 344                 if ($arr['edited'] > datetime_convert()) {
 345                         $arr['edited'] = datetime_convert();
 346                 }
 347
 348                 if (($arr['author-link'] == "") && ($arr['owner-link'] == "")) {
 349                         logger("Both author-link and owner-link are empty. Called by: " . System::callstack(), LOGGER_DEBUG);
 350                 }
 351
 352                 if ($arr['plink'] == "") {
 353                         $arr['plink'] = System::baseUrl() . '/display/' . urlencode($arr['guid']);
 354                 }
 355
 356                 if ($arr['network'] == NETWORK_PHANTOM) {
 357                         $r = q("SELECT `network` FROM `contact` WHERE `network` IN ('%s', '%s', '%s') AND `nurl` = '%s' AND `uid` = %d LIMIT 1",
 358                                 dbesc(NETWORK_DFRN), dbesc(NETWORK_DIASPORA), dbesc(NETWORK_OSTATUS),
 359                                 dbesc(normalise_link($arr['author-link'])),
 360                                 intval($arr['uid'])
 361                         );
 362
 363                         if (!DBM::is_result($r)) {
 364                                 $r = q("SELECT `network` FROM `gcontact` WHERE `network` IN ('%s', '%s', '%s') AND `nurl` = '%s' LIMIT 1",
 365                                         dbesc(NETWORK_DFRN), dbesc(NETWORK_DIASPORA), dbesc(NETWORK_OSTATUS),
 366                                         dbesc(normalise_link($arr['author-link']))
 367                                 );
 368                         }
 369
 370                         if (!DBM::is_result($r)) {
 371                                 $r = q("SELECT `network` FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1",
 372                                         intval($arr['contact-id']),
 373                                         intval($arr['uid'])
 374                                 );
 375                         }
 376
 377                         if (DBM::is_result($r)) {
 378                                 $arr['network'] = $r[0]["network"];
 379                         }
 380
 381                         // Fallback to friendica (why is it empty in some cases?)
 382                         if ($arr['network'] == "") {
 383                                 $arr['network'] = NETWORK_DFRN;
 384                         }
 385
 386                         logger("Set network to " . $arr["network"] . " for " . $arr["uri"], LOGGER_DEBUG);
 387                 }
 388
 389                 // The contact-id should be set before "self::insert" was called - but there seems to be some issues
 390                 if ($arr["contact-id"] == 0) {
 391                         /*
 392                          * First we are looking for a suitable contact that matches with the author of the post
 393                          * This is done only for comments (See below explanation at "gcontact-id")
 394                          */
 395                         if ($arr['parent-uri'] != $arr['uri']) {
 396                                 $arr["contact-id"] = Contact::getIdForURL($arr['author-link'], $uid);
 397                         }
 398
 399                         // If not present then maybe the owner was found
 400                         if ($arr["contact-id"] == 0) {
 401                                 $arr["contact-id"] = Contact::getIdForURL($arr['owner-link'], $uid);
 402                         }
 403
 404                         // Still missing? Then use the "self" contact of the current user
 405                         if ($arr["contact-id"] == 0) {
 406                                 $r = q("SELECT `id` FROM `contact` WHERE `self` AND `uid` = %d", intval($uid));
 407
 408                                 if (DBM::is_result($r)) {
 409                                         $arr["contact-id"] = $r[0]["id"];
 410                                 }
 411                         }
 412
 413                         logger("Contact-id was missing for post ".$arr["guid"]." from user id ".$uid." - now set to ".$arr["contact-id"], LOGGER_DEBUG);
 414                 }
 415
 416                 if (!x($arr, "gcontact-id")) {
 417                         /*
 418                          * The gcontact should mostly behave like the contact. But is is supposed to be global for the system.
 419                          * This means that wall posts, repeated posts, etc. should have the gcontact id of the owner.
 420                          * On comments the author is the better choice.
 421                          */
 422                         if ($arr['parent-uri'] === $arr['uri']) {
 423                                 $arr["gcontact-id"] = GContact::getId(["url" => $arr['owner-link'], "network" => $arr['network'],
 424                                                                          "photo" => $arr['owner-avatar'], "name" => $arr['owner-name']]);
 425                         } else {
 426                                 $arr["gcontact-id"] = GContact::getId(["url" => $arr['author-link'], "network" => $arr['network'],
 427                                                                          "photo" => $arr['author-avatar'], "name" => $arr['author-name']]);
 428                         }
 429                 }
 430
 431                 if ($arr["author-id"] == 0) {
 432                         $arr["author-id"] = Contact::getIdForURL($arr["author-link"], 0);
 433                 }
 434
 435                 if (Contact::isBlocked($arr["author-id"])) {
 436                         logger('Contact '.$arr["author-id"].' is blocked, item '.$arr["uri"].' will not be stored');
 437                         return 0;
 438                 }
 439
 440                 if ($arr["owner-id"] == 0) {
 441                         $arr["owner-id"] = Contact::getIdForURL($arr["owner-link"], 0);
 442                 }
 443
 444                 if (Contact::isBlocked($arr["owner-id"])) {
 445                         logger('Contact '.$arr["owner-id"].' is blocked, item '.$arr["uri"].' will not be stored');
 446                         return 0;
 447                 }
 448
 449                 if ($arr['guid'] != "") {
 450                         // Checking if there is already an item with the same guid
 451                         logger('checking for an item for user '.$arr['uid'].' on network '.$arr['network'].' with the guid '.$arr['guid'], LOGGER_DEBUG);
 452                         $r = q("SELECT `guid` FROM `item` WHERE `guid` = '%s' AND `network` = '%s' AND `uid` = '%d' LIMIT 1",
 453                                 dbesc($arr['guid']), dbesc($arr['network']), intval($arr['uid']));
 454
 455                         if (DBM::is_result($r)) {
 456                                 logger('found item with guid '.$arr['guid'].' for user '.$arr['uid'].' on network '.$arr['network'], LOGGER_DEBUG);
 457                                 return 0;
 458                         }
 459                 }
 460
 461                 // Check for hashtags in the body and repair or add hashtag links
 462                 self::setHashtags($arr);
 463
 464                 $arr['thr-parent'] = $arr['parent-uri'];
 465
 466                 if ($arr['parent-uri'] === $arr['uri']) {
 467                         $parent_id = 0;
 468                         $parent_deleted = 0;
 469                         $allow_cid = $arr['allow_cid'];
 470                         $allow_gid = $arr['allow_gid'];
 471                         $deny_cid  = $arr['deny_cid'];
 472                         $deny_gid  = $arr['deny_gid'];
 473                         $notify_type = 'wall-new';
 474                 } else {
 475
 476                         // find the parent and snarf the item id and ACLs
 477                         // and anything else we need to inherit
 478
 479                         $r = q("SELECT * FROM `item` WHERE `uri` = '%s' AND `uid` = %d ORDER BY `id` ASC LIMIT 1",
 480                                 dbesc($arr['parent-uri']),
 481                                 intval($arr['uid'])
 482                         );
 483
 484                         if (DBM::is_result($r)) {
 485
 486                                 // is the new message multi-level threaded?
 487                                 // even though we don't support it now, preserve the info
 488                                 // and re-attach to the conversation parent.
 489
 490                                 if ($r[0]['uri'] != $r[0]['parent-uri']) {
 491                                         $arr['parent-uri'] = $r[0]['parent-uri'];
 492                                         $z = q("SELECT * FROM `item` WHERE `uri` = '%s' AND `parent-uri` = '%s' AND `uid` = %d
 493                                                 ORDER BY `id` ASC LIMIT 1",
 494                                                 dbesc($r[0]['parent-uri']),
 495                                                 dbesc($r[0]['parent-uri']),
 496                                                 intval($arr['uid'])
 497                                         );
 498
 499                                         if (DBM::is_result($z)) {
 500                                                 $r = $z;
 501                                         }
 502                                 }
 503
 504                                 $parent_id      = $r[0]['id'];
 505                                 $parent_deleted = $r[0]['deleted'];
 506                                 $allow_cid      = $r[0]['allow_cid'];
 507                                 $allow_gid      = $r[0]['allow_gid'];
 508                                 $deny_cid       = $r[0]['deny_cid'];
 509                                 $deny_gid       = $r[0]['deny_gid'];
 510                                 $arr['wall']    = $r[0]['wall'];
 511                                 $notify_type    = 'comment-new';
 512
 513                                 /*
 514                                  * If the parent is private, force privacy for the entire conversation
 515                                  * This differs from the above settings as it subtly allows comments from
 516                                  * email correspondents to be private even if the overall thread is not.
 517                                  */
 518                                 if ($r[0]['private']) {
 519                                         $arr['private'] = $r[0]['private'];
 520                                 }
 521
 522                                 /*
 523                                  * Edge case. We host a public forum that was originally posted to privately.
 524                                  * The original author commented, but as this is a comment, the permissions
 525                                  * weren't fixed up so it will still show the comment as private unless we fix it here.
 526                                  */
 527                                 if ((intval($r[0]['forum_mode']) == 1) && $r[0]['private']) {
 528                                         $arr['private'] = 0;
 529                                 }
 530
 531                                 // If its a post from myself then tag the thread as "mention"
 532                                 logger("Checking if parent ".$parent_id." has to be tagged as mention for user ".$arr['uid'], LOGGER_DEBUG);
 533                                 $u = q("SELECT `nickname` FROM `user` WHERE `uid` = %d", intval($arr['uid']));
 534                                 if (DBM::is_result($u)) {
 535                                         $self = normalise_link(System::baseUrl() . '/profile/' . $u[0]['nickname']);
 536                                         logger("'myself' is ".$self." for parent ".$parent_id." checking against ".$arr['author-link']." and ".$arr['owner-link'], LOGGER_DEBUG);
 537                                         if ((normalise_link($arr['author-link']) == $self) || (normalise_link($arr['owner-link']) == $self)) {
 538                                                 dba::update('thread', ['mention' => true], ['iid' => $parent_id]);
 539                                                 logger("tagged thread ".$parent_id." as mention for user ".$self, LOGGER_DEBUG);
 540                                         }
 541                                 }
 542                         } else {
 543                                 /*
 544                                  * Allow one to see reply tweets from status.net even when
 545                                  * we don't have or can't see the original post.
 546                                  */
 547                                 if ($force_parent) {
 548                                         logger('$force_parent=true, reply converted to top-level post.');
 549                                         $parent_id = 0;
 550                                         $arr['parent-uri'] = $arr['uri'];
 551                                         $arr['gravity'] = 0;
 552                                 } else {
 553                                         logger('item parent '.$arr['parent-uri'].' for '.$arr['uid'].' was not found - ignoring item');
 554                                         return 0;
 555                                 }
 556
 557                                 $parent_deleted = 0;
 558                         }
 559                 }
 560
 561                 $r = q("SELECT `id` FROM `item` WHERE `uri` = '%s' AND `network` IN ('%s', '%s') AND `uid` = %d LIMIT 1",
 562                         dbesc($arr['uri']),
 563                         dbesc($arr['network']),
 564                         dbesc(NETWORK_DFRN),
 565                         intval($arr['uid'])
 566                 );
 567                 if (DBM::is_result($r)) {
 568                         logger('duplicated item with the same uri found. '.print_r($arr,true));
 569                         return 0;
 570                 }
 571
 572                 // On Friendica and Diaspora the GUID is unique
 573                 if (in_array($arr['network'], [NETWORK_DFRN, NETWORK_DIASPORA])) {
 574                         $r = q("SELECT `id` FROM `item` WHERE `guid` = '%s' AND `uid` = %d LIMIT 1",
 575                                 dbesc($arr['guid']),
 576                                 intval($arr['uid'])
 577                         );
 578                         if (DBM::is_result($r)) {
 579                                 logger('duplicated item with the same guid found. '.print_r($arr,true));
 580                                 return 0;
 581                         }
 582                 } else {
 583                         // Check for an existing post with the same content. There seems to be a problem with OStatus.
 584                         $r = q("SELECT `id` FROM `item` WHERE `body` = '%s' AND `network` = '%s' AND `created` = '%s' AND `contact-id` = %d AND `uid` = %d LIMIT 1",
 585                                 dbesc($arr['body']),
 586                                 dbesc($arr['network']),
 587                                 dbesc($arr['created']),
 588                                 intval($arr['contact-id']),
 589                                 intval($arr['uid'])
 590                         );
 591                         if (DBM::is_result($r)) {
 592                                 logger('duplicated item with the same body found. '.print_r($arr,true));
 593                                 return 0;
 594                         }
 595                 }
 596
 597                 // Is this item available in the global items (with uid=0)?
 598                 if ($arr["uid"] == 0) {
 599                         $arr["global"] = true;
 600
 601                         // Set the global flag on all items if this was a global item entry
 602                         dba::update('item', ['global' => true], ['uri' => $arr["uri"]]);
 603                 } else {
 604                         $isglobal = q("SELECT `global` FROM `item` WHERE `uid` = 0 AND `uri` = '%s'", dbesc($arr["uri"]));
 605
 606                         $arr["global"] = (DBM::is_result($isglobal) && count($isglobal) > 0);
 607                 }
 608
 609                 // ACL settings
 610                 if (strlen($allow_cid) || strlen($allow_gid) || strlen($deny_cid) || strlen($deny_gid)) {
 611                         $private = 1;
 612                 } else {
 613                         $private = $arr['private'];
 614                 }
 615
 616                 $arr["allow_cid"] = $allow_cid;
 617                 $arr["allow_gid"] = $allow_gid;
 618                 $arr["deny_cid"] = $deny_cid;
 619                 $arr["deny_gid"] = $deny_gid;
 620                 $arr["private"] = $private;
 621                 $arr["deleted"] = $parent_deleted;
 622
 623                 // Fill the cache field
 624                 put_item_in_cache($arr);
 625
 626                 if ($notify) {
 627                         Addon::callHooks('post_local', $arr);
 628                 } else {
 629                         Addon::callHooks('post_remote', $arr);
 630                 }
 631
 632                 // This array field is used to trigger some automatic reactions
 633                 // It is mainly used in the "post_local" hook.
 634                 unset($arr['api_source']);
 635
 636                 if (x($arr, 'cancel')) {
 637                         logger('post cancelled by addon.');
 638                         return 0;
 639                 }
 640
 641                 /*
 642                  * Check for already added items.
 643                  * There is a timing issue here that sometimes creates double postings.
 644                  * An unique index would help - but the limitations of MySQL (maximum size of index values) prevent this.
 645                  */
 646                 if ($arr["uid"] == 0) {
 647                         $r = q("SELECT `id` FROM `item` WHERE `uri` = '%s' AND `uid` = 0 LIMIT 1", dbesc(trim($arr['uri'])));
 648                         if (DBM::is_result($r)) {
 649                                 logger('Global item already stored. URI: '.$arr['uri'].' on network '.$arr['network'], LOGGER_DEBUG);
 650                                 return 0;
 651                         }
 652                 }
 653
 654                 logger('' . print_r($arr,true), LOGGER_DATA);
 655
 656                 dba::transaction();
 657                 $r = dba::insert('item', $arr);
 658
 659                 // When the item was successfully stored we fetch the ID of the item.
 660                 if (DBM::is_result($r)) {
 661                         $current_post = dba::lastInsertId();
 662                 } else {
 663                         // This can happen - for example - if there are locking timeouts.
 664                         dba::rollback();
 665
 666                         // Store the data into a spool file so that we can try again later.
 667
 668                         // At first we restore the Diaspora signature that we removed above.
 669                         if (isset($encoded_signature)) {
 670                                 $arr['dsprsig'] = $encoded_signature;
 671                         }
 672
 673                         // Now we store the data in the spool directory
 674                         // We use "microtime" to keep the arrival order and "mt_rand" to avoid duplicates
 675                         $file = 'item-'.round(microtime(true) * 10000).'-'.mt_rand().'.msg';
 676
 677                         $spoolpath = get_spoolpath();
 678                         if ($spoolpath != "") {
 679                                 $spool = $spoolpath.'/'.$file;
 680                                 file_put_contents($spool, json_encode($arr));
 681                                 logger("Item wasn't stored - Item was spooled into file ".$file, LOGGER_DEBUG);
 682                         }
 683                         return 0;
 684                 }
 685
 686                 if ($current_post == 0) {
 687                         // This is one of these error messages that never should occur.
 688                         logger("couldn't find created item - we better quit now.");
 689                         dba::rollback();
 690                         return 0;
 691                 }
 692
 693                 // How much entries have we created?
 694                 // We wouldn't need this query when we could use an unique index - but MySQL has length problems with them.
 695                 $r = q("SELECT COUNT(*) AS `entries` FROM `item` WHERE `uri` = '%s' AND `uid` = %d AND `network` = '%s'",
 696                         dbesc($arr['uri']),
 697                         intval($arr['uid']),
 698                         dbesc($arr['network'])
 699                 );
 700
 701                 if (!DBM::is_result($r)) {
 702                         // This shouldn't happen, since COUNT always works when the database connection is there.
 703                         logger("We couldn't count the stored entries. Very strange ...");
 704                         dba::rollback();
 705                         return 0;
 706                 }
 707
 708                 if ($r[0]["entries"] > 1) {
 709                         // There are duplicates. We delete our just created entry.
 710                         logger('Duplicated post occurred. uri = ' . $arr['uri'] . ' uid = ' . $arr['uid']);
 711
 712                         // Yes, we could do a rollback here - but we are having many users with MyISAM.
 713                         dba::delete('item', ['id' => $current_post]);
 714                         dba::commit();
 715                         return 0;
 716                 } elseif ($r[0]["entries"] == 0) {
 717                         // This really should never happen since we quit earlier if there were problems.
 718                         logger("Something is terribly wrong. We haven't found our created entry.");
 719                         dba::rollback();
 720                         return 0;
 721                 }
 722
 723                 logger('created item '.$current_post);
 724                 self::updateContact($arr);
 725
 726                 if (!$parent_id || ($arr['parent-uri'] === $arr['uri'])) {
 727                         $parent_id = $current_post;
 728                 }
 729
 730                 // Set parent id
 731                 dba::update('item', ['parent' => $parent_id], ['id' => $current_post]);
 732
 733                 $arr['id'] = $current_post;
 734                 $arr['parent'] = $parent_id;
 735
 736                 // update the commented timestamp on the parent
 737                 // Only update "commented" if it is really a comment
 738                 if (($arr['verb'] == ACTIVITY_POST) || !Config::get("system", "like_no_comment")) {
 739                         dba::update('item', ['commented' => datetime_convert(), 'changed' => datetime_convert()], ['id' => $parent_id]);
 740                 } else {
 741                         dba::update('item', ['changed' => datetime_convert()], ['id' => $parent_id]);
 742                 }
 743
 744                 if ($dsprsig) {
 745                         /*
 746                          * Friendica servers lower than 3.4.3-2 had double encoded the signature ...
 747                          * We can check for this condition when we decode and encode the stuff again.
 748                          */
 749                         if (base64_encode(base64_decode(base64_decode($dsprsig->signature))) == base64_decode($dsprsig->signature)) {
 750                                 $dsprsig->signature = base64_decode($dsprsig->signature);
 751                                 logger("Repaired double encoded signature from handle ".$dsprsig->signer, LOGGER_DEBUG);
 752                         }
 753
 754                         dba::insert('sign', ['iid' => $current_post, 'signed_text' => $dsprsig->signed_text,
 755                                                 'signature' => $dsprsig->signature, 'signer' => $dsprsig->signer]);
 756                 }
 757
 758                 $deleted = self::tagDeliver($arr['uid'], $current_post);
 759
 760                 /*
 761                  * current post can be deleted if is for a community page and no mention are
 762                  * in it.
 763                  */
 764                 if (!$deleted && !$dontcache) {
 765                         $r = q('SELECT * FROM `item` WHERE `id` = %d', intval($current_post));
 766                         if (DBM::is_result($r) && (count($r) == 1)) {
 767                                 if ($notify) {
 768                                         Addon::callHooks('post_local_end', $r[0]);
 769                                 } else {
 770                                         Addon::callHooks('post_remote_end', $r[0]);
 771                                 }
 772                         } else {
 773                                 logger('new item not found in DB, id ' . $current_post);
 774                         }
 775                 }
 776
 777                 if ($arr['parent-uri'] === $arr['uri']) {
 778                         add_thread($current_post);
 779                 } else {
 780                         update_thread($parent_id);
 781                 }
 782
 783                 dba::commit();
 784
 785                 /*
 786                  * Due to deadlock issues with the "term" table we are doing these steps after the commit.
 787                  * This is not perfect - but a workable solution until we found the reason for the problem.
 788                  */
 789                 create_tags_from_item($current_post);
 790                 Term::createFromItem($current_post);
 791
 792                 if ($arr['parent-uri'] === $arr['uri']) {
 793                         self::addShadow($current_post);
 794                 } else {
 795                         self::addShadowPost($current_post);
 796                 }
 797
 798                 check_user_notification($current_post);
 799
 800                 if ($notify) {
 801                         Worker::add(['priority' => PRIORITY_HIGH, 'dont_fork' => true], "Notifier", $notify_type, $current_post);
 802                 }
 803
 804                 return $current_post;
 805         }
 806
 807         /**
 808          * @brief Add a shadow entry for a given item id that is a thread starter
 809          *
 810          * We store every public item entry additionally with the user id "0".
 811          * This is used for the community page and for the search.
 812          * It is planned that in the future we will store public item entries only once.
 813          *
 814          * @param integer $itemid Item ID that should be added
 815          */
 816         public static function addShadow($itemid)
 817         {
 818                 $fields = ['uid', 'wall', 'private', 'moderated', 'visible', 'contact-id', 'deleted', 'network', 'author-id', 'owner-id'];
 819                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
 820                 $item = dba::selectFirst('item', $fields, $condition);
 821
 822                 if (!DBM::is_result($item)) {
 823                         return;
 824                 }
 825
 826                 // is it already a copy?
 827                 if (($itemid == 0) || ($item['uid'] == 0)) {
 828                         return;
 829                 }
 830
 831                 // Is it a visible public post?
 832                 if (!$item["visible"] || $item["deleted"] || $item["moderated"] || $item["private"]) {
 833                         return;
 834                 }
 835
 836                 // is it an entry from a connector? Only add an entry for natively connected networks
 837                 if (!in_array($item["network"], [NETWORK_DFRN, NETWORK_DIASPORA, NETWORK_OSTATUS, ""])) {
 838                         return;
 839                 }
 840
 841                 // Is the public contact configured as hidden?
 842                 if (Contact::isHidden($item["owner-id"]) || Contact::isHidden($item["author-id"])) {
 843                         return;
 844                 }
 845
 846                 // Only do these checks if the post isn't a wall post
 847                 if (!$item["wall"]) {
 848                         // Check, if hide-friends is activated - then don't do a shadow entry
 849                         if (dba::exists('profile', ['is-default' => true, 'uid' => $item['uid'], 'hide-friends' => true])) {
 850                                 return;
 851                         }
 852
 853                         // Check if the contact is hidden or blocked
 854                         if (!dba::exists('contact', ['hidden' => false, 'blocked' => false, 'id' => $item['contact-id']])) {
 855                                 return;
 856                         }
 857                 }
 858
 859                 // Only add a shadow, if the profile isn't hidden
 860                 if (dba::exists('user', ['uid' => $item['uid'], 'hidewall' => true])) {
 861                         return;
 862                 }
 863
 864                 $item = dba::selectFirst('item', [], ['id' => $itemid]);
 865
 866                 if (DBM::is_result($item) && ($item["allow_cid"] == '')  && ($item["allow_gid"] == '') &&
 867                         ($item["deny_cid"] == '') && ($item["deny_gid"] == '')) {
 868
 869                         if (!dba::exists('item', ['uri' => $item['uri'], 'uid' => 0])) {
 870                                 // Preparing public shadow (removing user specific data)
 871                                 unset($item['id']);
 872                                 $item['uid'] = 0;
 873                                 $item['origin'] = 0;
 874                                 $item['wall'] = 0;
 875                                 $item['contact-id'] = Contact::getIdForURL($item['author-link'], 0);
 876
 877                                 if (in_array($item['type'], ["net-comment", "wall-comment"])) {
 878                                         $item['type'] = 'remote-comment';
 879                                 } elseif ($item['type'] == 'wall') {
 880                                         $item['type'] = 'remote';
 881                                 }
 882
 883                                 $public_shadow = self::insert($item, false, false, true);
 884
 885                                 logger("Stored public shadow for thread ".$itemid." under id ".$public_shadow, LOGGER_DEBUG);
 886                         }
 887                 }
 888         }
 889
 890         /**
 891          * @brief Add a shadow entry for a given item id that is a comment
 892          *
 893          * This function does the same like the function above - but for comments
 894          *
 895          * @param integer $itemid Item ID that should be added
 896          */
 897         public static function addShadowPost($itemid)
 898         {
 899                 $item = dba::selectFirst('item', [], ['id' => $itemid]);
 900                 if (!DBM::is_result($item)) {
 901                         return;
 902                 }
 903
 904                 // Is it a toplevel post?
 905                 if ($item['id'] == $item['parent']) {
 906                         self::addShadow($itemid);
 907                         return;
 908                 }
 909
 910                 // Is this a shadow entry?
 911                 if ($item['uid'] == 0)
 912                         return;
 913
 914                 // Is there a shadow parent?
 915                 if (!dba::exists('item', ['uri' => $item['parent-uri'], 'uid' => 0])) {
 916                         return;
 917                 }
 918
 919                 // Is there already a shadow entry?
 920                 if (dba::exists('item', ['uri' => $item['uri'], 'uid' => 0])) {
 921                         return;
 922                 }
 923
 924                 // Preparing public shadow (removing user specific data)
 925                 unset($item['id']);
 926                 $item['uid'] = 0;
 927                 $item['origin'] = 0;
 928                 $item['wall'] = 0;
 929                 $item['contact-id'] = Contact::getIdForURL($item['author-link'], 0);
 930
 931                 if (in_array($item['type'], ["net-comment", "wall-comment"])) {
 932                         $item['type'] = 'remote-comment';
 933                 } elseif ($item['type'] == 'wall') {
 934                         $item['type'] = 'remote';
 935                 }
 936
 937                 $public_shadow = self::insert($item, false, false, true);
 938
 939                 logger("Stored public shadow for comment ".$item['uri']." under id ".$public_shadow, LOGGER_DEBUG);
 940         }
 941
 942          /**
 943          * Adds a "lang" specification in a "postopts" element of given $arr,
 944          * if possible and not already present.
 945          * Expects "body" element to exist in $arr.
 946          */
 947         private static function addLanguageInPostopts(&$arr)
 948         {
 949                 if (x($arr, 'postopts')) {
 950                         if (strstr($arr['postopts'], 'lang=')) {
 951                                 // do not override
 952                                 return;
 953                         }
 954                         $postopts = $arr['postopts'];
 955                 } else {
 956                         $postopts = "";
 957                 }
 958
 959                 $naked_body = preg_replace('/\[(.+?)\]/','', $arr['body']);
 960                 $l = new Text_LanguageDetect();
 961                 $lng = $l->detect($naked_body, 3);
 962
 963                 if (sizeof($lng) > 0) {
 964                         if ($postopts != "") {
 965                                 $postopts .= '&'; // arbitrary separator, to be reviewed
 966                         }
 967
 968                         $postopts .= 'lang=';
 969                         $sep = "";
 970
 971                         foreach ($lng as $language => $score) {
 972                                 $postopts .= $sep . $language . ";" . $score;
 973                                 $sep = ':';
 974                         }
 975                         $arr['postopts'] = $postopts;
 976                 }
 977         }
 978
 979         /**
 980          * @brief Creates an unique guid out of a given uri
 981          *
 982          * @param string $uri uri of an item entry
 983          * @param string $host (Optional) hostname for the GUID prefix
 984          * @return string unique guid
 985          */
 986         public static function guidFromUri($uri, $host = "")
 987         {
 988                 // Our regular guid routine is using this kind of prefix as well
 989                 // We have to avoid that different routines could accidentally create the same value
 990                 $parsed = parse_url($uri);
 991
 992                 // When the hostname isn't given, we take it from the uri
 993                 if ($host == "") {
 994                         // Is it in the format data@host.tld?
 995                         if ((count($parsed) == 1) && strstr($uri, '@')) {
 996                                 $mailparts = explode('@', $uri);
 997                                 $host = array_pop($mailparts);
 998                         } else {
 999                                 $host = $parsed["host"];
1000                         }
1001                 }
1002
1003                 // We use a hash of the hostname as prefix for the guid
1004                 $guid_prefix = hash("crc32", $host);
1005
1006                 // Remove the scheme to make sure that "https" and "http" doesn't make a difference
1007                 unset($parsed["scheme"]);
1008
1009                 // Glue it together to be able to make a hash from it
1010                 $host_id = implode("/", $parsed);
1011
1012                 // We could use any hash algorithm since it isn't a security issue
1013                 $host_hash = hash("ripemd128", $host_id);
1014
1015                 return $guid_prefix.$host_hash;
1016         }
1017
1018         /**
1019          * @brief Set "success_update" and "last-item" to the date of the last time we heard from this contact
1020          *
1021          * This can be used to filter for inactive contacts.
1022          * Only do this for public postings to avoid privacy problems, since poco data is public.
1023          * Don't set this value if it isn't from the owner (could be an author that we don't know)
1024          *
1025          * @param array $arr Contains the just posted item record
1026          */
1027         private static function updateContact($arr)
1028         {
1029                 // Unarchive the author
1030                 $contact = dba::selectFirst('contact', [], ['id' => $arr["author-link"]]);
1031                 if ($contact['term-date'] > NULL_DATE) {
1032                          Contact::unmarkForArchival($contact);
1033                 }
1034
1035                 // Unarchive the contact if it is a toplevel posting
1036                 if ($arr["parent-uri"] === $arr["uri"]) {
1037                         $contact = dba::selectFirst('contact', [], ['id' => $arr["contact-id"]]);
1038                         if ($contact['term-date'] > NULL_DATE) {
1039                                  Contact::unmarkForArchival($contact);
1040                         }
1041                 }
1042
1043                 $update = (!$arr['private'] && (($arr["author-link"] === $arr["owner-link"]) || ($arr["parent-uri"] === $arr["uri"])));
1044
1045                 // Is it a forum? Then we don't care about the rules from above
1046                 if (!$update && ($arr["network"] == NETWORK_DFRN) && ($arr["parent-uri"] === $arr["uri"])) {
1047                         $isforum = q("SELECT `forum` FROM `contact` WHERE `id` = %d AND `forum`",
1048                                         intval($arr['contact-id']));
1049                         if (DBM::is_result($isforum)) {
1050                                 $update = true;
1051                         }
1052                 }
1053
1054                 if ($update) {
1055                         dba::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
1056                                 ['id' => $arr['contact-id']]);
1057                 }
1058                 // Now do the same for the system wide contacts with uid=0
1059                 if (!$arr['private']) {
1060                         dba::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
1061                                 ['id' => $arr['owner-id']]);
1062
1063                         if ($arr['owner-id'] != $arr['author-id']) {
1064                                 dba::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
1065                                         ['id' => $arr['author-id']]);
1066                         }
1067                 }
1068         }
1069
1070         private static function setHashtags(&$item)
1071         {
1072
1073                 $tags = get_tags($item["body"]);
1074
1075                 // No hashtags?
1076                 if (!count($tags)) {
1077                         return false;
1078                 }
1079
1080                 // This sorting is important when there are hashtags that are part of other hashtags
1081                 // Otherwise there could be problems with hashtags like #test and #test2
1082                 rsort($tags);
1083
1084                 $URLSearchString = "^\[\]";
1085
1086                 // All hashtags should point to the home server if "local_tags" is activated
1087                 if (Config::get('system', 'local_tags')) {
1088                         $item["body"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
1089                                         "#[url=".System::baseUrl()."/search?tag=$2]$2[/url]", $item["body"]);
1090
1091                         $item["tag"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
1092                                         "#[url=".System::baseUrl()."/search?tag=$2]$2[/url]", $item["tag"]);
1093                 }
1094
1095                 // mask hashtags inside of url, bookmarks and attachments to avoid urls in urls
1096                 $item["body"] = preg_replace_callback("/\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
1097                         function ($match) {
1098                                 return ("[url=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/url]");
1099                         }, $item["body"]);
1100
1101                 $item["body"] = preg_replace_callback("/\[bookmark\=([$URLSearchString]*)\](.*?)\[\/bookmark\]/ism",
1102                         function ($match) {
1103                                 return ("[bookmark=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/bookmark]");
1104                         }, $item["body"]);
1105
1106                 $item["body"] = preg_replace_callback("/\[attachment (.*)\](.*?)\[\/attachment\]/ism",
1107                         function ($match) {
1108                                 return ("[attachment " . str_replace("#", "&num;", $match[1]) . "]" . $match[2] . "[/attachment]");
1109                         }, $item["body"]);
1110
1111                 // Repair recursive urls
1112                 $item["body"] = preg_replace("/&num;\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
1113                                 "&num;$2", $item["body"]);
1114
1115                 foreach ($tags as $tag) {
1116                         if ((strpos($tag, '#') !== 0) || strpos($tag, '[url=')) {
1117                                 continue;
1118                         }
1119
1120                         $basetag = str_replace('_',' ',substr($tag,1));
1121
1122                         $newtag = '#[url=' . System::baseUrl() . '/search?tag=' . rawurlencode($basetag) . ']' . $basetag . '[/url]';
1123
1124                         $item["body"] = str_replace($tag, $newtag, $item["body"]);
1125
1126                         if (!stristr($item["tag"], "/search?tag=" . $basetag . "]" . $basetag . "[/url]")) {
1127                                 if (strlen($item["tag"])) {
1128                                         $item["tag"] = ','.$item["tag"];
1129                                 }
1130                                 $item["tag"] = $newtag.$item["tag"];
1131                         }
1132                 }
1133
1134                 // Convert back the masked hashtags
1135                 $item["body"] = str_replace("&num;", "#", $item["body"]);
1136         }
1137
1138         public static function getGuidById($id)
1139         {
1140                 $r = q("SELECT `guid` FROM `item` WHERE `id` = %d LIMIT 1", intval($id));
1141                 if (DBM::is_result($r)) {
1142                         return $r[0]["guid"];
1143                 } else {
1144                         return "";
1145                 }
1146         }
1147
1148         public static function getIdAndNickByGuid($guid, $uid = 0)
1149         {
1150                 $nick = "";
1151                 $id = 0;
1152
1153                 if ($uid == 0) {
1154                         $uid == local_user();
1155                 }
1156
1157                 // Does the given user have this item?
1158                 if ($uid) {
1159                         $r = q("SELECT `item`.`id`, `user`.`nickname` FROM `item` INNER JOIN `user` ON `user`.`uid` = `item`.`uid`
1160                                 WHERE `item`.`visible` = 1 AND `item`.`deleted` = 0 AND `item`.`moderated` = 0
1161                                         AND `item`.`guid` = '%s' AND `item`.`uid` = %d", dbesc($guid), intval($uid));
1162                         if (DBM::is_result($r)) {
1163                                 $id = $r[0]["id"];
1164                                 $nick = $r[0]["nickname"];
1165                         }
1166                 }
1167
1168                 // Or is it anywhere on the server?
1169                 if ($nick == "") {
1170                         $r = q("SELECT `item`.`id`, `user`.`nickname` FROM `item` INNER JOIN `user` ON `user`.`uid` = `item`.`uid`
1171                                 WHERE `item`.`visible` = 1 AND `item`.`deleted` = 0 AND `item`.`moderated` = 0
1172                                         AND `item`.`allow_cid` = ''  AND `item`.`allow_gid` = ''
1173                                         AND `item`.`deny_cid`  = '' AND `item`.`deny_gid`  = ''
1174                                         AND `item`.`private` = 0 AND `item`.`wall` = 1
1175                                         AND `item`.`guid` = '%s'", dbesc($guid));
1176                         if (DBM::is_result($r)) {
1177                                 $id = $r[0]["id"];
1178                                 $nick = $r[0]["nickname"];
1179                         }
1180                 }
1181                 return ["nick" => $nick, "id" => $id];
1182         }
1183
1184         /**
1185          * look for mention tags and setup a second delivery chain for forum/community posts if appropriate
1186          * @param int $uid
1187          * @param int $item_id
1188          * @return bool true if item was deleted, else false
1189          */
1190         private static function tagDeliver($uid, $item_id)
1191         {
1192                 $mention = false;
1193
1194                 $u = q("SELECT * FROM `user` WHERE `uid` = %d LIMIT 1",
1195                         intval($uid)
1196                 );
1197                 if (!DBM::is_result($u)) {
1198                         return;
1199                 }
1200
1201                 $community_page = (($u[0]['page-flags'] == PAGE_COMMUNITY) ? true : false);
1202                 $prvgroup = (($u[0]['page-flags'] == PAGE_PRVGROUP) ? true : false);
1203
1204                 $i = q("SELECT * FROM `item` WHERE `id` = %d AND `uid` = %d LIMIT 1",
1205                         intval($item_id),
1206                         intval($uid)
1207                 );
1208                 if (!DBM::is_result($i)) {
1209                         return;
1210                 }
1211
1212                 $item = $i[0];
1213
1214                 $link = normalise_link(System::baseUrl() . '/profile/' . $u[0]['nickname']);
1215
1216                 /*
1217                  * Diaspora uses their own hardwired link URL in @-tags
1218                  * instead of the one we supply with webfinger
1219                  */
1220                 $dlink = normalise_link(System::baseUrl() . '/u/' . $u[0]['nickname']);
1221
1222                 $cnt = preg_match_all('/[\@\!]\[url\=(.*?)\](.*?)\[\/url\]/ism', $item['body'], $matches, PREG_SET_ORDER);
1223                 if ($cnt) {
1224                         foreach ($matches as $mtch) {
1225                                 if (link_compare($link, $mtch[1]) || link_compare($dlink, $mtch[1])) {
1226                                         $mention = true;
1227                                         logger('mention found: ' . $mtch[2]);
1228                                 }
1229                         }
1230                 }
1231
1232                 if (!$mention) {
1233                         if (($community_page || $prvgroup) &&
1234                                   !$item['wall'] && !$item['origin'] && ($item['id'] == $item['parent'])) {
1235                                 // mmh.. no mention.. community page or private group... no wall.. no origin.. top-post (not a comment)
1236                                 // delete it!
1237                                 logger("no-mention top-level post to communuty or private group. delete.");
1238                                 dba::delete('item', ['id' => $item_id]);
1239                                 return true;
1240                         }
1241                         return;
1242                 }
1243
1244                 $arr = ['item' => $item, 'user' => $u[0], 'contact' => $r[0]];
1245
1246                 Addon::callHooks('tagged', $arr);
1247
1248                 if (!$community_page && !$prvgroup) {
1249                         return;
1250                 }
1251
1252                 /*
1253                  * tgroup delivery - setup a second delivery chain
1254                  * prevent delivery looping - only proceed
1255                  * if the message originated elsewhere and is a top-level post
1256                  */
1257                 if ($item['wall'] || $item['origin'] || ($item['id'] != $item['parent'])) {
1258                         return;
1259                 }
1260
1261                 // now change this copy of the post to a forum head message and deliver to all the tgroup members
1262                 $c = q("SELECT `name`, `url`, `thumb` FROM `contact` WHERE `self` = 1 AND `uid` = %d LIMIT 1",
1263                         intval($u[0]['uid'])
1264                 );
1265                 if (!DBM::is_result($c)) {
1266                         return;
1267                 }
1268
1269                 // also reset all the privacy bits to the forum default permissions
1270
1271                 $private = ($u[0]['allow_cid'] || $u[0]['allow_gid'] || $u[0]['deny_cid'] || $u[0]['deny_gid']) ? 1 : 0;
1272
1273                 $forum_mode = (($prvgroup) ? 2 : 1);
1274
1275                 q("UPDATE `item` SET `wall` = 1, `origin` = 1, `forum_mode` = %d, `owner-name` = '%s', `owner-link` = '%s', `owner-avatar` = '%s',
1276                         `private` = %d, `allow_cid` = '%s', `allow_gid` = '%s', `deny_cid` = '%s', `deny_gid` = '%s'  WHERE `id` = %d",
1277                         intval($forum_mode),
1278                         dbesc($c[0]['name']),
1279                         dbesc($c[0]['url']),
1280                         dbesc($c[0]['thumb']),
1281                         intval($private),
1282                         dbesc($u[0]['allow_cid']),
1283                         dbesc($u[0]['allow_gid']),
1284                         dbesc($u[0]['deny_cid']),
1285                         dbesc($u[0]['deny_gid']),
1286                         intval($item_id)
1287                 );
1288                 update_thread($item_id);
1289
1290                 Worker::add(['priority' => PRIORITY_HIGH, 'dont_fork' => true], 'Notifier', 'tgroup', $item_id);
1291
1292         }
1293
1294         public static function isRemoteSelf($contact, &$datarray)
1295         {
1296                 $a = get_app();
1297
1298                 if (!$contact['remote_self']) {
1299                         return false;
1300                 }
1301
1302                 // Prevent the forwarding of posts that are forwarded
1303                 if ($datarray["extid"] == NETWORK_DFRN) {
1304                         return false;
1305                 }
1306
1307                 // Prevent to forward already forwarded posts
1308                 if ($datarray["app"] == $a->get_hostname()) {
1309                         return false;
1310                 }
1311
1312                 // Only forward posts
1313                 if ($datarray["verb"] != ACTIVITY_POST) {
1314                         return false;
1315                 }
1316
1317                 if (($contact['network'] != NETWORK_FEED) && $datarray['private']) {
1318                         return false;
1319                 }
1320
1321                 $datarray2 = $datarray;
1322                 logger('remote-self start - Contact '.$contact['url'].' - '.$contact['remote_self'].' Item '.print_r($datarray, true), LOGGER_DEBUG);
1323                 if ($contact['remote_self'] == 2) {
1324                         $r = q("SELECT `id`,`url`,`name`,`thumb` FROM `contact` WHERE `uid` = %d AND `self`",
1325                                 intval($contact['uid']));
1326                         if (DBM::is_result($r)) {
1327                                 $datarray['contact-id'] = $r[0]["id"];
1328
1329                                 $datarray['owner-name'] = $r[0]["name"];
1330                                 $datarray['owner-link'] = $r[0]["url"];
1331                                 $datarray['owner-avatar'] = $r[0]["thumb"];
1332
1333                                 $datarray['author-name']   = $datarray['owner-name'];
1334                                 $datarray['author-link']   = $datarray['owner-link'];
1335                                 $datarray['author-avatar'] = $datarray['owner-avatar'];
1336
1337                                 unset($datarray['created']);
1338                                 unset($datarray['edited']);
1339                         }
1340
1341                         if ($contact['network'] != NETWORK_FEED) {
1342                                 $datarray["guid"] = get_guid(32);
1343                                 unset($datarray["plink"]);
1344                                 $datarray["uri"] = item_new_uri($a->get_hostname(), $contact['uid'], $datarray["guid"]);
1345                                 $datarray["parent-uri"] = $datarray["uri"];
1346                                 $datarray["extid"] = $contact['network'];
1347                                 $urlpart = parse_url($datarray2['author-link']);
1348                                 $datarray["app"] = $urlpart["host"];
1349                         } else {
1350                                 $datarray['private'] = 0;
1351                         }
1352                 }
1353
1354                 if ($contact['network'] != NETWORK_FEED) {
1355                         // Store the original post
1356                         $r = self::insert($datarray2, false, false);
1357                         logger('remote-self post original item - Contact '.$contact['url'].' return '.$r.' Item '.print_r($datarray2, true), LOGGER_DEBUG);
1358                 } else {
1359                         $datarray["app"] = "Feed";
1360                 }
1361
1362                 // Trigger automatic reactions for addons
1363                 $datarray['api_source'] = true;
1364
1365                 // We have to tell the hooks who we are - this really should be improved
1366                 $_SESSION["authenticated"] = true;
1367                 $_SESSION["uid"] = $contact['uid'];
1368
1369                 return true;
1370         }
1371
1372         /**
1373          *
1374          * @param string $s
1375          * @param int    $uid
1376          * @param array  $item
1377          * @param int    $cid
1378          * @return string
1379          */
1380         public static function fixPrivatePhotos($s, $uid, $item = null, $cid = 0)
1381         {
1382                 if (Config::get('system', 'disable_embedded')) {
1383                         return $s;
1384                 }
1385
1386                 logger('check for photos', LOGGER_DEBUG);
1387                 $site = substr(System::baseUrl(), strpos(System::baseUrl(), '://'));
1388
1389                 $orig_body = $s;
1390                 $new_body = '';
1391
1392                 $img_start = strpos($orig_body, '[img');
1393                 $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
1394                 $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
1395
1396                 while (($img_st_close !== false) && ($img_len !== false)) {
1397                         $img_st_close++; // make it point to AFTER the closing bracket
1398                         $image = substr($orig_body, $img_start + $img_st_close, $img_len);
1399
1400                         logger('found photo ' . $image, LOGGER_DEBUG);
1401
1402                         if (stristr($image, $site . '/photo/')) {
1403                                 // Only embed locally hosted photos
1404                                 $replace = false;
1405                                 $i = basename($image);
1406                                 $i = str_replace(['.jpg', '.png', '.gif'], ['', '', ''], $i);
1407                                 $x = strpos($i, '-');
1408
1409                                 if ($x) {
1410                                         $res = substr($i, $x + 1);
1411                                         $i = substr($i, 0, $x);
1412                                         $r = q("SELECT * FROM `photo` WHERE `resource-id` = '%s' AND `scale` = %d AND `uid` = %d",
1413                                                 dbesc($i),
1414                                                 intval($res),
1415                                                 intval($uid)
1416                                         );
1417                                         if (DBM::is_result($r)) {
1418                                                 /*
1419                                                  * Check to see if we should replace this photo link with an embedded image
1420                                                  * 1. No need to do so if the photo is public
1421                                                  * 2. If there's a contact-id provided, see if they're in the access list
1422                                                  *    for the photo. If so, embed it.
1423                                                  * 3. Otherwise, if we have an item, see if the item permissions match the photo
1424                                                  *    permissions, regardless of order but first check to see if they're an exact
1425                                                  *    match to save some processing overhead.
1426                                                  */
1427                                                 if (self::hasPermissions($r[0])) {
1428                                                         if ($cid) {
1429                                                                 $recips = self::enumeratePermissions($r[0]);
1430                                                                 if (in_array($cid, $recips)) {
1431                                                                         $replace = true;
1432                                                                 }
1433                                                         } elseif ($item) {
1434                                                                 if (self::samePermissions($item, $r[0])) {
1435                                                                         $replace = true;
1436                                                                 }
1437                                                         }
1438                                                 }
1439                                                 if ($replace) {
1440                                                         $data = $r[0]['data'];
1441                                                         $type = $r[0]['type'];
1442
1443                                                         // If a custom width and height were specified, apply before embedding
1444                                                         if (preg_match("/\[img\=([0-9]*)x([0-9]*)\]/is", substr($orig_body, $img_start, $img_st_close), $match)) {
1445                                                                 logger('scaling photo', LOGGER_DEBUG);
1446
1447                                                                 $width = intval($match[1]);
1448                                                                 $height = intval($match[2]);
1449
1450                                                                 $Image = new Image($data, $type);
1451                                                                 if ($Image->isValid()) {
1452                                                                         $Image->scaleDown(max($width, $height));
1453                                                                         $data = $Image->asString();
1454                                                                         $type = $Image->getType();
1455                                                                 }
1456                                                         }
1457
1458                                                         logger('replacing photo', LOGGER_DEBUG);
1459                                                         $image = 'data:' . $type . ';base64,' . base64_encode($data);
1460                                                         logger('replaced: ' . $image, LOGGER_DATA);
1461                                                 }
1462                                         }
1463                                 }
1464                         }
1465
1466                         $new_body = $new_body . substr($orig_body, 0, $img_start + $img_st_close) . $image . '[/img]';
1467                         $orig_body = substr($orig_body, $img_start + $img_st_close + $img_len + strlen('[/img]'));
1468                         if ($orig_body === false) {
1469                                 $orig_body = '';
1470                         }
1471
1472                         $img_start = strpos($orig_body, '[img');
1473                         $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
1474                         $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
1475                 }
1476
1477                 $new_body = $new_body . $orig_body;
1478
1479                 return $new_body;
1480         }
1481
1482         private static function hasPermissions($obj)
1483         {
1484                 return (
1485                         (
1486                                 x($obj, 'allow_cid')
1487                         ) || (
1488                                 x($obj, 'allow_gid')
1489                         ) || (
1490                                 x($obj, 'deny_cid')
1491                         ) || (
1492                                 x($obj, 'deny_gid')
1493                         )
1494                 );
1495         }
1496
1497         private static function samePermissions($obj1, $obj2)
1498         {
1499                 // first part is easy. Check that these are exactly the same.
1500                 if (($obj1['allow_cid'] == $obj2['allow_cid'])
1501                         && ($obj1['allow_gid'] == $obj2['allow_gid'])
1502                         && ($obj1['deny_cid'] == $obj2['deny_cid'])
1503                         && ($obj1['deny_gid'] == $obj2['deny_gid'])) {
1504                         return true;
1505                 }
1506
1507                 // This is harder. Parse all the permissions and compare the resulting set.
1508                 $recipients1 = self::enumeratePermissions($obj1);
1509                 $recipients2 = self::enumeratePermissions($obj2);
1510                 sort($recipients1);
1511                 sort($recipients2);
1512
1513                 /// @TODO Comparison of arrays, maybe use array_diff_assoc() here?
1514                 return ($recipients1 == $recipients2);
1515         }
1516
1517         // returns an array of contact-ids that are allowed to see this object
1518         private static function enumeratePermissions($obj)
1519         {
1520                 $allow_people = expand_acl($obj['allow_cid']);
1521                 $allow_groups = Group::expand(expand_acl($obj['allow_gid']));
1522                 $deny_people  = expand_acl($obj['deny_cid']);
1523                 $deny_groups  = Group::expand(expand_acl($obj['deny_gid']));
1524                 $recipients   = array_unique(array_merge($allow_people, $allow_groups));
1525                 $deny         = array_unique(array_merge($deny_people, $deny_groups));
1526                 $recipients   = array_diff($recipients, $deny);
1527                 return $recipients;
1528         }
1529
1530         public static function getFeedTags($item)
1531         {
1532                 $ret = [];
1533                 $matches = false;
1534                 $cnt = preg_match_all('|\#\[url\=(.*?)\](.*?)\[\/url\]|', $item['tag'], $matches);
1535                 if ($cnt) {
1536                         for ($x = 0; $x < $cnt; $x ++) {
1537                                 if ($matches[1][$x]) {
1538                                         $ret[$matches[2][$x]] = ['#', $matches[1][$x], $matches[2][$x]];
1539                                 }
1540                         }
1541                 }
1542                 $matches = false;
1543                 $cnt = preg_match_all('|\@\[url\=(.*?)\](.*?)\[\/url\]|', $item['tag'], $matches);
1544                 if ($cnt) {
1545                         for ($x = 0; $x < $cnt; $x ++) {
1546                                 if ($matches[1][$x]) {
1547                                         $ret[] = ['@', $matches[1][$x], $matches[2][$x]];
1548                                 }
1549                         }
1550                 }
1551                 return $ret;
1552         }
1553
1554         public static function expire($uid, $days, $network = "", $force = false)
1555         {
1556                 if (!$uid || ($days < 1)) {
1557                         return;
1558                 }
1559
1560                 /*
1561                  * $expire_network_only = save your own wall posts
1562                  * and just expire conversations started by others
1563                  */
1564                 $expire_network_only = PConfig::get($uid,'expire', 'network_only');
1565                 $sql_extra = (intval($expire_network_only) ? " AND wall = 0 " : "");
1566
1567                 if ($network != "") {
1568                         $sql_extra .= sprintf(" AND network = '%s' ", dbesc($network));
1569
1570                         /*
1571                          * There is an index "uid_network_received" but not "uid_network_created"
1572                          * This avoids the creation of another index just for one purpose.
1573                          * And it doesn't really matter wether to look at "received" or "created"
1574                          */
1575                         $range = "AND `received` < UTC_TIMESTAMP() - INTERVAL %d DAY ";
1576                 } else {
1577                         $range = "AND `created` < UTC_TIMESTAMP() - INTERVAL %d DAY ";
1578                 }
1579
1580                 $r = q("SELECT `file`, `resource-id`, `starred`, `type`, `id` FROM `item`
1581                         WHERE `uid` = %d $range
1582                         AND `id` = `parent`
1583                         $sql_extra
1584                         AND `deleted` = 0",
1585                         intval($uid),
1586                         intval($days)
1587                 );
1588
1589                 if (!DBM::is_result($r)) {
1590                         return;
1591                 }
1592
1593                 $expire_items = PConfig::get($uid, 'expire', 'items', 1);
1594
1595                 // Forcing expiring of items - but not notes and marked items
1596                 if ($force) {
1597                         $expire_items = true;
1598                 }
1599
1600                 $expire_notes = PConfig::get($uid, 'expire', 'notes', 1);
1601                 $expire_starred = PConfig::get($uid, 'expire', 'starred', 1);
1602                 $expire_photos = PConfig::get($uid, 'expire', 'photos', 0);
1603
1604                 logger('User '.$uid.': expire: # items=' . count($r). "; expire items: $expire_items, expire notes: $expire_notes, expire starred: $expire_starred, expire photos: $expire_photos");
1605
1606                 foreach ($r as $item) {
1607
1608                         // don't expire filed items
1609
1610                         if (strpos($item['file'],'[') !== false) {
1611                                 continue;
1612                         }
1613
1614                         // Only expire posts, not photos and photo comments
1615
1616                         if ($expire_photos == 0 && strlen($item['resource-id'])) {
1617                                 continue;
1618                         } elseif ($expire_starred == 0 && intval($item['starred'])) {
1619                                 continue;
1620                         } elseif ($expire_notes == 0 && $item['type'] == 'note') {
1621                                 continue;
1622                         } elseif ($expire_items == 0 && $item['type'] != 'note') {
1623                                 continue;
1624                         }
1625
1626                         self::delete($item['id'], PRIORITY_LOW);
1627                 }
1628         }
1629
1630         /// @TODO: This query seems to be really slow
1631         public static function firstPostDate($uid, $wall = false)
1632         {
1633                 $r = q("SELECT `id`, `created` FROM `item`
1634                         WHERE `uid` = %d AND `wall` = %d AND `deleted` = 0 AND `visible` = 1 AND `moderated` = 0
1635                         AND `id` = `parent`
1636                         ORDER BY `created` ASC LIMIT 1",
1637                         intval($uid),
1638                         intval($wall ? 1 : 0)
1639                 );
1640                 if (DBM::is_result($r)) {
1641                         return substr(datetime_convert('',date_default_timezone_get(), $r[0]['created']),0,10);
1642                 }
1643                 return false;
1644         }
1645 }