src/Model/Item.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2020, Friendica
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 namespace Friendica\Model;
  23
  24 use Friendica\Content\Text\BBCode;
  25 use Friendica\Content\Text\HTML;
  26 use Friendica\Core\Hook;
  27 use Friendica\Core\Logger;
  28 use Friendica\Core\Protocol;
  29 use Friendica\Core\Renderer;
  30 use Friendica\Core\Session;
  31 use Friendica\Core\System;
  32 use Friendica\Core\Worker;
  33 use Friendica\Database\DBA;
  34 use Friendica\DI;
  35 use Friendica\Protocol\Activity;
  36 use Friendica\Protocol\ActivityPub;
  37 use Friendica\Protocol\Diaspora;
  38 use Friendica\Protocol\OStatus;
  39 use Friendica\Util\DateTimeFormat;
  40 use Friendica\Util\Map;
  41 use Friendica\Util\Network;
  42 use Friendica\Util\Security;
  43 use Friendica\Util\Strings;
  44 use Friendica\Util\XML;
  45 use Friendica\Worker\Delivery;
  46 use Text_LanguageDetect;
  47
  48 class Item
  49 {
  50         // Posting types, inspired by https://www.w3.org/TR/activitystreams-vocabulary/#object-types
  51         const PT_ARTICLE = 0;
  52         const PT_NOTE = 1;
  53         const PT_PAGE = 2;
  54         const PT_IMAGE = 16;
  55         const PT_AUDIO = 17;
  56         const PT_VIDEO = 18;
  57         const PT_DOCUMENT = 19;
  58         const PT_EVENT = 32;
  59         const PT_PERSONAL_NOTE = 128;
  60
  61         // Field list that is used to display the items
  62         const DISPLAY_FIELDLIST = [
  63                 'uid', 'id', 'parent', 'uri', 'thr-parent', 'parent-uri', 'guid', 'network', 'gravity',
  64                 'commented', 'created', 'edited', 'received', 'verb', 'object-type', 'postopts', 'plink',
  65                 'wall', 'private', 'starred', 'origin', 'title', 'body', 'file', 'attach', 'language',
  66                 'content-warning', 'location', 'coord', 'app', 'rendered-hash', 'rendered-html', 'object',
  67                 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'item_id',
  68                 'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
  69                 'owner-id', 'owner-link', 'owner-name', 'owner-avatar', 'owner-network',
  70                 'contact-id', 'contact-uid', 'contact-link', 'contact-name', 'contact-avatar',
  71                 'writable', 'self', 'cid', 'alias', 'pinned',
  72                 'event-id', 'event-created', 'event-edited', 'event-start', 'event-finish',
  73                 'event-summary', 'event-desc', 'event-location', 'event-type',
  74                 'event-nofinish', 'event-adjust', 'event-ignore', 'event-id',
  75                 'delivery_queue_count', 'delivery_queue_done', 'delivery_queue_failed'
  76         ];
  77
  78         // Field list that is used to deliver items via the protocols
  79         const DELIVER_FIELDLIST = ['uid', 'id', 'parent', 'uri', 'thr-parent', 'parent-uri', 'guid',
  80                         'parent-guid', 'created', 'edited', 'verb', 'object-type', 'object', 'target',
  81                         'private', 'title', 'body', 'location', 'coord', 'app',
  82                         'attach', 'tag', 'deleted', 'extid', 'post-type',
  83                         'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
  84                         'author-id', 'author-link', 'owner-link', 'contact-uid',
  85                         'signed_text', 'signature', 'signer', 'network'];
  86
  87         // Field list for "item-content" table that is mixed with the item table
  88         const MIXED_CONTENT_FIELDLIST = ['title', 'content-warning', 'body', 'location',
  89                         'coord', 'app', 'rendered-hash', 'rendered-html', 'verb',
  90                         'object-type', 'object', 'target-type', 'target', 'plink'];
  91
  92         // Field list for "item-content" table that is not present in the "item" table
  93         const CONTENT_FIELDLIST = ['language'];
  94
  95         // All fields in the item table
  96         const ITEM_FIELDLIST = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent', 'guid',
  97                         'contact-id', 'type', 'wall', 'gravity', 'extid', 'icid', 'iaid', 'psid',
  98                         'created', 'edited', 'commented', 'received', 'changed', 'verb',
  99                         'postopts', 'plink', 'resource-id', 'event-id', 'tag', 'attach', 'inform',
 100                         'file', 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'post-type',
 101                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 102                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global', 'network',
 103                         'title', 'content-warning', 'body', 'location', 'coord', 'app',
 104                         'rendered-hash', 'rendered-html', 'object-type', 'object', 'target-type', 'target',
 105                         'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
 106                         'owner-id', 'owner-link', 'owner-name', 'owner-avatar'];
 107
 108         // Never reorder or remove entries from this list. Just add new ones at the end, if needed.
 109         // The item-activity table only stores the index and needs this array to know the matching activity.
 110         const ACTIVITIES = [
 111                 Activity::LIKE, Activity::DISLIKE,
 112                 Activity::ATTEND, Activity::ATTENDNO, Activity::ATTENDMAYBE,
 113                 Activity::FOLLOW,
 114                 Activity::ANNOUNCE];
 115
 116         private static $legacy_mode = null;
 117
 118         public static function isLegacyMode()
 119         {
 120                 if (is_null(self::$legacy_mode)) {
 121                         self::$legacy_mode = (DI::config()->get("system", "post_update_version") < 1279);
 122                 }
 123
 124                 return self::$legacy_mode;
 125         }
 126
 127         /**
 128          * Set the pinned state of an item
 129          *
 130          * @param integer $iid    Item ID
 131          * @param integer $uid    User ID
 132          * @param boolean $pinned Pinned state
 133          */
 134         public static function setPinned(int $iid, int $uid, bool $pinned)
 135         {
 136                 DBA::update('user-item', ['pinned' => $pinned], ['iid' => $iid, 'uid' => $uid], true);
 137         }
 138
 139         /**
 140          * Get the pinned state
 141          *
 142          * @param integer $iid Item ID
 143          * @param integer $uid User ID
 144          *
 145          * @return boolean pinned state
 146          */
 147         public static function getPinned(int $iid, int $uid)
 148         {
 149                 $useritem = DBA::selectFirst('user-item', ['pinned'], ['iid' => $iid, 'uid' => $uid]);
 150                 if (!DBA::isResult($useritem)) {
 151                         return false;
 152                 }
 153                 return (bool)$useritem['pinned'];
 154         }
 155
 156         /**
 157          * Select pinned rows from the item table for a given user
 158          *
 159          * @param integer $uid       User ID
 160          * @param array   $selected  Array of selected fields, empty for all
 161          * @param array   $condition Array of fields for condition
 162          * @param array   $params    Array of several parameters
 163          *
 164          * @return boolean|object
 165          * @throws \Exception
 166          */
 167         public static function selectPinned(int $uid, array $selected = [], array $condition = [], $params = [])
 168         {
 169                 $useritems = DBA::select('user-item', ['iid'], ['uid' => $uid, 'pinned' => true]);
 170                 if (!DBA::isResult($useritems)) {
 171                         return $useritems;
 172                 }
 173
 174                 $pinned = [];
 175                 while ($useritem = self::fetch($useritems)) {
 176                         $pinned[] = $useritem['iid'];
 177                 }
 178                 DBA::close($useritems);
 179
 180                 if (empty($pinned)) {
 181                         return [];
 182                 }
 183
 184                 if (empty($condition) || !is_array($condition)) {
 185                         $condition = ['iid' => $pinned];
 186                 } else {
 187                         reset($condition);
 188                         $first_key = key($condition);
 189                         if (!is_int($first_key)) {
 190                                 $condition['iid'] = $pinned;
 191                         } else {
 192                                 $values_string = substr(str_repeat("?, ", count($pinned)), 0, -2);
 193                                 $condition[0] = '(' . $condition[0] . ") AND `iid` IN (" . $values_string . ")";
 194                                 $condition = array_merge($condition, $pinned);
 195                         }
 196                 }
 197
 198                 return self::selectThreadForUser($uid, $selected, $condition, $params);
 199         }
 200
 201         /**
 202          * returns an activity index from an activity string
 203          *
 204          * @param string $activity activity string
 205          * @return integer Activity index
 206          */
 207         public static function activityToIndex($activity)
 208         {
 209                 $index = array_search($activity, self::ACTIVITIES);
 210
 211                 if (is_bool($index)) {
 212                         $index = -1;
 213                 }
 214
 215                 return $index;
 216         }
 217
 218         /**
 219          * returns an activity string from an activity index
 220          *
 221          * @param integer $index activity index
 222          * @return string Activity string
 223          */
 224         private static function indexToActivity($index)
 225         {
 226                 if (is_null($index) || !array_key_exists($index, self::ACTIVITIES)) {
 227                         return '';
 228                 }
 229
 230                 return self::ACTIVITIES[$index];
 231         }
 232
 233         /**
 234          * Fetch a single item row
 235          *
 236          * @param mixed $stmt statement object
 237          * @return array current row
 238          */
 239         public static function fetch($stmt)
 240         {
 241                 $row = DBA::fetch($stmt);
 242
 243                 if (is_bool($row)) {
 244                         return $row;
 245                 }
 246
 247                 // ---------------------- Transform item structure data ----------------------
 248
 249                 // We prefer the data from the user's contact over the public one
 250                 if (!empty($row['author-link']) && !empty($row['contact-link']) &&
 251                         ($row['author-link'] == $row['contact-link'])) {
 252                         if (isset($row['author-avatar']) && !empty($row['contact-avatar'])) {
 253                                 $row['author-avatar'] = $row['contact-avatar'];
 254                         }
 255                         if (isset($row['author-name']) && !empty($row['contact-name'])) {
 256                                 $row['author-name'] = $row['contact-name'];
 257                         }
 258                 }
 259
 260                 if (!empty($row['owner-link']) && !empty($row['contact-link']) &&
 261                         ($row['owner-link'] == $row['contact-link'])) {
 262                         if (isset($row['owner-avatar']) && !empty($row['contact-avatar'])) {
 263                                 $row['owner-avatar'] = $row['contact-avatar'];
 264                         }
 265                         if (isset($row['owner-name']) && !empty($row['contact-name'])) {
 266                                 $row['owner-name'] = $row['contact-name'];
 267                         }
 268                 }
 269
 270                 // We can always comment on posts from these networks
 271                 if (array_key_exists('writable', $row) &&
 272                         in_array($row['internal-network'], Protocol::FEDERATED)) {
 273                         $row['writable'] = true;
 274                 }
 275
 276                 // ---------------------- Transform item content data ----------------------
 277
 278                 // Fetch data from the item-content table whenever there is content there
 279                 if (self::isLegacyMode()) {
 280                         $legacy_fields = array_merge(ItemDeliveryData::LEGACY_FIELD_LIST, self::MIXED_CONTENT_FIELDLIST);
 281                         foreach ($legacy_fields as $field) {
 282                                 if (empty($row[$field]) && !empty($row['internal-item-' . $field])) {
 283                                         $row[$field] = $row['internal-item-' . $field];
 284                                 }
 285                                 unset($row['internal-item-' . $field]);
 286                         }
 287                 }
 288
 289                 if (!empty($row['internal-iaid']) && array_key_exists('verb', $row)) {
 290                         $row['verb'] = self::indexToActivity($row['internal-activity']);
 291                         if (array_key_exists('title', $row)) {
 292                                 $row['title'] = '';
 293                         }
 294                         if (array_key_exists('body', $row)) {
 295                                 $row['body'] = $row['verb'];
 296                         }
 297                         if (array_key_exists('object', $row)) {
 298                                 $row['object'] = '';
 299                         }
 300                         if (array_key_exists('object-type', $row)) {
 301                                 $row['object-type'] = Activity\ObjectType::NOTE;
 302                         }
 303                 } elseif (array_key_exists('verb', $row) && in_array($row['verb'], ['', Activity::POST, Activity::SHARE])) {
 304                         // Posts don't have a target - but having tags or files.
 305                         // We safe some performance by building tag and file strings only here.
 306                         // We remove the target since they aren't used for this type.
 307                         // In mail posts we do store some mail header data in the object.
 308                         if (array_key_exists('target', $row)) {
 309                                 $row['target'] = '';
 310                         }
 311                 }
 312
 313                 if (!array_key_exists('verb', $row) || in_array($row['verb'], ['', Activity::POST, Activity::SHARE])) {
 314                         // Build the tag string out of the term entries
 315                         if (array_key_exists('tag', $row) && empty($row['tag'])) {
 316                                 $row['tag'] = Term::tagTextFromItemId($row['internal-iid']);
 317                         }
 318
 319                         // Build the file string out of the term entries
 320                         if (array_key_exists('file', $row) && empty($row['file'])) {
 321                                 $row['file'] = Term::fileTextFromItemId($row['internal-iid']);
 322                         }
 323                 }
 324
 325                 if (array_key_exists('signed_text', $row) && array_key_exists('interaction', $row) && !is_null($row['interaction'])) {
 326                         $row['signed_text'] = $row['interaction'];
 327                 }
 328
 329                 if (array_key_exists('ignored', $row) && array_key_exists('internal-user-ignored', $row) && !is_null($row['internal-user-ignored'])) {
 330                         $row['ignored'] = $row['internal-user-ignored'];
 331                 }
 332
 333                 // Remove internal fields
 334                 unset($row['internal-activity']);
 335                 unset($row['internal-network']);
 336                 unset($row['internal-iid']);
 337                 unset($row['internal-iaid']);
 338                 unset($row['internal-icid']);
 339                 unset($row['internal-user-ignored']);
 340                 unset($row['interaction']);
 341
 342                 return $row;
 343         }
 344
 345         /**
 346          * Fills an array with data from an item query
 347          *
 348          * @param object $stmt statement object
 349          * @param bool   $do_close
 350          * @return array Data array
 351          */
 352         public static function inArray($stmt, $do_close = true) {
 353                 if (is_bool($stmt)) {
 354                         return $stmt;
 355                 }
 356
 357                 $data = [];
 358                 while ($row = self::fetch($stmt)) {
 359                         $data[] = $row;
 360                 }
 361                 if ($do_close) {
 362                         DBA::close($stmt);
 363                 }
 364                 return $data;
 365         }
 366
 367         /**
 368          * Check if item data exists
 369          *
 370          * @param array $condition array of fields for condition
 371          *
 372          * @return boolean Are there rows for that condition?
 373          * @throws \Exception
 374          */
 375         public static function exists($condition) {
 376                 $stmt = self::select(['id'], $condition, ['limit' => 1]);
 377
 378                 if (is_bool($stmt)) {
 379                         $retval = $stmt;
 380                 } else {
 381                         $retval = (DBA::numRows($stmt) > 0);
 382                 }
 383
 384                 DBA::close($stmt);
 385
 386                 return $retval;
 387         }
 388
 389         /**
 390          * Retrieve a single record from the item table for a given user and returns it in an associative array
 391          *
 392          * @param integer $uid User ID
 393          * @param array   $selected
 394          * @param array   $condition
 395          * @param array   $params
 396          * @return bool|array
 397          * @throws \Exception
 398          * @see   DBA::select
 399          */
 400         public static function selectFirstForUser($uid, array $selected = [], array $condition = [], $params = [])
 401         {
 402                 $params['uid'] = $uid;
 403
 404                 if (empty($selected)) {
 405                         $selected = Item::DISPLAY_FIELDLIST;
 406                 }
 407
 408                 return self::selectFirst($selected, $condition, $params);
 409         }
 410
 411         /**
 412          * Select rows from the item table for a given user
 413          *
 414          * @param integer $uid       User ID
 415          * @param array   $selected  Array of selected fields, empty for all
 416          * @param array   $condition Array of fields for condition
 417          * @param array   $params    Array of several parameters
 418          *
 419          * @return boolean|object
 420          * @throws \Exception
 421          */
 422         public static function selectForUser($uid, array $selected = [], array $condition = [], $params = [])
 423         {
 424                 $params['uid'] = $uid;
 425
 426                 if (empty($selected)) {
 427                         $selected = Item::DISPLAY_FIELDLIST;
 428                 }
 429
 430                 return self::select($selected, $condition, $params);
 431         }
 432
 433         /**
 434          * Retrieve a single record from the item table and returns it in an associative array
 435          *
 436          * @param array $fields
 437          * @param array $condition
 438          * @param array $params
 439          * @return bool|array
 440          * @throws \Exception
 441          * @see   DBA::select
 442          */
 443         public static function selectFirst(array $fields = [], array $condition = [], $params = [])
 444         {
 445                 $params['limit'] = 1;
 446
 447                 $result = self::select($fields, $condition, $params);
 448
 449                 if (is_bool($result)) {
 450                         return $result;
 451                 } else {
 452                         $row = self::fetch($result);
 453                         DBA::close($result);
 454                         return $row;
 455                 }
 456         }
 457
 458         /**
 459          * Select rows from the item table and returns them as an array
 460          *
 461          * @param array $selected  Array of selected fields, empty for all
 462          * @param array $condition Array of fields for condition
 463          * @param array $params    Array of several parameters
 464          *
 465          * @return array
 466          * @throws \Exception
 467          */
 468         public static function selectToArray(array $fields = [], array $condition = [], $params = [])
 469         {
 470                 $result = self::select($fields, $condition, $params);
 471
 472                 if (is_bool($result)) {
 473                         return [];
 474                 }
 475
 476                 $data = [];
 477                 while ($row = self::fetch($result)) {
 478                         $data[] = $row;
 479                 }
 480                 DBA::close($result);
 481
 482                 return $data;
 483         }
 484
 485         /**
 486          * Select rows from the item table
 487          *
 488          * @param array $selected  Array of selected fields, empty for all
 489          * @param array $condition Array of fields for condition
 490          * @param array $params    Array of several parameters
 491          *
 492          * @return boolean|object
 493          * @throws \Exception
 494          */
 495         public static function select(array $selected = [], array $condition = [], $params = [])
 496         {
 497                 $uid = 0;
 498                 $usermode = false;
 499
 500                 if (isset($params['uid'])) {
 501                         $uid = $params['uid'];
 502                         $usermode = true;
 503                 }
 504
 505                 $fields = self::fieldlist($usermode);
 506
 507                 $select_fields = self::constructSelectFields($fields, $selected);
 508
 509                 $condition_string = DBA::buildCondition($condition);
 510
 511                 $condition_string = self::addTablesToFields($condition_string, $fields);
 512
 513                 if ($usermode) {
 514                         $condition_string = $condition_string . ' AND ' . self::condition(false);
 515                 }
 516
 517                 $param_string = self::addTablesToFields(DBA::buildParameter($params), $fields);
 518
 519                 $table = "`item` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, false, $usermode);
 520
 521                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 522
 523                 return DBA::p($sql, $condition);
 524         }
 525
 526         /**
 527          * Select rows from the starting post in the item table
 528          *
 529          * @param integer $uid       User ID
 530          * @param array   $selected
 531          * @param array   $condition Array of fields for condition
 532          * @param array   $params    Array of several parameters
 533          *
 534          * @return boolean|object
 535          * @throws \Exception
 536          */
 537         public static function selectThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 538         {
 539                 $params['uid'] = $uid;
 540
 541                 if (empty($selected)) {
 542                         $selected = Item::DISPLAY_FIELDLIST;
 543                 }
 544
 545                 return self::selectThread($selected, $condition, $params);
 546         }
 547
 548         /**
 549          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 550          *
 551          * @param integer $uid User ID
 552          * @param array   $selected
 553          * @param array   $condition
 554          * @param array   $params
 555          * @return bool|array
 556          * @throws \Exception
 557          * @see   DBA::select
 558          */
 559         public static function selectFirstThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 560         {
 561                 $params['uid'] = $uid;
 562
 563                 if (empty($selected)) {
 564                         $selected = Item::DISPLAY_FIELDLIST;
 565                 }
 566
 567                 return self::selectFirstThread($selected, $condition, $params);
 568         }
 569
 570         /**
 571          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 572          *
 573          * @param array $fields
 574          * @param array $condition
 575          * @param array $params
 576          * @return bool|array
 577          * @throws \Exception
 578          * @see   DBA::select
 579          */
 580         public static function selectFirstThread(array $fields = [], array $condition = [], $params = [])
 581         {
 582                 $params['limit'] = 1;
 583                 $result = self::selectThread($fields, $condition, $params);
 584
 585                 if (is_bool($result)) {
 586                         return $result;
 587                 } else {
 588                         $row = self::fetch($result);
 589                         DBA::close($result);
 590                         return $row;
 591                 }
 592         }
 593
 594         /**
 595          * Select rows from the starting post in the item table
 596          *
 597          * @param array $selected  Array of selected fields, empty for all
 598          * @param array $condition Array of fields for condition
 599          * @param array $params    Array of several parameters
 600          *
 601          * @return boolean|object
 602          * @throws \Exception
 603          */
 604         public static function selectThread(array $selected = [], array $condition = [], $params = [])
 605         {
 606                 $uid = 0;
 607                 $usermode = false;
 608
 609                 if (isset($params['uid'])) {
 610                         $uid = $params['uid'];
 611                         $usermode = true;
 612                 }
 613
 614                 $fields = self::fieldlist($usermode);
 615
 616                 $fields['thread'] = ['mention', 'ignored', 'iid'];
 617
 618                 $threadfields = ['thread' => ['iid', 'uid', 'contact-id', 'owner-id', 'author-id',
 619                         'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private',
 620                         'pubmail', 'moderated', 'visible', 'starred', 'ignored', 'post-type',
 621                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'network']];
 622
 623                 $select_fields = self::constructSelectFields($fields, $selected);
 624
 625                 $condition_string = DBA::buildCondition($condition);
 626
 627                 $condition_string = self::addTablesToFields($condition_string, $threadfields);
 628                 $condition_string = self::addTablesToFields($condition_string, $fields);
 629
 630                 if ($usermode) {
 631                         $condition_string = $condition_string . ' AND ' . self::condition(true);
 632                 }
 633
 634                 $param_string = DBA::buildParameter($params);
 635                 $param_string = self::addTablesToFields($param_string, $threadfields);
 636                 $param_string = self::addTablesToFields($param_string, $fields);
 637
 638                 $table = "`thread` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, true, $usermode);
 639
 640                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 641
 642                 return DBA::p($sql, $condition);
 643         }
 644
 645         /**
 646          * Returns a list of fields that are associated with the item table
 647          *
 648          * @param $usermode
 649          * @return array field list
 650          */
 651         private static function fieldlist($usermode)
 652         {
 653                 $fields = [];
 654
 655                 $fields['item'] = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent', 'guid',
 656                         'contact-id', 'owner-id', 'author-id', 'type', 'wall', 'gravity', 'extid',
 657                         'created', 'edited', 'commented', 'received', 'changed', 'psid',
 658                         'resource-id', 'event-id', 'tag', 'attach', 'post-type', 'file',
 659                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 660                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global',
 661                         'id' => 'item_id', 'network', 'icid', 'iaid', 'id' => 'internal-iid',
 662                         'network' => 'internal-network', 'icid' => 'internal-icid',
 663                         'iaid' => 'internal-iaid'];
 664
 665                 if ($usermode) {
 666                         $fields['user-item'] = ['pinned', 'notification-type', 'ignored' => 'internal-user-ignored'];
 667                 }
 668
 669                 $fields['item-activity'] = ['activity', 'activity' => 'internal-activity'];
 670
 671                 $fields['item-content'] = array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST);
 672
 673                 $fields['item-delivery-data'] = array_merge(ItemDeliveryData::LEGACY_FIELD_LIST, ItemDeliveryData::FIELD_LIST);
 674
 675                 $fields['permissionset'] = ['allow_cid', 'allow_gid', 'deny_cid', 'deny_gid'];
 676
 677                 $fields['author'] = ['url' => 'author-link', 'name' => 'author-name', 'addr' => 'author-addr',
 678                         'thumb' => 'author-avatar', 'nick' => 'author-nick', 'network' => 'author-network'];
 679
 680                 $fields['owner'] = ['url' => 'owner-link', 'name' => 'owner-name', 'addr' => 'owner-addr',
 681                         'thumb' => 'owner-avatar', 'nick' => 'owner-nick', 'network' => 'owner-network'];
 682
 683                 $fields['contact'] = ['url' => 'contact-link', 'name' => 'contact-name', 'thumb' => 'contact-avatar',
 684                         'writable', 'self', 'id' => 'cid', 'alias', 'uid' => 'contact-uid',
 685                         'photo', 'name-date', 'uri-date', 'avatar-date', 'thumb', 'dfrn-id'];
 686
 687                 $fields['parent-item'] = ['guid' => 'parent-guid', 'network' => 'parent-network'];
 688
 689                 $fields['parent-item-author'] = ['url' => 'parent-author-link', 'name' => 'parent-author-name'];
 690
 691                 $fields['event'] = ['created' => 'event-created', 'edited' => 'event-edited',
 692                         'start' => 'event-start','finish' => 'event-finish',
 693                         'summary' => 'event-summary','desc' => 'event-desc',
 694                         'location' => 'event-location', 'type' => 'event-type',
 695                         'nofinish' => 'event-nofinish','adjust' => 'event-adjust',
 696                         'ignore' => 'event-ignore', 'id' => 'event-id'];
 697
 698                 $fields['sign'] = ['signed_text', 'signature', 'signer'];
 699
 700                 $fields['diaspora-interaction'] = ['interaction'];
 701
 702                 return $fields;
 703         }
 704
 705         /**
 706          * Returns SQL condition for the "select" functions
 707          *
 708          * @param boolean $thread_mode Called for the items (false) or for the threads (true)
 709          *
 710          * @return string SQL condition
 711          */
 712         private static function condition($thread_mode)
 713         {
 714                 if ($thread_mode) {
 715                         $master_table = "`thread`";
 716                 } else {
 717                         $master_table = "`item`";
 718                 }
 719                 return sprintf("$master_table.`visible` AND NOT $master_table.`deleted` AND NOT $master_table.`moderated`
 720                         AND (`user-item`.`hidden` IS NULL OR NOT `user-item`.`hidden`)
 721                         AND (`user-author`.`blocked` IS NULL OR NOT `user-author`.`blocked`)
 722                         AND (`user-author`.`ignored` IS NULL OR NOT `user-author`.`ignored` OR `item`.`gravity` != %d)
 723                         AND (`user-owner`.`blocked` IS NULL OR NOT `user-owner`.`blocked`)
 724                         AND (`user-owner`.`ignored` IS NULL OR NOT `user-owner`.`ignored` OR `item`.`gravity` != %d) ",
 725                         GRAVITY_PARENT, GRAVITY_PARENT);
 726         }
 727
 728         /**
 729          * Returns all needed "JOIN" commands for the "select" functions
 730          *
 731          * @param integer $uid          User ID
 732          * @param string  $sql_commands The parts of the built SQL commands in the "select" functions
 733          * @param boolean $thread_mode  Called for the items (false) or for the threads (true)
 734          *
 735          * @param         $user_mode
 736          * @return string The SQL joins for the "select" functions
 737          */
 738         private static function constructJoins($uid, $sql_commands, $thread_mode, $user_mode)
 739         {
 740                 if ($thread_mode) {
 741                         $master_table = "`thread`";
 742                         $master_table_key = "`thread`.`iid`";
 743                         $joins = "STRAIGHT_JOIN `item` ON `item`.`id` = `thread`.`iid` ";
 744                 } else {
 745                         $master_table = "`item`";
 746                         $master_table_key = "`item`.`id`";
 747                         $joins = '';
 748                 }
 749
 750                 if ($user_mode) {
 751                         $joins .= sprintf("STRAIGHT_JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`
 752                                 AND NOT `contact`.`blocked`
 753                                 AND ((NOT `contact`.`readonly` AND NOT `contact`.`pending` AND (`contact`.`rel` IN (%s, %s)))
 754                                 OR `contact`.`self` OR `item`.`gravity` != %d OR `contact`.`uid` = 0)
 755                                 STRAIGHT_JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id` AND NOT `author`.`blocked`
 756                                 STRAIGHT_JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id` AND NOT `owner`.`blocked`
 757                                 LEFT JOIN `user-item` ON `user-item`.`iid` = $master_table_key AND `user-item`.`uid` = %d
 758                                 LEFT JOIN `user-contact` AS `user-author` ON `user-author`.`cid` = $master_table.`author-id` AND `user-author`.`uid` = %d
 759                                 LEFT JOIN `user-contact` AS `user-owner` ON `user-owner`.`cid` = $master_table.`owner-id` AND `user-owner`.`uid` = %d",
 760                                 Contact::SHARING, Contact::FRIEND, GRAVITY_PARENT, intval($uid), intval($uid), intval($uid));
 761                 } else {
 762                         if (strpos($sql_commands, "`contact`.") !== false) {
 763                                 $joins .= "LEFT JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`";
 764                         }
 765                         if (strpos($sql_commands, "`author`.") !== false) {
 766                                 $joins .= " LEFT JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id`";
 767                         }
 768                         if (strpos($sql_commands, "`owner`.") !== false) {
 769                                 $joins .= " LEFT JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id`";
 770                         }
 771                 }
 772
 773                 if (strpos($sql_commands, "`group_member`.") !== false) {
 774                         $joins .= " STRAIGHT_JOIN `group_member` ON `group_member`.`contact-id` = $master_table.`contact-id`";
 775                 }
 776
 777                 if (strpos($sql_commands, "`user`.") !== false) {
 778                         $joins .= " STRAIGHT_JOIN `user` ON `user`.`uid` = $master_table.`uid`";
 779                 }
 780
 781                 if (strpos($sql_commands, "`event`.") !== false) {
 782                         $joins .= " LEFT JOIN `event` ON `event-id` = `event`.`id`";
 783                 }
 784
 785                 if (strpos($sql_commands, "`sign`.") !== false) {
 786                         $joins .= " LEFT JOIN `sign` ON `sign`.`iid` = `item`.`id`";
 787                 }
 788
 789                 if (strpos($sql_commands, "`diaspora-interaction`.") !== false) {
 790                         $joins .= " LEFT JOIN `diaspora-interaction` ON `diaspora-interaction`.`uri-id` = `item`.`uri-id`";
 791                 }
 792
 793                 if (strpos($sql_commands, "`item-activity`.") !== false) {
 794                         $joins .= " LEFT JOIN `item-activity` ON `item-activity`.`uri-id` = `item`.`uri-id`";
 795                 }
 796
 797                 if (strpos($sql_commands, "`item-content`.") !== false) {
 798                         $joins .= " LEFT JOIN `item-content` ON `item-content`.`uri-id` = `item`.`uri-id`";
 799                 }
 800
 801                 if (strpos($sql_commands, "`item-delivery-data`.") !== false) {
 802                         $joins .= " LEFT JOIN `item-delivery-data` ON `item-delivery-data`.`iid` = `item`.`id`";
 803                 }
 804
 805                 if (strpos($sql_commands, "`permissionset`.") !== false) {
 806                         $joins .= " LEFT JOIN `permissionset` ON `permissionset`.`id` = `item`.`psid`";
 807                 }
 808
 809                 if ((strpos($sql_commands, "`parent-item`.") !== false) || (strpos($sql_commands, "`parent-author`.") !== false)) {
 810                         $joins .= " STRAIGHT_JOIN `item` AS `parent-item` ON `parent-item`.`id` = `item`.`parent`";
 811                 }
 812
 813                 if (strpos($sql_commands, "`parent-item-author`.") !== false) {
 814                         $joins .= " STRAIGHT_JOIN `contact` AS `parent-item-author` ON `parent-item-author`.`id` = `parent-item`.`author-id`";
 815                 }
 816
 817                 return $joins;
 818         }
 819
 820         /**
 821          * Add the field list for the "select" functions
 822          *
 823          * @param array $fields The field definition array
 824          * @param array $selected The array with the selected fields from the "select" functions
 825          *
 826          * @return string The field list
 827          */
 828         private static function constructSelectFields($fields, $selected)
 829         {
 830                 if (!empty($selected)) {
 831                         $selected[] = 'internal-iid';
 832                         $selected[] = 'internal-iaid';
 833                         $selected[] = 'internal-icid';
 834                         $selected[] = 'internal-network';
 835                 }
 836
 837                 if (in_array('verb', $selected)) {
 838                         $selected[] = 'internal-activity';
 839                 }
 840
 841                 if (in_array('ignored', $selected)) {
 842                         $selected[] = 'internal-user-ignored';
 843                 }
 844
 845                 if (in_array('signed_text', $selected)) {
 846                         $selected[] = 'interaction';
 847                 }
 848
 849                 $legacy_fields = array_merge(ItemDeliveryData::LEGACY_FIELD_LIST, self::MIXED_CONTENT_FIELDLIST);
 850
 851                 $selection = [];
 852                 foreach ($fields as $table => $table_fields) {
 853                         foreach ($table_fields as $field => $select) {
 854                                 if (empty($selected) || in_array($select, $selected)) {
 855                                         if (self::isLegacyMode() && in_array($select, $legacy_fields)) {
 856                                                 $selection[] = "`item`.`".$select."` AS `internal-item-" . $select . "`";
 857                                         }
 858                                         if (is_int($field)) {
 859                                                 $selection[] = "`" . $table . "`.`" . $select . "`";
 860                                         } else {
 861                                                 $selection[] = "`" . $table . "`.`" . $field . "` AS `" . $select . "`";
 862                                         }
 863                                 }
 864                         }
 865                 }
 866                 return implode(", ", $selection);
 867         }
 868
 869         /**
 870          * add table definition to fields in an SQL query
 871          *
 872          * @param string $query SQL query
 873          * @param array $fields The field definition array
 874          *
 875          * @return string the changed SQL query
 876          */
 877         private static function addTablesToFields($query, $fields)
 878         {
 879                 foreach ($fields as $table => $table_fields) {
 880                         foreach ($table_fields as $alias => $field) {
 881                                 if (is_int($alias)) {
 882                                         $replace_field = $field;
 883                                 } else {
 884                                         $replace_field = $alias;
 885                                 }
 886
 887                                 $search = "/([^\.])`" . $field . "`/i";
 888                                 $replace = "$1`" . $table . "`.`" . $replace_field . "`";
 889                                 $query = preg_replace($search, $replace, $query);
 890                         }
 891                 }
 892                 return $query;
 893         }
 894
 895         /**
 896          * Update existing item entries
 897          *
 898          * @param array $fields    The fields that are to be changed
 899          * @param array $condition The condition for finding the item entries
 900          *
 901          * In the future we may have to change permissions as well.
 902          * Then we had to add the user id as third parameter.
 903          *
 904          * A return value of "0" doesn't mean an error - but that 0 rows had been changed.
 905          *
 906          * @return integer|boolean number of affected rows - or "false" if there was an error
 907          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 908          */
 909         public static function update(array $fields, array $condition)
 910         {
 911                 if (empty($condition) || empty($fields)) {
 912                         return false;
 913                 }
 914
 915                 // To ensure the data integrity we do it in an transaction
 916                 DBA::transaction();
 917
 918                 // We cannot simply expand the condition to check for origin entries
 919                 // The condition needn't to be a simple array but could be a complex condition.
 920                 // And we have to execute this query before the update to ensure to fetch the same data.
 921                 $items = DBA::select('item', ['id', 'origin', 'uri', 'uri-id', 'iaid', 'icid', 'tag', 'file'], $condition);
 922
 923                 $content_fields = [];
 924                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
 925                         if (isset($fields[$field])) {
 926                                 $content_fields[$field] = $fields[$field];
 927                                 if (in_array($field, self::CONTENT_FIELDLIST) || !self::isLegacyMode()) {
 928                                         unset($fields[$field]);
 929                                 } else {
 930                                         $fields[$field] = null;
 931                                 }
 932                         }
 933                 }
 934
 935                 $delivery_data = ItemDeliveryData::extractFields($fields);
 936
 937                 $clear_fields = ['bookmark', 'type', 'author-name', 'author-avatar', 'author-link', 'owner-name', 'owner-avatar', 'owner-link', 'postopts', 'inform'];
 938                 foreach ($clear_fields as $field) {
 939                         if (array_key_exists($field, $fields)) {
 940                                 $fields[$field] = null;
 941                         }
 942                 }
 943
 944                 if (array_key_exists('tag', $fields)) {
 945                         $tags = $fields['tag'];
 946                         $fields['tag'] = null;
 947                 } else {
 948                         $tags = null;
 949                 }
 950
 951                 if (array_key_exists('file', $fields)) {
 952                         $files = $fields['file'];
 953                         $fields['file'] = null;
 954                 } else {
 955                         $files = null;
 956                 }
 957
 958                 if (!empty($fields)) {
 959                         $success = DBA::update('item', $fields, $condition);
 960
 961                         if (!$success) {
 962                                 DBA::close($items);
 963                                 DBA::rollback();
 964                                 return false;
 965                         }
 966                 }
 967
 968                 // When there is no content for the "old" item table, this will count the fetched items
 969                 $rows = DBA::affectedRows();
 970
 971                 $notify_items = [];
 972
 973                 while ($item = DBA::fetch($items)) {
 974                         if (!empty($item['iaid']) || (!empty($content_fields['verb']) && (self::activityToIndex($content_fields['verb']) >= 0))) {
 975                                 self::updateActivity($content_fields, ['uri-id' => $item['uri-id']]);
 976
 977                                 if (empty($item['iaid'])) {
 978                                         $item_activity = DBA::selectFirst('item-activity', ['id'], ['uri-id' => $item['uri-id']]);
 979                                         if (DBA::isResult($item_activity)) {
 980                                                 $item_fields = ['iaid' => $item_activity['id'], 'icid' => null];
 981                                                 foreach (self::MIXED_CONTENT_FIELDLIST as $field) {
 982                                                         if (self::isLegacyMode()) {
 983                                                                 $item_fields[$field] = null;
 984                                                         } else {
 985                                                                 unset($item_fields[$field]);
 986                                                         }
 987                                                 }
 988                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
 989
 990                                                 if (!empty($item['icid']) && !DBA::exists('item', ['icid' => $item['icid']])) {
 991                                                         DBA::delete('item-content', ['id' => $item['icid']]);
 992                                                 }
 993                                         }
 994                                 } elseif (!empty($item['icid'])) {
 995                                         DBA::update('item', ['icid' => null], ['id' => $item['id']]);
 996
 997                                         if (!DBA::exists('item', ['icid' => $item['icid']])) {
 998                                                 DBA::delete('item-content', ['id' => $item['icid']]);
 999                                         }
1000                                 }
1001                         } else {
1002                                 self::updateContent($content_fields, ['uri-id' => $item['uri-id']]);
1003
1004                                 if (empty($item['icid'])) {
1005                                         $item_content = DBA::selectFirst('item-content', [], ['uri-id' => $item['uri-id']]);
1006                                         if (DBA::isResult($item_content)) {
1007                                                 $item_fields = ['icid' => $item_content['id']];
1008                                                 // Clear all fields in the item table that have a content in the item-content table
1009                                                 foreach ($item_content as $field => $content) {
1010                                                         if (in_array($field, self::MIXED_CONTENT_FIELDLIST) && !empty($item_content[$field])) {
1011                                                                 if (self::isLegacyMode()) {
1012                                                                         $item_fields[$field] = null;
1013                                                                 } else {
1014                                                                         unset($item_fields[$field]);
1015                                                                 }
1016                                                         }
1017                                                 }
1018                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
1019                                         }
1020                                 }
1021                         }
1022
1023                         if (!is_null($tags)) {
1024                                 Term::insertFromTagFieldByItemId($item['id'], $tags);
1025                                 if (!empty($item['tag'])) {
1026                                         DBA::update('item', ['tag' => ''], ['id' => $item['id']]);
1027                                 }
1028                         }
1029
1030                         if (!is_null($files)) {
1031                                 Term::insertFromFileFieldByItemId($item['id'], $files);
1032                                 if (!empty($item['file'])) {
1033                                         DBA::update('item', ['file' => ''], ['id' => $item['id']]);
1034                                 }
1035                         }
1036
1037                         ItemDeliveryData::update($item['id'], $delivery_data);
1038
1039                         self::updateThread($item['id']);
1040
1041                         // We only need to notfiy others when it is an original entry from us.
1042                         // Only call the notifier when the item has some content relevant change.
1043                         if ($item['origin'] && in_array('edited', array_keys($fields))) {
1044                                 $notify_items[] = $item['id'];
1045                         }
1046                 }
1047
1048                 DBA::close($items);
1049                 DBA::commit();
1050
1051                 foreach ($notify_items as $notify_item) {
1052                         Worker::add(PRIORITY_HIGH, "Notifier", Delivery::POST, $notify_item);
1053                 }
1054
1055                 return $rows;
1056         }
1057
1058         /**
1059          * Delete an item and notify others about it - if it was ours
1060          *
1061          * @param array   $condition The condition for finding the item entries
1062          * @param integer $priority  Priority for the notification
1063          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1064          */
1065         public static function delete($condition, $priority = PRIORITY_HIGH)
1066         {
1067                 $items = self::select(['id'], $condition);
1068                 while ($item = self::fetch($items)) {
1069                         self::deleteById($item['id'], $priority);
1070                 }
1071                 DBA::close($items);
1072         }
1073
1074         /**
1075          * Delete an item for an user and notify others about it - if it was ours
1076          *
1077          * @param array   $condition The condition for finding the item entries
1078          * @param integer $uid       User who wants to delete this item
1079          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1080          */
1081         public static function deleteForUser($condition, $uid)
1082         {
1083                 if ($uid == 0) {
1084                         return;
1085                 }
1086
1087                 $items = self::select(['id', 'uid'], $condition);
1088                 while ($item = self::fetch($items)) {
1089                         // "Deleting" global items just means hiding them
1090                         if ($item['uid'] == 0) {
1091                                 DBA::update('user-item', ['hidden' => true], ['iid' => $item['id'], 'uid' => $uid], true);
1092
1093                                 // Delete notifications
1094                                 DBA::delete('notify', ['iid' => $item['id'], 'uid' => $uid]);
1095                         } elseif ($item['uid'] == $uid) {
1096                                 self::deleteById($item['id'], PRIORITY_HIGH);
1097                         } else {
1098                                 Logger::log('Wrong ownership. Not deleting item ' . $item['id']);
1099                         }
1100                 }
1101                 DBA::close($items);
1102         }
1103
1104         /**
1105          * Delete an item and notify others about it - if it was ours
1106          *
1107          * @param integer $item_id  Item ID that should be delete
1108          * @param integer $priority Priority for the notification
1109          *
1110          * @return boolean success
1111          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1112          */
1113         public static function deleteById($item_id, $priority = PRIORITY_HIGH)
1114         {
1115                 Logger::notice('Delete item by id', ['id' => $item_id, 'callstack' => System::callstack()]);
1116                 // locate item to be deleted
1117                 $fields = ['id', 'uri', 'uid', 'parent', 'parent-uri', 'origin',
1118                         'deleted', 'file', 'resource-id', 'event-id', 'attach',
1119                         'verb', 'object-type', 'object', 'target', 'contact-id',
1120                         'icid', 'iaid', 'psid'];
1121                 $item = self::selectFirst($fields, ['id' => $item_id]);
1122                 if (!DBA::isResult($item)) {
1123                         Logger::log('Item with ID ' . $item_id . " hasn't been found.", Logger::DEBUG);
1124                         return false;
1125                 }
1126
1127                 if ($item['deleted']) {
1128                         Logger::log('Item with ID ' . $item_id . ' has already been deleted.', Logger::DEBUG);
1129                         return false;
1130                 }
1131
1132                 $parent = self::selectFirst(['origin'], ['id' => $item['parent']]);
1133                 if (!DBA::isResult($parent)) {
1134                         $parent = ['origin' => false];
1135                 }
1136
1137                 // clean up categories and tags so they don't end up as orphans
1138
1139                 $matches = false;
1140                 $cnt = preg_match_all('/<(.*?)>/', $item['file'], $matches, PREG_SET_ORDER);
1141
1142                 if ($cnt) {
1143                         foreach ($matches as $mtch) {
1144                                 FileTag::unsaveFile($item['uid'], $item['id'], $mtch[1],true);
1145                         }
1146                 }
1147
1148                 $matches = false;
1149
1150                 $cnt = preg_match_all('/\[(.*?)\]/', $item['file'], $matches, PREG_SET_ORDER);
1151
1152                 if ($cnt) {
1153                         foreach ($matches as $mtch) {
1154                                 FileTag::unsaveFile($item['uid'], $item['id'], $mtch[1],false);
1155                         }
1156                 }
1157
1158                 /*
1159                  * If item is a link to a photo resource, nuke all the associated photos
1160                  * (visitors will not have photo resources)
1161                  * This only applies to photos uploaded from the photos page. Photos inserted into a post do not
1162                  * generate a resource-id and therefore aren't intimately linked to the item.
1163                  */
1164                 /// @TODO: this should first check if photo is used elsewhere
1165                 if (strlen($item['resource-id'])) {
1166                         Photo::delete(['resource-id' => $item['resource-id'], 'uid' => $item['uid']]);
1167                 }
1168
1169                 // If item is a link to an event, delete the event.
1170                 if (intval($item['event-id'])) {
1171                         Event::delete($item['event-id']);
1172                 }
1173
1174                 // If item has attachments, drop them
1175                 /// @TODO: this should first check if attachment is used elsewhere
1176                 foreach (explode(",", $item['attach']) as $attach) {
1177                         preg_match("|attach/(\d+)|", $attach, $matches);
1178                         if (is_array($matches) && count($matches) > 1) {
1179                                 Attach::delete(['id' => $matches[1], 'uid' => $item['uid']]);
1180                         }
1181                 }
1182
1183                 // Delete tags that had been attached to other items
1184                 self::deleteTagsFromItem($item);
1185
1186                 // Delete notifications
1187                 DBA::delete('notify', ['iid' => $item['id'], 'uid' => $item['uid']]);
1188
1189                 // Set the item to "deleted"
1190                 $item_fields = ['deleted' => true, 'edited' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()];
1191                 DBA::update('item', $item_fields, ['id' => $item['id']]);
1192
1193                 Term::insertFromTagFieldByItemId($item['id'], '');
1194                 Term::insertFromFileFieldByItemId($item['id'], '');
1195                 self::deleteThread($item['id'], $item['parent-uri']);
1196
1197                 if (!self::exists(["`uri` = ? AND `uid` != 0 AND NOT `deleted`", $item['uri']])) {
1198                         self::delete(['uri' => $item['uri'], 'uid' => 0, 'deleted' => false], $priority);
1199                 }
1200
1201                 ItemDeliveryData::delete($item['id']);
1202
1203                 // We don't delete the item-activity here, since we need some of the data for ActivityPub
1204
1205                 if (!empty($item['icid']) && !self::exists(['icid' => $item['icid'], 'deleted' => false])) {
1206                         DBA::delete('item-content', ['id' => $item['icid']], ['cascade' => false]);
1207                 }
1208                 // When the permission set will be used in photo and events as well,
1209                 // this query here needs to be extended.
1210                 // @todo Currently deactivated. We need the permission set in the deletion process.
1211                 // This is a reminder to add the removal somewhere else.
1212                 //if (!empty($item['psid']) && !self::exists(['psid' => $item['psid'], 'deleted' => false])) {
1213                 //      DBA::delete('permissionset', ['id' => $item['psid']], ['cascade' => false]);
1214                 //}
1215
1216                 // If it's the parent of a comment thread, kill all the kids
1217                 if ($item['id'] == $item['parent']) {
1218                         self::delete(['parent' => $item['parent'], 'deleted' => false], $priority);
1219                 }
1220
1221                 // Is it our comment and/or our thread?
1222                 if ($item['origin'] || $parent['origin']) {
1223
1224                         // When we delete the original post we will delete all existing copies on the server as well
1225                         self::delete(['uri' => $item['uri'], 'deleted' => false], $priority);
1226
1227                         // send the notification upstream/downstream
1228                         Worker::add(['priority' => $priority, 'dont_fork' => true], "Notifier", Delivery::DELETION, intval($item['id']));
1229                 } elseif ($item['uid'] != 0) {
1230
1231                         // When we delete just our local user copy of an item, we have to set a marker to hide it
1232                         $global_item = self::selectFirst(['id'], ['uri' => $item['uri'], 'uid' => 0, 'deleted' => false]);
1233                         if (DBA::isResult($global_item)) {
1234                                 DBA::update('user-item', ['hidden' => true], ['iid' => $global_item['id'], 'uid' => $item['uid']], true);
1235                         }
1236                 }
1237
1238                 Logger::log('Item with ID ' . $item_id . " has been deleted.", Logger::DEBUG);
1239
1240                 return true;
1241         }
1242
1243         private static function deleteTagsFromItem($item)
1244         {
1245                 if (($item["verb"] != Activity::TAG) || ($item["object-type"] != Activity\ObjectType::TAGTERM)) {
1246                         return;
1247                 }
1248
1249                 $xo = XML::parseString($item["object"], false);
1250                 $xt = XML::parseString($item["target"], false);
1251
1252                 if ($xt->type != Activity\ObjectType::NOTE) {
1253                         return;
1254                 }
1255
1256                 $i = self::selectFirst(['id', 'contact-id', 'tag'], ['uri' => $xt->id, 'uid' => $item['uid']]);
1257                 if (!DBA::isResult($i)) {
1258                         return;
1259                 }
1260
1261                 // For tags, the owner cannot remove the tag on the author's copy of the post.
1262                 $owner_remove = ($item["contact-id"] == $i["contact-id"]);
1263                 $author_copy = $item["origin"];
1264
1265                 if (($owner_remove && $author_copy) || !$owner_remove) {
1266                         return;
1267                 }
1268
1269                 $tags = explode(',', $i["tag"]);
1270                 $newtags = [];
1271                 if (count($tags)) {
1272                         foreach ($tags as $tag) {
1273                                 if (trim($tag) !== trim($xo->body)) {
1274                                        $newtags[] = trim($tag);
1275                                 }
1276                         }
1277                 }
1278                 self::update(['tag' => implode(',', $newtags)], ['id' => $i["id"]]);
1279         }
1280
1281         private static function guid($item, $notify)
1282         {
1283                 if (!empty($item['guid'])) {
1284                         return Strings::escapeTags(trim($item['guid']));
1285                 }
1286
1287                 if ($notify) {
1288                         // We have to avoid duplicates. So we create the GUID in form of a hash of the plink or uri.
1289                         // We add the hash of our own host because our host is the original creator of the post.
1290                         $prefix_host = DI::baseUrl()->getHostname();
1291                 } else {
1292                         $prefix_host = '';
1293
1294                         // We are only storing the post so we create a GUID from the original hostname.
1295                         if (!empty($item['author-link'])) {
1296                                 $parsed = parse_url($item['author-link']);
1297                                 if (!empty($parsed['host'])) {
1298                                         $prefix_host = $parsed['host'];
1299                                 }
1300                         }
1301
1302                         if (empty($prefix_host) && !empty($item['plink'])) {
1303                                 $parsed = parse_url($item['plink']);
1304                                 if (!empty($parsed['host'])) {
1305                                         $prefix_host = $parsed['host'];
1306                                 }
1307                         }
1308
1309                         if (empty($prefix_host) && !empty($item['uri'])) {
1310                                 $parsed = parse_url($item['uri']);
1311                                 if (!empty($parsed['host'])) {
1312                                         $prefix_host = $parsed['host'];
1313                                 }
1314                         }
1315
1316                         // Is it in the format data@host.tld? - Used for mail contacts
1317                         if (empty($prefix_host) && !empty($item['author-link']) && strstr($item['author-link'], '@')) {
1318                                 $mailparts = explode('@', $item['author-link']);
1319                                 $prefix_host = array_pop($mailparts);
1320                         }
1321                 }
1322
1323                 if (!empty($item['plink'])) {
1324                         $guid = self::guidFromUri($item['plink'], $prefix_host);
1325                 } elseif (!empty($item['uri'])) {
1326                         $guid = self::guidFromUri($item['uri'], $prefix_host);
1327                 } else {
1328                         $guid = System::createUUID(hash('crc32', $prefix_host));
1329                 }
1330
1331                 return $guid;
1332         }
1333
1334         private static function contactId($item)
1335         {
1336                 if (!empty($item['contact-id']) && DBA::exists('contact', ['self' => true, 'id' => $item['contact-id']])) {
1337                         return $item['contact-id'];
1338                 } elseif (($item['gravity'] == GRAVITY_PARENT) && !empty($item['uid']) && !empty($item['contact-id']) && Contact::isSharing($item['contact-id'], $item['uid'])) {
1339                         return $item['contact-id'];
1340                 } elseif (!empty($item['uid']) && !Contact::isSharing($item['author-id'], $item['uid'])) {
1341                         return $item['author-id'];
1342                 } elseif (!empty($item['contact-id'])) {
1343                         return $item['contact-id'];
1344                 } else {
1345                         $contact_id = Contact::getIdForURL($item['author-link'], $item['uid']);
1346                         if (!empty($contact_id)) {
1347                                 return $contact_id;
1348                         }
1349                 }
1350                 return $item['author-id'];
1351         }
1352
1353         // This function will finally cover most of the preparation functionality in mod/item.php
1354         public static function prepare(&$item)
1355         {
1356                 /*
1357                  * @TODO: Unused code triggering inspection errors
1358                  *
1359                 $data = BBCode::getAttachmentData($item['body']);
1360                 if ((preg_match_all("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", $item['body'], $match, PREG_SET_ORDER) || isset($data["type"]))
1361                         && ($posttype != Item::PT_PERSONAL_NOTE)) {
1362                         $posttype = Item::PT_PAGE;
1363                         $objecttype = ACTIVITY_OBJ_BOOKMARK;
1364                 }
1365                  */
1366         }
1367
1368         /**
1369          * Write an item array into a spool file to be inserted later.
1370          * This command is called whenever there are issues storing an item.
1371          *
1372          * @param array $item The item fields that are to be inserted
1373          * @throws \Exception
1374          */
1375         private static function spool($orig_item)
1376         {
1377                 // Now we store the data in the spool directory
1378                 // We use "microtime" to keep the arrival order and "mt_rand" to avoid duplicates
1379                 $file = 'item-' . round(microtime(true) * 10000) . '-' . mt_rand() . '.msg';
1380
1381                 $spoolpath = get_spoolpath();
1382                 if ($spoolpath != "") {
1383                         $spool = $spoolpath . '/' . $file;
1384
1385                         file_put_contents($spool, json_encode($orig_item));
1386                         Logger::warning("Item wasn't stored - Item was spooled into file", ['file' => $file]);
1387                 }
1388         }
1389
1390         public static function insert($item, $force_parent = false, $notify = false, $dontcache = false)
1391         {
1392                 $orig_item = $item;
1393
1394                 $priority = PRIORITY_HIGH;
1395
1396                 // If it is a posting where users should get notifications, then define it as wall posting
1397                 if ($notify) {
1398                         $item['wall'] = 1;
1399                         $item['origin'] = 1;
1400                         $item['network'] = Protocol::DFRN;
1401                         $item['protocol'] = Conversation::PARCEL_DFRN;
1402
1403                         if (is_int($notify)) {
1404                                 $priority = $notify;
1405                         }
1406                 } else {
1407                         $item['network'] = trim(($item['network'] ?? '') ?: Protocol::PHANTOM);
1408                 }
1409
1410                 $item['guid'] = self::guid($item, $notify);
1411                 $item['uri'] = Strings::escapeTags(trim(($item['uri'] ?? '') ?: self::newURI($item['uid'], $item['guid'])));
1412
1413                 // Store URI data
1414                 $item['uri-id'] = ItemURI::insert(['uri' => $item['uri'], 'guid' => $item['guid']]);
1415
1416                 // Store conversation data
1417                 $item = Conversation::insert($item);
1418
1419                 /*
1420                  * If a Diaspora signature structure was passed in, pull it out of the
1421                  * item array and set it aside for later storage.
1422                  */
1423
1424                 $dsprsig = null;
1425                 if (isset($item['dsprsig'])) {
1426                         $encoded_signature = $item['dsprsig'];
1427                         $dsprsig = json_decode(base64_decode($item['dsprsig']));
1428                         unset($item['dsprsig']);
1429                 }
1430
1431                 $diaspora_signed_text = '';
1432                 if (isset($item['diaspora_signed_text'])) {
1433                         $diaspora_signed_text = $item['diaspora_signed_text'];
1434                         unset($item['diaspora_signed_text']);
1435                 }
1436
1437                 // Converting the plink
1438                 /// @TODO Check if this is really still needed
1439                 if ($item['network'] == Protocol::OSTATUS) {
1440                         if (isset($item['plink'])) {
1441                                 $item['plink'] = OStatus::convertHref($item['plink']);
1442                         } elseif (isset($item['uri'])) {
1443                                 $item['plink'] = OStatus::convertHref($item['uri']);
1444                         }
1445                 }
1446
1447                 if (!empty($item['thr-parent'])) {
1448                         $item['parent-uri'] = $item['thr-parent'];
1449                 }
1450
1451                 $activity = DI::activity();
1452
1453                 if (isset($item['gravity'])) {
1454                         $item['gravity'] = intval($item['gravity']);
1455                 } elseif ($item['parent-uri'] === $item['uri']) {
1456                         $item['gravity'] = GRAVITY_PARENT;
1457                 } elseif ($activity->match($item['verb'], Activity::POST)) {
1458                         $item['gravity'] = GRAVITY_COMMENT;
1459                 } elseif ($activity->match($item['verb'], Activity::FOLLOW)) {
1460                         $item['gravity'] = GRAVITY_ACTIVITY;
1461                 } else {
1462                         $item['gravity'] = GRAVITY_UNKNOWN;   // Should not happen
1463                         Logger::log('Unknown gravity for verb: ' . $item['verb'], Logger::DEBUG);
1464                 }
1465
1466                 $uid = intval($item['uid']);
1467
1468                 // check for create date and expire time
1469                 $expire_interval = DI::config()->get('system', 'dbclean-expire-days', 0);
1470
1471                 $user = DBA::selectFirst('user', ['expire'], ['uid' => $uid]);
1472                 if (DBA::isResult($user) && ($user['expire'] > 0) && (($user['expire'] < $expire_interval) || ($expire_interval == 0))) {
1473                         $expire_interval = $user['expire'];
1474                 }
1475
1476                 if (($expire_interval > 0) && !empty($item['created'])) {
1477                         $expire_date = time() - ($expire_interval * 86400);
1478                         $created_date = strtotime($item['created']);
1479                         if ($created_date < $expire_date) {
1480                                 Logger::notice('Item created before expiration interval.', [
1481                                         'created' => date('c', $created_date),
1482                                         'expired' => date('c', $expire_date),
1483                                         '$item' => $item
1484                                 ]);
1485                                 return 0;
1486                         }
1487                 }
1488
1489                 /*
1490                  * Do we already have this item?
1491                  * We have to check several networks since Friendica posts could be repeated
1492                  * via OStatus (maybe Diasporsa as well)
1493                  */
1494                 if (empty($item['network']) || in_array($item['network'], Protocol::FEDERATED)) {
1495                         $condition = ["`uri` = ? AND `uid` = ? AND `network` IN (?, ?, ?, ?)",
1496                                 trim($item['uri']), $item['uid'],
1497                                 Protocol::ACTIVITYPUB, Protocol::DIASPORA, Protocol::DFRN, Protocol::OSTATUS];
1498                         $existing = self::selectFirst(['id', 'network'], $condition);
1499                         if (DBA::isResult($existing)) {
1500                                 // We only log the entries with a different user id than 0. Otherwise we would have too many false positives
1501                                 if ($uid != 0) {
1502                                         Logger::notice('Item already existed for user', [
1503                                                 'uri' => $item['uri'],
1504                                                 'uid' => $uid,
1505                                                 'network' => $item['network'],
1506                                                 'existing_id' => $existing["id"],
1507                                                 'existing_network' => $existing["network"]
1508                                         ]);
1509                                 }
1510
1511                                 return $existing["id"];
1512                         }
1513                 }
1514
1515                 $item['wall']          = intval($item['wall'] ?? 0);
1516                 $item['extid']         = trim($item['extid'] ?? '');
1517                 $item['author-name']   = trim($item['author-name'] ?? '');
1518                 $item['author-link']   = trim($item['author-link'] ?? '');
1519                 $item['author-avatar'] = trim($item['author-avatar'] ?? '');
1520                 $item['owner-name']    = trim($item['owner-name'] ?? '');
1521                 $item['owner-link']    = trim($item['owner-link'] ?? '');
1522                 $item['owner-avatar']  = trim($item['owner-avatar'] ?? '');
1523                 $item['received']      = (isset($item['received'])  ? DateTimeFormat::utc($item['received'])  : DateTimeFormat::utcNow());
1524                 $item['created']       = (isset($item['created'])   ? DateTimeFormat::utc($item['created'])   : $item['received']);
1525                 $item['edited']        = (isset($item['edited'])    ? DateTimeFormat::utc($item['edited'])    : $item['created']);
1526                 $item['changed']       = (isset($item['changed'])   ? DateTimeFormat::utc($item['changed'])   : $item['created']);
1527                 $item['commented']     = (isset($item['commented']) ? DateTimeFormat::utc($item['commented']) : $item['created']);
1528                 $item['title']         = trim($item['title'] ?? '');
1529                 $item['location']      = trim($item['location'] ?? '');
1530                 $item['coord']         = trim($item['coord'] ?? '');
1531                 $item['visible']       = (isset($item['visible']) ? intval($item['visible']) : 1);
1532                 $item['deleted']       = 0;
1533                 $item['parent-uri']    = trim(($item['parent-uri'] ?? '') ?: $item['uri']);
1534                 $item['post-type']     = ($item['post-type'] ?? '') ?: self::PT_ARTICLE;
1535                 $item['verb']          = trim($item['verb'] ?? '');
1536                 $item['object-type']   = trim($item['object-type'] ?? '');
1537                 $item['object']        = trim($item['object'] ?? '');
1538                 $item['target-type']   = trim($item['target-type'] ?? '');
1539                 $item['target']        = trim($item['target'] ?? '');
1540                 $item['plink']         = trim($item['plink'] ?? '');
1541                 $item['allow_cid']     = trim($item['allow_cid'] ?? '');
1542                 $item['allow_gid']     = trim($item['allow_gid'] ?? '');
1543                 $item['deny_cid']      = trim($item['deny_cid'] ?? '');
1544                 $item['deny_gid']      = trim($item['deny_gid'] ?? '');
1545                 $item['private']       = intval($item['private'] ?? 0);
1546                 $item['body']          = trim($item['body'] ?? '');
1547                 $item['tag']           = trim($item['tag'] ?? '');
1548                 $item['attach']        = trim($item['attach'] ?? '');
1549                 $item['app']           = trim($item['app'] ?? '');
1550                 $item['origin']        = intval($item['origin'] ?? 0);
1551                 $item['postopts']      = trim($item['postopts'] ?? '');
1552                 $item['resource-id']   = trim($item['resource-id'] ?? '');
1553                 $item['event-id']      = intval($item['event-id'] ?? 0);
1554                 $item['inform']        = trim($item['inform'] ?? '');
1555                 $item['file']          = trim($item['file'] ?? '');
1556
1557                 // When there is no content then we don't post it
1558                 if ($item['body'].$item['title'] == '') {
1559                         Logger::notice('No body, no title.');
1560                         return 0;
1561                 }
1562
1563                 self::addLanguageToItemArray($item);
1564
1565                 // Items cannot be stored before they happen ...
1566                 if ($item['created'] > DateTimeFormat::utcNow()) {
1567                         $item['created'] = DateTimeFormat::utcNow();
1568                 }
1569
1570                 // We haven't invented time travel by now.
1571                 if ($item['edited'] > DateTimeFormat::utcNow()) {
1572                         $item['edited'] = DateTimeFormat::utcNow();
1573                 }
1574
1575                 $item['plink'] = ($item['plink'] ?? '') ?: DI::baseUrl() . '/display/' . urlencode($item['guid']);
1576
1577                 $default = ['url' => $item['author-link'], 'name' => $item['author-name'],
1578                         'photo' => $item['author-avatar'], 'network' => $item['network']];
1579
1580                 $item['author-id'] = ($item['author-id'] ?? 0) ?: Contact::getIdForURL($item['author-link'], 0, false, $default);
1581
1582                 if (Contact::isBlocked($item['author-id'])) {
1583                         Logger::notice('Author is blocked node-wide', ['author-link' => $item['author-link'], 'item-uri' => $item['uri']]);
1584                         return 0;
1585                 }
1586
1587                 if (!empty($item['author-link']) && Network::isUrlBlocked($item['author-link'])) {
1588                         Logger::notice('Author server is blocked', ['author-link' => $item['author-link'], 'item-uri' => $item['uri']]);
1589                         return 0;
1590                 }
1591
1592                 if (!empty($uid) && Contact::isBlockedByUser($item['author-id'], $uid)) {
1593                         Logger::notice('Author is blocked by user', ['author-link' => $item['author-link'], 'uid' => $uid, 'item-uri' => $item['uri']]);
1594                         return 0;
1595                 }
1596
1597                 $default = ['url' => $item['owner-link'], 'name' => $item['owner-name'],
1598                         'photo' => $item['owner-avatar'], 'network' => $item['network']];
1599
1600                 $item['owner-id'] = ($item['owner-id'] ?? 0) ?: Contact::getIdForURL($item['owner-link'], 0, false, $default);
1601
1602                 if (Contact::isBlocked($item['owner-id'])) {
1603                         Logger::notice('Owner is blocked node-wide', ['owner-link' => $item['owner-link'], 'item-uri' => $item['uri']]);
1604                         return 0;
1605                 }
1606
1607                 if (!empty($item['owner-link']) && Network::isUrlBlocked($item['owner-link'])) {
1608                         Logger::notice('Owner server is blocked', ['owner-link' => $item['owner-link'], 'item-uri' => $item['uri']]);
1609                         return 0;
1610                 }
1611
1612                 if (!empty($uid) && Contact::isBlockedByUser($item['owner-id'], $uid)) {
1613                         Logger::notice('Owner is blocked by user', ['owner-link' => $item['owner-link'], 'uid' => $uid, 'item-uri' => $item['uri']]);
1614                         return 0;
1615                 }
1616
1617                 // The causer is set during a thread completion, for example because of a reshare. It countains the responsible actor.
1618                 if (!empty($uid) && !empty($item['causer-id']) && Contact::isBlockedByUser($item['causer-id'], $uid)) {
1619                         Logger::notice('Causer is blocked by user', ['causer-link' => $item['causer-link'], 'uid' => $uid, 'item-uri' => $item['uri']]);
1620                         return 0;
1621                 }
1622
1623                 if (!empty($uid) && !empty($item['causer-id']) && ($item['parent-uri'] == $item['uri']) && Contact::isIgnoredByUser($item['causer-id'], $uid)) {
1624                         Logger::notice('Causer is ignored by user', ['causer-link' => $item['causer-link'], 'uid' => $uid, 'item-uri' => $item['uri']]);
1625                         return 0;
1626                 }
1627
1628                 // We don't store the causer, we only have it here for the checks above
1629                 unset($item['causer-id']);
1630                 unset($item['causer-link']);
1631
1632                 // The contact-id should be set before "self::insert" was called - but there seems to be issues sometimes
1633                 $item["contact-id"] = self::contactId($item);
1634
1635                 if ($item['network'] == Protocol::PHANTOM) {
1636                         $item['network'] = Protocol::DFRN;
1637                         Logger::notice('Missing network, setting to {network}.', [
1638                                 'uri' => $item["uri"],
1639                                 'network' => $item['network'],
1640                                 'callstack' => System::callstack()
1641                         ]);
1642                 }
1643
1644                 // Checking if there is already an item with the same guid
1645                 $condition = ['guid' => $item['guid'], 'network' => $item['network'], 'uid' => $item['uid']];
1646                 if (self::exists($condition)) {
1647                         Logger::notice('Found already existing item', [
1648                                 'guid' => $item['guid'],
1649                                 'uid' => $item['uid'],
1650                                 'network' => $item['network']
1651                         ]);
1652                         return 0;
1653                 }
1654
1655                 if ($item['verb'] == Activity::FOLLOW) {
1656                         if (!$item['origin'] && ($item['author-id'] == Contact::getPublicIdByUserId($uid))) {
1657                                 // Our own follow request can be relayed to us. We don't store it to avoid notification chaos.
1658                                 Logger::log("Follow: Don't store not origin follow request from us for " . $item['parent-uri'], Logger::DEBUG);
1659                                 return 0;
1660                         }
1661
1662                         $condition = ['verb' => Activity::FOLLOW, 'uid' => $item['uid'],
1663                                 'parent-uri' => $item['parent-uri'], 'author-id' => $item['author-id']];
1664                         if (self::exists($condition)) {
1665                                 // It happens that we receive multiple follow requests by the same author - we only store one.
1666                                 Logger::log('Follow: Found existing follow request from author ' . $item['author-id'] . ' for ' . $item['parent-uri'], Logger::DEBUG);
1667                                 return 0;
1668                         }
1669                 }
1670
1671                 // Check for hashtags in the body and repair or add hashtag links
1672                 self::setHashtags($item);
1673
1674                 $item['thr-parent'] = $item['parent-uri'];
1675
1676                 $notify_type = Delivery::POST;
1677                 $allow_cid = '';
1678                 $allow_gid = '';
1679                 $deny_cid  = '';
1680                 $deny_gid  = '';
1681
1682                 if ($item['parent-uri'] === $item['uri']) {
1683                         $parent_id = 0;
1684                         $parent_deleted = 0;
1685                         $allow_cid = $item['allow_cid'];
1686                         $allow_gid = $item['allow_gid'];
1687                         $deny_cid  = $item['deny_cid'];
1688                         $deny_gid  = $item['deny_gid'];
1689                 } else {
1690                         // find the parent and snarf the item id and ACLs
1691                         // and anything else we need to inherit
1692
1693                         $fields = ['uri', 'parent-uri', 'id', 'deleted',
1694                                 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
1695                                 'wall', 'private', 'forum_mode', 'origin'];
1696                         $condition = ['uri' => $item['parent-uri'], 'uid' => $item['uid']];
1697                         $params = ['order' => ['id' => false]];
1698                         $parent = self::selectFirst($fields, $condition, $params);
1699
1700                         if (DBA::isResult($parent)) {
1701                                 // is the new message multi-level threaded?
1702                                 // even though we don't support it now, preserve the info
1703                                 // and re-attach to the conversation parent.
1704
1705                                 if ($parent['uri'] != $parent['parent-uri']) {
1706                                         $item['parent-uri'] = $parent['parent-uri'];
1707
1708                                         $condition = ['uri' => $item['parent-uri'],
1709                                                 'parent-uri' => $item['parent-uri'],
1710                                                 'uid' => $item['uid']];
1711                                         $params = ['order' => ['id' => false]];
1712                                         $toplevel_parent = self::selectFirst($fields, $condition, $params);
1713
1714                                         if (DBA::isResult($toplevel_parent)) {
1715                                                 $parent = $toplevel_parent;
1716                                         }
1717                                 }
1718
1719                                 $parent_id      = $parent['id'];
1720                                 $parent_deleted = $parent['deleted'];
1721                                 $allow_cid      = $parent['allow_cid'];
1722                                 $allow_gid      = $parent['allow_gid'];
1723                                 $deny_cid       = $parent['deny_cid'];
1724                                 $deny_gid       = $parent['deny_gid'];
1725                                 $item['wall']   = $parent['wall'];
1726
1727                                 /*
1728                                  * If the parent is private, force privacy for the entire conversation
1729                                  * This differs from the above settings as it subtly allows comments from
1730                                  * email correspondents to be private even if the overall thread is not.
1731                                  */
1732                                 if ($parent['private']) {
1733                                         $item['private'] = $parent['private'];
1734                                 }
1735
1736                                 /*
1737                                  * Edge case. We host a public forum that was originally posted to privately.
1738                                  * The original author commented, but as this is a comment, the permissions
1739                                  * weren't fixed up so it will still show the comment as private unless we fix it here.
1740                                  */
1741                                 if ((intval($parent['forum_mode']) == 1) && $parent['private']) {
1742                                         $item['private'] = 0;
1743                                 }
1744
1745                                 // If its a post that originated here then tag the thread as "mention"
1746                                 if ($item['origin'] && $item['uid']) {
1747                                         DBA::update('thread', ['mention' => true], ['iid' => $parent_id]);
1748                                         Logger::log('tagged thread ' . $parent_id . ' as mention for user ' . $item['uid'], Logger::DEBUG);
1749                                 }
1750                         } else {
1751                                 /*
1752                                  * Allow one to see reply tweets from status.net even when
1753                                  * we don't have or can't see the original post.
1754                                  */
1755                                 if ($force_parent) {
1756                                         Logger::log('$force_parent=true, reply converted to top-level post.');
1757                                         $parent_id = 0;
1758                                         $item['parent-uri'] = $item['uri'];
1759                                         $item['gravity'] = GRAVITY_PARENT;
1760                                 } else {
1761                                         Logger::log('item parent '.$item['parent-uri'].' for '.$item['uid'].' was not found - ignoring item');
1762                                         return 0;
1763                                 }
1764
1765                                 $parent_deleted = 0;
1766                         }
1767                 }
1768
1769                 if (stristr($item['verb'], Activity::POKE)) {
1770                         $notify_type = Delivery::POKE;
1771                 }
1772
1773                 $item['parent-uri-id'] = ItemURI::getIdByURI($item['parent-uri']);
1774                 $item['thr-parent-id'] = ItemURI::getIdByURI($item['thr-parent']);
1775
1776                 $condition = ["`uri` = ? AND `network` IN (?, ?) AND `uid` = ?",
1777                         $item['uri'], $item['network'], Protocol::DFRN, $item['uid']];
1778                 if (self::exists($condition)) {
1779                         Logger::log('duplicated item with the same uri found. '.print_r($item,true));
1780                         return 0;
1781                 }
1782
1783                 // On Friendica and Diaspora the GUID is unique
1784                 if (in_array($item['network'], [Protocol::DFRN, Protocol::DIASPORA])) {
1785                         $condition = ['guid' => $item['guid'], 'uid' => $item['uid']];
1786                         if (self::exists($condition)) {
1787                                 Logger::log('duplicated item with the same guid found. '.print_r($item,true));
1788                                 return 0;
1789                         }
1790                 } elseif ($item['network'] == Protocol::OSTATUS) {
1791                         // Check for an existing post with the same content. There seems to be a problem with OStatus.
1792                         $condition = ["`body` = ? AND `network` = ? AND `created` = ? AND `contact-id` = ? AND `uid` = ?",
1793                                         $item['body'], $item['network'], $item['created'], $item['contact-id'], $item['uid']];
1794                         if (self::exists($condition)) {
1795                                 Logger::log('duplicated item with the same body found. '.print_r($item,true));
1796                                 return 0;
1797                         }
1798                 }
1799
1800                 // Is this item available in the global items (with uid=0)?
1801                 if ($item["uid"] == 0) {
1802                         $item["global"] = true;
1803
1804                         // Set the global flag on all items if this was a global item entry
1805                         DBA::update('item', ['global' => true], ['uri' => $item["uri"]]);
1806                 } else {
1807                         $item["global"] = self::exists(['uid' => 0, 'uri' => $item["uri"]]);
1808                 }
1809
1810                 // ACL settings
1811                 if (strlen($allow_cid) || strlen($allow_gid) || strlen($deny_cid) || strlen($deny_gid)) {
1812                         $private = 1;
1813                 } else {
1814                         $private = $item['private'];
1815                 }
1816
1817                 $item["allow_cid"] = $allow_cid;
1818                 $item["allow_gid"] = $allow_gid;
1819                 $item["deny_cid"] = $deny_cid;
1820                 $item["deny_gid"] = $deny_gid;
1821                 $item["private"] = $private;
1822                 $item["deleted"] = $parent_deleted;
1823
1824                 // Fill the cache field
1825                 self::putInCache($item);
1826
1827                 if ($notify) {
1828                         $item['edit'] = false;
1829                         $item['parent'] = $parent_id;
1830                         Hook::callAll('post_local', $item);
1831                         unset($item['edit']);
1832                         unset($item['parent']);
1833                 } else {
1834                         Hook::callAll('post_remote', $item);
1835                 }
1836
1837                 // This array field is used to trigger some automatic reactions
1838                 // It is mainly used in the "post_local" hook.
1839                 unset($item['api_source']);
1840
1841                 if (!empty($item['cancel'])) {
1842                         Logger::log('post cancelled by addon.');
1843                         return 0;
1844                 }
1845
1846                 /*
1847                  * Check for already added items.
1848                  * There is a timing issue here that sometimes creates double postings.
1849                  * An unique index would help - but the limitations of MySQL (maximum size of index values) prevent this.
1850                  */
1851                 if ($item["uid"] == 0) {
1852                         if (self::exists(['uri' => trim($item['uri']), 'uid' => 0])) {
1853                                 Logger::log('Global item already stored. URI: '.$item['uri'].' on network '.$item['network'], Logger::DEBUG);
1854                                 return 0;
1855                         }
1856                 }
1857
1858                 Logger::log('' . print_r($item,true), Logger::DATA);
1859
1860                 if (array_key_exists('tag', $item)) {
1861                         $tags = $item['tag'];
1862                         unset($item['tag']);
1863                 } else {
1864                         $tags = '';
1865                 }
1866
1867                 if (array_key_exists('file', $item)) {
1868                         $files = $item['file'];
1869                         unset($item['file']);
1870                 } else {
1871                         $files = '';
1872                 }
1873
1874                 // Creates or assigns the permission set
1875                 $item['psid'] = PermissionSet::getIdFromACL(
1876                         $item['uid'],
1877                         $item['allow_cid'],
1878                         $item['allow_gid'],
1879                         $item['deny_cid'],
1880                         $item['deny_gid']
1881                 );
1882
1883                 $item['allow_cid'] = null;
1884                 $item['allow_gid'] = null;
1885                 $item['deny_cid'] = null;
1886                 $item['deny_gid'] = null;
1887
1888                 // We are doing this outside of the transaction to avoid timing problems
1889                 if (!self::insertActivity($item)) {
1890                         self::insertContent($item);
1891                 }
1892
1893                 $delivery_data = ItemDeliveryData::extractFields($item);
1894
1895                 unset($item['postopts']);
1896                 unset($item['inform']);
1897
1898                 // These fields aren't stored anymore in the item table, they are fetched upon request
1899                 unset($item['author-link']);
1900                 unset($item['author-name']);
1901                 unset($item['author-avatar']);
1902                 unset($item['author-network']);
1903
1904                 unset($item['owner-link']);
1905                 unset($item['owner-name']);
1906                 unset($item['owner-avatar']);
1907
1908                 $like_no_comment = DI::config()->get('system', 'like_no_comment');
1909
1910                 DBA::transaction();
1911                 $ret = DBA::insert('item', $item);
1912
1913                 // When the item was successfully stored we fetch the ID of the item.
1914                 if (DBA::isResult($ret)) {
1915                         $current_post = DBA::lastInsertId();
1916                 } else {
1917                         // This can happen - for example - if there are locking timeouts.
1918                         DBA::rollback();
1919
1920                         // Store the data into a spool file so that we can try again later.
1921                         self::spool($orig_item);
1922                         return 0;
1923                 }
1924
1925                 if ($current_post == 0) {
1926                         // This is one of these error messages that never should occur.
1927                         Logger::log("couldn't find created item - we better quit now.");
1928                         DBA::rollback();
1929                         return 0;
1930                 }
1931
1932                 // How much entries have we created?
1933                 // We wouldn't need this query when we could use an unique index - but MySQL has length problems with them.
1934                 $entries = DBA::count('item', ['uri' => $item['uri'], 'uid' => $item['uid'], 'network' => $item['network']]);
1935
1936                 if ($entries > 1) {
1937                         // There are duplicates. We delete our just created entry.
1938                         Logger::notice('Delete duplicated item', ['id' => $current_post, 'uri' => $item['uri'], 'uid' => $item['uid']]);
1939
1940                         // Yes, we could do a rollback here - but we are having many users with MyISAM.
1941                         DBA::delete('item', ['id' => $current_post]);
1942                         DBA::commit();
1943                         return 0;
1944                 } elseif ($entries == 0) {
1945                         // This really should never happen since we quit earlier if there were problems.
1946                         Logger::log("Something is terribly wrong. We haven't found our created entry.");
1947                         DBA::rollback();
1948                         return 0;
1949                 }
1950
1951                 Logger::log('created item '.$current_post);
1952
1953                 if (!$parent_id || ($item['parent-uri'] === $item['uri'])) {
1954                         $parent_id = $current_post;
1955                 }
1956
1957                 // Set parent id
1958                 DBA::update('item', ['parent' => $parent_id], ['id' => $current_post]);
1959
1960                 $item['id'] = $current_post;
1961                 $item['parent'] = $parent_id;
1962
1963                 // update the commented timestamp on the parent
1964                 // Only update "commented" if it is really a comment
1965                 if (($item['gravity'] != GRAVITY_ACTIVITY) || !$like_no_comment) {
1966                         DBA::update('item', ['commented' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1967                 } else {
1968                         DBA::update('item', ['changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1969                 }
1970
1971                 if ($dsprsig) {
1972                         /*
1973                          * Friendica servers lower than 3.4.3-2 had double encoded the signature ...
1974                          * We can check for this condition when we decode and encode the stuff again.
1975                          */
1976                         if (base64_encode(base64_decode(base64_decode($dsprsig->signature))) == base64_decode($dsprsig->signature)) {
1977                                 $dsprsig->signature = base64_decode($dsprsig->signature);
1978                                 Logger::log("Repaired double encoded signature from handle ".$dsprsig->signer, Logger::DEBUG);
1979                         }
1980
1981                         if (!empty($dsprsig->signed_text) && empty($dsprsig->signature) && empty($dsprsig->signer)) {
1982                                 DBA::insert('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $dsprsig->signed_text], true);
1983                         } else {
1984                                 // The other fields are used by very old Friendica servers, so we currently store them differently
1985                                 DBA::insert('sign', ['iid' => $current_post, 'signed_text' => $dsprsig->signed_text,
1986                                         'signature' => $dsprsig->signature, 'signer' => $dsprsig->signer]);
1987                         }
1988                 }
1989
1990                 if (!empty($diaspora_signed_text)) {
1991                         DBA::insert('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $diaspora_signed_text], true);
1992                 }
1993
1994                 if ($item['parent-uri'] === $item['uri']) {
1995                         self::addThread($current_post);
1996                 } else {
1997                         self::updateThread($parent_id);
1998                 }
1999
2000                 if (!empty($item['origin']) || !empty($item['wall']) || !empty($delivery_data['postopts']) || !empty($delivery_data['inform'])) {
2001                         ItemDeliveryData::insert($current_post, $delivery_data);
2002                 }
2003
2004                 DBA::commit();
2005
2006                 /*
2007                  * Due to deadlock issues with the "term" table we are doing these steps after the commit.
2008                  * This is not perfect - but a workable solution until we found the reason for the problem.
2009                  */
2010                 if (!empty($tags)) {
2011                         Term::insertFromTagFieldByItemId($current_post, $tags);
2012                 }
2013
2014                 if (!empty($files)) {
2015                         Term::insertFromFileFieldByItemId($current_post, $files);
2016                 }
2017
2018                 // In that function we check if this is a forum post. Additionally we delete the item under certain circumstances
2019                 if (self::tagDeliver($item['uid'], $current_post)) {
2020                         // Get the user information for the logging
2021                         $user = User::getById($uid);
2022
2023                         Logger::notice('Item had been deleted', ['id' => $current_post, 'user' => $uid, 'account-type' => $user['account-type']]);
2024                         return 0;
2025                 }
2026
2027                 if (!$dontcache) {
2028                         $posted_item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $current_post]);
2029                         if (DBA::isResult($posted_item)) {
2030                                 if ($notify) {
2031                                         Hook::callAll('post_local_end', $posted_item);
2032                                 } else {
2033                                         Hook::callAll('post_remote_end', $posted_item);
2034                                 }
2035                         } else {
2036                                 Logger::log('new item not found in DB, id ' . $current_post);
2037                         }
2038                 }
2039
2040                 if ($item['parent-uri'] === $item['uri']) {
2041                         self::addShadow($current_post);
2042                 } else {
2043                         self::addShadowPost($current_post);
2044                 }
2045
2046                 self::updateContact($item);
2047
2048                 UserItem::setNotification($current_post);
2049
2050                 check_user_notification($current_post);
2051
2052                 if ($notify || ($item['visible'] && ((!empty($parent) && $parent['origin']) || $item['origin']))) {
2053                         Worker::add(['priority' => $priority, 'dont_fork' => true], 'Notifier', $notify_type, $current_post);
2054                 }
2055
2056                 return $current_post;
2057         }
2058
2059         /**
2060          * Insert a new item content entry
2061          *
2062          * @param array $item The item fields that are to be inserted
2063          * @return bool
2064          * @throws \Exception
2065          */
2066         private static function insertActivity(&$item)
2067         {
2068                 $activity_index = self::activityToIndex($item['verb']);
2069
2070                 if ($activity_index < 0) {
2071                         return false;
2072                 }
2073
2074                 $fields = ['activity' => $activity_index, 'uri-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
2075
2076                 // We just remove everything that is content
2077                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2078                         unset($item[$field]);
2079                 }
2080
2081                 // To avoid timing problems, we are using locks.
2082                 $locked = DI::lock()->acquire('item_insert_activity');
2083                 if (!$locked) {
2084                         Logger::log("Couldn't acquire lock for URI " . $item['uri'] . " - proceeding anyway.");
2085                 }
2086
2087                 // Do we already have this content?
2088                 $item_activity = DBA::selectFirst('item-activity', ['id'], ['uri-id' => $item['uri-id']]);
2089                 if (DBA::isResult($item_activity)) {
2090                         $item['iaid'] = $item_activity['id'];
2091                         Logger::log('Fetched activity for URI ' . $item['uri'] . ' (' . $item['iaid'] . ')');
2092                 } elseif (DBA::insert('item-activity', $fields)) {
2093                         $item['iaid'] = DBA::lastInsertId();
2094                         Logger::log('Inserted activity for URI ' . $item['uri'] . ' (' . $item['iaid'] . ')');
2095                 } else {
2096                         // This shouldn't happen.
2097                         Logger::log('Could not insert activity for URI ' . $item['uri'] . ' - should not happen');
2098                         DI::lock()->release('item_insert_activity');
2099                         return false;
2100                 }
2101                 if ($locked) {
2102                         DI::lock()->release('item_insert_activity');
2103                 }
2104                 return true;
2105         }
2106
2107         /**
2108          * Insert a new item content entry
2109          *
2110          * @param array $item The item fields that are to be inserted
2111          * @throws \Exception
2112          */
2113         private static function insertContent(&$item)
2114         {
2115                 $fields = ['uri-plink-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
2116
2117                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2118                         if (isset($item[$field])) {
2119                                 $fields[$field] = $item[$field];
2120                                 unset($item[$field]);
2121                         }
2122                 }
2123
2124                 // To avoid timing problems, we are using locks.
2125                 $locked = DI::lock()->acquire('item_insert_content');
2126                 if (!$locked) {
2127                         Logger::log("Couldn't acquire lock for URI " . $item['uri'] . " - proceeding anyway.");
2128                 }
2129
2130                 // Do we already have this content?
2131                 $item_content = DBA::selectFirst('item-content', ['id'], ['uri-id' => $item['uri-id']]);
2132                 if (DBA::isResult($item_content)) {
2133                         $item['icid'] = $item_content['id'];
2134                         Logger::log('Fetched content for URI ' . $item['uri'] . ' (' . $item['icid'] . ')');
2135                 } elseif (DBA::insert('item-content', $fields)) {
2136                         $item['icid'] = DBA::lastInsertId();
2137                         Logger::log('Inserted content for URI ' . $item['uri'] . ' (' . $item['icid'] . ')');
2138                 } else {
2139                         // This shouldn't happen.
2140                         Logger::log('Could not insert content for URI ' . $item['uri'] . ' - should not happen');
2141                 }
2142                 if ($locked) {
2143                         DI::lock()->release('item_insert_content');
2144                 }
2145         }
2146
2147         /**
2148          * Update existing item content entries
2149          *
2150          * @param array $item      The item fields that are to be changed
2151          * @param array $condition The condition for finding the item content entries
2152          * @return bool
2153          * @throws \Exception
2154          */
2155         private static function updateActivity($item, $condition)
2156         {
2157                 if (empty($item['verb'])) {
2158                         return false;
2159                 }
2160                 $activity_index = self::activityToIndex($item['verb']);
2161
2162                 if ($activity_index < 0) {
2163                         return false;
2164                 }
2165
2166                 $fields = ['activity' => $activity_index];
2167
2168                 Logger::log('Update activity for ' . json_encode($condition));
2169
2170                 DBA::update('item-activity', $fields, $condition, true);
2171
2172                 return true;
2173         }
2174
2175         /**
2176          * Update existing item content entries
2177          *
2178          * @param array $item      The item fields that are to be changed
2179          * @param array $condition The condition for finding the item content entries
2180          * @throws \Exception
2181          */
2182         private static function updateContent($item, $condition)
2183         {
2184                 // We have to select only the fields from the "item-content" table
2185                 $fields = [];
2186                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2187                         if (isset($item[$field])) {
2188                                 $fields[$field] = $item[$field];
2189                         }
2190                 }
2191
2192                 if (empty($fields)) {
2193                         // when there are no fields at all, just use the condition
2194                         // This is to ensure that we always store content.
2195                         $fields = $condition;
2196                 }
2197
2198                 Logger::log('Update content for ' . json_encode($condition));
2199
2200                 DBA::update('item-content', $fields, $condition, true);
2201         }
2202
2203         /**
2204          * Distributes public items to the receivers
2205          *
2206          * @param integer $itemid      Item ID that should be added
2207          * @param string  $signed_text Original text (for Diaspora signatures), JSON encoded.
2208          * @throws \Exception
2209          */
2210         public static function distribute($itemid, $signed_text = '')
2211         {
2212                 $condition = ["`id` IN (SELECT `parent` FROM `item` WHERE `id` = ?)", $itemid];
2213                 $parent = self::selectFirst(['owner-id'], $condition);
2214                 if (!DBA::isResult($parent)) {
2215                         return;
2216                 }
2217
2218                 // Only distribute public items from native networks
2219                 $condition = ['id' => $itemid, 'uid' => 0,
2220                         'network' => array_merge(Protocol::FEDERATED ,['']),
2221                         'visible' => true, 'deleted' => false, 'moderated' => false, 'private' => false];
2222                 $item = self::selectFirst(self::ITEM_FIELDLIST, $condition);
2223                 if (!DBA::isResult($item)) {
2224                         return;
2225                 }
2226
2227                 $origin = $item['origin'];
2228
2229                 unset($item['id']);
2230                 unset($item['parent']);
2231                 unset($item['mention']);
2232                 unset($item['wall']);
2233                 unset($item['origin']);
2234                 unset($item['starred']);
2235
2236                 $users = [];
2237
2238                 /// @todo add a field "pcid" in the contact table that referrs to the public contact id.
2239                 $owner = DBA::selectFirst('contact', ['url', 'nurl', 'alias'], ['id' => $parent['owner-id']]);
2240                 if (!DBA::isResult($owner)) {
2241                         return;
2242                 }
2243
2244                 $condition = ['nurl' => $owner['nurl'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2245                 $contacts = DBA::select('contact', ['uid'], $condition);
2246                 while ($contact = DBA::fetch($contacts)) {
2247                         if ($contact['uid'] == 0) {
2248                                 continue;
2249                         }
2250
2251                         $users[$contact['uid']] = $contact['uid'];
2252                 }
2253                 DBA::close($contacts);
2254
2255                 $condition = ['alias' => $owner['url'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2256                 $contacts = DBA::select('contact', ['uid'], $condition);
2257                 while ($contact = DBA::fetch($contacts)) {
2258                         if ($contact['uid'] == 0) {
2259                                 continue;
2260                         }
2261
2262                         $users[$contact['uid']] = $contact['uid'];
2263                 }
2264                 DBA::close($contacts);
2265
2266                 if (!empty($owner['alias'])) {
2267                         $condition = ['url' => $owner['alias'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2268                         $contacts = DBA::select('contact', ['uid'], $condition);
2269                         while ($contact = DBA::fetch($contacts)) {
2270                                 if ($contact['uid'] == 0) {
2271                                         continue;
2272                                 }
2273
2274                                 $users[$contact['uid']] = $contact['uid'];
2275                         }
2276                         DBA::close($contacts);
2277                 }
2278
2279                 $origin_uid = 0;
2280
2281                 if ($item['uri'] != $item['parent-uri']) {
2282                         $parents = self::select(['uid', 'origin'], ["`uri` = ? AND `uid` != 0", $item['parent-uri']]);
2283                         while ($parent = self::fetch($parents)) {
2284                                 $users[$parent['uid']] = $parent['uid'];
2285                                 if ($parent['origin'] && !$origin) {
2286                                         $origin_uid = $parent['uid'];
2287                                 }
2288                         }
2289                 }
2290
2291                 foreach ($users as $uid) {
2292                         if ($origin_uid == $uid) {
2293                                 $item['diaspora_signed_text'] = $signed_text;
2294                         }
2295                         self::storeForUser($itemid, $item, $uid);
2296                 }
2297         }
2298
2299         /**
2300          * Store public items for the receivers
2301          *
2302          * @param integer $itemid Item ID that should be added
2303          * @param array   $item   The item entry that will be stored
2304          * @param integer $uid    The user that will receive the item entry
2305          * @throws \Exception
2306          */
2307         private static function storeForUser($itemid, $item, $uid)
2308         {
2309                 $item['uid'] = $uid;
2310                 $item['origin'] = 0;
2311                 $item['wall'] = 0;
2312                 if ($item['uri'] == $item['parent-uri']) {
2313                         $item['contact-id'] = Contact::getIdForURL($item['owner-link'], $uid);
2314                 } else {
2315                         $item['contact-id'] = Contact::getIdForURL($item['author-link'], $uid);
2316                 }
2317
2318                 if (empty($item['contact-id'])) {
2319                         $self = DBA::selectFirst('contact', ['id'], ['self' => true, 'uid' => $uid]);
2320                         if (!DBA::isResult($self)) {
2321                                 return;
2322                         }
2323                         $item['contact-id'] = $self['id'];
2324                 }
2325
2326                 /// @todo Handling of "event-id"
2327
2328                 $notify = false;
2329                 if ($item['uri'] == $item['parent-uri']) {
2330                         $contact = DBA::selectFirst('contact', [], ['id' => $item['contact-id'], 'self' => false]);
2331                         if (DBA::isResult($contact)) {
2332                                 $notify = self::isRemoteSelf($contact, $item);
2333                         }
2334                 }
2335
2336                 $distributed = self::insert($item, false, $notify, true);
2337
2338                 if (!$distributed) {
2339                         Logger::log("Distributed public item " . $itemid . " for user " . $uid . " wasn't stored", Logger::DEBUG);
2340                 } else {
2341                         Logger::log("Distributed public item " . $itemid . " for user " . $uid . " with id " . $distributed, Logger::DEBUG);
2342                 }
2343         }
2344
2345         /**
2346          * Add a shadow entry for a given item id that is a thread starter
2347          *
2348          * We store every public item entry additionally with the user id "0".
2349          * This is used for the community page and for the search.
2350          * It is planned that in the future we will store public item entries only once.
2351          *
2352          * @param integer $itemid Item ID that should be added
2353          * @throws \Exception
2354          */
2355         public static function addShadow($itemid)
2356         {
2357                 $fields = ['uid', 'private', 'moderated', 'visible', 'deleted', 'network', 'uri'];
2358                 $condition = ['id' => $itemid, 'parent' => [0, $itemid]];
2359                 $item = self::selectFirst($fields, $condition);
2360
2361                 if (!DBA::isResult($item)) {
2362                         return;
2363                 }
2364
2365                 // is it already a copy?
2366                 if (($itemid == 0) || ($item['uid'] == 0)) {
2367                         return;
2368                 }
2369
2370                 // Is it a visible public post?
2371                 if (!$item["visible"] || $item["deleted"] || $item["moderated"] || $item["private"]) {
2372                         return;
2373                 }
2374
2375                 // is it an entry from a connector? Only add an entry for natively connected networks
2376                 if (!in_array($item["network"], array_merge(Protocol::FEDERATED ,['']))) {
2377                         return;
2378                 }
2379
2380                 if (self::exists(['uri' => $item['uri'], 'uid' => 0])) {
2381                         return;
2382                 }
2383
2384                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2385
2386                 if (DBA::isResult($item)) {
2387                         // Preparing public shadow (removing user specific data)
2388                         $item['uid'] = 0;
2389                         unset($item['id']);
2390                         unset($item['parent']);
2391                         unset($item['wall']);
2392                         unset($item['mention']);
2393                         unset($item['origin']);
2394                         unset($item['starred']);
2395                         unset($item['postopts']);
2396                         unset($item['inform']);
2397                         if ($item['uri'] == $item['parent-uri']) {
2398                                 $item['contact-id'] = $item['owner-id'];
2399                         } else {
2400                                 $item['contact-id'] = $item['author-id'];
2401                         }
2402
2403                         $public_shadow = self::insert($item, false, false, true);
2404
2405                         Logger::log("Stored public shadow for thread ".$itemid." under id ".$public_shadow, Logger::DEBUG);
2406                 }
2407         }
2408
2409         /**
2410          * Add a shadow entry for a given item id that is a comment
2411          *
2412          * This function does the same like the function above - but for comments
2413          *
2414          * @param integer $itemid Item ID that should be added
2415          * @throws \Exception
2416          */
2417         public static function addShadowPost($itemid)
2418         {
2419                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2420                 if (!DBA::isResult($item)) {
2421                         return;
2422                 }
2423
2424                 // Is it a toplevel post?
2425                 if ($item['id'] == $item['parent']) {
2426                         self::addShadow($itemid);
2427                         return;
2428                 }
2429
2430                 // Is this a shadow entry?
2431                 if ($item['uid'] == 0) {
2432                         return;
2433                 }
2434
2435                 // Is there a shadow parent?
2436                 if (!self::exists(['uri' => $item['parent-uri'], 'uid' => 0])) {
2437                         return;
2438                 }
2439
2440                 // Is there already a shadow entry?
2441                 if (self::exists(['uri' => $item['uri'], 'uid' => 0])) {
2442                         return;
2443                 }
2444
2445                 // Save "origin" and "parent" state
2446                 $origin = $item['origin'];
2447                 $parent = $item['parent'];
2448
2449                 // Preparing public shadow (removing user specific data)
2450                 $item['uid'] = 0;
2451                 unset($item['id']);
2452                 unset($item['parent']);
2453                 unset($item['wall']);
2454                 unset($item['mention']);
2455                 unset($item['origin']);
2456                 unset($item['starred']);
2457                 unset($item['postopts']);
2458                 unset($item['inform']);
2459                 $item['contact-id'] = Contact::getIdForURL($item['author-link']);
2460
2461                 $public_shadow = self::insert($item, false, false, true);
2462
2463                 Logger::log("Stored public shadow for comment ".$item['uri']." under id ".$public_shadow, Logger::DEBUG);
2464
2465                 // If this was a comment to a Diaspora post we don't get our comment back.
2466                 // This means that we have to distribute the comment by ourselves.
2467                 if ($origin && self::exists(['id' => $parent, 'network' => Protocol::DIASPORA])) {
2468                         self::distribute($public_shadow);
2469                 }
2470         }
2471
2472         /**
2473          * Adds a language specification in a "language" element of given $arr.
2474          * Expects "body" element to exist in $arr.
2475          *
2476          * @param $item
2477          * @throws \Text_LanguageDetect_Exception
2478          */
2479         private static function addLanguageToItemArray(&$item)
2480         {
2481                 $naked_body = BBCode::toPlaintext($item['body'], false);
2482
2483                 $ld = new Text_LanguageDetect();
2484                 $ld->setNameMode(2);
2485                 $languages = $ld->detect($naked_body, 3);
2486
2487                 if (is_array($languages)) {
2488                         $item['language'] = json_encode($languages);
2489                 }
2490         }
2491
2492         /**
2493          * Creates an unique guid out of a given uri
2494          *
2495          * @param string $uri uri of an item entry
2496          * @param string $host hostname for the GUID prefix
2497          * @return string unique guid
2498          */
2499         public static function guidFromUri($uri, $host)
2500         {
2501                 // Our regular guid routine is using this kind of prefix as well
2502                 // We have to avoid that different routines could accidentally create the same value
2503                 $parsed = parse_url($uri);
2504
2505                 // We use a hash of the hostname as prefix for the guid
2506                 $guid_prefix = hash("crc32", $host);
2507
2508                 // Remove the scheme to make sure that "https" and "http" doesn't make a difference
2509                 unset($parsed["scheme"]);
2510
2511                 // Glue it together to be able to make a hash from it
2512                 $host_id = implode("/", $parsed);
2513
2514                 // We could use any hash algorithm since it isn't a security issue
2515                 $host_hash = hash("ripemd128", $host_id);
2516
2517                 return $guid_prefix.$host_hash;
2518         }
2519
2520         /**
2521          * generate an unique URI
2522          *
2523          * @param integer $uid  User id
2524          * @param string  $guid An existing GUID (Otherwise it will be generated)
2525          *
2526          * @return string
2527          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2528          */
2529         public static function newURI($uid, $guid = "")
2530         {
2531                 if ($guid == "") {
2532                         $guid = System::createUUID();
2533                 }
2534
2535                 return DI::baseUrl()->get() . '/objects/' . $guid;
2536         }
2537
2538         /**
2539          * Set "success_update" and "last-item" to the date of the last time we heard from this contact
2540          *
2541          * This can be used to filter for inactive contacts.
2542          * Only do this for public postings to avoid privacy problems, since poco data is public.
2543          * Don't set this value if it isn't from the owner (could be an author that we don't know)
2544          *
2545          * @param array $arr Contains the just posted item record
2546          * @throws \Exception
2547          */
2548         private static function updateContact($arr)
2549         {
2550                 // Unarchive the author
2551                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["author-id"]]);
2552                 if (DBA::isResult($contact)) {
2553                         Contact::unmarkForArchival($contact);
2554                 }
2555
2556                 // Unarchive the contact if it's not our own contact
2557                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["contact-id"], 'self' => false]);
2558                 if (DBA::isResult($contact)) {
2559                         Contact::unmarkForArchival($contact);
2560                 }
2561
2562                 $update = (!$arr['private'] && ((($arr['author-link'] ?? '') === ($arr['owner-link'] ?? '')) || ($arr["parent-uri"] === $arr["uri"])));
2563
2564                 // Is it a forum? Then we don't care about the rules from above
2565                 if (!$update && in_array($arr["network"], [Protocol::ACTIVITYPUB, Protocol::DFRN]) && ($arr["parent-uri"] === $arr["uri"])) {
2566                         if (DBA::exists('contact', ['id' => $arr['contact-id'], 'forum' => true])) {
2567                                 $update = true;
2568                         }
2569                 }
2570
2571                 if ($update) {
2572                         DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2573                                 ['id' => $arr['contact-id']]);
2574                 }
2575                 // Now do the same for the system wide contacts with uid=0
2576                 if (!$arr['private']) {
2577                         DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2578                                 ['id' => $arr['owner-id']]);
2579
2580                         if ($arr['owner-id'] != $arr['author-id']) {
2581                                 DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2582                                         ['id' => $arr['author-id']]);
2583                         }
2584                 }
2585         }
2586
2587         public static function setHashtags(&$item)
2588         {
2589                 $tags = BBCode::getTags($item["body"]);
2590
2591                 // No hashtags?
2592                 if (!count($tags)) {
2593                         return false;
2594                 }
2595
2596                 // What happens in [code], stays in [code]!
2597                 // escape the # and the [
2598                 // hint: we will also get in trouble with #tags, when we want markdown in posts -> ### Headline 3
2599                 $item["body"] = preg_replace_callback("/\[code(.*?)\](.*?)\[\/code\]/ism",
2600                         function ($match) {
2601                                 // we truly ESCape all # and [ to prevent gettin weird tags in [code] blocks
2602                                 $find = ['#', '['];
2603                                 $replace = [chr(27).'sharp', chr(27).'leftsquarebracket'];
2604                                 return ("[code" . $match[1] . "]" . str_replace($find, $replace, $match[2]) . "[/code]");
2605                         }, $item["body"]);
2606
2607                 // This sorting is important when there are hashtags that are part of other hashtags
2608                 // Otherwise there could be problems with hashtags like #test and #test2
2609                 rsort($tags);
2610
2611                 $URLSearchString = "^\[\]";
2612
2613                 // All hashtags should point to the home server if "local_tags" is activated
2614                 if (DI::config()->get('system', 'local_tags')) {
2615                         $item["body"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2616                                         "#[url=".DI::baseUrl()."/search?tag=$2]$2[/url]", $item["body"]);
2617
2618                         $item["tag"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2619                                         "#[url=".DI::baseUrl()."/search?tag=$2]$2[/url]", $item["tag"]);
2620                 }
2621
2622                 // mask hashtags inside of url, bookmarks and attachments to avoid urls in urls
2623                 $item["body"] = preg_replace_callback("/\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2624                         function ($match) {
2625                                 return ("[url=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/url]");
2626                         }, $item["body"]);
2627
2628                 $item["body"] = preg_replace_callback("/\[bookmark\=([$URLSearchString]*)\](.*?)\[\/bookmark\]/ism",
2629                         function ($match) {
2630                                 return ("[bookmark=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/bookmark]");
2631                         }, $item["body"]);
2632
2633                 $item["body"] = preg_replace_callback("/\[attachment (.*)\](.*?)\[\/attachment\]/ism",
2634                         function ($match) {
2635                                 return ("[attachment " . str_replace("#", "&num;", $match[1]) . "]" . $match[2] . "[/attachment]");
2636                         }, $item["body"]);
2637
2638                 // Repair recursive urls
2639                 $item["body"] = preg_replace("/&num;\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2640                                 "&num;$2", $item["body"]);
2641
2642                 foreach ($tags as $tag) {
2643                         if ((strpos($tag, '#') !== 0) || strpos($tag, '[url=') || strlen($tag) < 2 || $tag[1] == '#') {
2644                                 continue;
2645                         }
2646
2647                         $basetag = str_replace('_',' ',substr($tag,1));
2648                         $newtag = '#[url=' . DI::baseUrl() . '/search?tag=' . $basetag . ']' . $basetag . '[/url]';
2649
2650                         $item["body"] = str_replace($tag, $newtag, $item["body"]);
2651
2652                         if (!stristr($item["tag"], "/search?tag=" . $basetag . "]" . $basetag . "[/url]")) {
2653                                 if (strlen($item["tag"])) {
2654                                         $item["tag"] = ',' . $item["tag"];
2655                                 }
2656                                 $item["tag"] = $newtag . $item["tag"];
2657                         }
2658                 }
2659
2660                 // Convert back the masked hashtags
2661                 $item["body"] = str_replace("&num;", "#", $item["body"]);
2662
2663                 // Remember! What happens in [code], stays in [code]
2664                 // roleback the # and [
2665                 $item["body"] = preg_replace_callback("/\[code(.*?)\](.*?)\[\/code\]/ism",
2666                         function ($match) {
2667                                 // we truly unESCape all sharp and leftsquarebracket
2668                                 $find = [chr(27).'sharp', chr(27).'leftsquarebracket'];
2669                                 $replace = ['#', '['];
2670                                 return ("[code" . $match[1] . "]" . str_replace($find, $replace, $match[2]) . "[/code]");
2671                         }, $item["body"]);
2672         }
2673
2674         /**
2675          * look for mention tags and setup a second delivery chain for forum/community posts if appropriate
2676          *
2677          * @param int $uid
2678          * @param int $item_id
2679          * @return boolean true if item was deleted, else false
2680          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2681          * @throws \ImagickException
2682          */
2683         private static function tagDeliver($uid, $item_id)
2684         {
2685                 $mention = false;
2686
2687                 $user = DBA::selectFirst('user', [], ['uid' => $uid]);
2688                 if (!DBA::isResult($user)) {
2689                         return false;
2690                 }
2691
2692                 $community_page = (($user['page-flags'] == User::PAGE_FLAGS_COMMUNITY) ? true : false);
2693                 $prvgroup = (($user['page-flags'] == User::PAGE_FLAGS_PRVGROUP) ? true : false);
2694
2695                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $item_id]);
2696                 if (!DBA::isResult($item)) {
2697                         return false;
2698                 }
2699
2700                 $link = Strings::normaliseLink(DI::baseUrl() . '/profile/' . $user['nickname']);
2701
2702                 /*
2703                  * Diaspora uses their own hardwired link URL in @-tags
2704                  * instead of the one we supply with webfinger
2705                  */
2706                 $dlink = Strings::normaliseLink(DI::baseUrl() . '/u/' . $user['nickname']);
2707
2708                 $cnt = preg_match_all('/[\@\!]\[url\=(.*?)\](.*?)\[\/url\]/ism', $item['body'], $matches, PREG_SET_ORDER);
2709                 if ($cnt) {
2710                         foreach ($matches as $mtch) {
2711                                 if (Strings::compareLink($link, $mtch[1]) || Strings::compareLink($dlink, $mtch[1])) {
2712                                         $mention = true;
2713                                         Logger::log('mention found: ' . $mtch[2]);
2714                                 }
2715                         }
2716                 }
2717
2718                 if (!$mention) {
2719                         if (($community_page || $prvgroup) &&
2720                                   !$item['wall'] && !$item['origin'] && ($item['id'] == $item['parent'])) {
2721                                 Logger::notice('Delete private group/communiy top-level item without mention', ['id' => $item_id]);
2722                                 DBA::delete('item', ['id' => $item_id]);
2723                                 return true;
2724                         }
2725                         return false;
2726                 }
2727
2728                 $arr = ['item' => $item, 'user' => $user];
2729
2730                 Hook::callAll('tagged', $arr);
2731
2732                 if (!$community_page && !$prvgroup) {
2733                         return false;
2734                 }
2735
2736                 /*
2737                  * tgroup delivery - setup a second delivery chain
2738                  * prevent delivery looping - only proceed
2739                  * if the message originated elsewhere and is a top-level post
2740                  */
2741                 if ($item['wall'] || $item['origin'] || ($item['id'] != $item['parent'])) {
2742                         return false;
2743                 }
2744
2745                 // now change this copy of the post to a forum head message and deliver to all the tgroup members
2746                 $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'], ['uid' => $uid, 'self' => true]);
2747                 if (!DBA::isResult($self)) {
2748                         return false;
2749                 }
2750
2751                 $owner_id = Contact::getIdForURL($self['url']);
2752
2753                 // also reset all the privacy bits to the forum default permissions
2754
2755                 $private = ($user['allow_cid'] || $user['allow_gid'] || $user['deny_cid'] || $user['deny_gid']) ? 1 : 0;
2756
2757                 $psid = PermissionSet::getIdFromACL(
2758                         $user['uid'],
2759                         $user['allow_cid'],
2760                         $user['allow_gid'],
2761                         $user['deny_cid'],
2762                         $user['deny_gid']
2763                 );
2764
2765                 $forum_mode = ($prvgroup ? 2 : 1);
2766
2767                 $fields = ['wall' => true, 'origin' => true, 'forum_mode' => $forum_mode, 'contact-id' => $self['id'],
2768                         'owner-id' => $owner_id, 'private' => $private, 'psid' => $psid];
2769                 self::update($fields, ['id' => $item_id]);
2770
2771                 self::updateThread($item_id);
2772
2773                 Worker::add(['priority' => PRIORITY_HIGH, 'dont_fork' => true], 'Notifier', Delivery::POST, $item_id);
2774
2775                 return false;
2776         }
2777
2778         public static function isRemoteSelf($contact, &$datarray)
2779         {
2780                 if (!$contact['remote_self']) {
2781                         return false;
2782                 }
2783
2784                 // Prevent the forwarding of posts that are forwarded
2785                 if (!empty($datarray["extid"]) && ($datarray["extid"] == Protocol::DFRN)) {
2786                         Logger::log('Already forwarded', Logger::DEBUG);
2787                         return false;
2788                 }
2789
2790                 // Prevent to forward already forwarded posts
2791                 if ($datarray["app"] == DI::baseUrl()->getHostname()) {
2792                         Logger::log('Already forwarded (second test)', Logger::DEBUG);
2793                         return false;
2794                 }
2795
2796                 // Only forward posts
2797                 if ($datarray["verb"] != Activity::POST) {
2798                         Logger::log('No post', Logger::DEBUG);
2799                         return false;
2800                 }
2801
2802                 if (($contact['network'] != Protocol::FEED) && $datarray['private']) {
2803                         Logger::log('Not public', Logger::DEBUG);
2804                         return false;
2805                 }
2806
2807                 $datarray2 = $datarray;
2808                 Logger::log('remote-self start - Contact '.$contact['url'].' - '.$contact['remote_self'].' Item '.print_r($datarray, true), Logger::DEBUG);
2809                 if ($contact['remote_self'] == 2) {
2810                         $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'],
2811                                         ['uid' => $contact['uid'], 'self' => true]);
2812                         if (DBA::isResult($self)) {
2813                                 $datarray['contact-id'] = $self["id"];
2814
2815                                 $datarray['owner-name'] = $self["name"];
2816                                 $datarray['owner-link'] = $self["url"];
2817                                 $datarray['owner-avatar'] = $self["thumb"];
2818
2819                                 $datarray['author-name']   = $datarray['owner-name'];
2820                                 $datarray['author-link']   = $datarray['owner-link'];
2821                                 $datarray['author-avatar'] = $datarray['owner-avatar'];
2822
2823                                 unset($datarray['edited']);
2824
2825                                 unset($datarray['network']);
2826                                 unset($datarray['owner-id']);
2827                                 unset($datarray['author-id']);
2828                         }
2829
2830                         if ($contact['network'] != Protocol::FEED) {
2831                                 $datarray["guid"] = System::createUUID();
2832                                 unset($datarray["plink"]);
2833                                 $datarray["uri"] = self::newURI($contact['uid'], $datarray["guid"]);
2834                                 $datarray["parent-uri"] = $datarray["uri"];
2835                                 $datarray["thr-parent"] = $datarray["uri"];
2836                                 $datarray["extid"] = Protocol::DFRN;
2837                                 $urlpart = parse_url($datarray2['author-link']);
2838                                 $datarray["app"] = $urlpart["host"];
2839                         } else {
2840                                 $datarray['private'] = 0;
2841                         }
2842                 }
2843
2844                 if ($contact['network'] != Protocol::FEED) {
2845                         // Store the original post
2846                         $result = self::insert($datarray2, false, false);
2847                         Logger::log('remote-self post original item - Contact '.$contact['url'].' return '.$result.' Item '.print_r($datarray2, true), Logger::DEBUG);
2848                 } else {
2849                         $datarray["app"] = "Feed";
2850                         $result = true;
2851                 }
2852
2853                 // Trigger automatic reactions for addons
2854                 $datarray['api_source'] = true;
2855
2856                 // We have to tell the hooks who we are - this really should be improved
2857                 $_SESSION["authenticated"] = true;
2858                 $_SESSION["uid"] = $contact['uid'];
2859
2860                 return $result;
2861         }
2862
2863         /**
2864          *
2865          * @param string $s
2866          * @param int    $uid
2867          * @param array  $item
2868          * @param int    $cid
2869          * @return string
2870          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2871          * @throws \ImagickException
2872          */
2873         public static function fixPrivatePhotos($s, $uid, $item = null, $cid = 0)
2874         {
2875                 if (DI::config()->get('system', 'disable_embedded')) {
2876                         return $s;
2877                 }
2878
2879                 Logger::log('check for photos', Logger::DEBUG);
2880                 $site = substr(DI::baseUrl(), strpos(DI::baseUrl(), '://'));
2881
2882                 $orig_body = $s;
2883                 $new_body = '';
2884
2885                 $img_start = strpos($orig_body, '[img');
2886                 $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2887                 $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2888
2889                 while (($img_st_close !== false) && ($img_len !== false)) {
2890                         $img_st_close++; // make it point to AFTER the closing bracket
2891                         $image = substr($orig_body, $img_start + $img_st_close, $img_len);
2892
2893                         Logger::log('found photo ' . $image, Logger::DEBUG);
2894
2895                         if (stristr($image, $site . '/photo/')) {
2896                                 // Only embed locally hosted photos
2897                                 $replace = false;
2898                                 $i = basename($image);
2899                                 $i = str_replace(['.jpg', '.png', '.gif'], ['', '', ''], $i);
2900                                 $x = strpos($i, '-');
2901
2902                                 if ($x) {
2903                                         $res = substr($i, $x + 1);
2904                                         $i = substr($i, 0, $x);
2905                                         $photo = Photo::getPhotoForUser($uid, $i, $res);
2906                                         if (DBA::isResult($photo)) {
2907                                                 /*
2908                                                  * Check to see if we should replace this photo link with an embedded image
2909                                                  * 1. No need to do so if the photo is public
2910                                                  * 2. If there's a contact-id provided, see if they're in the access list
2911                                                  *    for the photo. If so, embed it.
2912                                                  * 3. Otherwise, if we have an item, see if the item permissions match the photo
2913                                                  *    permissions, regardless of order but first check to see if they're an exact
2914                                                  *    match to save some processing overhead.
2915                                                  */
2916                                                 if (self::hasPermissions($photo)) {
2917                                                         if ($cid) {
2918                                                                 $recips = self::enumeratePermissions($photo);
2919                                                                 if (in_array($cid, $recips)) {
2920                                                                         $replace = true;
2921                                                                 }
2922                                                         } elseif ($item) {
2923                                                                 if (self::samePermissions($uid, $item, $photo)) {
2924                                                                         $replace = true;
2925                                                                 }
2926                                                         }
2927                                                 }
2928                                                 if ($replace) {
2929                                                         $photo_img = Photo::getImageForPhoto($photo);
2930                                                         // If a custom width and height were specified, apply before embedding
2931                                                         if (preg_match("/\[img\=([0-9]*)x([0-9]*)\]/is", substr($orig_body, $img_start, $img_st_close), $match)) {
2932                                                                 Logger::log('scaling photo', Logger::DEBUG);
2933
2934                                                                 $width = intval($match[1]);
2935                                                                 $height = intval($match[2]);
2936
2937                                                                 $photo_img->scaleDown(max($width, $height));
2938                                                         }
2939
2940                                                         $data = $photo_img->asString();
2941                                                         $type = $photo_img->getType();
2942
2943                                                         Logger::log('replacing photo', Logger::DEBUG);
2944                                                         $image = 'data:' . $type . ';base64,' . base64_encode($data);
2945                                                         Logger::log('replaced: ' . $image, Logger::DATA);
2946                                                 }
2947                                         }
2948                                 }
2949                         }
2950
2951                         $new_body = $new_body . substr($orig_body, 0, $img_start + $img_st_close) . $image . '[/img]';
2952                         $orig_body = substr($orig_body, $img_start + $img_st_close + $img_len + strlen('[/img]'));
2953                         if ($orig_body === false) {
2954                                 $orig_body = '';
2955                         }
2956
2957                         $img_start = strpos($orig_body, '[img');
2958                         $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2959                         $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2960                 }
2961
2962                 $new_body = $new_body . $orig_body;
2963
2964                 return $new_body;
2965         }
2966
2967         private static function hasPermissions($obj)
2968         {
2969                 return !empty($obj['allow_cid']) || !empty($obj['allow_gid']) ||
2970                         !empty($obj['deny_cid']) || !empty($obj['deny_gid']);
2971         }
2972
2973         private static function samePermissions($uid, $obj1, $obj2)
2974         {
2975                 // first part is easy. Check that these are exactly the same.
2976                 if (($obj1['allow_cid'] == $obj2['allow_cid'])
2977                         && ($obj1['allow_gid'] == $obj2['allow_gid'])
2978                         && ($obj1['deny_cid'] == $obj2['deny_cid'])
2979                         && ($obj1['deny_gid'] == $obj2['deny_gid'])) {
2980                         return true;
2981                 }
2982
2983                 // This is harder. Parse all the permissions and compare the resulting set.
2984                 $recipients1 = self::enumeratePermissions($obj1);
2985                 $recipients2 = self::enumeratePermissions($obj2);
2986                 sort($recipients1);
2987                 sort($recipients2);
2988
2989                 /// @TODO Comparison of arrays, maybe use array_diff_assoc() here?
2990                 return ($recipients1 == $recipients2);
2991         }
2992
2993         /**
2994          * Returns an array of contact-ids that are allowed to see this object
2995          *
2996          * @param array $obj        Item array with at least uid, allow_cid, allow_gid, deny_cid and deny_gid
2997          * @param bool  $check_dead Prunes unavailable contacts from the result
2998          * @return array
2999          * @throws \Exception
3000          */
3001         public static function enumeratePermissions(array $obj, bool $check_dead = false)
3002         {
3003                 $aclFormater = DI::aclFormatter();
3004
3005                 $allow_people = $aclFormater->expand($obj['allow_cid']);
3006                 $allow_groups = Group::expand($obj['uid'], $aclFormater->expand($obj['allow_gid']), $check_dead);
3007                 $deny_people  = $aclFormater->expand($obj['deny_cid']);
3008                 $deny_groups  = Group::expand($obj['uid'], $aclFormater->expand($obj['deny_gid']), $check_dead);
3009                 $recipients   = array_unique(array_merge($allow_people, $allow_groups));
3010                 $deny         = array_unique(array_merge($deny_people, $deny_groups));
3011                 $recipients   = array_diff($recipients, $deny);
3012                 return $recipients;
3013         }
3014
3015         public static function getFeedTags($item)
3016         {
3017                 $ret = [];
3018                 $matches = false;
3019                 $cnt = preg_match_all('|\#\[url\=(.*?)\](.*?)\[\/url\]|', $item['tag'], $matches);
3020                 if ($cnt) {
3021                         for ($x = 0; $x < $cnt; $x ++) {
3022                                 if ($matches[1][$x]) {
3023                                         $ret[$matches[2][$x]] = ['#', $matches[1][$x], $matches[2][$x]];
3024                                 }
3025                         }
3026                 }
3027                 $matches = false;
3028                 $cnt = preg_match_all('|\@\[url\=(.*?)\](.*?)\[\/url\]|', $item['tag'], $matches);
3029                 if ($cnt) {
3030                         for ($x = 0; $x < $cnt; $x ++) {
3031                                 if ($matches[1][$x]) {
3032                                         $ret[] = ['@', $matches[1][$x], $matches[2][$x]];
3033                                 }
3034                         }
3035                 }
3036                 return $ret;
3037         }
3038
3039         public static function expire($uid, $days, $network = "", $force = false)
3040         {
3041                 if (!$uid || ($days < 1)) {
3042                         return;
3043                 }
3044
3045                 $condition = ["`uid` = ? AND NOT `deleted` AND `id` = `parent` AND `gravity` = ?",
3046                         $uid, GRAVITY_PARENT];
3047
3048                 /*
3049                  * $expire_network_only = save your own wall posts
3050                  * and just expire conversations started by others
3051                  */
3052                 $expire_network_only = DI::pConfig()->get($uid, 'expire', 'network_only', false);
3053
3054                 if ($expire_network_only) {
3055                         $condition[0] .= " AND NOT `wall`";
3056                 }
3057
3058                 if ($network != "") {
3059                         $condition[0] .= " AND `network` = ?";
3060                         $condition[] = $network;
3061                 }
3062
3063                 $condition[0] .= " AND `received` < UTC_TIMESTAMP() - INTERVAL ? DAY";
3064                 $condition[] = $days;
3065
3066                 $items = self::select(['file', 'resource-id', 'starred', 'type', 'id', 'post-type'], $condition);
3067
3068                 if (!DBA::isResult($items)) {
3069                         return;
3070                 }
3071
3072                 $expire_items = DI::pConfig()->get($uid, 'expire', 'items', true);
3073
3074                 // Forcing expiring of items - but not notes and marked items
3075                 if ($force) {
3076                         $expire_items = true;
3077                 }
3078
3079                 $expire_notes = DI::pConfig()->get($uid, 'expire', 'notes', true);
3080                 $expire_starred = DI::pConfig()->get($uid, 'expire', 'starred', true);
3081                 $expire_photos = DI::pConfig()->get($uid, 'expire', 'photos', false);
3082
3083                 $expired = 0;
3084
3085                 while ($item = Item::fetch($items)) {
3086                         // don't expire filed items
3087
3088                         if (strpos($item['file'], '[') !== false) {
3089                                 continue;
3090                         }
3091
3092                         // Only expire posts, not photos and photo comments
3093
3094                         if (!$expire_photos && strlen($item['resource-id'])) {
3095                                 continue;
3096                         } elseif (!$expire_starred && intval($item['starred'])) {
3097                                 continue;
3098                         } elseif (!$expire_notes && (($item['type'] == 'note') || ($item['post-type'] == Item::PT_PERSONAL_NOTE))) {
3099                                 continue;
3100                         } elseif (!$expire_items && ($item['type'] != 'note') && ($item['post-type'] != Item::PT_PERSONAL_NOTE)) {
3101                                 continue;
3102                         }
3103
3104                         self::deleteById($item['id'], PRIORITY_LOW);
3105
3106                         ++$expired;
3107                 }
3108                 DBA::close($items);
3109                 Logger::log('User ' . $uid . ": expired $expired items; expire items: $expire_items, expire notes: $expire_notes, expire starred: $expire_starred, expire photos: $expire_photos");
3110         }
3111
3112         public static function firstPostDate($uid, $wall = false)
3113         {
3114                 $condition = ['uid' => $uid, 'wall' => $wall, 'deleted' => false, 'visible' => true, 'moderated' => false];
3115                 $params = ['order' => ['received' => false]];
3116                 $thread = DBA::selectFirst('thread', ['received'], $condition, $params);
3117                 if (DBA::isResult($thread)) {
3118                         return substr(DateTimeFormat::local($thread['received']), 0, 10);
3119                 }
3120                 return false;
3121         }
3122
3123         /**
3124          * add/remove activity to an item
3125          *
3126          * Toggle activities as like,dislike,attend of an item
3127          *
3128          * @param string $item_id
3129          * @param string $verb
3130          *            Activity verb. One of
3131          *            like, unlike, dislike, undislike, attendyes, unattendyes,
3132          *            attendno, unattendno, attendmaybe, unattendmaybe
3133          * @return bool
3134          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3135          * @throws \ImagickException
3136          * @hook  'post_local_end'
3137          *            array $arr
3138          *            'post_id' => ID of posted item
3139          */
3140         public static function performLike($item_id, $verb)
3141         {
3142                 if (!Session::isAuthenticated()) {
3143                         return false;
3144                 }
3145
3146                 switch ($verb) {
3147                         case 'like':
3148                         case 'unlike':
3149                                 $activity = Activity::LIKE;
3150                                 break;
3151                         case 'dislike':
3152                         case 'undislike':
3153                                 $activity = Activity::DISLIKE;
3154                                 break;
3155                         case 'attendyes':
3156                         case 'unattendyes':
3157                                 $activity = Activity::ATTEND;
3158                                 break;
3159                         case 'attendno':
3160                         case 'unattendno':
3161                                 $activity = Activity::ATTENDNO;
3162                                 break;
3163                         case 'attendmaybe':
3164                         case 'unattendmaybe':
3165                                 $activity = Activity::ATTENDMAYBE;
3166                                 break;
3167                         default:
3168                                 Logger::log('like: unknown verb ' . $verb . ' for item ' . $item_id);
3169                                 return false;
3170                 }
3171
3172                 // Enable activity toggling instead of on/off
3173                 $event_verb_flag = $activity === Activity::ATTEND || $activity === Activity::ATTENDNO || $activity === Activity::ATTENDMAYBE;
3174
3175                 Logger::log('like: verb ' . $verb . ' item ' . $item_id);
3176
3177                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['`id` = ? OR `uri` = ?', $item_id, $item_id]);
3178                 if (!DBA::isResult($item)) {
3179                         Logger::log('like: unknown item ' . $item_id);
3180                         return false;
3181                 }
3182
3183                 $item_uri = $item['uri'];
3184
3185                 $uid = $item['uid'];
3186                 if (($uid == 0) && local_user()) {
3187                         $uid = local_user();
3188                 }
3189
3190                 if (!Security::canWriteToUserWall($uid)) {
3191                         Logger::log('like: unable to write on wall ' . $uid);
3192                         return false;
3193                 }
3194
3195                 // Retrieves the local post owner
3196                 $owner_self_contact = DBA::selectFirst('contact', [], ['uid' => $uid, 'self' => true]);
3197                 if (!DBA::isResult($owner_self_contact)) {
3198                         Logger::log('like: unknown owner ' . $uid);
3199                         return false;
3200                 }
3201
3202                 // Retrieve the current logged in user's public contact
3203                 $author_id = public_contact();
3204
3205                 $author_contact = DBA::selectFirst('contact', ['url'], ['id' => $author_id]);
3206                 if (!DBA::isResult($author_contact)) {
3207                         Logger::log('like: unknown author ' . $author_id);
3208                         return false;
3209                 }
3210
3211                 // Contact-id is the uid-dependant author contact
3212                 if (local_user() == $uid) {
3213                         $item_contact_id = $owner_self_contact['id'];
3214                 } else {
3215                         $item_contact_id = Contact::getIdForURL($author_contact['url'], $uid, true);
3216                         $item_contact = DBA::selectFirst('contact', [], ['id' => $item_contact_id]);
3217                         if (!DBA::isResult($item_contact)) {
3218                                 Logger::log('like: unknown item contact ' . $item_contact_id);
3219                                 return false;
3220                         }
3221                 }
3222
3223                 // Look for an existing verb row
3224                 // event participation are essentially radio toggles. If you make a subsequent choice,
3225                 // we need to eradicate your first choice.
3226                 if ($event_verb_flag) {
3227                         $verbs = [Activity::ATTEND, Activity::ATTENDNO, Activity::ATTENDMAYBE];
3228
3229                         // Translate to the index based activity index
3230                         $activities = [];
3231                         foreach ($verbs as $verb) {
3232                                 $activities[] = self::activityToIndex($verb);
3233                         }
3234                 } else {
3235                         $activities = self::activityToIndex($activity);
3236                 }
3237
3238                 $condition = ['activity' => $activities, 'deleted' => false, 'gravity' => GRAVITY_ACTIVITY,
3239                         'author-id' => $author_id, 'uid' => $item['uid'], 'thr-parent' => $item_uri];
3240
3241                 $like_item = self::selectFirst(['id', 'guid', 'verb'], $condition);
3242
3243                 // If it exists, mark it as deleted
3244                 if (DBA::isResult($like_item)) {
3245                         self::deleteById($like_item['id']);
3246
3247                         if (!$event_verb_flag || $like_item['verb'] == $activity) {
3248                                 return true;
3249                         }
3250                 }
3251
3252                 // Verb is "un-something", just trying to delete existing entries
3253                 if (strpos($verb, 'un') === 0) {
3254                         return true;
3255                 }
3256
3257                 $objtype = $item['resource-id'] ? Activity\ObjectType::IMAGE : Activity\ObjectType::NOTE;
3258
3259                 $new_item = [
3260                         'guid'          => System::createUUID(),
3261                         'uri'           => self::newURI($item['uid']),
3262                         'uid'           => $item['uid'],
3263                         'contact-id'    => $item_contact_id,
3264                         'wall'          => $item['wall'],
3265                         'origin'        => 1,
3266                         'network'       => Protocol::DFRN,
3267                         'gravity'       => GRAVITY_ACTIVITY,
3268                         'parent'        => $item['id'],
3269                         'parent-uri'    => $item['uri'],
3270                         'thr-parent'    => $item['uri'],
3271                         'owner-id'      => $author_id,
3272                         'author-id'     => $author_id,
3273                         'body'          => $activity,
3274                         'verb'          => $activity,
3275                         'object-type'   => $objtype,
3276                         'allow_cid'     => $item['allow_cid'],
3277                         'allow_gid'     => $item['allow_gid'],
3278                         'deny_cid'      => $item['deny_cid'],
3279                         'deny_gid'      => $item['deny_gid'],
3280                         'visible'       => 1,
3281                         'unseen'        => 1,
3282                 ];
3283
3284                 $signed = Diaspora::createLikeSignature($uid, $new_item);
3285                 if (!empty($signed)) {
3286                         $new_item['diaspora_signed_text'] = json_encode($signed);
3287                 }
3288
3289                 $new_item_id = self::insert($new_item);
3290
3291                 // If the parent item isn't visible then set it to visible
3292                 if (!$item['visible']) {
3293                         self::update(['visible' => true], ['id' => $item['id']]);
3294                 }
3295
3296                 $new_item['id'] = $new_item_id;
3297
3298                 Hook::callAll('post_local_end', $new_item);
3299
3300                 return true;
3301         }
3302
3303         private static function addThread($itemid, $onlyshadow = false)
3304         {
3305                 $fields = ['uid', 'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private', 'pubmail',
3306                         'moderated', 'visible', 'starred', 'contact-id', 'post-type',
3307                         'deleted', 'origin', 'forum_mode', 'mention', 'network', 'author-id', 'owner-id'];
3308                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3309                 $item = self::selectFirst($fields, $condition);
3310
3311                 if (!DBA::isResult($item)) {
3312                         return;
3313                 }
3314
3315                 $item['iid'] = $itemid;
3316
3317                 if (!$onlyshadow) {
3318                         $result = DBA::insert('thread', $item);
3319
3320                         Logger::log("Add thread for item ".$itemid." - ".print_r($result, true), Logger::DEBUG);
3321                 }
3322         }
3323
3324         private static function updateThread($itemid, $setmention = false)
3325         {
3326                 $fields = ['uid', 'guid', 'created', 'edited', 'commented', 'received', 'changed', 'post-type',
3327                         'wall', 'private', 'pubmail', 'moderated', 'visible', 'starred', 'contact-id',
3328                         'deleted', 'origin', 'forum_mode', 'network', 'author-id', 'owner-id'];
3329                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3330
3331                 $item = self::selectFirst($fields, $condition);
3332                 if (!DBA::isResult($item)) {
3333                         return;
3334                 }
3335
3336                 if ($setmention) {
3337                         $item["mention"] = 1;
3338                 }
3339
3340                 $fields = [];
3341
3342                 foreach ($item as $field => $data) {
3343                         if (!in_array($field, ["guid"])) {
3344                                 $fields[$field] = $data;
3345                         }
3346                 }
3347
3348                 $result = DBA::update('thread', $fields, ['iid' => $itemid]);
3349
3350                 Logger::log("Update thread for item ".$itemid." - guid ".$item["guid"]." - ".(int)$result, Logger::DEBUG);
3351         }
3352
3353         private static function deleteThread($itemid, $itemuri = "")
3354         {
3355                 $item = DBA::selectFirst('thread', ['uid'], ['iid' => $itemid]);
3356                 if (!DBA::isResult($item)) {
3357                         Logger::log('No thread found for id '.$itemid, Logger::DEBUG);
3358                         return;
3359                 }
3360
3361                 $result = DBA::delete('thread', ['iid' => $itemid], ['cascade' => false]);
3362
3363                 Logger::log("deleteThread: Deleted thread for item ".$itemid." - ".print_r($result, true), Logger::DEBUG);
3364
3365                 if ($itemuri != "") {
3366                         $condition = ["`uri` = ? AND NOT `deleted` AND NOT (`uid` IN (?, 0))", $itemuri, $item["uid"]];
3367                         if (!self::exists($condition)) {
3368                                 DBA::delete('item', ['uri' => $itemuri, 'uid' => 0]);
3369                                 Logger::debug('Deleted shadow item', ['id' => $itemid, 'uri' => $itemuri]);
3370                         }
3371                 }
3372         }
3373
3374         public static function getPermissionsSQLByUserId($owner_id)
3375         {
3376                 $local_user = local_user();
3377                 $remote_user = Session::getRemoteContactID($owner_id);
3378
3379                 /*
3380                  * Construct permissions
3381                  *
3382                  * default permissions - anonymous user
3383                  */
3384                 $sql = " AND NOT `item`.`private`";
3385
3386                 // Profile owner - everything is visible
3387                 if ($local_user && ($local_user == $owner_id)) {
3388                         $sql = '';
3389                 } elseif ($remote_user) {
3390                         /*
3391                          * Authenticated visitor. Unless pre-verified,
3392                          * check that the contact belongs to this $owner_id
3393                          * and load the groups the visitor belongs to.
3394                          * If pre-verified, the caller is expected to have already
3395                          * done this and passed the groups into this function.
3396                          */
3397                         $set = PermissionSet::get($owner_id, $remote_user);
3398
3399                         if (!empty($set)) {
3400                                 $sql_set = " OR (`item`.`private` IN (1,2) AND `item`.`wall` AND `item`.`psid` IN (" . implode(',', $set) . "))";
3401                         } else {
3402                                 $sql_set = '';
3403                         }
3404
3405                         $sql = " AND (NOT `item`.`private`" . $sql_set . ")";
3406                 }
3407
3408                 return $sql;
3409         }
3410
3411         /**
3412          * get translated item type
3413          *
3414          * @param $item
3415          * @return string
3416          */
3417         public static function postType($item)
3418         {
3419                 if (!empty($item['event-id'])) {
3420                         return DI::l10n()->t('event');
3421                 } elseif (!empty($item['resource-id'])) {
3422                         return DI::l10n()->t('photo');
3423                 } elseif (!empty($item['verb']) && $item['verb'] !== Activity::POST) {
3424                         return DI::l10n()->t('activity');
3425                 } elseif ($item['id'] != $item['parent']) {
3426                         return DI::l10n()->t('comment');
3427                 }
3428
3429                 return DI::l10n()->t('post');
3430         }
3431
3432         /**
3433          * Sets the "rendered-html" field of the provided item
3434          *
3435          * Body is preserved to avoid side-effects as we modify it just-in-time for spoilers and private image links
3436          *
3437          * @param array $item
3438          * @param bool  $update
3439          *
3440          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3441          * @todo Remove reference, simply return "rendered-html" and "rendered-hash"
3442          */
3443         public static function putInCache(&$item, $update = false)
3444         {
3445                 $body = $item["body"];
3446
3447                 $rendered_hash = $item['rendered-hash'] ?? '';
3448                 $rendered_html = $item['rendered-html'] ?? '';
3449
3450                 if ($rendered_hash == ''
3451                         || $rendered_html == ""
3452                         || $rendered_hash != hash("md5", $item["body"])
3453                         || DI::config()->get("system", "ignore_cache")
3454                 ) {
3455                         self::addRedirToImageTags($item);
3456
3457                         $item["rendered-html"] = BBCode::convert($item["body"]);
3458                         $item["rendered-hash"] = hash("md5", $item["body"]);
3459
3460                         $hook_data = ['item' => $item, 'rendered-html' => $item['rendered-html'], 'rendered-hash' => $item['rendered-hash']];
3461                         Hook::callAll('put_item_in_cache', $hook_data);
3462                         $item['rendered-html'] = $hook_data['rendered-html'];
3463                         $item['rendered-hash'] = $hook_data['rendered-hash'];
3464                         unset($hook_data);
3465
3466                         // Force an update if the generated values differ from the existing ones
3467                         if ($rendered_hash != $item["rendered-hash"]) {
3468                                 $update = true;
3469                         }
3470
3471                         // Only compare the HTML when we forcefully ignore the cache
3472                         if (DI::config()->get("system", "ignore_cache") && ($rendered_html != $item["rendered-html"])) {
3473                                 $update = true;
3474                         }
3475
3476                         if ($update && !empty($item["id"])) {
3477                                 self::update(
3478                                         [
3479                                                 'rendered-html' => $item["rendered-html"],
3480                                                 'rendered-hash' => $item["rendered-hash"]
3481                                         ],
3482                                         ['id' => $item["id"]]
3483                                 );
3484                         }
3485                 }
3486
3487                 $item["body"] = $body;
3488         }
3489
3490         /**
3491          * Find any non-embedded images in private items and add redir links to them
3492          *
3493          * @param array &$item The field array of an item row
3494          */
3495         private static function addRedirToImageTags(array &$item)
3496         {
3497                 $app = DI::app();
3498
3499                 $matches = [];
3500                 $cnt = preg_match_all('|\[img\](http[^\[]*?/photo/[a-fA-F0-9]+?(-[0-9]\.[\w]+?)?)\[\/img\]|', $item['body'], $matches, PREG_SET_ORDER);
3501                 if ($cnt) {
3502                         foreach ($matches as $mtch) {
3503                                 if (strpos($mtch[1], '/redir') !== false) {
3504                                         continue;
3505                                 }
3506
3507                                 if ((local_user() == $item['uid']) && ($item['private'] == 1) && ($item['contact-id'] != $app->contact['id']) && ($item['network'] == Protocol::DFRN)) {
3508                                         $img_url = 'redir/' . $item['contact-id'] . '?url=' . urlencode($mtch[1]);
3509                                         $item['body'] = str_replace($mtch[0], '[img]' . $img_url . '[/img]', $item['body']);
3510                                 }
3511                         }
3512                 }
3513         }
3514
3515         /**
3516          * Given an item array, convert the body element from bbcode to html and add smilie icons.
3517          * If attach is true, also add icons for item attachments.
3518          *
3519          * @param array   $item
3520          * @param boolean $attach
3521          * @param boolean $is_preview
3522          * @return string item body html
3523          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3524          * @throws \ImagickException
3525          * @hook  prepare_body_init item array before any work
3526          * @hook  prepare_body_content_filter ('item'=>item array, 'filter_reasons'=>string array) before first bbcode to html
3527          * @hook  prepare_body ('item'=>item array, 'html'=>body string, 'is_preview'=>boolean, 'filter_reasons'=>string array) after first bbcode to html
3528          * @hook  prepare_body_final ('item'=>item array, 'html'=>body string) after attach icons and blockquote special case handling (spoiler, author)
3529          */
3530         public static function prepareBody(array &$item, $attach = false, $is_preview = false)
3531         {
3532                 $a = DI::app();
3533                 Hook::callAll('prepare_body_init', $item);
3534
3535                 // In order to provide theme developers more possibilities, event items
3536                 // are treated differently.
3537                 if ($item['object-type'] === Activity\ObjectType::EVENT && isset($item['event-id'])) {
3538                         $ev = Event::getItemHTML($item);
3539                         return $ev;
3540                 }
3541
3542                 $tags = Term::populateTagsFromItem($item);
3543
3544                 $item['tags'] = $tags['tags'];
3545                 $item['hashtags'] = $tags['hashtags'];
3546                 $item['mentions'] = $tags['mentions'];
3547
3548                 // Compile eventual content filter reasons
3549                 $filter_reasons = [];
3550                 if (!$is_preview && public_contact() != $item['author-id']) {
3551                         if (!empty($item['content-warning']) && (!local_user() || !DI::pConfig()->get(local_user(), 'system', 'disable_cw', false))) {
3552                                 $filter_reasons[] = DI::l10n()->t('Content warning: %s', $item['content-warning']);
3553                         }
3554
3555                         $hook_data = [
3556                                 'item' => $item,
3557                                 'filter_reasons' => $filter_reasons
3558                         ];
3559                         Hook::callAll('prepare_body_content_filter', $hook_data);
3560                         $filter_reasons = $hook_data['filter_reasons'];
3561                         unset($hook_data);
3562                 }
3563
3564                 // Update the cached values if there is no "zrl=..." on the links.
3565                 $update = (!Session::isAuthenticated() && ($item["uid"] == 0));
3566
3567                 // Or update it if the current viewer is the intented viewer.
3568                 if (($item["uid"] == local_user()) && ($item["uid"] != 0)) {
3569                         $update = true;
3570                 }
3571
3572                 self::putInCache($item, $update);
3573                 $s = $item["rendered-html"];
3574
3575                 $hook_data = [
3576                         'item' => $item,
3577                         'html' => $s,
3578                         'preview' => $is_preview,
3579                         'filter_reasons' => $filter_reasons
3580                 ];
3581                 Hook::callAll('prepare_body', $hook_data);
3582                 $s = $hook_data['html'];
3583                 unset($hook_data);
3584
3585                 if (!$attach) {
3586                         // Replace the blockquotes with quotes that are used in mails.
3587                         $mailquote = '<blockquote type="cite" class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">';
3588                         $s = str_replace(['<blockquote>', '<blockquote class="spoiler">', '<blockquote class="author">'], [$mailquote, $mailquote, $mailquote], $s);
3589                         return $s;
3590                 }
3591
3592                 $as = '';
3593                 $vhead = false;
3594                 $matches = [];
3595                 preg_match_all('|\[attach\]href=\"(.*?)\" length=\"(.*?)\" type=\"(.*?)\"(?: title=\"(.*?)\")?|', $item['attach'], $matches, PREG_SET_ORDER);
3596                 foreach ($matches as $mtch) {
3597                         $mime = $mtch[3];
3598
3599                         $the_url = Contact::magicLinkById($item['author-id'], $mtch[1]);
3600
3601                         if (strpos($mime, 'video') !== false) {
3602                                 if (!$vhead) {
3603                                         $vhead = true;
3604                                         DI::page()['htmlhead'] .= Renderer::replaceMacros(Renderer::getMarkupTemplate('videos_head.tpl'));
3605                                 }
3606
3607                                 $url_parts = explode('/', $the_url);
3608                                 $id = end($url_parts);
3609                                 $as .= Renderer::replaceMacros(Renderer::getMarkupTemplate('video_top.tpl'), [
3610                                         '$video' => [
3611                                                 'id'     => $id,
3612                                                 'title'  => DI::l10n()->t('View Video'),
3613                                                 'src'    => $the_url,
3614                                                 'mime'   => $mime,
3615                                         ],
3616                                 ]);
3617                         }
3618
3619                         $filetype = strtolower(substr($mime, 0, strpos($mime, '/')));
3620                         if ($filetype) {
3621                                 $filesubtype = strtolower(substr($mime, strpos($mime, '/') + 1));
3622                                 $filesubtype = str_replace('.', '-', $filesubtype);
3623                         } else {
3624                                 $filetype = 'unkn';
3625                                 $filesubtype = 'unkn';
3626                         }
3627
3628                         $title = Strings::escapeHtml(trim(($mtch[4] ?? '') ?: $mtch[1]));
3629                         $title .= ' ' . $mtch[2] . ' ' . DI::l10n()->t('bytes');
3630
3631                         $icon = '<div class="attachtype icon s22 type-' . $filetype . ' subtype-' . $filesubtype . '"></div>';
3632                         $as .= '<a href="' . strip_tags($the_url) . '" title="' . $title . '" class="attachlink" target="_blank" rel="noopener noreferrer" >' . $icon . '</a>';
3633                 }
3634
3635                 if ($as != '') {
3636                         $s .= '<div class="body-attach">'.$as.'<div class="clear"></div></div>';
3637                 }
3638
3639                 // Map.
3640                 if (strpos($s, '<div class="map">') !== false && !empty($item['coord'])) {
3641                         $x = Map::byCoordinates(trim($item['coord']));
3642                         if ($x) {
3643                                 $s = preg_replace('/\<div class\=\"map\"\>/', '$0' . $x, $s);
3644                         }
3645                 }
3646
3647                 // Replace friendica image url size with theme preference.
3648                 if (!empty($a->theme_info['item_image_size'])) {
3649                         $ps = $a->theme_info['item_image_size'];
3650                         $s = preg_replace('|(<img[^>]+src="[^"]+/photo/[0-9a-f]+)-[0-9]|', "$1-" . $ps, $s);
3651                 }
3652
3653                 $s = HTML::applyContentFilter($s, $filter_reasons);
3654
3655                 $hook_data = ['item' => $item, 'html' => $s];
3656                 Hook::callAll('prepare_body_final', $hook_data);
3657
3658                 return $hook_data['html'];
3659         }
3660
3661         /**
3662          * get private link for item
3663          *
3664          * @param array $item
3665          * @return boolean|array False if item has not plink, otherwise array('href'=>plink url, 'title'=>translated title)
3666          * @throws \Exception
3667          */
3668         public static function getPlink($item)
3669         {
3670                 $a = DI::app();
3671
3672                 if ($a->user['nickname'] != "") {
3673                         $ret = [
3674                                 'href' => "display/" . $item['guid'],
3675                                 'orig' => "display/" . $item['guid'],
3676                                 'title' => DI::l10n()->t('View on separate page'),
3677                                 'orig_title' => DI::l10n()->t('view on separate page'),
3678                         ];
3679
3680                         if (!empty($item['plink'])) {
3681                                 $ret["href"] = DI::baseUrl()->remove($item['plink']);
3682                                 $ret["title"] = DI::l10n()->t('link to source');
3683                         }
3684
3685                 } elseif (!empty($item['plink']) && ($item['private'] != 1)) {
3686                         $ret = [
3687                                 'href' => $item['plink'],
3688                                 'orig' => $item['plink'],
3689                                 'title' => DI::l10n()->t('link to source'),
3690                         ];
3691                 } else {
3692                         $ret = [];
3693                 }
3694
3695                 return $ret;
3696         }
3697
3698         /**
3699          * Is the given item array a post that is sent as starting post to a forum?
3700          *
3701          * @param array $item
3702          * @param array $owner
3703          *
3704          * @return boolean "true" when it is a forum post
3705          */
3706         public static function isForumPost(array $item, array $owner = [])
3707         {
3708                 if (empty($owner)) {
3709                         $owner = User::getOwnerDataById($item['uid']);
3710                         if (empty($owner)) {
3711                                 return false;
3712                         }
3713                 }
3714
3715                 if (($item['author-id'] == $item['owner-id']) ||
3716                         ($owner['id'] == $item['contact-id']) ||
3717                         ($item['uri'] != $item['parent-uri']) ||
3718                         $item['origin']) {
3719                         return false;
3720                 }
3721
3722                 return Contact::isForum($item['contact-id']);
3723         }
3724
3725         /**
3726          * Search item id for given URI or plink
3727          *
3728          * @param string $uri
3729          * @param integer $uid
3730          *
3731          * @return integer item id
3732          */
3733         public static function searchByLink($uri, $uid = 0)
3734         {
3735                 $ssl_uri = str_replace('http://', 'https://', $uri);
3736                 $uris = [$uri, $ssl_uri, Strings::normaliseLink($uri)];
3737
3738                 $item = DBA::selectFirst('item', ['id'], ['uri' => $uris, 'uid' => $uid]);
3739                 if (DBA::isResult($item)) {
3740                         return $item['id'];
3741                 }
3742
3743                 $itemcontent = DBA::selectFirst('item-content', ['uri-id'], ['plink' => $uris]);
3744                 if (!DBA::isResult($itemcontent)) {
3745                         return 0;
3746                 }
3747
3748                 $itemuri = DBA::selectFirst('item-uri', ['uri'], ['id' => $itemcontent['uri-id']]);
3749                 if (!DBA::isResult($itemuri)) {
3750                         return 0;
3751                 }
3752
3753                 $item = DBA::selectFirst('item', ['id'], ['uri' => $itemuri['uri'], 'uid' => $uid]);
3754                 if (DBA::isResult($item)) {
3755                         return $item['id'];
3756                 }
3757
3758                 return 0;
3759         }
3760
3761         /**
3762          * Return the URI for a link to the post
3763          *
3764          * @param string $uri URI or link to post
3765          *
3766          * @return string URI
3767          */
3768         public static function getURIByLink(string $uri)
3769         {
3770                 $ssl_uri = str_replace('http://', 'https://', $uri);
3771                 $uris = [$uri, $ssl_uri, Strings::normaliseLink($uri)];
3772
3773                 $item = DBA::selectFirst('item', ['uri'], ['uri' => $uris]);
3774                 if (DBA::isResult($item)) {
3775                         return $item['uri'];
3776                 }
3777
3778                 $itemcontent = DBA::selectFirst('item-content', ['uri-id'], ['plink' => $uris]);
3779                 if (!DBA::isResult($itemcontent)) {
3780                         return '';
3781                 }
3782
3783                 $itemuri = DBA::selectFirst('item-uri', ['uri'], ['id' => $itemcontent['uri-id']]);
3784                 if (DBA::isResult($itemuri)) {
3785                         return $itemuri['uri'];
3786                 }
3787
3788                 return '';
3789         }
3790
3791         /**
3792          * Fetches item for given URI or plink
3793          *
3794          * @param string $uri
3795          * @param integer $uid
3796          *
3797          * @return integer item id
3798          */
3799         public static function fetchByLink($uri, $uid = 0)
3800         {
3801                 $item_id = self::searchByLink($uri, $uid);
3802                 if (!empty($item_id)) {
3803                         return $item_id;
3804                 }
3805
3806                 if ($fetched_uri = ActivityPub\Processor::fetchMissingActivity($uri)) {
3807                         $item_id = self::searchByLink($fetched_uri, $uid);
3808                 } else {
3809                         $item_id = Diaspora::fetchByURL($uri);
3810                 }
3811
3812                 if (!empty($item_id)) {
3813                         return $item_id;
3814                 }
3815
3816                 return 0;
3817         }
3818
3819         /**
3820          * Return share data from an item array (if the item is shared item)
3821          * We are providing the complete Item array, because at some time in the future
3822          * we hopefully will define these values not in the body anymore but in some item fields.
3823          * This function is meant to replace all similar functions in the system.
3824          *
3825          * @param array $item
3826          *
3827          * @return array with share information
3828          */
3829         public static function getShareArray($item)
3830         {
3831                 if (!preg_match("/(.*?)\[share(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism", $item['body'], $matches)) {
3832                         return [];
3833                 }
3834
3835                 $attribute_string = $matches[2];
3836                 $attributes = ['comment' => trim($matches[1]), 'shared' => trim($matches[3])];
3837                 foreach (['author', 'profile', 'avatar', 'guid', 'posted', 'link'] as $field) {
3838                         if (preg_match("/$field=(['\"])(.+?)\\1/ism", $attribute_string, $matches)) {
3839                                 $attributes[$field] = trim(html_entity_decode($matches[2] ?? '', ENT_QUOTES, 'UTF-8'));
3840                         }
3841                 }
3842                 return $attributes;
3843         }
3844
3845         /**
3846          * Fetch item information for shared items from the original items and adds it.
3847          *
3848          * @param array $item
3849          *
3850          * @return array item array with data from the original item
3851          */
3852         public static function addShareDataFromOriginal($item)
3853         {
3854                 $shared = self::getShareArray($item);
3855                 if (empty($shared)) {
3856                         return $item;
3857                 }
3858
3859                 // Real reshares always have got a GUID.
3860                 if (empty($shared['guid'])) {
3861                         return $item;
3862                 }
3863
3864                 $uid = $item['uid'] ?? 0;
3865
3866                 // first try to fetch the item via the GUID. This will work for all reshares that had been created on this system
3867                 $shared_item = self::selectFirst(['title', 'body', 'attach'], ['guid' => $shared['guid'], 'uid' => [0, $uid]]);
3868                 if (!DBA::isResult($shared_item)) {
3869                         // Otherwhise try to find (and possibly fetch) the item via the link. This should work for Diaspora and ActivityPub posts
3870                         $id = self::fetchByLink($shared['link'], $uid);
3871                         if (empty($id)) {
3872                                 Logger::info('Original item not found', ['url' => $shared['link'], 'callstack' => System::callstack()]);
3873                                 return $item;
3874                         }
3875
3876                         $shared_item = self::selectFirst(['title', 'body', 'attach'], ['id' => $id]);
3877                         if (!DBA::isResult($shared_item)) {
3878                                 return $item;
3879                         }
3880                         Logger::info('Got shared data from url', ['url' => $shared['link'], 'callstack' => System::callstack()]);
3881                 } else {
3882                         Logger::info('Got shared data from guid', ['guid' => $shared['guid'], 'callstack' => System::callstack()]);
3883                 }
3884
3885                 if (!empty($shared_item['title'])) {
3886                         $body = '[h3]' . $shared_item['title'] . "[/h3]\n" . $shared_item['body'];
3887                         unset($shared_item['title']);
3888                 } else {
3889                         $body = $shared_item['body'];
3890                 }
3891
3892                 $item['body'] = preg_replace("/\[share ([^\[\]]*)\].*\[\/share\]/ism", '[share $1]' . $body . '[/share]', $item['body']);
3893                 unset($shared_item['body']);
3894
3895                 return array_merge($item, $shared_item);
3896         }
3897 }