src/Model/Item.php

   1 <?php
   2
   3 /**
   4  * @file src/Model/Item.php
   5  */
   6
   7 namespace Friendica\Model;
   8
   9 use Friendica\BaseObject;
  10 use Friendica\Content\Text\BBCode;
  11 use Friendica\Core\Addon;
  12 use Friendica\Core\Config;
  13 use Friendica\Core\Lock;
  14 use Friendica\Core\PConfig;
  15 use Friendica\Core\Protocol;
  16 use Friendica\Core\System;
  17 use Friendica\Core\Worker;
  18 use Friendica\Database\DBA;
  19 use Friendica\Model\Contact;
  20 use Friendica\Model\PermissionSet;
  21 use Friendica\Model\ItemURI;
  22 use Friendica\Object\Image;
  23 use Friendica\Protocol\Diaspora;
  24 use Friendica\Protocol\OStatus;
  25 use Friendica\Util\DateTimeFormat;
  26 use Friendica\Util\XML;
  27 use Friendica\Util\Security;
  28 use Text_LanguageDetect;
  29
  30 require_once 'boot.php';
  31 require_once 'include/items.php';
  32 require_once 'include/text.php';
  33
  34 class Item extends BaseObject
  35 {
  36         // Posting types, inspired by https://www.w3.org/TR/activitystreams-vocabulary/#object-types
  37         const PT_ARTICLE = 0;
  38         const PT_NOTE = 1;
  39         const PT_PAGE = 2;
  40         const PT_IMAGE = 16;
  41         const PT_AUDIO = 17;
  42         const PT_VIDEO = 18;
  43         const PT_DOCUMENT = 19;
  44         const PT_EVENT = 32;
  45         const PT_PERSONAL_NOTE = 128;
  46
  47         // Field list that is used to display the items
  48         const DISPLAY_FIELDLIST = ['uid', 'id', 'parent', 'uri', 'thr-parent', 'parent-uri', 'guid', 'network',
  49                         'commented', 'created', 'edited', 'received', 'verb', 'object-type', 'postopts', 'plink',
  50                         'wall', 'private', 'starred', 'origin', 'title', 'body', 'file', 'attach', 'language',
  51                         'content-warning', 'location', 'coord', 'app', 'rendered-hash', 'rendered-html', 'object',
  52                         'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'item_id',
  53                         'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
  54                         'owner-id', 'owner-link', 'owner-name', 'owner-avatar', 'owner-network',
  55                         'contact-id', 'contact-link', 'contact-name', 'contact-avatar',
  56                         'writable', 'self', 'cid', 'alias',
  57                         'event-id', 'event-created', 'event-edited', 'event-start', 'event-finish',
  58                         'event-summary', 'event-desc', 'event-location', 'event-type',
  59                         'event-nofinish', 'event-adjust', 'event-ignore', 'event-id'];
  60
  61         // Field list that is used to deliver items via the protocols
  62         const DELIVER_FIELDLIST = ['uid', 'id', 'parent', 'uri', 'thr-parent', 'parent-uri', 'guid',
  63                         'created', 'edited', 'verb', 'object-type', 'object', 'target',
  64                         'private', 'title', 'body', 'location', 'coord', 'app',
  65                         'attach', 'tag', 'deleted', 'extid', 'post-type',
  66                         'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
  67                         'author-id', 'author-link', 'owner-link', 'contact-uid',
  68                         'signed_text', 'signature', 'signer', 'network'];
  69
  70         // Field list for "item-content" table that is mixed with the item table
  71         const MIXED_CONTENT_FIELDLIST = ['title', 'content-warning', 'body', 'location',
  72                         'coord', 'app', 'rendered-hash', 'rendered-html', 'verb',
  73                         'object-type', 'object', 'target-type', 'target', 'plink'];
  74
  75         // Field list for "item-content" table that is not present in the "item" table
  76         const CONTENT_FIELDLIST = ['language'];
  77
  78         // Field list for additional delivery data
  79         const DELIVERY_DATA_FIELDLIST = ['postopts', 'inform'];
  80
  81         // All fields in the item table
  82         const ITEM_FIELDLIST = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent', 'guid',
  83                         'contact-id', 'type', 'wall', 'gravity', 'extid', 'icid', 'iaid', 'psid',
  84                         'created', 'edited', 'commented', 'received', 'changed', 'verb',
  85                         'postopts', 'plink', 'resource-id', 'event-id', 'tag', 'attach', 'inform',
  86                         'file', 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'post-type',
  87                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
  88                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global', 'network',
  89                         'title', 'content-warning', 'body', 'location', 'coord', 'app',
  90                         'rendered-hash', 'rendered-html', 'object-type', 'object', 'target-type', 'target',
  91                         'author-id', 'author-link', 'author-name', 'author-avatar',
  92                         'owner-id', 'owner-link', 'owner-name', 'owner-avatar'];
  93
  94         // Never reorder or remove entries from this list. Just add new ones at the end, if needed.
  95         // The item-activity table only stores the index and needs this array to know the matching activity.
  96         const ACTIVITIES = [ACTIVITY_LIKE, ACTIVITY_DISLIKE, ACTIVITY_ATTEND, ACTIVITY_ATTENDNO, ACTIVITY_ATTENDMAYBE];
  97
  98         private static $legacy_mode = null;
  99
 100         public static function isLegacyMode()
 101         {
 102                 if (is_null(self::$legacy_mode)) {
 103                         self::$legacy_mode = (Config::get("system", "post_update_version") < 1279);
 104                 }
 105
 106                 return self::$legacy_mode;
 107         }
 108
 109         /**
 110          * @brief returns an activity index from an activity string
 111          *
 112          * @param string $activity activity string
 113          * @return integer Activity index
 114          */
 115         public static function activityToIndex($activity)
 116         {
 117                 $index = array_search($activity, self::ACTIVITIES);
 118
 119                 if (is_bool($index)) {
 120                         $index = -1;
 121                 }
 122
 123                 return $index;
 124         }
 125
 126         /**
 127          * @brief returns an activity string from an activity index
 128          *
 129          * @param integer $index activity index
 130          * @return string Activity string
 131          */
 132         private static function indexToActivity($index)
 133         {
 134                 if (is_null($index) || !array_key_exists($index, self::ACTIVITIES)) {
 135                         return '';
 136                 }
 137
 138                 return self::ACTIVITIES[$index];
 139         }
 140
 141         /**
 142          * @brief Fetch a single item row
 143          *
 144          * @param mixed $stmt statement object
 145          * @return array current row
 146          */
 147         public static function fetch($stmt)
 148         {
 149                 $row = DBA::fetch($stmt);
 150
 151                 if (is_bool($row)) {
 152                         return $row;
 153                 }
 154
 155                 // ---------------------- Transform item structure data ----------------------
 156
 157                 // We prefer the data from the user's contact over the public one
 158                 if (!empty($row['author-link']) && !empty($row['contact-link']) &&
 159                         ($row['author-link'] == $row['contact-link'])) {
 160                         if (isset($row['author-avatar']) && !empty($row['contact-avatar'])) {
 161                                 $row['author-avatar'] = $row['contact-avatar'];
 162                         }
 163                         if (isset($row['author-name']) && !empty($row['contact-name'])) {
 164                                 $row['author-name'] = $row['contact-name'];
 165                         }
 166                 }
 167
 168                 if (!empty($row['owner-link']) && !empty($row['contact-link']) &&
 169                         ($row['owner-link'] == $row['contact-link'])) {
 170                         if (isset($row['owner-avatar']) && !empty($row['contact-avatar'])) {
 171                                 $row['owner-avatar'] = $row['contact-avatar'];
 172                         }
 173                         if (isset($row['owner-name']) && !empty($row['contact-name'])) {
 174                                 $row['owner-name'] = $row['contact-name'];
 175                         }
 176                 }
 177
 178                 // We can always comment on posts from these networks
 179                 if (array_key_exists('writable', $row) &&
 180                         in_array($row['internal-network'], [Protocol::ACTIVITYPUB, Protocol::DFRN, Protocol::DIASPORA, Protocol::OSTATUS])) {
 181                         $row['writable'] = true;
 182                 }
 183
 184                 // ---------------------- Transform item content data ----------------------
 185
 186                 // Fetch data from the item-content table whenever there is content there
 187                 if (self::isLegacyMode()) {
 188                         $legacy_fields = array_merge(self::DELIVERY_DATA_FIELDLIST, self::MIXED_CONTENT_FIELDLIST);
 189                         foreach ($legacy_fields as $field) {
 190                                 if (empty($row[$field]) && !empty($row['internal-item-' . $field])) {
 191                                         $row[$field] = $row['internal-item-' . $field];
 192                                 }
 193                                 unset($row['internal-item-' . $field]);
 194                         }
 195                 }
 196
 197                 if (!empty($row['internal-iaid']) && array_key_exists('verb', $row)) {
 198                         $row['verb'] = self::indexToActivity($row['internal-activity']);
 199                         if (array_key_exists('title', $row)) {
 200                                 $row['title'] = '';
 201                         }
 202                         if (array_key_exists('body', $row)) {
 203                                 $row['body'] = $row['verb'];
 204                         }
 205                         if (array_key_exists('object', $row)) {
 206                                 $row['object'] = '';
 207                         }
 208                         if (array_key_exists('object-type', $row)) {
 209                                 $row['object-type'] = ACTIVITY_OBJ_NOTE;
 210                         }
 211                 } elseif (array_key_exists('verb', $row) && in_array($row['verb'], ['', ACTIVITY_POST, ACTIVITY_SHARE])) {
 212                         // Posts don't have an object or target - but having tags or files.
 213                         // We safe some performance by building tag and file strings only here.
 214                         // We remove object and target since they aren't used for this type.
 215                         if (array_key_exists('object', $row)) {
 216                                 $row['object'] = '';
 217                         }
 218                         if (array_key_exists('target', $row)) {
 219                                 $row['target'] = '';
 220                         }
 221                 }
 222
 223                 if (!array_key_exists('verb', $row) || in_array($row['verb'], ['', ACTIVITY_POST, ACTIVITY_SHARE])) {
 224                         // Build the tag string out of the term entries
 225                         if (array_key_exists('tag', $row) && empty($row['tag'])) {
 226                                 $row['tag'] = Term::tagTextFromItemId($row['internal-iid']);
 227                         }
 228
 229                         // Build the file string out of the term entries
 230                         if (array_key_exists('file', $row) && empty($row['file'])) {
 231                                 $row['file'] = Term::fileTextFromItemId($row['internal-iid']);
 232                         }
 233                 }
 234
 235                 if (array_key_exists('signed_text', $row) && array_key_exists('interaction', $row) && !is_null($row['interaction'])) {
 236                         $row['signed_text'] = $row['interaction'];
 237                 }
 238
 239                 if (array_key_exists('ignored', $row) && array_key_exists('internal-user-ignored', $row) && !is_null($row['internal-user-ignored'])) {
 240                         $row['ignored'] = $row['internal-user-ignored'];
 241                 }
 242
 243                 // Remove internal fields
 244                 unset($row['internal-activity']);
 245                 unset($row['internal-network']);
 246                 unset($row['internal-iid']);
 247                 unset($row['internal-iaid']);
 248                 unset($row['internal-icid']);
 249                 unset($row['internal-user-ignored']);
 250                 unset($row['interaction']);
 251
 252                 return $row;
 253         }
 254
 255         /**
 256          * @brief Fills an array with data from an item query
 257          *
 258          * @param object $stmt statement object
 259          * @return array Data array
 260          */
 261         public static function inArray($stmt, $do_close = true) {
 262                 if (is_bool($stmt)) {
 263                         return $stmt;
 264                 }
 265
 266                 $data = [];
 267                 while ($row = self::fetch($stmt)) {
 268                         $data[] = $row;
 269                 }
 270                 if ($do_close) {
 271                         DBA::close($stmt);
 272                 }
 273                 return $data;
 274         }
 275
 276         /**
 277          * @brief Check if item data exists
 278          *
 279          * @param array $condition array of fields for condition
 280          *
 281          * @return boolean Are there rows for that condition?
 282          */
 283         public static function exists($condition) {
 284                 $stmt = self::select(['id'], $condition, ['limit' => 1]);
 285
 286                 if (is_bool($stmt)) {
 287                         $retval = $stmt;
 288                 } else {
 289                         $retval = (DBA::numRows($stmt) > 0);
 290                 }
 291
 292                 DBA::close($stmt);
 293
 294                 return $retval;
 295         }
 296
 297         /**
 298          * Retrieve a single record from the item table for a given user and returns it in an associative array
 299          *
 300          * @brief Retrieve a single record from a table
 301          * @param integer $uid User ID
 302          * @param array  $fields
 303          * @param array  $condition
 304          * @param array  $params
 305          * @return bool|array
 306          * @see DBA::select
 307          */
 308         public static function selectFirstForUser($uid, array $selected = [], array $condition = [], $params = [])
 309         {
 310                 $params['uid'] = $uid;
 311
 312                 if (empty($selected)) {
 313                         $selected = Item::DISPLAY_FIELDLIST;
 314                 }
 315
 316                 return self::selectFirst($selected, $condition, $params);
 317         }
 318
 319         /**
 320          * @brief Select rows from the item table for a given user
 321          *
 322          * @param integer $uid User ID
 323          * @param array  $selected  Array of selected fields, empty for all
 324          * @param array  $condition Array of fields for condition
 325          * @param array  $params    Array of several parameters
 326          *
 327          * @return boolean|object
 328          */
 329         public static function selectForUser($uid, array $selected = [], array $condition = [], $params = [])
 330         {
 331                 $params['uid'] = $uid;
 332
 333                 if (empty($selected)) {
 334                         $selected = Item::DISPLAY_FIELDLIST;
 335                 }
 336
 337                 return self::select($selected, $condition, $params);
 338         }
 339
 340         /**
 341          * Retrieve a single record from the item table and returns it in an associative array
 342          *
 343          * @brief Retrieve a single record from a table
 344          * @param array  $fields
 345          * @param array  $condition
 346          * @param array  $params
 347          * @return bool|array
 348          * @see DBA::select
 349          */
 350         public static function selectFirst(array $fields = [], array $condition = [], $params = [])
 351         {
 352                 $params['limit'] = 1;
 353
 354                 $result = self::select($fields, $condition, $params);
 355
 356                 if (is_bool($result)) {
 357                         return $result;
 358                 } else {
 359                         $row = self::fetch($result);
 360                         DBA::close($result);
 361                         return $row;
 362                 }
 363         }
 364
 365         /**
 366          * @brief Select rows from the item table
 367          *
 368          * @param array  $selected  Array of selected fields, empty for all
 369          * @param array  $condition Array of fields for condition
 370          * @param array  $params    Array of several parameters
 371          *
 372          * @return boolean|object
 373          */
 374         public static function select(array $selected = [], array $condition = [], $params = [])
 375         {
 376                 $uid = 0;
 377                 $usermode = false;
 378
 379                 if (isset($params['uid'])) {
 380                         $uid = $params['uid'];
 381                         $usermode = true;
 382                 }
 383
 384                 $fields = self::fieldlist($usermode);
 385
 386                 $select_fields = self::constructSelectFields($fields, $selected);
 387
 388                 $condition_string = DBA::buildCondition($condition);
 389
 390                 $condition_string = self::addTablesToFields($condition_string, $fields);
 391
 392                 if ($usermode) {
 393                         $condition_string = $condition_string . ' AND ' . self::condition(false);
 394                 }
 395
 396                 $param_string = self::addTablesToFields(DBA::buildParameter($params), $fields);
 397
 398                 $table = "`item` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, false, $usermode);
 399
 400                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 401
 402                 return DBA::p($sql, $condition);
 403         }
 404
 405         /**
 406          * @brief Select rows from the starting post in the item table
 407          *
 408          * @param integer $uid User ID
 409          * @param array  $fields    Array of selected fields, empty for all
 410          * @param array  $condition Array of fields for condition
 411          * @param array  $params    Array of several parameters
 412          *
 413          * @return boolean|object
 414          */
 415         public static function selectThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 416         {
 417                 $params['uid'] = $uid;
 418
 419                 if (empty($selected)) {
 420                         $selected = Item::DISPLAY_FIELDLIST;
 421                 }
 422
 423                 return self::selectThread($selected, $condition, $params);
 424         }
 425
 426         /**
 427          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 428          *
 429          * @brief Retrieve a single record from a table
 430          * @param integer $uid User ID
 431          * @param array  $selected
 432          * @param array  $condition
 433          * @param array  $params
 434          * @return bool|array
 435          * @see DBA::select
 436          */
 437         public static function selectFirstThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 438         {
 439                 $params['uid'] = $uid;
 440
 441                 if (empty($selected)) {
 442                         $selected = Item::DISPLAY_FIELDLIST;
 443                 }
 444
 445                 return self::selectFirstThread($selected, $condition, $params);
 446         }
 447
 448         /**
 449          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 450          *
 451          * @brief Retrieve a single record from a table
 452          * @param array  $fields
 453          * @param array  $condition
 454          * @param array  $params
 455          * @return bool|array
 456          * @see DBA::select
 457          */
 458         public static function selectFirstThread(array $fields = [], array $condition = [], $params = [])
 459         {
 460                 $params['limit'] = 1;
 461                 $result = self::selectThread($fields, $condition, $params);
 462
 463                 if (is_bool($result)) {
 464                         return $result;
 465                 } else {
 466                         $row = self::fetch($result);
 467                         DBA::close($result);
 468                         return $row;
 469                 }
 470         }
 471
 472         /**
 473          * @brief Select rows from the starting post in the item table
 474          *
 475          * @param array  $selected  Array of selected fields, empty for all
 476          * @param array  $condition Array of fields for condition
 477          * @param array  $params    Array of several parameters
 478          *
 479          * @return boolean|object
 480          */
 481         public static function selectThread(array $selected = [], array $condition = [], $params = [])
 482         {
 483                 $uid = 0;
 484                 $usermode = false;
 485
 486                 if (isset($params['uid'])) {
 487                         $uid = $params['uid'];
 488                         $usermode = true;
 489                 }
 490
 491                 $fields = self::fieldlist($usermode);
 492
 493                 $fields['thread'] = ['mention', 'ignored', 'iid'];
 494
 495                 $threadfields = ['thread' => ['iid', 'uid', 'contact-id', 'owner-id', 'author-id',
 496                         'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private',
 497                         'pubmail', 'moderated', 'visible', 'starred', 'ignored', 'post-type',
 498                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'network']];
 499
 500                 $select_fields = self::constructSelectFields($fields, $selected);
 501
 502                 $condition_string = DBA::buildCondition($condition);
 503
 504                 $condition_string = self::addTablesToFields($condition_string, $threadfields);
 505                 $condition_string = self::addTablesToFields($condition_string, $fields);
 506
 507                 if ($usermode) {
 508                         $condition_string = $condition_string . ' AND ' . self::condition(true);
 509                 }
 510
 511                 $param_string = DBA::buildParameter($params);
 512                 $param_string = self::addTablesToFields($param_string, $threadfields);
 513                 $param_string = self::addTablesToFields($param_string, $fields);
 514
 515                 $table = "`thread` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, true, $usermode);
 516
 517                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 518
 519                 return DBA::p($sql, $condition);
 520         }
 521
 522         /**
 523          * @brief Returns a list of fields that are associated with the item table
 524          *
 525          * @return array field list
 526          */
 527         private static function fieldlist($usermode)
 528         {
 529                 $fields = [];
 530
 531                 $fields['item'] = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent', 'guid',
 532                         'contact-id', 'owner-id', 'author-id', 'type', 'wall', 'gravity', 'extid',
 533                         'created', 'edited', 'commented', 'received', 'changed', 'psid',
 534                         'resource-id', 'event-id', 'tag', 'attach', 'post-type', 'file',
 535                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 536                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global',
 537                         'id' => 'item_id', 'network', 'icid', 'iaid', 'id' => 'internal-iid',
 538                         'network' => 'internal-network', 'icid' => 'internal-icid',
 539                         'iaid' => 'internal-iaid'];
 540
 541                 if ($usermode) {
 542                         $fields['user-item'] = ['ignored' => 'internal-user-ignored'];
 543                 }
 544
 545                 $fields['item-activity'] = ['activity', 'activity' => 'internal-activity'];
 546
 547                 $fields['item-content'] = array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST);
 548
 549                 $fields['item-delivery-data'] = self::DELIVERY_DATA_FIELDLIST;
 550
 551                 $fields['permissionset'] = ['allow_cid', 'allow_gid', 'deny_cid', 'deny_gid'];
 552
 553                 $fields['author'] = ['url' => 'author-link', 'name' => 'author-name',
 554                         'thumb' => 'author-avatar', 'nick' => 'author-nick', 'network' => 'author-network'];
 555
 556                 $fields['owner'] = ['url' => 'owner-link', 'name' => 'owner-name',
 557                         'thumb' => 'owner-avatar', 'nick' => 'owner-nick', 'network' => 'owner-network'];
 558
 559                 $fields['contact'] = ['url' => 'contact-link', 'name' => 'contact-name', 'thumb' => 'contact-avatar',
 560                         'writable', 'self', 'id' => 'cid', 'alias', 'uid' => 'contact-uid',
 561                         'photo', 'name-date', 'uri-date', 'avatar-date', 'thumb', 'dfrn-id'];
 562
 563                 $fields['parent-item'] = ['guid' => 'parent-guid', 'network' => 'parent-network'];
 564
 565                 $fields['parent-item-author'] = ['url' => 'parent-author-link', 'name' => 'parent-author-name'];
 566
 567                 $fields['event'] = ['created' => 'event-created', 'edited' => 'event-edited',
 568                         'start' => 'event-start','finish' => 'event-finish',
 569                         'summary' => 'event-summary','desc' => 'event-desc',
 570                         'location' => 'event-location', 'type' => 'event-type',
 571                         'nofinish' => 'event-nofinish','adjust' => 'event-adjust',
 572                         'ignore' => 'event-ignore', 'id' => 'event-id'];
 573
 574                 $fields['sign'] = ['signed_text', 'signature', 'signer'];
 575
 576                 $fields['diaspora-interaction'] = ['interaction'];
 577
 578                 return $fields;
 579         }
 580
 581         /**
 582          * @brief Returns SQL condition for the "select" functions
 583          *
 584          * @param boolean $thread_mode Called for the items (false) or for the threads (true)
 585          *
 586          * @return string SQL condition
 587          */
 588         private static function condition($thread_mode)
 589         {
 590                 if ($thread_mode) {
 591                         $master_table = "`thread`";
 592                 } else {
 593                         $master_table = "`item`";
 594                 }
 595                 return sprintf("$master_table.`visible` AND NOT $master_table.`deleted` AND NOT $master_table.`moderated`
 596                         AND (`user-item`.`hidden` IS NULL OR NOT `user-item`.`hidden`)
 597                         AND (`user-author`.`blocked` IS NULL OR NOT `user-author`.`blocked`)
 598                         AND (`user-author`.`ignored` IS NULL OR NOT `user-author`.`ignored` OR `item`.`gravity` != %d)
 599                         AND (`user-owner`.`blocked` IS NULL OR NOT `user-owner`.`blocked`)
 600                         AND (`user-owner`.`ignored` IS NULL OR NOT `user-owner`.`ignored` OR `item`.`gravity` != %d) ",
 601                         GRAVITY_PARENT, GRAVITY_PARENT);
 602         }
 603
 604         /**
 605          * @brief Returns all needed "JOIN" commands for the "select" functions
 606          *
 607          * @param integer $uid User ID
 608          * @param string $sql_commands The parts of the built SQL commands in the "select" functions
 609          * @param boolean $thread_mode Called for the items (false) or for the threads (true)
 610          *
 611          * @return string The SQL joins for the "select" functions
 612          */
 613         private static function constructJoins($uid, $sql_commands, $thread_mode, $user_mode)
 614         {
 615                 if ($thread_mode) {
 616                         $master_table = "`thread`";
 617                         $master_table_key = "`thread`.`iid`";
 618                         $joins = "STRAIGHT_JOIN `item` ON `item`.`id` = `thread`.`iid` ";
 619                 } else {
 620                         $master_table = "`item`";
 621                         $master_table_key = "`item`.`id`";
 622                         $joins = '';
 623                 }
 624
 625                 if ($user_mode) {
 626                         $joins .= sprintf("STRAIGHT_JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`
 627                                 AND NOT `contact`.`blocked`
 628                                 AND ((NOT `contact`.`readonly` AND NOT `contact`.`pending` AND (`contact`.`rel` IN (%s, %s)))
 629                                 OR `contact`.`self` OR `item`.`gravity` != %d OR `contact`.`uid` = 0)
 630                                 STRAIGHT_JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id` AND NOT `author`.`blocked`
 631                                 STRAIGHT_JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id` AND NOT `owner`.`blocked`
 632                                 LEFT JOIN `user-item` ON `user-item`.`iid` = $master_table_key AND `user-item`.`uid` = %d
 633                                 LEFT JOIN `user-contact` AS `user-author` ON `user-author`.`cid` = $master_table.`author-id` AND `user-author`.`uid` = %d
 634                                 LEFT JOIN `user-contact` AS `user-owner` ON `user-owner`.`cid` = $master_table.`owner-id` AND `user-owner`.`uid` = %d",
 635                                 Contact::SHARING, Contact::FRIEND, GRAVITY_PARENT, intval($uid), intval($uid), intval($uid));
 636                 } else {
 637                         if (strpos($sql_commands, "`contact`.") !== false) {
 638                                 $joins .= "LEFT JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`";
 639                         }
 640                         if (strpos($sql_commands, "`author`.") !== false) {
 641                                 $joins .= " LEFT JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id`";
 642                         }
 643                         if (strpos($sql_commands, "`owner`.") !== false) {
 644                                 $joins .= " LEFT JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id`";
 645                         }
 646                 }
 647
 648                 if (strpos($sql_commands, "`group_member`.") !== false) {
 649                         $joins .= " STRAIGHT_JOIN `group_member` ON `group_member`.`contact-id` = $master_table.`contact-id`";
 650                 }
 651
 652                 if (strpos($sql_commands, "`user`.") !== false) {
 653                         $joins .= " STRAIGHT_JOIN `user` ON `user`.`uid` = $master_table.`uid`";
 654                 }
 655
 656                 if (strpos($sql_commands, "`event`.") !== false) {
 657                         $joins .= " LEFT JOIN `event` ON `event-id` = `event`.`id`";
 658                 }
 659
 660                 if (strpos($sql_commands, "`sign`.") !== false) {
 661                         $joins .= " LEFT JOIN `sign` ON `sign`.`iid` = `item`.`id`";
 662                 }
 663
 664                 if (strpos($sql_commands, "`diaspora-interaction`.") !== false) {
 665                         $joins .= " LEFT JOIN `diaspora-interaction` ON `diaspora-interaction`.`uri-id` = `item`.`uri-id`";
 666                 }
 667
 668                 if (strpos($sql_commands, "`item-activity`.") !== false) {
 669                         $joins .= " LEFT JOIN `item-activity` ON `item-activity`.`uri-id` = `item`.`uri-id`";
 670                 }
 671
 672                 if (strpos($sql_commands, "`item-content`.") !== false) {
 673                         $joins .= " LEFT JOIN `item-content` ON `item-content`.`uri-id` = `item`.`uri-id`";
 674                 }
 675
 676                 if (strpos($sql_commands, "`item-delivery-data`.") !== false) {
 677                         $joins .= " LEFT JOIN `item-delivery-data` ON `item-delivery-data`.`iid` = `item`.`id`";
 678                 }
 679
 680                 if (strpos($sql_commands, "`permissionset`.") !== false) {
 681                         $joins .= " LEFT JOIN `permissionset` ON `permissionset`.`id` = `item`.`psid`";
 682                 }
 683
 684                 if ((strpos($sql_commands, "`parent-item`.") !== false) || (strpos($sql_commands, "`parent-author`.") !== false)) {
 685                         $joins .= " STRAIGHT_JOIN `item` AS `parent-item` ON `parent-item`.`id` = `item`.`parent`";
 686                 }
 687
 688                 if (strpos($sql_commands, "`parent-item-author`.") !== false) {
 689                         $joins .= " STRAIGHT_JOIN `contact` AS `parent-item-author` ON `parent-item-author`.`id` = `parent-item`.`author-id`";
 690                 }
 691
 692                 return $joins;
 693         }
 694
 695         /**
 696          * @brief Add the field list for the "select" functions
 697          *
 698          * @param array $fields The field definition array
 699          * @param array $selected The array with the selected fields from the "select" functions
 700          *
 701          * @return string The field list
 702          */
 703         private static function constructSelectFields($fields, $selected)
 704         {
 705                 if (!empty($selected)) {
 706                         $selected[] = 'internal-iid';
 707                         $selected[] = 'internal-iaid';
 708                         $selected[] = 'internal-icid';
 709                         $selected[] = 'internal-network';
 710                 }
 711
 712                 if (in_array('verb', $selected)) {
 713                         $selected[] = 'internal-activity';
 714                 }
 715
 716                 if (in_array('ignored', $selected)) {
 717                         $selected[] = 'internal-user-ignored';
 718                 }
 719
 720                 if (in_array('signed_text', $selected)) {
 721                         $selected[] = 'interaction';
 722                 }
 723
 724                 $selection = [];
 725                 foreach ($fields as $table => $table_fields) {
 726                         foreach ($table_fields as $field => $select) {
 727                                 if (empty($selected) || in_array($select, $selected)) {
 728                                         $legacy_fields = array_merge(self::DELIVERY_DATA_FIELDLIST, self::MIXED_CONTENT_FIELDLIST);
 729                                         if (self::isLegacyMode() && in_array($select, $legacy_fields)) {
 730                                                 $selection[] = "`item`.`".$select."` AS `internal-item-" . $select . "`";
 731                                         }
 732                                         if (is_int($field)) {
 733                                                 $selection[] = "`" . $table . "`.`" . $select . "`";
 734                                         } else {
 735                                                 $selection[] = "`" . $table . "`.`" . $field . "` AS `" . $select . "`";
 736                                         }
 737                                 }
 738                         }
 739                 }
 740                 return implode(", ", $selection);
 741         }
 742
 743         /**
 744          * @brief add table definition to fields in an SQL query
 745          *
 746          * @param string $query SQL query
 747          * @param array $fields The field definition array
 748          *
 749          * @return string the changed SQL query
 750          */
 751         private static function addTablesToFields($query, $fields)
 752         {
 753                 foreach ($fields as $table => $table_fields) {
 754                         foreach ($table_fields as $alias => $field) {
 755                                 if (is_int($alias)) {
 756                                         $replace_field = $field;
 757                                 } else {
 758                                         $replace_field = $alias;
 759                                 }
 760
 761                                 $search = "/([^\.])`" . $field . "`/i";
 762                                 $replace = "$1`" . $table . "`.`" . $replace_field . "`";
 763                                 $query = preg_replace($search, $replace, $query);
 764                         }
 765                 }
 766                 return $query;
 767         }
 768
 769         /**
 770          * @brief Update existing item entries
 771          *
 772          * @param array $fields The fields that are to be changed
 773          * @param array $condition The condition for finding the item entries
 774          *
 775          * In the future we may have to change permissions as well.
 776          * Then we had to add the user id as third parameter.
 777          *
 778          * A return value of "0" doesn't mean an error - but that 0 rows had been changed.
 779          *
 780          * @return integer|boolean number of affected rows - or "false" if there was an error
 781          */
 782         public static function update(array $fields, array $condition)
 783         {
 784                 if (empty($condition) || empty($fields)) {
 785                         return false;
 786                 }
 787
 788                 // To ensure the data integrity we do it in an transaction
 789                 DBA::transaction();
 790
 791                 // We cannot simply expand the condition to check for origin entries
 792                 // The condition needn't to be a simple array but could be a complex condition.
 793                 // And we have to execute this query before the update to ensure to fetch the same data.
 794                 $items = DBA::select('item', ['id', 'origin', 'uri', 'uri-id', 'iaid', 'icid', 'tag', 'file'], $condition);
 795
 796                 $content_fields = [];
 797                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
 798                         if (isset($fields[$field])) {
 799                                 $content_fields[$field] = $fields[$field];
 800                                 if (in_array($field, self::CONTENT_FIELDLIST) || !self::isLegacyMode()) {
 801                                         unset($fields[$field]);
 802                                 } else {
 803                                         $fields[$field] = null;
 804                                 }
 805                         }
 806                 }
 807
 808                 $clear_fields = ['bookmark', 'type', 'author-name', 'author-avatar', 'author-link', 'owner-name', 'owner-avatar', 'owner-link'];
 809                 foreach ($clear_fields as $field) {
 810                         if (array_key_exists($field, $fields)) {
 811                                 $fields[$field] = null;
 812                         }
 813                 }
 814
 815                 if (array_key_exists('tag', $fields)) {
 816                         $tags = $fields['tag'];
 817                         $fields['tag'] = null;
 818                 } else {
 819                         $tags = null;
 820                 }
 821
 822                 if (array_key_exists('file', $fields)) {
 823                         $files = $fields['file'];
 824                         $fields['file'] = null;
 825                 } else {
 826                         $files = '';
 827                 }
 828
 829                 $delivery_data = ['postopts' => defaults($fields, 'postopts', ''),
 830                         'inform' => defaults($fields, 'inform', '')];
 831
 832                 $fields['postopts'] = null;
 833                 $fields['inform'] = null;
 834
 835                 if (!empty($fields)) {
 836                         $success = DBA::update('item', $fields, $condition);
 837
 838                         if (!$success) {
 839                                 DBA::close($items);
 840                                 DBA::rollback();
 841                                 return false;
 842                         }
 843                 }
 844
 845                 // When there is no content for the "old" item table, this will count the fetched items
 846                 $rows = DBA::affectedRows();
 847
 848                 while ($item = DBA::fetch($items)) {
 849                         if (!empty($item['iaid']) || (!empty($content_fields['verb']) && (self::activityToIndex($content_fields['verb']) >= 0))) {
 850                                 self::updateActivity($content_fields, ['uri-id' => $item['uri-id']]);
 851
 852                                 if (empty($item['iaid'])) {
 853                                         $item_activity = DBA::selectFirst('item-activity', ['id'], ['uri-id' => $item['uri-id']]);
 854                                         if (DBA::isResult($item_activity)) {
 855                                                 $item_fields = ['iaid' => $item_activity['id'], 'icid' => null];
 856                                                 foreach (self::MIXED_CONTENT_FIELDLIST as $field) {
 857                                                         if (self::isLegacyMode()) {
 858                                                                 $item_fields[$field] = null;
 859                                                         } else {
 860                                                                 unset($item_fields[$field]);
 861                                                         }
 862                                                 }
 863                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
 864
 865                                                 if (!empty($item['icid']) && !DBA::exists('item', ['icid' => $item['icid']])) {
 866                                                         DBA::delete('item-content', ['id' => $item['icid']]);
 867                                                 }
 868                                         }
 869                                 } elseif (!empty($item['icid'])) {
 870                                         DBA::update('item', ['icid' => null], ['id' => $item['id']]);
 871
 872                                         if (!DBA::exists('item', ['icid' => $item['icid']])) {
 873                                                 DBA::delete('item-content', ['id' => $item['icid']]);
 874                                         }
 875                                 }
 876                         } else {
 877                                 self::updateContent($content_fields, ['uri-id' => $item['uri-id']]);
 878
 879                                 if (empty($item['icid'])) {
 880                                         $item_content = DBA::selectFirst('item-content', [], ['uri-id' => $item['uri-id']]);
 881                                         if (DBA::isResult($item_content)) {
 882                                                 $item_fields = ['icid' => $item_content['id']];
 883                                                 // Clear all fields in the item table that have a content in the item-content table
 884                                                 foreach ($item_content as $field => $content) {
 885                                                         if (in_array($field, self::MIXED_CONTENT_FIELDLIST) && !empty($item_content[$field])) {
 886                                                                 if (self::isLegacyMode()) {
 887                                                                         $item_fields[$field] = null;
 888                                                                 } else {
 889                                                                         unset($item_fields[$field]);
 890                                                                 }
 891                                                         }
 892                                                 }
 893                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
 894                                         }
 895                                 }
 896                         }
 897
 898                         if (!is_null($tags)) {
 899                                 Term::insertFromTagFieldByItemId($item['id'], $tags);
 900                                 if (!empty($item['tag'])) {
 901                                         DBA::update('item', ['tag' => ''], ['id' => $item['id']]);
 902                                 }
 903                         }
 904
 905                         if (!empty($files)) {
 906                                 Term::insertFromFileFieldByItemId($item['id'], $files);
 907                                 if (!empty($item['file'])) {
 908                                         DBA::update('item', ['file' => ''], ['id' => $item['id']]);
 909                                 }
 910                         }
 911
 912                         self::updateDeliveryData($item['id'], $delivery_data);
 913
 914                         self::updateThread($item['id']);
 915
 916                         // We only need to notfiy others when it is an original entry from us.
 917                         // Only call the notifier when the item has some content relevant change.
 918                         if ($item['origin'] && in_array('edited', array_keys($fields))) {
 919                                 Worker::add(PRIORITY_HIGH, "Notifier", 'edit_post', $item['id']);
 920                         }
 921                 }
 922
 923                 DBA::close($items);
 924                 DBA::commit();
 925                 return $rows;
 926         }
 927
 928         /**
 929          * @brief Delete an item and notify others about it - if it was ours
 930          *
 931          * @param array $condition The condition for finding the item entries
 932          * @param integer $priority Priority for the notification
 933          */
 934         public static function delete($condition, $priority = PRIORITY_HIGH)
 935         {
 936                 $items = self::select(['id'], $condition);
 937                 while ($item = self::fetch($items)) {
 938                         self::deleteById($item['id'], $priority);
 939                 }
 940                 DBA::close($items);
 941         }
 942
 943         /**
 944          * @brief Delete an item for an user and notify others about it - if it was ours
 945          *
 946          * @param array $condition The condition for finding the item entries
 947          * @param integer $uid User who wants to delete this item
 948          */
 949         public static function deleteForUser($condition, $uid)
 950         {
 951                 if ($uid == 0) {
 952                         return;
 953                 }
 954
 955                 $items = self::select(['id', 'uid'], $condition);
 956                 while ($item = self::fetch($items)) {
 957                         // "Deleting" global items just means hiding them
 958                         if ($item['uid'] == 0) {
 959                                 DBA::update('user-item', ['hidden' => true], ['iid' => $item['id'], 'uid' => $uid], true);
 960                         } elseif ($item['uid'] == $uid) {
 961                                 self::deleteById($item['id'], PRIORITY_HIGH);
 962                         } else {
 963                                 logger('Wrong ownership. Not deleting item ' . $item['id']);
 964                         }
 965                 }
 966                 DBA::close($items);
 967         }
 968
 969         /**
 970          * @brief Delete an item and notify others about it - if it was ours
 971          *
 972          * @param integer $item_id Item ID that should be delete
 973          * @param integer $priority Priority for the notification
 974          *
 975          * @return boolean success
 976          */
 977         public static function deleteById($item_id, $priority = PRIORITY_HIGH)
 978         {
 979                 // locate item to be deleted
 980                 $fields = ['id', 'uri', 'uid', 'parent', 'parent-uri', 'origin',
 981                         'deleted', 'file', 'resource-id', 'event-id', 'attach',
 982                         'verb', 'object-type', 'object', 'target', 'contact-id',
 983                         'icid', 'iaid', 'psid'];
 984                 $item = self::selectFirst($fields, ['id' => $item_id]);
 985                 if (!DBA::isResult($item)) {
 986                         logger('Item with ID ' . $item_id . " hasn't been found.", LOGGER_DEBUG);
 987                         return false;
 988                 }
 989
 990                 if ($item['deleted']) {
 991                         logger('Item with ID ' . $item_id . ' has already been deleted.', LOGGER_DEBUG);
 992                         return false;
 993                 }
 994
 995                 $parent = self::selectFirst(['origin'], ['id' => $item['parent']]);
 996                 if (!DBA::isResult($parent)) {
 997                         $parent = ['origin' => false];
 998                 }
 999
1000                 // clean up categories and tags so they don't end up as orphans
1001
1002                 $matches = false;
1003                 $cnt = preg_match_all('/<(.*?)>/', $item['file'], $matches, PREG_SET_ORDER);
1004                 if ($cnt) {
1005                         foreach ($matches as $mtch) {
1006                                 file_tag_unsave_file($item['uid'], $item['id'], $mtch[1],true);
1007                         }
1008                 }
1009
1010                 $matches = false;
1011
1012                 $cnt = preg_match_all('/\[(.*?)\]/', $item['file'], $matches, PREG_SET_ORDER);
1013                 if ($cnt) {
1014                         foreach ($matches as $mtch) {
1015                                 file_tag_unsave_file($item['uid'], $item['id'], $mtch[1],false);
1016                         }
1017                 }
1018
1019                 /*
1020                  * If item is a link to a photo resource, nuke all the associated photos
1021                  * (visitors will not have photo resources)
1022                  * This only applies to photos uploaded from the photos page. Photos inserted into a post do not
1023                  * generate a resource-id and therefore aren't intimately linked to the item.
1024                  */
1025                 if (strlen($item['resource-id'])) {
1026                         DBA::delete('photo', ['resource-id' => $item['resource-id'], 'uid' => $item['uid']]);
1027                 }
1028
1029                 // If item is a link to an event, delete the event.
1030                 if (intval($item['event-id'])) {
1031                         Event::delete($item['event-id']);
1032                 }
1033
1034                 // If item has attachments, drop them
1035                 foreach (explode(", ", $item['attach']) as $attach) {
1036                         preg_match("|attach/(\d+)|", $attach, $matches);
1037                         if (is_array($matches) && count($matches) > 1) {
1038                                 DBA::delete('attach', ['id' => $matches[1], 'uid' => $item['uid']]);
1039                         }
1040                 }
1041
1042                 // Delete tags that had been attached to other items
1043                 self::deleteTagsFromItem($item);
1044
1045                 // Set the item to "deleted"
1046                 $item_fields = ['deleted' => true, 'edited' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()];
1047                 DBA::update('item', $item_fields, ['id' => $item['id']]);
1048
1049                 Term::insertFromTagFieldByItemId($item['id'], '');
1050                 Term::insertFromFileFieldByItemId($item['id'], '');
1051                 self::deleteThread($item['id'], $item['parent-uri']);
1052
1053                 if (!self::exists(["`uri` = ? AND `uid` != 0 AND NOT `deleted`", $item['uri']])) {
1054                         self::delete(['uri' => $item['uri'], 'uid' => 0, 'deleted' => false], $priority);
1055                 }
1056
1057                 DBA::delete('item-delivery-data', ['iid' => $item['id']]);
1058
1059                 // We don't delete the item-activity here, since we need some of the data for ActivityPub
1060
1061                 if (!empty($item['icid']) && !self::exists(['icid' => $item['icid'], 'deleted' => false])) {
1062                         DBA::delete('item-content', ['id' => $item['icid']], ['cascade' => false]);
1063                 }
1064                 // When the permission set will be used in photo and events as well,
1065                 // this query here needs to be extended.
1066                 if (!empty($item['psid']) && !self::exists(['psid' => $item['psid'], 'deleted' => false])) {
1067                         DBA::delete('permissionset', ['id' => $item['psid']], ['cascade' => false]);
1068                 }
1069
1070                 // If it's the parent of a comment thread, kill all the kids
1071                 if ($item['id'] == $item['parent']) {
1072                         self::delete(['parent' => $item['parent'], 'deleted' => false], $priority);
1073                 }
1074
1075                 // Is it our comment and/or our thread?
1076                 if ($item['origin'] || $parent['origin']) {
1077
1078                         // When we delete the original post we will delete all existing copies on the server as well
1079                         self::delete(['uri' => $item['uri'], 'deleted' => false], $priority);
1080
1081                         // send the notification upstream/downstream
1082                         Worker::add(['priority' => $priority, 'dont_fork' => true], "Notifier", "drop", intval($item['id']));
1083                 } elseif ($item['uid'] != 0) {
1084
1085                         // When we delete just our local user copy of an item, we have to set a marker to hide it
1086                         $global_item = self::selectFirst(['id'], ['uri' => $item['uri'], 'uid' => 0, 'deleted' => false]);
1087                         if (DBA::isResult($global_item)) {
1088                                 DBA::update('user-item', ['hidden' => true], ['iid' => $global_item['id'], 'uid' => $item['uid']], true);
1089                         }
1090                 }
1091
1092                 logger('Item with ID ' . $item_id . " has been deleted.", LOGGER_DEBUG);
1093
1094                 return true;
1095         }
1096
1097         private static function deleteTagsFromItem($item)
1098         {
1099                 if (($item["verb"] != ACTIVITY_TAG) || ($item["object-type"] != ACTIVITY_OBJ_TAGTERM)) {
1100                         return;
1101                 }
1102
1103                 $xo = XML::parseString($item["object"], false);
1104                 $xt = XML::parseString($item["target"], false);
1105
1106                 if ($xt->type != ACTIVITY_OBJ_NOTE) {
1107                         return;
1108                 }
1109
1110                 $i = self::selectFirst(['id', 'contact-id', 'tag'], ['uri' => $xt->id, 'uid' => $item['uid']]);
1111                 if (!DBA::isResult($i)) {
1112                         return;
1113                 }
1114
1115                 // For tags, the owner cannot remove the tag on the author's copy of the post.
1116                 $owner_remove = ($item["contact-id"] == $i["contact-id"]);
1117                 $author_copy = $item["origin"];
1118
1119                 if (($owner_remove && $author_copy) || !$owner_remove) {
1120                         return;
1121                 }
1122
1123                 $tags = explode(',', $i["tag"]);
1124                 $newtags = [];
1125                 if (count($tags)) {
1126                         foreach ($tags as $tag) {
1127                                 if (trim($tag) !== trim($xo->body)) {
1128                                        $newtags[] = trim($tag);
1129                                 }
1130                         }
1131                 }
1132                 self::update(['tag' => implode(',', $newtags)], ['id' => $i["id"]]);
1133         }
1134
1135         private static function guid($item, $notify)
1136         {
1137                 if (!empty($item['guid'])) {
1138                         return notags(trim($item['guid']));
1139                 }
1140
1141                 if ($notify) {
1142                         // We have to avoid duplicates. So we create the GUID in form of a hash of the plink or uri.
1143                         // We add the hash of our own host because our host is the original creator of the post.
1144                         $prefix_host = get_app()->getHostName();
1145                 } else {
1146                         $prefix_host = '';
1147
1148                         // We are only storing the post so we create a GUID from the original hostname.
1149                         if (!empty($item['author-link'])) {
1150                                 $parsed = parse_url($item['author-link']);
1151                                 if (!empty($parsed['host'])) {
1152                                         $prefix_host = $parsed['host'];
1153                                 }
1154                         }
1155
1156                         if (empty($prefix_host) && !empty($item['plink'])) {
1157                                 $parsed = parse_url($item['plink']);
1158                                 if (!empty($parsed['host'])) {
1159                                         $prefix_host = $parsed['host'];
1160                                 }
1161                         }
1162
1163                         if (empty($prefix_host) && !empty($item['uri'])) {
1164                                 $parsed = parse_url($item['uri']);
1165                                 if (!empty($parsed['host'])) {
1166                                         $prefix_host = $parsed['host'];
1167                                 }
1168                         }
1169
1170                         // Is it in the format data@host.tld? - Used for mail contacts
1171                         if (empty($prefix_host) && !empty($item['author-link']) && strstr($item['author-link'], '@')) {
1172                                 $mailparts = explode('@', $item['author-link']);
1173                                 $prefix_host = array_pop($mailparts);
1174                         }
1175                 }
1176
1177                 if (!empty($item['plink'])) {
1178                         $guid = self::guidFromUri($item['plink'], $prefix_host);
1179                 } elseif (!empty($item['uri'])) {
1180                         $guid = self::guidFromUri($item['uri'], $prefix_host);
1181                 } else {
1182                         $guid = System::createUUID(hash('crc32', $prefix_host));
1183                 }
1184
1185                 return $guid;
1186         }
1187
1188         private static function contactId($item)
1189         {
1190                 $contact_id = (int)$item["contact-id"];
1191
1192                 if (!empty($contact_id)) {
1193                         return $contact_id;
1194                 }
1195                 logger('Missing contact-id. Called by: '.System::callstack(), LOGGER_DEBUG);
1196                 /*
1197                  * First we are looking for a suitable contact that matches with the author of the post
1198                  * This is done only for comments
1199                  */
1200                 if ($item['parent-uri'] != $item['uri']) {
1201                         $contact_id = Contact::getIdForURL($item['author-link'], $item['uid']);
1202                 }
1203
1204                 // If not present then maybe the owner was found
1205                 if ($contact_id == 0) {
1206                         $contact_id = Contact::getIdForURL($item['owner-link'], $item['uid']);
1207                 }
1208
1209                 // Still missing? Then use the "self" contact of the current user
1210                 if ($contact_id == 0) {
1211                         $self = DBA::selectFirst('contact', ['id'], ['self' => true, 'uid' => $item['uid']]);
1212                         if (DBA::isResult($self)) {
1213                                 $contact_id = $self["id"];
1214                         }
1215                 }
1216                 logger("Contact-id was missing for post ".$item['guid']." from user id ".$item['uid']." - now set to ".$contact_id, LOGGER_DEBUG);
1217
1218                 return $contact_id;
1219         }
1220
1221         // This function will finally cover most of the preparation functionality in mod/item.php
1222         public static function prepare(&$item)
1223         {
1224                 $data = BBCode::getAttachmentData($item['body']);
1225                 if ((preg_match_all("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", $item['body'], $match, PREG_SET_ORDER) || isset($data["type"]))
1226                         && ($posttype != Item::PT_PERSONAL_NOTE)) {
1227                         $posttype = Item::PT_PAGE;
1228                         $objecttype = ACTIVITY_OBJ_BOOKMARK;
1229                 }
1230         }
1231
1232         public static function insert($item, $force_parent = false, $notify = false, $dontcache = false)
1233         {
1234                 $a = get_app();
1235
1236                 // If it is a posting where users should get notifications, then define it as wall posting
1237                 if ($notify) {
1238                         $item['wall'] = 1;
1239                         $item['origin'] = 1;
1240                         $item['network'] = Protocol::DFRN;
1241                         $item['protocol'] = Conversation::PARCEL_DFRN;
1242
1243                         if (is_int($notify)) {
1244                                 $priority = $notify;
1245                         } else {
1246                                 $priority = PRIORITY_HIGH;
1247                         }
1248                 } else {
1249                         $item['network'] = trim(defaults($item, 'network', Protocol::PHANTOM));
1250                 }
1251
1252                 $item['guid'] = self::guid($item, $notify);
1253                 $item['uri'] = notags(trim(defaults($item, 'uri', self::newURI($item['uid'], $item['guid']))));
1254
1255                 // Store URI data
1256                 $item['uri-id'] = ItemURI::insert(['uri' => $item['uri'], 'guid' => $item['guid']]);
1257
1258                 // Store conversation data
1259                 $item = Conversation::insert($item);
1260
1261                 /*
1262                  * If a Diaspora signature structure was passed in, pull it out of the
1263                  * item array and set it aside for later storage.
1264                  */
1265
1266                 $dsprsig = null;
1267                 if (isset($item['dsprsig'])) {
1268                         $encoded_signature = $item['dsprsig'];
1269                         $dsprsig = json_decode(base64_decode($item['dsprsig']));
1270                         unset($item['dsprsig']);
1271                 }
1272
1273                 $diaspora_signed_text = '';
1274                 if (isset($item['diaspora_signed_text'])) {
1275                         $diaspora_signed_text = $item['diaspora_signed_text'];
1276                         unset($item['diaspora_signed_text']);
1277                 }
1278
1279                 // Converting the plink
1280                 /// @TODO Check if this is really still needed
1281                 if ($item['network'] == Protocol::OSTATUS) {
1282                         if (isset($item['plink'])) {
1283                                 $item['plink'] = OStatus::convertHref($item['plink']);
1284                         } elseif (isset($item['uri'])) {
1285                                 $item['plink'] = OStatus::convertHref($item['uri']);
1286                         }
1287                 }
1288
1289                 if (!empty($item['thr-parent'])) {
1290                         $item['parent-uri'] = $item['thr-parent'];
1291                 }
1292
1293                 if (isset($item['gravity'])) {
1294                         $item['gravity'] = intval($item['gravity']);
1295                 } elseif ($item['parent-uri'] === $item['uri']) {
1296                         $item['gravity'] = GRAVITY_PARENT;
1297                 } elseif (activity_match($item['verb'], ACTIVITY_POST)) {
1298                         $item['gravity'] = GRAVITY_COMMENT;
1299                 } else {
1300                         $item['gravity'] = GRAVITY_UNKNOWN;   // Should not happen
1301                         logger('Unknown gravity for verb: ' . $item['verb'], LOGGER_DEBUG);
1302                 }
1303
1304                 $uid = intval($item['uid']);
1305
1306                 // check for create date and expire time
1307                 $expire_interval = Config::get('system', 'dbclean-expire-days', 0);
1308
1309                 $user = DBA::selectFirst('user', ['expire'], ['uid' => $uid]);
1310                 if (DBA::isResult($user) && ($user['expire'] > 0) && (($user['expire'] < $expire_interval) || ($expire_interval == 0))) {
1311                         $expire_interval = $user['expire'];
1312                 }
1313
1314                 if (($expire_interval > 0) && !empty($item['created'])) {
1315                         $expire_date = time() - ($expire_interval * 86400);
1316                         $created_date = strtotime($item['created']);
1317                         if ($created_date < $expire_date) {
1318                                 logger('item-store: item created ('.date('c', $created_date).') before expiration time ('.date('c', $expire_date).'). ignored. ' . print_r($item,true), LOGGER_DEBUG);
1319                                 return 0;
1320                         }
1321                 }
1322
1323                 /*
1324                  * Do we already have this item?
1325                  * We have to check several networks since Friendica posts could be repeated
1326                  * via OStatus (maybe Diasporsa as well)
1327                  */
1328                 if (in_array($item['network'], [Protocol::ACTIVITYPUB, Protocol::DIASPORA, Protocol::DFRN, Protocol::OSTATUS, ""])) {
1329                         $condition = ["`uri` = ? AND `uid` = ? AND `network` IN (?, ?, ?)",
1330                                 trim($item['uri']), $item['uid'],
1331                                 Protocol::DIASPORA, Protocol::DFRN, Protocol::OSTATUS];
1332                         $existing = self::selectFirst(['id', 'network'], $condition);
1333                         if (DBA::isResult($existing)) {
1334                                 // We only log the entries with a different user id than 0. Otherwise we would have too many false positives
1335                                 if ($uid != 0) {
1336                                         logger("Item with uri ".$item['uri']." already existed for user ".$uid." with id ".$existing["id"]." target network ".$existing["network"]." - new network: ".$item['network']);
1337                                 }
1338
1339                                 return $existing["id"];
1340                         }
1341                 }
1342
1343                 $item['wall']          = intval(defaults($item, 'wall', 0));
1344                 $item['extid']         = trim(defaults($item, 'extid', ''));
1345                 $item['author-name']   = trim(defaults($item, 'author-name', ''));
1346                 $item['author-link']   = trim(defaults($item, 'author-link', ''));
1347                 $item['author-avatar'] = trim(defaults($item, 'author-avatar', ''));
1348                 $item['owner-name']    = trim(defaults($item, 'owner-name', ''));
1349                 $item['owner-link']    = trim(defaults($item, 'owner-link', ''));
1350                 $item['owner-avatar']  = trim(defaults($item, 'owner-avatar', ''));
1351                 $item['received']      = ((x($item, 'received') !== false) ? DateTimeFormat::utc($item['received']) : DateTimeFormat::utcNow());
1352                 $item['created']       = ((x($item, 'created') !== false) ? DateTimeFormat::utc($item['created']) : $item['received']);
1353                 $item['edited']        = ((x($item, 'edited') !== false) ? DateTimeFormat::utc($item['edited']) : $item['created']);
1354                 $item['changed']       = ((x($item, 'changed') !== false) ? DateTimeFormat::utc($item['changed']) : $item['created']);
1355                 $item['commented']     = ((x($item, 'commented') !== false) ? DateTimeFormat::utc($item['commented']) : $item['created']);
1356                 $item['title']         = trim(defaults($item, 'title', ''));
1357                 $item['location']      = trim(defaults($item, 'location', ''));
1358                 $item['coord']         = trim(defaults($item, 'coord', ''));
1359                 $item['visible']       = ((x($item, 'visible') !== false) ? intval($item['visible'])         : 1);
1360                 $item['deleted']       = 0;
1361                 $item['parent-uri']    = trim(defaults($item, 'parent-uri', $item['uri']));
1362                 $item['post-type']     = defaults($item, 'post-type', self::PT_ARTICLE);
1363                 $item['verb']          = trim(defaults($item, 'verb', ''));
1364                 $item['object-type']   = trim(defaults($item, 'object-type', ''));
1365                 $item['object']        = trim(defaults($item, 'object', ''));
1366                 $item['target-type']   = trim(defaults($item, 'target-type', ''));
1367                 $item['target']        = trim(defaults($item, 'target', ''));
1368                 $item['plink']         = trim(defaults($item, 'plink', ''));
1369                 $item['allow_cid']     = trim(defaults($item, 'allow_cid', ''));
1370                 $item['allow_gid']     = trim(defaults($item, 'allow_gid', ''));
1371                 $item['deny_cid']      = trim(defaults($item, 'deny_cid', ''));
1372                 $item['deny_gid']      = trim(defaults($item, 'deny_gid', ''));
1373                 $item['private']       = intval(defaults($item, 'private', 0));
1374                 $item['body']          = trim(defaults($item, 'body', ''));
1375                 $item['tag']           = trim(defaults($item, 'tag', ''));
1376                 $item['attach']        = trim(defaults($item, 'attach', ''));
1377                 $item['app']           = trim(defaults($item, 'app', ''));
1378                 $item['origin']        = intval(defaults($item, 'origin', 0));
1379                 $item['postopts']      = trim(defaults($item, 'postopts', ''));
1380                 $item['resource-id']   = trim(defaults($item, 'resource-id', ''));
1381                 $item['event-id']      = intval(defaults($item, 'event-id', 0));
1382                 $item['inform']        = trim(defaults($item, 'inform', ''));
1383                 $item['file']          = trim(defaults($item, 'file', ''));
1384
1385                 // When there is no content then we don't post it
1386                 if ($item['body'].$item['title'] == '') {
1387                         logger('No body, no title.');
1388                         return 0;
1389                 }
1390
1391                 self::addLanguageToItemArray($item);
1392
1393                 // Items cannot be stored before they happen ...
1394                 if ($item['created'] > DateTimeFormat::utcNow()) {
1395                         $item['created'] = DateTimeFormat::utcNow();
1396                 }
1397
1398                 // We haven't invented time travel by now.
1399                 if ($item['edited'] > DateTimeFormat::utcNow()) {
1400                         $item['edited'] = DateTimeFormat::utcNow();
1401                 }
1402
1403                 $item['plink'] = defaults($item, 'plink', System::baseUrl() . '/display/' . urlencode($item['guid']));
1404
1405                 // The contact-id should be set before "self::insert" was called - but there seems to be issues sometimes
1406                 $item["contact-id"] = self::contactId($item);
1407
1408                 $default = ['url' => $item['author-link'], 'name' => $item['author-name'],
1409                         'photo' => $item['author-avatar'], 'network' => $item['network']];
1410
1411                 $item['author-id'] = defaults($item, 'author-id', Contact::getIdForURL($item["author-link"], 0, false, $default));
1412
1413                 if (Contact::isBlocked($item["author-id"])) {
1414                         logger('Contact '.$item["author-id"].' is blocked, item '.$item["uri"].' will not be stored');
1415                         return 0;
1416                 }
1417
1418                 $default = ['url' => $item['owner-link'], 'name' => $item['owner-name'],
1419                         'photo' => $item['owner-avatar'], 'network' => $item['network']];
1420
1421                 $item['owner-id'] = defaults($item, 'owner-id', Contact::getIdForURL($item["owner-link"], 0, false, $default));
1422
1423                 if (Contact::isBlocked($item["owner-id"])) {
1424                         logger('Contact '.$item["owner-id"].' is blocked, item '.$item["uri"].' will not be stored');
1425                         return 0;
1426                 }
1427
1428                 if ($item['network'] == Protocol::PHANTOM) {
1429                         logger('Missing network. Called by: '.System::callstack(), LOGGER_DEBUG);
1430
1431                         $item['network'] = Protocol::DFRN;
1432                         logger("Set network to " . $item["network"] . " for " . $item["uri"], LOGGER_DEBUG);
1433                 }
1434
1435                 // Checking if there is already an item with the same guid
1436                 logger('Checking for an item for user '.$item['uid'].' on network '.$item['network'].' with the guid '.$item['guid'], LOGGER_DEBUG);
1437                 $condition = ['guid' => $item['guid'], 'network' => $item['network'], 'uid' => $item['uid']];
1438                 if (self::exists($condition)) {
1439                         logger('found item with guid '.$item['guid'].' for user '.$item['uid'].' on network '.$item['network'], LOGGER_DEBUG);
1440                         return 0;
1441                 }
1442
1443                 // Check for hashtags in the body and repair or add hashtag links
1444                 self::setHashtags($item);
1445
1446                 $item['thr-parent'] = $item['parent-uri'];
1447
1448                 $notify_type = '';
1449                 $allow_cid = '';
1450                 $allow_gid = '';
1451                 $deny_cid  = '';
1452                 $deny_gid  = '';
1453
1454                 if ($item['parent-uri'] === $item['uri']) {
1455                         $parent_id = 0;
1456                         $parent_deleted = 0;
1457                         $allow_cid = $item['allow_cid'];
1458                         $allow_gid = $item['allow_gid'];
1459                         $deny_cid  = $item['deny_cid'];
1460                         $deny_gid  = $item['deny_gid'];
1461                         $notify_type = 'wall-new';
1462                 } else {
1463                         // find the parent and snarf the item id and ACLs
1464                         // and anything else we need to inherit
1465
1466                         $fields = ['uri', 'parent-uri', 'id', 'deleted',
1467                                 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
1468                                 'wall', 'private', 'forum_mode', 'origin'];
1469                         $condition = ['uri' => $item['parent-uri'], 'uid' => $item['uid']];
1470                         $params = ['order' => ['id' => false]];
1471                         $parent = self::selectFirst($fields, $condition, $params);
1472
1473                         if (DBA::isResult($parent)) {
1474                                 // is the new message multi-level threaded?
1475                                 // even though we don't support it now, preserve the info
1476                                 // and re-attach to the conversation parent.
1477
1478                                 if ($parent['uri'] != $parent['parent-uri']) {
1479                                         $item['parent-uri'] = $parent['parent-uri'];
1480
1481                                         $condition = ['uri' => $item['parent-uri'],
1482                                                 'parent-uri' => $item['parent-uri'],
1483                                                 'uid' => $item['uid']];
1484                                         $params = ['order' => ['id' => false]];
1485                                         $toplevel_parent = self::selectFirst($fields, $condition, $params);
1486
1487                                         if (DBA::isResult($toplevel_parent)) {
1488                                                 $parent = $toplevel_parent;
1489                                         }
1490                                 }
1491
1492                                 $parent_id      = $parent['id'];
1493                                 $parent_deleted = $parent['deleted'];
1494                                 $allow_cid      = $parent['allow_cid'];
1495                                 $allow_gid      = $parent['allow_gid'];
1496                                 $deny_cid       = $parent['deny_cid'];
1497                                 $deny_gid       = $parent['deny_gid'];
1498                                 $item['wall']    = $parent['wall'];
1499                                 $notify_type    = 'comment-new';
1500
1501                                 /*
1502                                  * If the parent is private, force privacy for the entire conversation
1503                                  * This differs from the above settings as it subtly allows comments from
1504                                  * email correspondents to be private even if the overall thread is not.
1505                                  */
1506                                 if ($parent['private']) {
1507                                         $item['private'] = $parent['private'];
1508                                 }
1509
1510                                 /*
1511                                  * Edge case. We host a public forum that was originally posted to privately.
1512                                  * The original author commented, but as this is a comment, the permissions
1513                                  * weren't fixed up so it will still show the comment as private unless we fix it here.
1514                                  */
1515                                 if ((intval($parent['forum_mode']) == 1) && $parent['private']) {
1516                                         $item['private'] = 0;
1517                                 }
1518
1519                                 // If its a post from myself then tag the thread as "mention"
1520                                 logger("Checking if parent ".$parent_id." has to be tagged as mention for user ".$item['uid'], LOGGER_DEBUG);
1521                                 $user = DBA::selectFirst('user', ['nickname'], ['uid' => $item['uid']]);
1522                                 if (DBA::isResult($user)) {
1523                                         $self = normalise_link(System::baseUrl() . '/profile/' . $user['nickname']);
1524                                         $self_id = Contact::getIdForURL($self, 0, true);
1525                                         logger("'myself' is ".$self_id." for parent ".$parent_id." checking against ".$item['author-id']." and ".$item['owner-id'], LOGGER_DEBUG);
1526                                         if (($item['author-id'] == $self_id) || ($item['owner-id'] == $self_id)) {
1527                                                 DBA::update('thread', ['mention' => true], ['iid' => $parent_id]);
1528                                                 logger("tagged thread ".$parent_id." as mention for user ".$self, LOGGER_DEBUG);
1529                                         }
1530                                 }
1531                         } else {
1532                                 /*
1533                                  * Allow one to see reply tweets from status.net even when
1534                                  * we don't have or can't see the original post.
1535                                  */
1536                                 if ($force_parent) {
1537                                         logger('$force_parent=true, reply converted to top-level post.');
1538                                         $parent_id = 0;
1539                                         $item['parent-uri'] = $item['uri'];
1540                                         $item['gravity'] = GRAVITY_PARENT;
1541                                 } else {
1542                                         logger('item parent '.$item['parent-uri'].' for '.$item['uid'].' was not found - ignoring item');
1543                                         return 0;
1544                                 }
1545
1546                                 $parent_deleted = 0;
1547                         }
1548                 }
1549
1550                 $item['parent-uri-id'] = ItemURI::getIdByURI($item['parent-uri']);
1551                 $item['thr-parent-id'] = ItemURI::getIdByURI($item['thr-parent']);
1552
1553                 $condition = ["`uri` = ? AND `network` IN (?, ?) AND `uid` = ?",
1554                         $item['uri'], $item['network'], Protocol::DFRN, $item['uid']];
1555                 if (self::exists($condition)) {
1556                         logger('duplicated item with the same uri found. '.print_r($item,true));
1557                         return 0;
1558                 }
1559
1560                 // On Friendica and Diaspora the GUID is unique
1561                 if (in_array($item['network'], [Protocol::DFRN, Protocol::DIASPORA])) {
1562                         $condition = ['guid' => $item['guid'], 'uid' => $item['uid']];
1563                         if (self::exists($condition)) {
1564                                 logger('duplicated item with the same guid found. '.print_r($item,true));
1565                                 return 0;
1566                         }
1567                 } else {
1568                         // Check for an existing post with the same content. There seems to be a problem with OStatus.
1569                         $condition = ["`body` = ? AND `network` = ? AND `created` = ? AND `contact-id` = ? AND `uid` = ?",
1570                                         $item['body'], $item['network'], $item['created'], $item['contact-id'], $item['uid']];
1571                         if (self::exists($condition)) {
1572                                 logger('duplicated item with the same body found. '.print_r($item,true));
1573                                 return 0;
1574                         }
1575                 }
1576
1577                 // Is this item available in the global items (with uid=0)?
1578                 if ($item["uid"] == 0) {
1579                         $item["global"] = true;
1580
1581                         // Set the global flag on all items if this was a global item entry
1582                         self::update(['global' => true], ['uri' => $item["uri"]]);
1583                 } else {
1584                         $item["global"] = self::exists(['uid' => 0, 'uri' => $item["uri"]]);
1585                 }
1586
1587                 // ACL settings
1588                 if (strlen($allow_cid) || strlen($allow_gid) || strlen($deny_cid) || strlen($deny_gid)) {
1589                         $private = 1;
1590                 } else {
1591                         $private = $item['private'];
1592                 }
1593
1594                 $item["allow_cid"] = $allow_cid;
1595                 $item["allow_gid"] = $allow_gid;
1596                 $item["deny_cid"] = $deny_cid;
1597                 $item["deny_gid"] = $deny_gid;
1598                 $item["private"] = $private;
1599                 $item["deleted"] = $parent_deleted;
1600
1601                 // Fill the cache field
1602                 put_item_in_cache($item);
1603
1604                 if ($notify) {
1605                         $item['edit'] = false;
1606                         $item['parent'] = $parent_id;
1607                         Addon::callHooks('post_local', $item);
1608                         unset($item['edit']);
1609                         unset($item['parent']);
1610                 } else {
1611                         Addon::callHooks('post_remote', $item);
1612                 }
1613
1614                 // This array field is used to trigger some automatic reactions
1615                 // It is mainly used in the "post_local" hook.
1616                 unset($item['api_source']);
1617
1618                 if (x($item, 'cancel')) {
1619                         logger('post cancelled by addon.');
1620                         return 0;
1621                 }
1622
1623                 /*
1624                  * Check for already added items.
1625                  * There is a timing issue here that sometimes creates double postings.
1626                  * An unique index would help - but the limitations of MySQL (maximum size of index values) prevent this.
1627                  */
1628                 if ($item["uid"] == 0) {
1629                         if (self::exists(['uri' => trim($item['uri']), 'uid' => 0])) {
1630                                 logger('Global item already stored. URI: '.$item['uri'].' on network '.$item['network'], LOGGER_DEBUG);
1631                                 return 0;
1632                         }
1633                 }
1634
1635                 logger('' . print_r($item,true), LOGGER_DATA);
1636
1637                 if (array_key_exists('tag', $item)) {
1638                         $tags = $item['tag'];
1639                         unset($item['tag']);
1640                 } else {
1641                         $tags = '';
1642                 }
1643
1644                 if (array_key_exists('file', $item)) {
1645                         $files = $item['file'];
1646                         unset($item['file']);
1647                 } else {
1648                         $files = '';
1649                 }
1650
1651                 // Creates or assigns the permission set
1652                 $item['psid'] = PermissionSet::fetchIDForPost($item);
1653
1654                 // We are doing this outside of the transaction to avoid timing problems
1655                 if (!self::insertActivity($item)) {
1656                         self::insertContent($item);
1657                 }
1658
1659                 $delivery_data = ['postopts' => defaults($item, 'postopts', ''),
1660                         'inform' => defaults($item, 'inform', '')];
1661
1662                 unset($item['postopts']);
1663                 unset($item['inform']);
1664
1665                 // These fields aren't stored anymore in the item table, they are fetched upon request
1666                 unset($item['author-link']);
1667                 unset($item['author-name']);
1668                 unset($item['author-avatar']);
1669
1670                 unset($item['owner-link']);
1671                 unset($item['owner-name']);
1672                 unset($item['owner-avatar']);
1673
1674                 DBA::transaction();
1675                 $ret = DBA::insert('item', $item);
1676
1677                 // When the item was successfully stored we fetch the ID of the item.
1678                 if (DBA::isResult($ret)) {
1679                         $current_post = DBA::lastInsertId();
1680                 } else {
1681                         // This can happen - for example - if there are locking timeouts.
1682                         DBA::rollback();
1683
1684                         // Store the data into a spool file so that we can try again later.
1685
1686                         // At first we restore the Diaspora signature that we removed above.
1687                         if (isset($encoded_signature)) {
1688                                 $item['dsprsig'] = $encoded_signature;
1689                         }
1690
1691                         // Now we store the data in the spool directory
1692                         // We use "microtime" to keep the arrival order and "mt_rand" to avoid duplicates
1693                         $file = 'item-'.round(microtime(true) * 10000).'-'.mt_rand().'.msg';
1694
1695                         $spoolpath = get_spoolpath();
1696                         if ($spoolpath != "") {
1697                                 $spool = $spoolpath.'/'.$file;
1698
1699                                 // Ensure to have the removed data from above again in the item array
1700                                 $item = array_merge($item, $delivery_data);
1701
1702                                 file_put_contents($spool, json_encode($item));
1703                                 logger("Item wasn't stored - Item was spooled into file ".$file, LOGGER_DEBUG);
1704                         }
1705                         return 0;
1706                 }
1707
1708                 if ($current_post == 0) {
1709                         // This is one of these error messages that never should occur.
1710                         logger("couldn't find created item - we better quit now.");
1711                         DBA::rollback();
1712                         return 0;
1713                 }
1714
1715                 // How much entries have we created?
1716                 // We wouldn't need this query when we could use an unique index - but MySQL has length problems with them.
1717                 $entries = DBA::count('item', ['uri' => $item['uri'], 'uid' => $item['uid'], 'network' => $item['network']]);
1718
1719                 if ($entries > 1) {
1720                         // There are duplicates. We delete our just created entry.
1721                         logger('Duplicated post occurred. uri = ' . $item['uri'] . ' uid = ' . $item['uid']);
1722
1723                         // Yes, we could do a rollback here - but we are having many users with MyISAM.
1724                         DBA::delete('item', ['id' => $current_post]);
1725                         DBA::commit();
1726                         return 0;
1727                 } elseif ($entries == 0) {
1728                         // This really should never happen since we quit earlier if there were problems.
1729                         logger("Something is terribly wrong. We haven't found our created entry.");
1730                         DBA::rollback();
1731                         return 0;
1732                 }
1733
1734                 logger('created item '.$current_post);
1735                 self::updateContact($item);
1736
1737                 if (!$parent_id || ($item['parent-uri'] === $item['uri'])) {
1738                         $parent_id = $current_post;
1739                 }
1740
1741                 // Set parent id
1742                 self::update(['parent' => $parent_id], ['id' => $current_post]);
1743
1744                 $item['id'] = $current_post;
1745                 $item['parent'] = $parent_id;
1746
1747                 // update the commented timestamp on the parent
1748                 // Only update "commented" if it is really a comment
1749                 if (($item['gravity'] != GRAVITY_ACTIVITY) || !Config::get("system", "like_no_comment")) {
1750                         self::update(['commented' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1751                 } else {
1752                         self::update(['changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1753                 }
1754
1755                 if ($dsprsig) {
1756                         /*
1757                          * Friendica servers lower than 3.4.3-2 had double encoded the signature ...
1758                          * We can check for this condition when we decode and encode the stuff again.
1759                          */
1760                         if (base64_encode(base64_decode(base64_decode($dsprsig->signature))) == base64_decode($dsprsig->signature)) {
1761                                 $dsprsig->signature = base64_decode($dsprsig->signature);
1762                                 logger("Repaired double encoded signature from handle ".$dsprsig->signer, LOGGER_DEBUG);
1763                         }
1764
1765                         if (!empty($dsprsig->signed_text) && empty($dsprsig->signature) && empty($dsprsig->signer)) {
1766                                 DBA::insert('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $dsprsig->signed_text], true);
1767                         } else {
1768                                 // The other fields are used by very old Friendica servers, so we currently store them differently
1769                                 DBA::insert('sign', ['iid' => $current_post, 'signed_text' => $dsprsig->signed_text,
1770                                         'signature' => $dsprsig->signature, 'signer' => $dsprsig->signer]);
1771                         }
1772                 }
1773
1774                 if (!empty($diaspora_signed_text)) {
1775                         DBA::insert('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $diaspora_signed_text], true);
1776                 }
1777
1778                 $deleted = self::tagDeliver($item['uid'], $current_post);
1779
1780                 /*
1781                  * current post can be deleted if is for a community page and no mention are
1782                  * in it.
1783                  */
1784                 if (!$deleted && !$dontcache) {
1785                         $posted_item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $current_post]);
1786                         if (DBA::isResult($posted_item)) {
1787                                 if ($notify) {
1788                                         Addon::callHooks('post_local_end', $posted_item);
1789                                 } else {
1790                                         Addon::callHooks('post_remote_end', $posted_item);
1791                                 }
1792                         } else {
1793                                 logger('new item not found in DB, id ' . $current_post);
1794                         }
1795                 }
1796
1797                 if ($item['parent-uri'] === $item['uri']) {
1798                         self::addThread($current_post);
1799                 } else {
1800                         self::updateThread($parent_id);
1801                 }
1802
1803                 $delivery_data['iid'] = $current_post;
1804
1805                 self::insertDeliveryData($delivery_data);
1806
1807                 DBA::commit();
1808
1809                 /*
1810                  * Due to deadlock issues with the "term" table we are doing these steps after the commit.
1811                  * This is not perfect - but a workable solution until we found the reason for the problem.
1812                  */
1813                 if (!empty($tags)) {
1814                         Term::insertFromTagFieldByItemId($current_post, $tags);
1815                 }
1816
1817                 if (!empty($files)) {
1818                         Term::insertFromFileFieldByItemId($current_post, $files);
1819                 }
1820
1821                 if ($item['parent-uri'] === $item['uri']) {
1822                         self::addShadow($current_post);
1823                 } else {
1824                         self::addShadowPost($current_post);
1825                 }
1826
1827                 check_user_notification($current_post);
1828
1829                 if ($notify) {
1830                         Worker::add(['priority' => $priority, 'dont_fork' => true], 'Notifier', $notify_type, $current_post);
1831                 } elseif ($item['visible'] && ((!empty($parent) && $parent['origin']) || $item['origin'])) {
1832                         if ($item['gravity'] == GRAVITY_ACTIVITY) {
1833                                 $cmd = $item['origin'] ? 'activity-new' : 'activity-import';
1834                         } elseif ($item['gravity'] == GRAVITY_COMMENT) {
1835                                 $cmd = $item['origin'] ? 'comment-new' : 'comment-import';
1836                         } else {
1837                                 $cmd = 'wall-new';
1838                         }
1839
1840                         Worker::add(['priority' => PRIORITY_HIGH, 'dont_fork' => true], 'Notifier', $cmd, $current_post);
1841                 }
1842
1843                 return $current_post;
1844         }
1845
1846         /**
1847          * @brief Insert a new item delivery data entry
1848          *
1849          * @param array $item The item fields that are to be inserted
1850          */
1851         private static function insertDeliveryData($delivery_data)
1852         {
1853                 if (empty($delivery_data['iid']) || (empty($delivery_data['postopts']) && empty($delivery_data['inform']))) {
1854                         return;
1855                 }
1856
1857                 DBA::insert('item-delivery-data', $delivery_data);
1858         }
1859
1860         /**
1861          * @brief Update an existing item delivery data entry
1862          *
1863          * @param integer $id The item id that is to be updated
1864          * @param array $item The item fields that are to be inserted
1865          */
1866         private static function updateDeliveryData($id, $delivery_data)
1867         {
1868                 if (empty($id) || (empty($delivery_data['postopts']) && empty($delivery_data['inform']))) {
1869                         return;
1870                 }
1871
1872                 DBA::update('item-delivery-data', $delivery_data, ['iid' => $id], true);
1873         }
1874
1875         /**
1876          * @brief Insert a new item content entry
1877          *
1878          * @param array $item The item fields that are to be inserted
1879          */
1880         private static function insertActivity(&$item)
1881         {
1882                 $activity_index = self::activityToIndex($item['verb']);
1883
1884                 if ($activity_index < 0) {
1885                         return false;
1886                 }
1887
1888                 $fields = ['activity' => $activity_index, 'uri-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
1889
1890                 // We just remove everything that is content
1891                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
1892                         unset($item[$field]);
1893                 }
1894
1895                 // To avoid timing problems, we are using locks.
1896                 $locked = Lock::acquire('item_insert_activity');
1897                 if (!$locked) {
1898                         logger("Couldn't acquire lock for URI " . $item['uri'] . " - proceeding anyway.");
1899                 }
1900
1901                 // Do we already have this content?
1902                 $item_activity = DBA::selectFirst('item-activity', ['id'], ['uri-id' => $item['uri-id']]);
1903                 if (DBA::isResult($item_activity)) {
1904                         $item['iaid'] = $item_activity['id'];
1905                         logger('Fetched activity for URI ' . $item['uri'] . ' (' . $item['iaid'] . ')');
1906                 } elseif (DBA::insert('item-activity', $fields)) {
1907                         $item['iaid'] = DBA::lastInsertId();
1908                         logger('Inserted activity for URI ' . $item['uri'] . ' (' . $item['iaid'] . ')');
1909                 } else {
1910                         // This shouldn't happen.
1911                         logger('Could not insert activity for URI ' . $item['uri'] . ' - should not happen');
1912                         Lock::release('item_insert_activity');
1913                         return false;
1914                 }
1915                 if ($locked) {
1916                         Lock::release('item_insert_activity');
1917                 }
1918                 return true;
1919         }
1920
1921         /**
1922          * @brief Insert a new item content entry
1923          *
1924          * @param array $item The item fields that are to be inserted
1925          */
1926         private static function insertContent(&$item)
1927         {
1928                 $fields = ['uri-plink-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
1929
1930                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
1931                         if (isset($item[$field])) {
1932                                 $fields[$field] = $item[$field];
1933                                 unset($item[$field]);
1934                         }
1935                 }
1936
1937                 // To avoid timing problems, we are using locks.
1938                 $locked = Lock::acquire('item_insert_content');
1939                 if (!$locked) {
1940                         logger("Couldn't acquire lock for URI " . $item['uri'] . " - proceeding anyway.");
1941                 }
1942
1943                 // Do we already have this content?
1944                 $item_content = DBA::selectFirst('item-content', ['id'], ['uri-id' => $item['uri-id']]);
1945                 if (DBA::isResult($item_content)) {
1946                         $item['icid'] = $item_content['id'];
1947                         logger('Fetched content for URI ' . $item['uri'] . ' (' . $item['icid'] . ')');
1948                 } elseif (DBA::insert('item-content', $fields)) {
1949                         $item['icid'] = DBA::lastInsertId();
1950                         logger('Inserted content for URI ' . $item['uri'] . ' (' . $item['icid'] . ')');
1951                 } else {
1952                         // This shouldn't happen.
1953                         logger('Could not insert content for URI ' . $item['uri'] . ' - should not happen');
1954                 }
1955                 if ($locked) {
1956                         Lock::release('item_insert_content');
1957                 }
1958         }
1959
1960         /**
1961          * @brief Update existing item content entries
1962          *
1963          * @param array $item The item fields that are to be changed
1964          * @param array $condition The condition for finding the item content entries
1965          */
1966         private static function updateActivity($item, $condition)
1967         {
1968                 if (empty($item['verb'])) {
1969                         return false;
1970                 }
1971                 $activity_index = self::activityToIndex($item['verb']);
1972
1973                 if ($activity_index < 0) {
1974                         return false;
1975                 }
1976
1977                 $fields = ['activity' => $activity_index];
1978
1979                 logger('Update activity for ' . json_encode($condition));
1980
1981                 DBA::update('item-activity', $fields, $condition, true);
1982
1983                 return true;
1984         }
1985
1986         /**
1987          * @brief Update existing item content entries
1988          *
1989          * @param array $item The item fields that are to be changed
1990          * @param array $condition The condition for finding the item content entries
1991          */
1992         private static function updateContent($item, $condition)
1993         {
1994                 // We have to select only the fields from the "item-content" table
1995                 $fields = [];
1996                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
1997                         if (isset($item[$field])) {
1998                                 $fields[$field] = $item[$field];
1999                         }
2000                 }
2001
2002                 if (empty($fields)) {
2003                         // when there are no fields at all, just use the condition
2004                         // This is to ensure that we always store content.
2005                         $fields = $condition;
2006                 }
2007
2008                 logger('Update content for ' . json_encode($condition));
2009
2010                 DBA::update('item-content', $fields, $condition, true);
2011         }
2012
2013         /**
2014          * @brief Distributes public items to the receivers
2015          *
2016          * @param integer $itemid      Item ID that should be added
2017          * @param string  $signed_text Original text (for Diaspora signatures), JSON encoded.
2018          */
2019         public static function distribute($itemid, $signed_text = '')
2020         {
2021                 $condition = ["`id` IN (SELECT `parent` FROM `item` WHERE `id` = ?)", $itemid];
2022                 $parent = self::selectFirst(['owner-id'], $condition);
2023                 if (!DBA::isResult($parent)) {
2024                         return;
2025                 }
2026
2027                 // Only distribute public items from native networks
2028                 $condition = ['id' => $itemid, 'uid' => 0,
2029                         'network' => [Protocol::ACTIVITYPUB, Protocol::DFRN, Protocol::DIASPORA, Protocol::OSTATUS, ""],
2030                         'visible' => true, 'deleted' => false, 'moderated' => false, 'private' => false];
2031                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2032                 if (!DBA::isResult($item)) {
2033                         return;
2034                 }
2035
2036                 $origin = $item['origin'];
2037
2038                 unset($item['id']);
2039                 unset($item['parent']);
2040                 unset($item['mention']);
2041                 unset($item['wall']);
2042                 unset($item['origin']);
2043                 unset($item['starred']);
2044
2045                 $users = [];
2046
2047                 /// @todo add a field "pcid" in the contact table that referrs to the public contact id.
2048                 $owner = DBA::selectFirst('contact', ['url', 'nurl', 'alias'], ['id' => $parent['owner-id']]);
2049                 if (!DBA::isResult($owner)) {
2050                         return;
2051                 }
2052
2053                 $condition = ['nurl' => $owner['nurl'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2054                 $contacts = DBA::select('contact', ['uid'], $condition);
2055                 while ($contact = DBA::fetch($contacts)) {
2056                         if ($contact['uid'] == 0) {
2057                                 continue;
2058                         }
2059
2060                         $users[$contact['uid']] = $contact['uid'];
2061                 }
2062                 DBA::close($contacts);
2063
2064                 $condition = ['alias' => $owner['url'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2065                 $contacts = DBA::select('contact', ['uid'], $condition);
2066                 while ($contact = DBA::fetch($contacts)) {
2067                         if ($contact['uid'] == 0) {
2068                                 continue;
2069                         }
2070
2071                         $users[$contact['uid']] = $contact['uid'];
2072                 }
2073                 DBA::close($contacts);
2074
2075                 if (!empty($owner['alias'])) {
2076                         $condition = ['url' => $owner['alias'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2077                         $contacts = DBA::select('contact', ['uid'], $condition);
2078                         while ($contact = DBA::fetch($contacts)) {
2079                                 if ($contact['uid'] == 0) {
2080                                         continue;
2081                                 }
2082
2083                                 $users[$contact['uid']] = $contact['uid'];
2084                         }
2085                         DBA::close($contacts);
2086                 }
2087
2088                 $origin_uid = 0;
2089
2090                 if ($item['uri'] != $item['parent-uri']) {
2091                         $parents = self::select(['uid', 'origin'], ["`uri` = ? AND `uid` != 0", $item['parent-uri']]);
2092                         while ($parent = self::fetch($parents)) {
2093                                 $users[$parent['uid']] = $parent['uid'];
2094                                 if ($parent['origin'] && !$origin) {
2095                                         $origin_uid = $parent['uid'];
2096                                 }
2097                         }
2098                 }
2099
2100                 foreach ($users as $uid) {
2101                         if ($origin_uid == $uid) {
2102                                 $item['diaspora_signed_text'] = $signed_text;
2103                         }
2104                         self::storeForUser($itemid, $item, $uid);
2105                 }
2106         }
2107
2108         /**
2109          * @brief Store public items for the receivers
2110          *
2111          * @param integer $itemid Item ID that should be added
2112          * @param array   $item   The item entry that will be stored
2113          * @param integer $uid    The user that will receive the item entry
2114          */
2115         private static function storeForUser($itemid, $item, $uid)
2116         {
2117                 $item['uid'] = $uid;
2118                 $item['origin'] = 0;
2119                 $item['wall'] = 0;
2120                 if ($item['uri'] == $item['parent-uri']) {
2121                         $item['contact-id'] = Contact::getIdForURL($item['owner-link'], $uid);
2122                 } else {
2123                         $item['contact-id'] = Contact::getIdForURL($item['author-link'], $uid);
2124                 }
2125
2126                 if (empty($item['contact-id'])) {
2127                         $self = DBA::selectFirst('contact', ['id'], ['self' => true, 'uid' => $uid]);
2128                         if (!DBA::isResult($self)) {
2129                                 return;
2130                         }
2131                         $item['contact-id'] = $self['id'];
2132                 }
2133
2134                 /// @todo Handling of "event-id"
2135
2136                 $notify = false;
2137                 if ($item['uri'] == $item['parent-uri']) {
2138                         $contact = DBA::selectFirst('contact', [], ['id' => $item['contact-id'], 'self' => false]);
2139                         if (DBA::isResult($contact)) {
2140                                 $notify = self::isRemoteSelf($contact, $item);
2141                         }
2142                 }
2143
2144                 $distributed = self::insert($item, false, $notify, true);
2145
2146                 if (!$distributed) {
2147                         logger("Distributed public item " . $itemid . " for user " . $uid . " wasn't stored", LOGGER_DEBUG);
2148                 } else {
2149                         logger("Distributed public item " . $itemid . " for user " . $uid . " with id " . $distributed, LOGGER_DEBUG);
2150                 }
2151         }
2152
2153         /**
2154          * @brief Add a shadow entry for a given item id that is a thread starter
2155          *
2156          * We store every public item entry additionally with the user id "0".
2157          * This is used for the community page and for the search.
2158          * It is planned that in the future we will store public item entries only once.
2159          *
2160          * @param integer $itemid Item ID that should be added
2161          */
2162         public static function addShadow($itemid)
2163         {
2164                 $fields = ['uid', 'private', 'moderated', 'visible', 'deleted', 'network', 'uri'];
2165                 $condition = ['id' => $itemid, 'parent' => [0, $itemid]];
2166                 $item = self::selectFirst($fields, $condition);
2167
2168                 if (!DBA::isResult($item)) {
2169                         return;
2170                 }
2171
2172                 // is it already a copy?
2173                 if (($itemid == 0) || ($item['uid'] == 0)) {
2174                         return;
2175                 }
2176
2177                 // Is it a visible public post?
2178                 if (!$item["visible"] || $item["deleted"] || $item["moderated"] || $item["private"]) {
2179                         return;
2180                 }
2181
2182                 // is it an entry from a connector? Only add an entry for natively connected networks
2183                 if (!in_array($item["network"], [Protocol::ACTIVITYPUB, Protocol::DFRN, Protocol::DIASPORA, Protocol::OSTATUS, ""])) {
2184                         return;
2185                 }
2186
2187                 if (self::exists(['uri' => $item['uri'], 'uid' => 0])) {
2188                         return;
2189                 }
2190
2191                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2192
2193                 if (DBA::isResult($item)) {
2194                         // Preparing public shadow (removing user specific data)
2195                         $item['uid'] = 0;
2196                         unset($item['id']);
2197                         unset($item['parent']);
2198                         unset($item['wall']);
2199                         unset($item['mention']);
2200                         unset($item['origin']);
2201                         unset($item['starred']);
2202                         unset($item['postopts']);
2203                         unset($item['inform']);
2204                         if ($item['uri'] == $item['parent-uri']) {
2205                                 $item['contact-id'] = $item['owner-id'];
2206                         } else {
2207                                 $item['contact-id'] = $item['author-id'];
2208                         }
2209
2210                         $public_shadow = self::insert($item, false, false, true);
2211
2212                         logger("Stored public shadow for thread ".$itemid." under id ".$public_shadow, LOGGER_DEBUG);
2213                 }
2214         }
2215
2216         /**
2217          * @brief Add a shadow entry for a given item id that is a comment
2218          *
2219          * This function does the same like the function above - but for comments
2220          *
2221          * @param integer $itemid Item ID that should be added
2222          */
2223         public static function addShadowPost($itemid)
2224         {
2225                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2226                 if (!DBA::isResult($item)) {
2227                         return;
2228                 }
2229
2230                 // Is it a toplevel post?
2231                 if ($item['id'] == $item['parent']) {
2232                         self::addShadow($itemid);
2233                         return;
2234                 }
2235
2236                 // Is this a shadow entry?
2237                 if ($item['uid'] == 0) {
2238                         return;
2239                 }
2240
2241                 // Is there a shadow parent?
2242                 if (!self::exists(['uri' => $item['parent-uri'], 'uid' => 0])) {
2243                         return;
2244                 }
2245
2246                 // Is there already a shadow entry?
2247                 if (self::exists(['uri' => $item['uri'], 'uid' => 0])) {
2248                         return;
2249                 }
2250
2251                 // Save "origin" and "parent" state
2252                 $origin = $item['origin'];
2253                 $parent = $item['parent'];
2254
2255                 // Preparing public shadow (removing user specific data)
2256                 $item['uid'] = 0;
2257                 unset($item['id']);
2258                 unset($item['parent']);
2259                 unset($item['wall']);
2260                 unset($item['mention']);
2261                 unset($item['origin']);
2262                 unset($item['starred']);
2263                 unset($item['postopts']);
2264                 unset($item['inform']);
2265                 $item['contact-id'] = Contact::getIdForURL($item['author-link']);
2266
2267                 $public_shadow = self::insert($item, false, false, true);
2268
2269                 logger("Stored public shadow for comment ".$item['uri']." under id ".$public_shadow, LOGGER_DEBUG);
2270
2271                 // If this was a comment to a Diaspora post we don't get our comment back.
2272                 // This means that we have to distribute the comment by ourselves.
2273                 if ($origin && self::exists(['id' => $parent, 'network' => Protocol::DIASPORA])) {
2274                         self::distribute($public_shadow);
2275                 }
2276         }
2277
2278          /**
2279          * Adds a language specification in a "language" element of given $arr.
2280          * Expects "body" element to exist in $arr.
2281          */
2282         private static function addLanguageToItemArray(&$item)
2283         {
2284                 $naked_body = BBCode::toPlaintext($item['body'], false);
2285
2286                 $ld = new Text_LanguageDetect();
2287                 $ld->setNameMode(2);
2288                 $languages = $ld->detect($naked_body, 3);
2289
2290                 if (is_array($languages)) {
2291                         $item['language'] = json_encode($languages);
2292                 }
2293         }
2294
2295         /**
2296          * @brief Creates an unique guid out of a given uri
2297          *
2298          * @param string $uri uri of an item entry
2299          * @param string $host hostname for the GUID prefix
2300          * @return string unique guid
2301          */
2302         public static function guidFromUri($uri, $host)
2303         {
2304                 // Our regular guid routine is using this kind of prefix as well
2305                 // We have to avoid that different routines could accidentally create the same value
2306                 $parsed = parse_url($uri);
2307
2308                 // We use a hash of the hostname as prefix for the guid
2309                 $guid_prefix = hash("crc32", $host);
2310
2311                 // Remove the scheme to make sure that "https" and "http" doesn't make a difference
2312                 unset($parsed["scheme"]);
2313
2314                 // Glue it together to be able to make a hash from it
2315                 $host_id = implode("/", $parsed);
2316
2317                 // We could use any hash algorithm since it isn't a security issue
2318                 $host_hash = hash("ripemd128", $host_id);
2319
2320                 return $guid_prefix.$host_hash;
2321         }
2322
2323         /**
2324          * generate an unique URI
2325          *
2326          * @param integer $uid User id
2327          * @param string $guid An existing GUID (Otherwise it will be generated)
2328          *
2329          * @return string
2330          */
2331         public static function newURI($uid, $guid = "")
2332         {
2333                 if ($guid == "") {
2334                         $guid = System::createUUID();
2335                 }
2336
2337                 return self::getApp()->getBaseURL() . '/objects/' . $guid;
2338         }
2339
2340         /**
2341          * @brief Set "success_update" and "last-item" to the date of the last time we heard from this contact
2342          *
2343          * This can be used to filter for inactive contacts.
2344          * Only do this for public postings to avoid privacy problems, since poco data is public.
2345          * Don't set this value if it isn't from the owner (could be an author that we don't know)
2346          *
2347          * @param array $arr Contains the just posted item record
2348          */
2349         private static function updateContact($arr)
2350         {
2351                 // Unarchive the author
2352                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["author-id"]]);
2353                 if (DBA::isResult($contact)) {
2354                         Contact::unmarkForArchival($contact);
2355                 }
2356
2357                 // Unarchive the contact if it's not our own contact
2358                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["contact-id"], 'self' => false]);
2359                 if (DBA::isResult($contact)) {
2360                         Contact::unmarkForArchival($contact);
2361                 }
2362
2363                 $update = (!$arr['private'] && ((defaults($arr, 'author-link', '') === defaults($arr, 'owner-link', '')) || ($arr["parent-uri"] === $arr["uri"])));
2364
2365                 // Is it a forum? Then we don't care about the rules from above
2366                 if (!$update && ($arr["network"] == Protocol::DFRN) && ($arr["parent-uri"] === $arr["uri"])) {
2367                         if (DBA::exists('contact', ['id' => $arr['contact-id'], 'forum' => true])) {
2368                                 $update = true;
2369                         }
2370                 }
2371
2372                 if ($update) {
2373                         DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2374                                 ['id' => $arr['contact-id']]);
2375                 }
2376                 // Now do the same for the system wide contacts with uid=0
2377                 if (!$arr['private']) {
2378                         DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2379                                 ['id' => $arr['owner-id']]);
2380
2381                         if ($arr['owner-id'] != $arr['author-id']) {
2382                                 DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2383                                         ['id' => $arr['author-id']]);
2384                         }
2385                 }
2386         }
2387
2388         public static function setHashtags(&$item)
2389         {
2390
2391                 $tags = get_tags($item["body"]);
2392
2393                 // No hashtags?
2394                 if (!count($tags)) {
2395                         return false;
2396                 }
2397
2398                 // This sorting is important when there are hashtags that are part of other hashtags
2399                 // Otherwise there could be problems with hashtags like #test and #test2
2400                 rsort($tags);
2401
2402                 $URLSearchString = "^\[\]";
2403
2404                 // All hashtags should point to the home server if "local_tags" is activated
2405                 if (Config::get('system', 'local_tags')) {
2406                         $item["body"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2407                                         "#[url=".System::baseUrl()."/search?tag=$2]$2[/url]", $item["body"]);
2408
2409                         $item["tag"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2410                                         "#[url=".System::baseUrl()."/search?tag=$2]$2[/url]", $item["tag"]);
2411                 }
2412
2413                 // mask hashtags inside of url, bookmarks and attachments to avoid urls in urls
2414                 $item["body"] = preg_replace_callback("/\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2415                         function ($match) {
2416                                 return ("[url=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/url]");
2417                         }, $item["body"]);
2418
2419                 $item["body"] = preg_replace_callback("/\[bookmark\=([$URLSearchString]*)\](.*?)\[\/bookmark\]/ism",
2420                         function ($match) {
2421                                 return ("[bookmark=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/bookmark]");
2422                         }, $item["body"]);
2423
2424                 $item["body"] = preg_replace_callback("/\[attachment (.*)\](.*?)\[\/attachment\]/ism",
2425                         function ($match) {
2426                                 return ("[attachment " . str_replace("#", "&num;", $match[1]) . "]" . $match[2] . "[/attachment]");
2427                         }, $item["body"]);
2428
2429                 // Repair recursive urls
2430                 $item["body"] = preg_replace("/&num;\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2431                                 "&num;$2", $item["body"]);
2432
2433                 foreach ($tags as $tag) {
2434                         if ((strpos($tag, '#') !== 0) || strpos($tag, '[url=')) {
2435                                 continue;
2436                         }
2437
2438                         $basetag = str_replace('_',' ',substr($tag,1));
2439
2440                         $newtag = '#[url=' . System::baseUrl() . '/search?tag=' . rawurlencode($basetag) . ']' . $basetag . '[/url]';
2441
2442                         $item["body"] = str_replace($tag, $newtag, $item["body"]);
2443
2444                         if (!stristr($item["tag"], "/search?tag=" . $basetag . "]" . $basetag . "[/url]")) {
2445                                 if (strlen($item["tag"])) {
2446                                         $item["tag"] = ','.$item["tag"];
2447                                 }
2448                                 $item["tag"] = $newtag.$item["tag"];
2449                         }
2450                 }
2451
2452                 // Convert back the masked hashtags
2453                 $item["body"] = str_replace("&num;", "#", $item["body"]);
2454         }
2455
2456         public static function getGuidById($id)
2457         {
2458                 $item = self::selectFirst(['guid'], ['id' => $id]);
2459                 if (DBA::isResult($item)) {
2460                         return $item['guid'];
2461                 } else {
2462                         return '';
2463                 }
2464         }
2465
2466         /**
2467          * This function is only used for the old Friendica app on Android that doesn't like paths with guid
2468          * @param string $guid item guid
2469          * @param int    $uid  user id
2470          * @return array with id and nick of the item with the given guid
2471          */
2472         public static function getIdAndNickByGuid($guid, $uid = 0)
2473         {
2474                 $nick = "";
2475                 $id = 0;
2476
2477                 if ($uid == 0) {
2478                         $uid == local_user();
2479                 }
2480
2481                 // Does the given user have this item?
2482                 if ($uid) {
2483                         $item = self::selectFirst(['id'], ['guid' => $guid, 'uid' => $uid]);
2484                         if (DBA::isResult($item)) {
2485                                 $user = DBA::selectFirst('user', ['nickname'], ['uid' => $uid]);
2486                                 if (!DBA::isResult($user)) {
2487                                         return;
2488                                 }
2489                                 $id = $item['id'];
2490                                 $nick = $user['nickname'];
2491                         }
2492                 }
2493
2494                 // Or is it anywhere on the server?
2495                 if ($nick == "") {
2496                         $condition = ["`guid` = ? AND `uid` != 0", $guid];
2497                         $item = self::selectFirst(['id', 'uid'], $condition);
2498                         if (DBA::isResult($item)) {
2499                                 $user = DBA::selectFirst('user', ['nickname'], ['uid' => $item['uid']]);
2500                                 if (!DBA::isResult($user)) {
2501                                         return;
2502                                 }
2503                                 $id = $item['id'];
2504                                 $nick = $user['nickname'];
2505                         }
2506                 }
2507                 return ["nick" => $nick, "id" => $id];
2508         }
2509
2510         /**
2511          * look for mention tags and setup a second delivery chain for forum/community posts if appropriate
2512          * @param int $uid
2513          * @param int $item_id
2514          * @return bool true if item was deleted, else false
2515          */
2516         private static function tagDeliver($uid, $item_id)
2517         {
2518                 $mention = false;
2519
2520                 $user = DBA::selectFirst('user', [], ['uid' => $uid]);
2521                 if (!DBA::isResult($user)) {
2522                         return;
2523                 }
2524
2525                 $community_page = (($user['page-flags'] == Contact::PAGE_COMMUNITY) ? true : false);
2526                 $prvgroup = (($user['page-flags'] == Contact::PAGE_PRVGROUP) ? true : false);
2527
2528                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $item_id]);
2529                 if (!DBA::isResult($item)) {
2530                         return;
2531                 }
2532
2533                 $link = normalise_link(System::baseUrl() . '/profile/' . $user['nickname']);
2534
2535                 /*
2536                  * Diaspora uses their own hardwired link URL in @-tags
2537                  * instead of the one we supply with webfinger
2538                  */
2539                 $dlink = normalise_link(System::baseUrl() . '/u/' . $user['nickname']);
2540
2541                 $cnt = preg_match_all('/[\@\!]\[url\=(.*?)\](.*?)\[\/url\]/ism', $item['body'], $matches, PREG_SET_ORDER);
2542                 if ($cnt) {
2543                         foreach ($matches as $mtch) {
2544                                 if (link_compare($link, $mtch[1]) || link_compare($dlink, $mtch[1])) {
2545                                         $mention = true;
2546                                         logger('mention found: ' . $mtch[2]);
2547                                 }
2548                         }
2549                 }
2550
2551                 if (!$mention) {
2552                         if (($community_page || $prvgroup) &&
2553                                   !$item['wall'] && !$item['origin'] && ($item['id'] == $item['parent'])) {
2554                                 // mmh.. no mention.. community page or private group... no wall.. no origin.. top-post (not a comment)
2555                                 // delete it!
2556                                 logger("no-mention top-level post to community or private group. delete.");
2557                                 DBA::delete('item', ['id' => $item_id]);
2558                                 return true;
2559                         }
2560                         return;
2561                 }
2562
2563                 $arr = ['item' => $item, 'user' => $user];
2564
2565                 Addon::callHooks('tagged', $arr);
2566
2567                 if (!$community_page && !$prvgroup) {
2568                         return;
2569                 }
2570
2571                 /*
2572                  * tgroup delivery - setup a second delivery chain
2573                  * prevent delivery looping - only proceed
2574                  * if the message originated elsewhere and is a top-level post
2575                  */
2576                 if ($item['wall'] || $item['origin'] || ($item['id'] != $item['parent'])) {
2577                         return;
2578                 }
2579
2580                 // now change this copy of the post to a forum head message and deliver to all the tgroup members
2581                 $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'], ['uid' => $uid, 'self' => true]);
2582                 if (!DBA::isResult($self)) {
2583                         return;
2584                 }
2585
2586                 $owner_id = Contact::getIdForURL($self['url']);
2587
2588                 // also reset all the privacy bits to the forum default permissions
2589
2590                 $private = ($user['allow_cid'] || $user['allow_gid'] || $user['deny_cid'] || $user['deny_gid']) ? 1 : 0;
2591
2592                 $psid = PermissionSet::fetchIDForPost($user);
2593
2594                 $forum_mode = ($prvgroup ? 2 : 1);
2595
2596                 $fields = ['wall' => true, 'origin' => true, 'forum_mode' => $forum_mode, 'contact-id' => $self['id'],
2597                         'owner-id' => $owner_id, 'private' => $private, 'psid' => $psid];
2598                 self::update($fields, ['id' => $item_id]);
2599
2600                 self::updateThread($item_id);
2601
2602                 Worker::add(['priority' => PRIORITY_HIGH, 'dont_fork' => true], 'Notifier', 'tgroup', $item_id);
2603         }
2604
2605         public static function isRemoteSelf($contact, &$datarray)
2606         {
2607                 $a = get_app();
2608
2609                 if (!$contact['remote_self']) {
2610                         return false;
2611                 }
2612
2613                 // Prevent the forwarding of posts that are forwarded
2614                 if (!empty($datarray["extid"]) && ($datarray["extid"] == Protocol::DFRN)) {
2615                         logger('Already forwarded', LOGGER_DEBUG);
2616                         return false;
2617                 }
2618
2619                 // Prevent to forward already forwarded posts
2620                 if ($datarray["app"] == $a->getHostName()) {
2621                         logger('Already forwarded (second test)', LOGGER_DEBUG);
2622                         return false;
2623                 }
2624
2625                 // Only forward posts
2626                 if ($datarray["verb"] != ACTIVITY_POST) {
2627                         logger('No post', LOGGER_DEBUG);
2628                         return false;
2629                 }
2630
2631                 if (($contact['network'] != Protocol::FEED) && $datarray['private']) {
2632                         logger('Not public', LOGGER_DEBUG);
2633                         return false;
2634                 }
2635
2636                 $datarray2 = $datarray;
2637                 logger('remote-self start - Contact '.$contact['url'].' - '.$contact['remote_self'].' Item '.print_r($datarray, true), LOGGER_DEBUG);
2638                 if ($contact['remote_self'] == 2) {
2639                         $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'],
2640                                         ['uid' => $contact['uid'], 'self' => true]);
2641                         if (DBA::isResult($self)) {
2642                                 $datarray['contact-id'] = $self["id"];
2643
2644                                 $datarray['owner-name'] = $self["name"];
2645                                 $datarray['owner-link'] = $self["url"];
2646                                 $datarray['owner-avatar'] = $self["thumb"];
2647
2648                                 $datarray['author-name']   = $datarray['owner-name'];
2649                                 $datarray['author-link']   = $datarray['owner-link'];
2650                                 $datarray['author-avatar'] = $datarray['owner-avatar'];
2651
2652                                 unset($datarray['created']);
2653                                 unset($datarray['edited']);
2654
2655                                 unset($datarray['network']);
2656                                 unset($datarray['owner-id']);
2657                                 unset($datarray['author-id']);
2658                         }
2659
2660                         if ($contact['network'] != Protocol::FEED) {
2661                                 $datarray["guid"] = System::createUUID();
2662                                 unset($datarray["plink"]);
2663                                 $datarray["uri"] = self::newURI($contact['uid'], $datarray["guid"]);
2664                                 $datarray["parent-uri"] = $datarray["uri"];
2665                                 $datarray["thr-parent"] = $datarray["uri"];
2666                                 $datarray["extid"] = Protocol::DFRN;
2667                                 $urlpart = parse_url($datarray2['author-link']);
2668                                 $datarray["app"] = $urlpart["host"];
2669                         } else {
2670                                 $datarray['private'] = 0;
2671                         }
2672                 }
2673
2674                 if ($contact['network'] != Protocol::FEED) {
2675                         // Store the original post
2676                         $result = self::insert($datarray2, false, false);
2677                         logger('remote-self post original item - Contact '.$contact['url'].' return '.$result.' Item '.print_r($datarray2, true), LOGGER_DEBUG);
2678                 } else {
2679                         $datarray["app"] = "Feed";
2680                         $result = true;
2681                 }
2682
2683                 // Trigger automatic reactions for addons
2684                 $datarray['api_source'] = true;
2685
2686                 // We have to tell the hooks who we are - this really should be improved
2687                 $_SESSION["authenticated"] = true;
2688                 $_SESSION["uid"] = $contact['uid'];
2689
2690                 return $result;
2691         }
2692
2693         /**
2694          *
2695          * @param string $s
2696          * @param int    $uid
2697          * @param array  $item
2698          * @param int    $cid
2699          * @return string
2700          */
2701         public static function fixPrivatePhotos($s, $uid, $item = null, $cid = 0)
2702         {
2703                 if (Config::get('system', 'disable_embedded')) {
2704                         return $s;
2705                 }
2706
2707                 logger('check for photos', LOGGER_DEBUG);
2708                 $site = substr(System::baseUrl(), strpos(System::baseUrl(), '://'));
2709
2710                 $orig_body = $s;
2711                 $new_body = '';
2712
2713                 $img_start = strpos($orig_body, '[img');
2714                 $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2715                 $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2716
2717                 while (($img_st_close !== false) && ($img_len !== false)) {
2718                         $img_st_close++; // make it point to AFTER the closing bracket
2719                         $image = substr($orig_body, $img_start + $img_st_close, $img_len);
2720
2721                         logger('found photo ' . $image, LOGGER_DEBUG);
2722
2723                         if (stristr($image, $site . '/photo/')) {
2724                                 // Only embed locally hosted photos
2725                                 $replace = false;
2726                                 $i = basename($image);
2727                                 $i = str_replace(['.jpg', '.png', '.gif'], ['', '', ''], $i);
2728                                 $x = strpos($i, '-');
2729
2730                                 if ($x) {
2731                                         $res = substr($i, $x + 1);
2732                                         $i = substr($i, 0, $x);
2733                                         $fields = ['data', 'type', 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid'];
2734                                         $photo = DBA::selectFirst('photo', $fields, ['resource-id' => $i, 'scale' => $res, 'uid' => $uid]);
2735                                         if (DBA::isResult($photo)) {
2736                                                 /*
2737                                                  * Check to see if we should replace this photo link with an embedded image
2738                                                  * 1. No need to do so if the photo is public
2739                                                  * 2. If there's a contact-id provided, see if they're in the access list
2740                                                  *    for the photo. If so, embed it.
2741                                                  * 3. Otherwise, if we have an item, see if the item permissions match the photo
2742                                                  *    permissions, regardless of order but first check to see if they're an exact
2743                                                  *    match to save some processing overhead.
2744                                                  */
2745                                                 if (self::hasPermissions($photo)) {
2746                                                         if ($cid) {
2747                                                                 $recips = self::enumeratePermissions($photo);
2748                                                                 if (in_array($cid, $recips)) {
2749                                                                         $replace = true;
2750                                                                 }
2751                                                         } elseif ($item) {
2752                                                                 if (self::samePermissions($item, $photo)) {
2753                                                                         $replace = true;
2754                                                                 }
2755                                                         }
2756                                                 }
2757                                                 if ($replace) {
2758                                                         $data = $photo['data'];
2759                                                         $type = $photo['type'];
2760
2761                                                         // If a custom width and height were specified, apply before embedding
2762                                                         if (preg_match("/\[img\=([0-9]*)x([0-9]*)\]/is", substr($orig_body, $img_start, $img_st_close), $match)) {
2763                                                                 logger('scaling photo', LOGGER_DEBUG);
2764
2765                                                                 $width = intval($match[1]);
2766                                                                 $height = intval($match[2]);
2767
2768                                                                 $Image = new Image($data, $type);
2769                                                                 if ($Image->isValid()) {
2770                                                                         $Image->scaleDown(max($width, $height));
2771                                                                         $data = $Image->asString();
2772                                                                         $type = $Image->getType();
2773                                                                 }
2774                                                         }
2775
2776                                                         logger('replacing photo', LOGGER_DEBUG);
2777                                                         $image = 'data:' . $type . ';base64,' . base64_encode($data);
2778                                                         logger('replaced: ' . $image, LOGGER_DATA);
2779                                                 }
2780                                         }
2781                                 }
2782                         }
2783
2784                         $new_body = $new_body . substr($orig_body, 0, $img_start + $img_st_close) . $image . '[/img]';
2785                         $orig_body = substr($orig_body, $img_start + $img_st_close + $img_len + strlen('[/img]'));
2786                         if ($orig_body === false) {
2787                                 $orig_body = '';
2788                         }
2789
2790                         $img_start = strpos($orig_body, '[img');
2791                         $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2792                         $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2793                 }
2794
2795                 $new_body = $new_body . $orig_body;
2796
2797                 return $new_body;
2798         }
2799
2800         private static function hasPermissions($obj)
2801         {
2802                 return !empty($obj['allow_cid']) || !empty($obj['allow_gid']) ||
2803                         !empty($obj['deny_cid']) || !empty($obj['deny_gid']);
2804         }
2805
2806         private static function samePermissions($obj1, $obj2)
2807         {
2808                 // first part is easy. Check that these are exactly the same.
2809                 if (($obj1['allow_cid'] == $obj2['allow_cid'])
2810                         && ($obj1['allow_gid'] == $obj2['allow_gid'])
2811                         && ($obj1['deny_cid'] == $obj2['deny_cid'])
2812                         && ($obj1['deny_gid'] == $obj2['deny_gid'])) {
2813                         return true;
2814                 }
2815
2816                 // This is harder. Parse all the permissions and compare the resulting set.
2817                 $recipients1 = self::enumeratePermissions($obj1);
2818                 $recipients2 = self::enumeratePermissions($obj2);
2819                 sort($recipients1);
2820                 sort($recipients2);
2821
2822                 /// @TODO Comparison of arrays, maybe use array_diff_assoc() here?
2823                 return ($recipients1 == $recipients2);
2824         }
2825
2826         // returns an array of contact-ids that are allowed to see this object
2827         public static function enumeratePermissions($obj)
2828         {
2829                 $allow_people = expand_acl($obj['allow_cid']);
2830                 $allow_groups = Group::expand(expand_acl($obj['allow_gid']));
2831                 $deny_people  = expand_acl($obj['deny_cid']);
2832                 $deny_groups  = Group::expand(expand_acl($obj['deny_gid']));
2833                 $recipients   = array_unique(array_merge($allow_people, $allow_groups));
2834                 $deny         = array_unique(array_merge($deny_people, $deny_groups));
2835                 $recipients   = array_diff($recipients, $deny);
2836                 return $recipients;
2837         }
2838
2839         public static function getFeedTags($item)
2840         {
2841                 $ret = [];
2842                 $matches = false;
2843                 $cnt = preg_match_all('|\#\[url\=(.*?)\](.*?)\[\/url\]|', $item['tag'], $matches);
2844                 if ($cnt) {
2845                         for ($x = 0; $x < $cnt; $x ++) {
2846                                 if ($matches[1][$x]) {
2847                                         $ret[$matches[2][$x]] = ['#', $matches[1][$x], $matches[2][$x]];
2848                                 }
2849                         }
2850                 }
2851                 $matches = false;
2852                 $cnt = preg_match_all('|\@\[url\=(.*?)\](.*?)\[\/url\]|', $item['tag'], $matches);
2853                 if ($cnt) {
2854                         for ($x = 0; $x < $cnt; $x ++) {
2855                                 if ($matches[1][$x]) {
2856                                         $ret[] = ['@', $matches[1][$x], $matches[2][$x]];
2857                                 }
2858                         }
2859                 }
2860                 return $ret;
2861         }
2862
2863         public static function expire($uid, $days, $network = "", $force = false)
2864         {
2865                 if (!$uid || ($days < 1)) {
2866                         return;
2867                 }
2868
2869                 $condition = ["`uid` = ? AND NOT `deleted` AND `id` = `parent` AND `gravity` = ?",
2870                         $uid, GRAVITY_PARENT];
2871
2872                 /*
2873                  * $expire_network_only = save your own wall posts
2874                  * and just expire conversations started by others
2875                  */
2876                 $expire_network_only = PConfig::get($uid, 'expire', 'network_only', false);
2877
2878                 if ($expire_network_only) {
2879                         $condition[0] .= " AND NOT `wall`";
2880                 }
2881
2882                 if ($network != "") {
2883                         $condition[0] .= " AND `network` = ?";
2884                         $condition[] = $network;
2885
2886                         /*
2887                          * There is an index "uid_network_received" but not "uid_network_created"
2888                          * This avoids the creation of another index just for one purpose.
2889                          * And it doesn't really matter wether to look at "received" or "created"
2890                          */
2891                         $condition[0] .= " AND `received` < UTC_TIMESTAMP() - INTERVAL ? DAY";
2892                         $condition[] = $days;
2893                 } else {
2894                         $condition[0] .= " AND `created` < UTC_TIMESTAMP() - INTERVAL ? DAY";
2895                         $condition[] = $days;
2896                 }
2897
2898                 $items = self::select(['file', 'resource-id', 'starred', 'type', 'id', 'post-type'], $condition);
2899
2900                 if (!DBA::isResult($items)) {
2901                         return;
2902                 }
2903
2904                 $expire_items = PConfig::get($uid, 'expire', 'items', true);
2905
2906                 // Forcing expiring of items - but not notes and marked items
2907                 if ($force) {
2908                         $expire_items = true;
2909                 }
2910
2911                 $expire_notes = PConfig::get($uid, 'expire', 'notes', true);
2912                 $expire_starred = PConfig::get($uid, 'expire', 'starred', true);
2913                 $expire_photos = PConfig::get($uid, 'expire', 'photos', false);
2914
2915                 $expired = 0;
2916
2917                 while ($item = Item::fetch($items)) {
2918                         // don't expire filed items
2919
2920                         if (strpos($item['file'], '[') !== false) {
2921                                 continue;
2922                         }
2923
2924                         // Only expire posts, not photos and photo comments
2925
2926                         if (!$expire_photos && strlen($item['resource-id'])) {
2927                                 continue;
2928                         } elseif (!$expire_starred && intval($item['starred'])) {
2929                                 continue;
2930                         } elseif (!$expire_notes && (($item['type'] == 'note') || ($item['post-type'] == Item::PT_PERSONAL_NOTE))) {
2931                                 continue;
2932                         } elseif (!$expire_items && ($item['type'] != 'note') && ($item['post-type'] != Item::PT_PERSONAL_NOTE)) {
2933                                 continue;
2934                         }
2935
2936                         self::deleteById($item['id'], PRIORITY_LOW);
2937
2938                         ++$expired;
2939                 }
2940                 DBA::close($items);
2941                 logger('User ' . $uid . ": expired $expired items; expire items: $expire_items, expire notes: $expire_notes, expire starred: $expire_starred, expire photos: $expire_photos");
2942         }
2943
2944         public static function firstPostDate($uid, $wall = false)
2945         {
2946                 $condition = ['uid' => $uid, 'wall' => $wall, 'deleted' => false, 'visible' => true, 'moderated' => false];
2947                 $params = ['order' => ['created' => false]];
2948                 $thread = DBA::selectFirst('thread', ['created'], $condition, $params);
2949                 if (DBA::isResult($thread)) {
2950                         return substr(DateTimeFormat::local($thread['created']), 0, 10);
2951                 }
2952                 return false;
2953         }
2954
2955         /**
2956          * @brief add/remove activity to an item
2957          *
2958          * Toggle activities as like,dislike,attend of an item
2959          *
2960          * @param string $item_id
2961          * @param string $verb
2962          *              Activity verb. One of
2963          *                      like, unlike, dislike, undislike, attendyes, unattendyes,
2964          *                      attendno, unattendno, attendmaybe, unattendmaybe
2965          * @hook 'post_local_end'
2966          *              array $arr
2967          *                      'post_id' => ID of posted item
2968          */
2969         public static function performLike($item_id, $verb)
2970         {
2971                 if (!local_user() && !remote_user()) {
2972                         return false;
2973                 }
2974
2975                 switch ($verb) {
2976                         case 'like':
2977                         case 'unlike':
2978                                 $activity = ACTIVITY_LIKE;
2979                                 break;
2980                         case 'dislike':
2981                         case 'undislike':
2982                                 $activity = ACTIVITY_DISLIKE;
2983                                 break;
2984                         case 'attendyes':
2985                         case 'unattendyes':
2986                                 $activity = ACTIVITY_ATTEND;
2987                                 break;
2988                         case 'attendno':
2989                         case 'unattendno':
2990                                 $activity = ACTIVITY_ATTENDNO;
2991                                 break;
2992                         case 'attendmaybe':
2993                         case 'unattendmaybe':
2994                                 $activity = ACTIVITY_ATTENDMAYBE;
2995                                 break;
2996                         default:
2997                                 logger('like: unknown verb ' . $verb . ' for item ' . $item_id);
2998                                 return false;
2999                 }
3000
3001                 // Enable activity toggling instead of on/off
3002                 $event_verb_flag = $activity === ACTIVITY_ATTEND || $activity === ACTIVITY_ATTENDNO || $activity === ACTIVITY_ATTENDMAYBE;
3003
3004                 logger('like: verb ' . $verb . ' item ' . $item_id);
3005
3006                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['`id` = ? OR `uri` = ?', $item_id, $item_id]);
3007                 if (!DBA::isResult($item)) {
3008                         logger('like: unknown item ' . $item_id);
3009                         return false;
3010                 }
3011
3012                 $item_uri = $item['uri'];
3013
3014                 $uid = $item['uid'];
3015                 if (($uid == 0) && local_user()) {
3016                         $uid = local_user();
3017                 }
3018
3019                 if (!Security::canWriteToUserWall($uid)) {
3020                         logger('like: unable to write on wall ' . $uid);
3021                         return false;
3022                 }
3023
3024                 // Retrieves the local post owner
3025                 $owner_self_contact = DBA::selectFirst('contact', [], ['uid' => $uid, 'self' => true]);
3026                 if (!DBA::isResult($owner_self_contact)) {
3027                         logger('like: unknown owner ' . $uid);
3028                         return false;
3029                 }
3030
3031                 // Retrieve the current logged in user's public contact
3032                 $author_id = public_contact();
3033
3034                 $author_contact = DBA::selectFirst('contact', ['url'], ['id' => $author_id]);
3035                 if (!DBA::isResult($author_contact)) {
3036                         logger('like: unknown author ' . $author_id);
3037                         return false;
3038                 }
3039
3040                 // Contact-id is the uid-dependant author contact
3041                 if (local_user() == $uid) {
3042                         $item_contact_id = $owner_self_contact['id'];
3043                         $item_contact = $owner_self_contact;
3044                 } else {
3045                         $item_contact_id = Contact::getIdForURL($author_contact['url'], $uid, true);
3046                         $item_contact = DBA::selectFirst('contact', [], ['id' => $item_contact_id]);
3047                         if (!DBA::isResult($item_contact)) {
3048                                 logger('like: unknown item contact ' . $item_contact_id);
3049                                 return false;
3050                         }
3051                 }
3052
3053                 // Look for an existing verb row
3054                 // event participation are essentially radio toggles. If you make a subsequent choice,
3055                 // we need to eradicate your first choice.
3056                 if ($event_verb_flag) {
3057                         $verbs = [ACTIVITY_ATTEND, ACTIVITY_ATTENDNO, ACTIVITY_ATTENDMAYBE];
3058
3059                         // Translate to the index based activity index
3060                         $activities = [];
3061                         foreach ($verbs as $verb) {
3062                                 $activities[] = self::activityToIndex($verb);
3063                         }
3064                 } else {
3065                         $activities = self::activityToIndex($activity);
3066                 }
3067
3068                 $condition = ['activity' => $activities, 'deleted' => false, 'gravity' => GRAVITY_ACTIVITY,
3069                         'author-id' => $author_id, 'uid' => $item['uid'], 'thr-parent' => $item_uri];
3070
3071                 $like_item = self::selectFirst(['id', 'guid', 'verb'], $condition);
3072
3073                 // If it exists, mark it as deleted
3074                 if (DBA::isResult($like_item)) {
3075                         self::deleteById($like_item['id']);
3076
3077                         if (!$event_verb_flag || $like_item['verb'] == $activity) {
3078                                 return true;
3079                         }
3080                 }
3081
3082                 // Verb is "un-something", just trying to delete existing entries
3083                 if (strpos($verb, 'un') === 0) {
3084                         return true;
3085                 }
3086
3087                 $objtype = $item['resource-id'] ? ACTIVITY_OBJ_IMAGE : ACTIVITY_OBJ_NOTE;
3088
3089                 $new_item = [
3090                         'guid'          => System::createUUID(),
3091                         'uri'           => self::newURI($item['uid']),
3092                         'uid'           => $item['uid'],
3093                         'contact-id'    => $item_contact_id,
3094                         'wall'          => $item['wall'],
3095                         'origin'        => 1,
3096                         'network'       => Protocol::DFRN,
3097                         'gravity'       => GRAVITY_ACTIVITY,
3098                         'parent'        => $item['id'],
3099                         'parent-uri'    => $item['uri'],
3100                         'thr-parent'    => $item['uri'],
3101                         'owner-id'      => $author_id,
3102                         'author-id'     => $author_id,
3103                         'body'          => $activity,
3104                         'verb'          => $activity,
3105                         'object-type'   => $objtype,
3106                         'allow_cid'     => $item['allow_cid'],
3107                         'allow_gid'     => $item['allow_gid'],
3108                         'deny_cid'      => $item['deny_cid'],
3109                         'deny_gid'      => $item['deny_gid'],
3110                         'visible'       => 1,
3111                         'unseen'        => 1,
3112                 ];
3113
3114                 $signed = Diaspora::createLikeSignature($uid, $new_item);
3115                 if (!empty($signed)) {
3116                         $new_item['diaspora_signed_text'] = json_encode($signed);
3117                 }
3118
3119                 $new_item_id = self::insert($new_item);
3120
3121                 // If the parent item isn't visible then set it to visible
3122                 if (!$item['visible']) {
3123                         self::update(['visible' => true], ['id' => $item['id']]);
3124                 }
3125
3126                 $new_item['id'] = $new_item_id;
3127
3128                 Addon::callHooks('post_local_end', $new_item);
3129
3130                 return true;
3131         }
3132
3133         private static function addThread($itemid, $onlyshadow = false)
3134         {
3135                 $fields = ['uid', 'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private', 'pubmail',
3136                         'moderated', 'visible', 'starred', 'contact-id', 'post-type',
3137                         'deleted', 'origin', 'forum_mode', 'mention', 'network', 'author-id', 'owner-id'];
3138                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3139                 $item = self::selectFirst($fields, $condition);
3140
3141                 if (!DBA::isResult($item)) {
3142                         return;
3143                 }
3144
3145                 $item['iid'] = $itemid;
3146
3147                 if (!$onlyshadow) {
3148                         $result = DBA::insert('thread', $item);
3149
3150                         logger("Add thread for item ".$itemid." - ".print_r($result, true), LOGGER_DEBUG);
3151                 }
3152         }
3153
3154         private static function updateThread($itemid, $setmention = false)
3155         {
3156                 $fields = ['uid', 'guid', 'created', 'edited', 'commented', 'received', 'changed', 'post-type',
3157                         'wall', 'private', 'pubmail', 'moderated', 'visible', 'starred', 'contact-id',
3158                         'deleted', 'origin', 'forum_mode', 'network', 'author-id', 'owner-id'];
3159                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3160
3161                 $item = self::selectFirst($fields, $condition);
3162                 if (!DBA::isResult($item)) {
3163                         return;
3164                 }
3165
3166                 if ($setmention) {
3167                         $item["mention"] = 1;
3168                 }
3169
3170                 $sql = "";
3171
3172                 $fields = [];
3173
3174                 foreach ($item as $field => $data) {
3175                         if (!in_array($field, ["guid"])) {
3176                                 $fields[$field] = $data;
3177                         }
3178                 }
3179
3180                 $result = DBA::update('thread', $fields, ['iid' => $itemid]);
3181
3182                 logger("Update thread for item ".$itemid." - guid ".$item["guid"]." - ".(int)$result, LOGGER_DEBUG);
3183         }
3184
3185         private static function deleteThread($itemid, $itemuri = "")
3186         {
3187                 $item = DBA::selectFirst('thread', ['uid'], ['iid' => $itemid]);
3188                 if (!DBA::isResult($item)) {
3189                         logger('No thread found for id '.$itemid, LOGGER_DEBUG);
3190                         return;
3191                 }
3192
3193                 $result = DBA::delete('thread', ['iid' => $itemid], ['cascade' => false]);
3194
3195                 logger("deleteThread: Deleted thread for item ".$itemid." - ".print_r($result, true), LOGGER_DEBUG);
3196
3197                 if ($itemuri != "") {
3198                         $condition = ["`uri` = ? AND NOT `deleted` AND NOT (`uid` IN (?, 0))", $itemuri, $item["uid"]];
3199                         if (!self::exists($condition)) {
3200                                 DBA::delete('item', ['uri' => $itemuri, 'uid' => 0]);
3201                                 logger("deleteThread: Deleted shadow for item ".$itemuri, LOGGER_DEBUG);
3202                         }
3203                 }
3204         }
3205
3206         public static function getPermissionsSQLByUserId($owner_id, $remote_verified = false, $groups = null)
3207         {
3208                 $local_user = local_user();
3209                 $remote_user = remote_user();
3210
3211                 /*
3212                  * Construct permissions
3213                  *
3214                  * default permissions - anonymous user
3215                  */
3216                 $sql = " AND NOT `item`.`private`";
3217
3218                 // Profile owner - everything is visible
3219                 if ($local_user && ($local_user == $owner_id)) {
3220                         $sql = '';
3221                 } elseif ($remote_user) {
3222                         /*
3223                          * Authenticated visitor. Unless pre-verified,
3224                          * check that the contact belongs to this $owner_id
3225                          * and load the groups the visitor belongs to.
3226                          * If pre-verified, the caller is expected to have already
3227                          * done this and passed the groups into this function.
3228                          */
3229                         $set = PermissionSet::get($owner_id, $remote_user, $groups);
3230
3231                         if (!empty($set)) {
3232                                 $sql_set = " OR (`item`.`private` IN (1,2) AND `item`.`wall` AND `item`.`psid` IN (" . implode(',', $set) . "))";
3233                         } else {
3234                                 $sql_set = '';
3235                         }
3236
3237                         $sql = " AND (NOT `item`.`private`" . $sql_set . ")";
3238                 }
3239
3240                 return $sql;
3241         }
3242 }