src/Model/Item.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2020, Friendica
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 namespace Friendica\Model;
  23
  24 use Friendica\Content\Text\BBCode;
  25 use Friendica\Content\Text\HTML;
  26 use Friendica\Core\Hook;
  27 use Friendica\Core\Logger;
  28 use Friendica\Core\Protocol;
  29 use Friendica\Core\Renderer;
  30 use Friendica\Core\Session;
  31 use Friendica\Core\System;
  32 use Friendica\Model\Tag;
  33 use Friendica\Core\Worker;
  34 use Friendica\Database\DBA;
  35 use Friendica\Database\DBStructure;
  36 use Friendica\DI;
  37 use Friendica\Model\Post;
  38 use Friendica\Protocol\Activity;
  39 use Friendica\Protocol\ActivityPub;
  40 use Friendica\Protocol\Diaspora;
  41 use Friendica\Util\DateTimeFormat;
  42 use Friendica\Util\Map;
  43 use Friendica\Util\Network;
  44 use Friendica\Util\Strings;
  45 use Friendica\Worker\Delivery;
  46 use Friendica\Repository\PermissionSet as RepPermissionSet;
  47 use LanguageDetection\Language;
  48
  49 class Item
  50 {
  51         // Posting types, inspired by https://www.w3.org/TR/activitystreams-vocabulary/#object-types
  52         const PT_ARTICLE = 0;
  53         const PT_NOTE = 1;
  54         const PT_PAGE = 2;
  55         const PT_IMAGE = 16;
  56         const PT_AUDIO = 17;
  57         const PT_VIDEO = 18;
  58         const PT_DOCUMENT = 19;
  59         const PT_EVENT = 32;
  60         const PT_TAG = 64;
  61         const PT_TO = 65;
  62         const PT_CC = 66;
  63         const PT_BTO = 67;
  64         const PT_BCC = 68;
  65         const PT_FOLLOWER = 69;
  66         const PT_ANNOUNCEMENT = 70;
  67         const PT_COMMENT = 71;
  68         const PT_STORED = 72;
  69         const PT_GLOBAL = 73;
  70         const PT_RELAY = 74;
  71         const PT_FETCHED = 75;
  72         const PT_PERSONAL_NOTE = 128;
  73
  74         // Field list that is used to display the items
  75         const DISPLAY_FIELDLIST = [
  76                 'uid', 'id', 'parent', 'uri-id', 'uri', 'thr-parent', 'parent-uri', 'guid', 'network', 'gravity',
  77                 'commented', 'created', 'edited', 'received', 'verb', 'object-type', 'postopts', 'plink',
  78                 'wall', 'private', 'starred', 'origin', 'title', 'body', 'file', 'language',
  79                 'content-warning', 'location', 'coord', 'app', 'rendered-hash', 'rendered-html', 'object',
  80                 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'item_id',
  81                 'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
  82                 'owner-id', 'owner-link', 'owner-name', 'owner-avatar', 'owner-network',
  83                 'causer-id', 'causer-link', 'causer-name', 'causer-avatar', 'causer-contact-type',
  84                 'contact-id', 'contact-uid', 'contact-link', 'contact-name', 'contact-avatar',
  85                 'writable', 'self', 'cid', 'alias',
  86                 'event-id', 'event-created', 'event-edited', 'event-start', 'event-finish',
  87                 'event-summary', 'event-desc', 'event-location', 'event-type',
  88                 'event-nofinish', 'event-adjust', 'event-ignore', 'event-id',
  89                 'delivery_queue_count', 'delivery_queue_done', 'delivery_queue_failed'
  90         ];
  91
  92         // Field list that is used to deliver items via the protocols
  93         const DELIVER_FIELDLIST = ['uid', 'id', 'parent', 'uri-id', 'uri', 'thr-parent', 'parent-uri', 'guid',
  94                         'parent-guid', 'created', 'edited', 'verb', 'object-type', 'object', 'target',
  95                         'private', 'title', 'body', 'location', 'coord', 'app',
  96                         'deleted', 'extid', 'post-type', 'gravity',
  97                         'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
  98                         'author-id', 'author-link', 'owner-link', 'contact-uid',
  99                         'signed_text', 'network'];
 100
 101         // Field list for "item-content" table that is mixed with the item table
 102         const MIXED_CONTENT_FIELDLIST = ['title', 'content-warning', 'body', 'location',
 103                         'coord', 'app', 'rendered-hash', 'rendered-html', 'verb',
 104                         'object-type', 'object', 'target-type', 'target', 'plink'];
 105
 106         // Field list for "item-content" table that is not present in the "item" table
 107         const CONTENT_FIELDLIST = ['language', 'raw-body'];
 108
 109         // All fields in the item table
 110         const ITEM_FIELDLIST = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent',
 111                         'guid', 'uri-id', 'parent-uri-id', 'thr-parent-id', 'vid',
 112                         'contact-id', 'type', 'wall', 'gravity', 'extid', 'icid', 'psid',
 113                         'created', 'edited', 'commented', 'received', 'changed', 'verb',
 114                         'postopts', 'plink', 'resource-id', 'event-id', 'inform',
 115                         'file', 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'post-type',
 116                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 117                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global', 'network',
 118                         'title', 'content-warning', 'body', 'location', 'coord', 'app',
 119                         'rendered-hash', 'rendered-html', 'object-type', 'object', 'target-type', 'target',
 120                         'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
 121                         'owner-id', 'owner-link', 'owner-name', 'owner-avatar', 'causer-id'];
 122
 123         // List of all verbs that don't need additional content data.
 124         // Never reorder or remove entries from this list. Just add new ones at the end, if needed.
 125         const ACTIVITIES = [
 126                 Activity::LIKE, Activity::DISLIKE,
 127                 Activity::ATTEND, Activity::ATTENDNO, Activity::ATTENDMAYBE,
 128                 Activity::FOLLOW,
 129                 Activity::ANNOUNCE];
 130
 131         const PUBLIC = 0;
 132         const PRIVATE = 1;
 133         const UNLISTED = 2;
 134
 135         const TABLES = ['item', 'user-item', 'item-content', 'post-delivery-data', 'diaspora-interaction'];
 136
 137         private static $legacy_mode = null;
 138
 139         private static function getItemFields()
 140         {
 141                 $definition = DBStructure::definition('', false);
 142
 143                 $postfields = [];
 144                 foreach (self::TABLES as $table) {
 145                         $postfields[$table] = array_keys($definition[$table]['fields']);
 146                 }
 147
 148                 return $postfields;
 149         }
 150
 151         public static function isLegacyMode()
 152         {
 153                 if (is_null(self::$legacy_mode)) {
 154                         self::$legacy_mode = (DI::config()->get("system", "post_update_version") < 1279);
 155                 }
 156
 157                 return self::$legacy_mode;
 158         }
 159
 160         /**
 161          * Set the pinned state of an item
 162          *
 163          * @param integer $iid    Item ID
 164          * @param integer $uid    User ID
 165          * @param boolean $pinned Pinned state
 166          */
 167         public static function setPinned(int $iid, int $uid, bool $pinned)
 168         {
 169                 DBA::update('user-item', ['pinned' => $pinned], ['iid' => $iid, 'uid' => $uid], true);
 170         }
 171
 172         /**
 173          * Get the pinned state
 174          *
 175          * @param integer $iid Item ID
 176          * @param integer $uid User ID
 177          *
 178          * @return boolean pinned state
 179          */
 180         public static function getPinned(int $iid, int $uid)
 181         {
 182                 $useritem = DBA::selectFirst('user-item', ['pinned'], ['iid' => $iid, 'uid' => $uid]);
 183                 if (!DBA::isResult($useritem)) {
 184                         return false;
 185                 }
 186                 return (bool)$useritem['pinned'];
 187         }
 188
 189         /**
 190          * Select pinned rows from the item table for a given user
 191          *
 192          * @param integer $uid       User ID
 193          * @param array   $selected  Array of selected fields, empty for all
 194          * @param array   $condition Array of fields for condition
 195          * @param array   $params    Array of several parameters
 196          *
 197          * @return boolean|object
 198          * @throws \Exception
 199          */
 200         public static function selectPinned(int $uid, array $selected = [], array $condition = [], $params = [])
 201         {
 202                 $useritems = DBA::select('user-item', ['iid'], ['uid' => $uid, 'pinned' => true]);
 203                 if (!DBA::isResult($useritems)) {
 204                         return $useritems;
 205                 }
 206
 207                 $pinned = [];
 208                 while ($useritem = DBA::fetch($useritems)) {
 209                         $pinned[] = $useritem['iid'];
 210                 }
 211                 DBA::close($useritems);
 212
 213                 if (empty($pinned)) {
 214                         return [];
 215                 }
 216
 217                 $condition = DBA::mergeConditions(['iid' => $pinned], $condition);
 218
 219                 return self::selectThreadForUser($uid, $selected, $condition, $params);
 220         }
 221
 222         /**
 223          * Fetch a single item row
 224          *
 225          * @param mixed $stmt statement object
 226          * @return array|false current row or false
 227          * @throws \Exception
 228          */
 229         public static function fetch($stmt)
 230         {
 231                 $row = DBA::fetch($stmt);
 232
 233                 if (!is_array($row)) {
 234                         return $row;
 235                 }
 236
 237                 $row = DBA::castFields('item', $row);
 238
 239                 // ---------------------- Transform item structure data ----------------------
 240
 241                 // We prefer the data from the user's contact over the public one
 242                 if (!empty($row['author-link']) && !empty($row['contact-link']) &&
 243                         ($row['author-link'] == $row['contact-link'])) {
 244                         if (isset($row['author-avatar']) && !empty($row['contact-avatar'])) {
 245                                 $row['author-avatar'] = $row['contact-avatar'];
 246                         }
 247                         if (isset($row['author-name']) && !empty($row['contact-name'])) {
 248                                 $row['author-name'] = $row['contact-name'];
 249                         }
 250                 }
 251
 252                 if (!empty($row['owner-link']) && !empty($row['contact-link']) &&
 253                         ($row['owner-link'] == $row['contact-link'])) {
 254                         if (isset($row['owner-avatar']) && !empty($row['contact-avatar'])) {
 255                                 $row['owner-avatar'] = $row['contact-avatar'];
 256                         }
 257                         if (isset($row['owner-name']) && !empty($row['contact-name'])) {
 258                                 $row['owner-name'] = $row['contact-name'];
 259                         }
 260                 }
 261
 262                 // We can always comment on posts from these networks
 263                 if (array_key_exists('writable', $row) &&
 264                         in_array($row['internal-network'], Protocol::FEDERATED)) {
 265                         $row['writable'] = 1;
 266                 }
 267
 268                 // ---------------------- Transform item content data ----------------------
 269
 270                 // Fetch data from the item-content table whenever there is content there
 271                 if (self::isLegacyMode()) {
 272                         $legacy_fields = array_merge(Post\DeliveryData::LEGACY_FIELD_LIST, self::MIXED_CONTENT_FIELDLIST);
 273                         foreach ($legacy_fields as $field) {
 274                                 if (empty($row[$field]) && !empty($row['internal-item-' . $field])) {
 275                                         $row[$field] = $row['internal-item-' . $field];
 276                                 }
 277                                 unset($row['internal-item-' . $field]);
 278                         }
 279                 }
 280
 281                 if (array_key_exists('verb', $row)) {
 282                         if (!is_null($row['internal-verb'])) {
 283                                 $row['verb'] = $row['internal-verb'];
 284                         }
 285
 286                         if (in_array($row['verb'], self::ACTIVITIES)) {
 287                                 if (array_key_exists('title', $row)) {
 288                                         $row['title'] = '';
 289                                 }
 290                                 if (array_key_exists('body', $row)) {
 291                                         $row['body'] = $row['verb'];
 292                                 }
 293                                 if (array_key_exists('object', $row)) {
 294                                         $row['object'] = '';
 295                                 }
 296                                 if (array_key_exists('object-type', $row)) {
 297                                         $row['object-type'] = Activity\ObjectType::NOTE;
 298                                 }
 299                         } elseif (in_array($row['verb'], ['', Activity::POST, Activity::SHARE])) {
 300                                 // Posts don't have a target - but having tags or files.
 301                                 if (array_key_exists('target', $row)) {
 302                                         $row['target'] = '';
 303                                 }
 304                         }
 305                 }
 306
 307                 if (array_key_exists('vid', $row) && is_null($row['vid']) && !empty($row['verb'])) {
 308                         $row['vid'] = Verb::getID($row['verb']);
 309                 }
 310
 311                 if (!array_key_exists('verb', $row) || in_array($row['verb'], ['', Activity::POST, Activity::SHARE])) {
 312                         // Build the file string out of the term entries
 313                         if (array_key_exists('file', $row) && empty($row['file'])) {
 314                                 $row['file'] = Post\Category::getTextByURIId($row['internal-uri-id'], $row['internal-uid']);
 315                         }
 316                 }
 317
 318                 if ($row['internal-psid'] == RepPermissionSet::PUBLIC) {
 319                         if (array_key_exists('allow_cid', $row)) {
 320                                 $row['allow_cid'] = '';
 321                         }
 322                         if (array_key_exists('allow_gid', $row)) {
 323                                 $row['allow_gid'] = '';
 324                         }
 325                         if (array_key_exists('deny_cid', $row)) {
 326                                 $row['deny_cid'] = '';
 327                         }
 328                         if (array_key_exists('deny_gid', $row)) {
 329                                 $row['deny_gid'] = '';
 330                         }
 331                 }
 332
 333                 if (array_key_exists('ignored', $row) && array_key_exists('internal-user-ignored', $row) && !is_null($row['internal-user-ignored'])) {
 334                         $row['ignored'] = $row['internal-user-ignored'];
 335                 }
 336
 337                 // Remove internal fields
 338                 unset($row['internal-network']);
 339                 unset($row['internal-uri-id']);
 340                 unset($row['internal-uid']);
 341                 unset($row['internal-psid']);
 342                 unset($row['internal-verb']);
 343                 unset($row['internal-user-ignored']);
 344                 unset($row['interaction']);
 345
 346                 return $row;
 347         }
 348
 349         /**
 350          * Fills an array with data from an item query
 351          *
 352          * @param object $stmt statement object
 353          * @param bool   $do_close
 354          * @return array Data array
 355          */
 356         public static function toArray($stmt, $do_close = true) {
 357                 if (is_bool($stmt)) {
 358                         return $stmt;
 359                 }
 360
 361                 $data = [];
 362                 while ($row = self::fetch($stmt)) {
 363                         $data[] = $row;
 364                 }
 365                 if ($do_close) {
 366                         DBA::close($stmt);
 367                 }
 368                 return $data;
 369         }
 370
 371         /**
 372          * Check if item data exists
 373          *
 374          * @param array $condition array of fields for condition
 375          *
 376          * @return boolean Are there rows for that condition?
 377          * @throws \Exception
 378          */
 379         public static function exists($condition) {
 380                 $stmt = self::select(['id'], $condition, ['limit' => 1]);
 381
 382                 if (is_bool($stmt)) {
 383                         $retval = $stmt;
 384                 } else {
 385                         $retval = (DBA::numRows($stmt) > 0);
 386                 }
 387
 388                 DBA::close($stmt);
 389
 390                 return $retval;
 391         }
 392
 393         /**
 394          * Select rows from the item table for a given user
 395          *
 396          * @param integer $uid       User ID
 397          * @param array   $selected  Array of selected fields, empty for all
 398          * @param array   $condition Array of fields for condition
 399          * @param array   $params    Array of several parameters
 400          *
 401          * @return boolean|object
 402          * @throws \Exception
 403          */
 404         public static function selectForUser($uid, array $selected = [], array $condition = [], $params = [])
 405         {
 406                 $params['uid'] = $uid;
 407
 408                 if (empty($selected)) {
 409                         $selected = self::DISPLAY_FIELDLIST;
 410                 }
 411
 412                 return self::select($selected, $condition, $params);
 413         }
 414
 415         /**
 416          * Retrieve a single record from the item table and returns it in an associative array
 417          *
 418          * @param array $fields
 419          * @param array $condition
 420          * @param array $params
 421          * @return bool|array
 422          * @throws \Exception
 423          * @see   DBA::select
 424          */
 425         public static function selectFirst(array $fields = [], array $condition = [], $params = [])
 426         {
 427                 $params['limit'] = 1;
 428
 429                 $result = self::select($fields, $condition, $params);
 430
 431                 if (is_bool($result)) {
 432                         return $result;
 433                 } else {
 434                         $row = self::fetch($result);
 435                         DBA::close($result);
 436                         return $row;
 437                 }
 438         }
 439
 440         /**
 441          * Select rows from the item table and returns them as an array
 442          *
 443          * @param array $selected  Array of selected fields, empty for all
 444          * @param array $condition Array of fields for condition
 445          * @param array $params    Array of several parameters
 446          *
 447          * @return array
 448          * @throws \Exception
 449          */
 450         public static function selectToArray(array $fields = [], array $condition = [], $params = [])
 451         {
 452                 $result = self::select($fields, $condition, $params);
 453
 454                 if (is_bool($result)) {
 455                         return [];
 456                 }
 457
 458                 $data = [];
 459                 while ($row = self::fetch($result)) {
 460                         $data[] = $row;
 461                 }
 462                 DBA::close($result);
 463
 464                 return $data;
 465         }
 466
 467         /**
 468          * Select rows from the item table
 469          *
 470          * @param array $selected  Array of selected fields, empty for all
 471          * @param array $condition Array of fields for condition
 472          * @param array $params    Array of several parameters
 473          *
 474          * @return boolean|object
 475          * @throws \Exception
 476          */
 477         public static function select(array $selected = [], array $condition = [], $params = [])
 478         {
 479                 $uid = 0;
 480                 $usermode = false;
 481
 482                 if (isset($params['uid'])) {
 483                         $uid = $params['uid'];
 484                         $usermode = true;
 485                 }
 486
 487                 $fields = self::fieldlist($usermode);
 488
 489                 $select_fields = self::constructSelectFields($fields, $selected);
 490
 491                 $condition_string = DBA::buildCondition($condition);
 492
 493                 $condition_string = self::addTablesToFields($condition_string, $fields);
 494
 495                 if ($usermode) {
 496                         $condition_string = $condition_string . ' AND ' . self::condition(false);
 497                 }
 498
 499                 $param_string = self::addTablesToFields(DBA::buildParameter($params), $fields);
 500
 501                 $table = "`item` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, false, $usermode);
 502
 503                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 504
 505                 return DBA::p($sql, $condition);
 506         }
 507
 508         /**
 509          * Select rows from the starting post in the item table
 510          *
 511          * @param integer $uid       User ID
 512          * @param array   $selected
 513          * @param array   $condition Array of fields for condition
 514          * @param array   $params    Array of several parameters
 515          *
 516          * @return boolean|object
 517          * @throws \Exception
 518          */
 519         public static function selectThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 520         {
 521                 $params['uid'] = $uid;
 522
 523                 if (empty($selected)) {
 524                         $selected = self::DISPLAY_FIELDLIST;
 525                 }
 526
 527                 return self::selectThread($selected, $condition, $params);
 528         }
 529
 530         /**
 531          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 532          *
 533          * @param integer $uid User ID
 534          * @param array   $selected
 535          * @param array   $condition
 536          * @param array   $params
 537          * @return bool|array
 538          * @throws \Exception
 539          * @see   DBA::select
 540          */
 541         public static function selectFirstThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 542         {
 543                 $params['uid'] = $uid;
 544
 545                 if (empty($selected)) {
 546                         $selected = self::DISPLAY_FIELDLIST;
 547                 }
 548
 549                 return self::selectFirstThread($selected, $condition, $params);
 550         }
 551
 552         /**
 553          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 554          *
 555          * @param array $fields
 556          * @param array $condition
 557          * @param array $params
 558          * @return bool|array
 559          * @throws \Exception
 560          * @see   DBA::select
 561          */
 562         public static function selectFirstThread(array $fields = [], array $condition = [], $params = [])
 563         {
 564                 $params['limit'] = 1;
 565                 $result = self::selectThread($fields, $condition, $params);
 566
 567                 if (is_bool($result)) {
 568                         return $result;
 569                 } else {
 570                         $row = self::fetch($result);
 571                         DBA::close($result);
 572                         return $row;
 573                 }
 574         }
 575
 576         /**
 577          * Select rows from the starting post in the item table
 578          *
 579          * @param array $selected  Array of selected fields, empty for all
 580          * @param array $condition Array of fields for condition
 581          * @param array $params    Array of several parameters
 582          *
 583          * @return boolean|object
 584          * @throws \Exception
 585          */
 586         public static function selectThread(array $selected = [], array $condition = [], $params = [])
 587         {
 588                 $uid = 0;
 589                 $usermode = false;
 590
 591                 if (isset($params['uid'])) {
 592                         $uid = $params['uid'];
 593                         $usermode = true;
 594                 }
 595
 596                 $fields = self::fieldlist($usermode);
 597
 598                 $fields['thread'] = ['mention', 'ignored', 'iid'];
 599
 600                 $threadfields = ['thread' => ['iid', 'uid', 'contact-id', 'owner-id', 'author-id',
 601                         'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private',
 602                         'pubmail', 'moderated', 'visible', 'starred', 'ignored', 'post-type',
 603                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'network']];
 604
 605                 $select_fields = self::constructSelectFields($fields, $selected);
 606
 607                 $condition_string = DBA::buildCondition($condition);
 608
 609                 $condition_string = self::addTablesToFields($condition_string, $threadfields);
 610                 $condition_string = self::addTablesToFields($condition_string, $fields);
 611
 612                 if ($usermode) {
 613                         $condition_string = $condition_string . ' AND ' . self::condition(true);
 614                 }
 615
 616                 $param_string = DBA::buildParameter($params);
 617                 $param_string = self::addTablesToFields($param_string, $threadfields);
 618                 $param_string = self::addTablesToFields($param_string, $fields);
 619
 620                 $table = "`thread` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, true, $usermode);
 621
 622                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 623
 624                 return DBA::p($sql, $condition);
 625         }
 626
 627         /**
 628          * Returns a list of fields that are associated with the item table
 629          *
 630          * @param $usermode
 631          * @return array field list
 632          */
 633         private static function fieldlist($usermode)
 634         {
 635                 $fields = [];
 636
 637                 $fields['item'] = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent',
 638                         'guid', 'uri-id', 'parent-uri-id', 'thr-parent-id', 'vid', 'causer-id',
 639                         'contact-id', 'owner-id', 'author-id', 'type', 'wall', 'gravity', 'extid',
 640                         'created', 'edited', 'commented', 'received', 'changed', 'psid',
 641                         'resource-id', 'event-id', 'post-type', 'file',
 642                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 643                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global',
 644                         'id' => 'item_id', 'network', 'icid', 'event-id',
 645                         'uri-id' => 'internal-uri-id', 'uid' => 'internal-uid',
 646                         'network' => 'internal-network', 'psid' => 'internal-psid'];
 647
 648                 if ($usermode) {
 649                         $fields['user-item'] = ['pinned', 'notification-type', 'ignored' => 'internal-user-ignored'];
 650                 }
 651
 652                 $fields['item-content'] = array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST);
 653
 654                 $fields['post-delivery-data'] = array_merge(Post\DeliveryData::LEGACY_FIELD_LIST, Post\DeliveryData::FIELD_LIST);
 655
 656                 $fields['verb'] = ['name' => 'internal-verb'];
 657
 658                 $fields['permissionset'] = ['allow_cid', 'allow_gid', 'deny_cid', 'deny_gid'];
 659
 660                 $fields['author'] = ['url' => 'author-link', 'name' => 'author-name', 'addr' => 'author-addr',
 661                         'thumb' => 'author-avatar', 'nick' => 'author-nick', 'network' => 'author-network'];
 662
 663                 $fields['owner'] = ['url' => 'owner-link', 'name' => 'owner-name', 'addr' => 'owner-addr',
 664                         'thumb' => 'owner-avatar', 'nick' => 'owner-nick', 'network' => 'owner-network'];
 665
 666                 $fields['causer'] = ['url' => 'causer-link', 'name' => 'causer-name', 'addr' => 'causer-addr',
 667                         'thumb' => 'causer-avatar', 'nick' => 'causer-nick', 'network' => 'causer-network',
 668                         'contact-type' => 'causer-contact-type'];
 669
 670                 $fields['contact'] = ['url' => 'contact-link', 'name' => 'contact-name', 'thumb' => 'contact-avatar',
 671                         'writable', 'self', 'id' => 'cid', 'alias', 'uid' => 'contact-uid',
 672                         'photo', 'name-date', 'uri-date', 'avatar-date', 'thumb', 'dfrn-id'];
 673
 674                 $fields['parent-item'] = ['guid' => 'parent-guid', 'network' => 'parent-network', 'author-id' => 'parent-author-id'];
 675
 676                 $fields['parent-item-author'] = ['url' => 'parent-author-link', 'name' => 'parent-author-name',
 677                         'network' => 'parent-author-network'];
 678
 679                 $fields['event'] = ['created' => 'event-created', 'edited' => 'event-edited',
 680                         'start' => 'event-start','finish' => 'event-finish',
 681                         'summary' => 'event-summary','desc' => 'event-desc',
 682                         'location' => 'event-location', 'type' => 'event-type',
 683                         'nofinish' => 'event-nofinish','adjust' => 'event-adjust',
 684                         'ignore' => 'event-ignore'];
 685
 686                 $fields['diaspora-interaction'] = ['interaction', 'interaction' => 'signed_text'];
 687
 688                 return $fields;
 689         }
 690
 691         /**
 692          * Returns SQL condition for the "select" functions
 693          *
 694          * @param boolean $thread_mode Called for the items (false) or for the threads (true)
 695          *
 696          * @return string SQL condition
 697          */
 698         private static function condition($thread_mode)
 699         {
 700                 if ($thread_mode) {
 701                         $master_table = "`thread`";
 702                 } else {
 703                         $master_table = "`item`";
 704                 }
 705                 return sprintf("$master_table.`visible` AND NOT $master_table.`deleted` AND NOT $master_table.`moderated`
 706                         AND (`user-item`.`hidden` IS NULL OR NOT `user-item`.`hidden`)
 707                         AND (`user-author`.`blocked` IS NULL OR NOT `user-author`.`blocked`)
 708                         AND (`user-author`.`ignored` IS NULL OR NOT `user-author`.`ignored` OR `item`.`gravity` != %d)
 709                         AND (`user-owner`.`blocked` IS NULL OR NOT `user-owner`.`blocked`)
 710                         AND (`user-owner`.`ignored` IS NULL OR NOT `user-owner`.`ignored` OR `item`.`gravity` != %d) ",
 711                         GRAVITY_PARENT, GRAVITY_PARENT);
 712         }
 713
 714         /**
 715          * Returns all needed "JOIN" commands for the "select" functions
 716          *
 717          * @param integer $uid          User ID
 718          * @param string  $sql_commands The parts of the built SQL commands in the "select" functions
 719          * @param boolean $thread_mode  Called for the items (false) or for the threads (true)
 720          *
 721          * @param         $user_mode
 722          * @return string The SQL joins for the "select" functions
 723          */
 724         private static function constructJoins($uid, $sql_commands, $thread_mode, $user_mode)
 725         {
 726                 if ($thread_mode) {
 727                         $master_table = "`thread`";
 728                         $master_table_key = "`thread`.`iid`";
 729                         $joins = "STRAIGHT_JOIN `item` ON `item`.`id` = `thread`.`iid` ";
 730                 } else {
 731                         $master_table = "`item`";
 732                         $master_table_key = "`item`.`id`";
 733                         $joins = '';
 734                 }
 735
 736                 if ($user_mode) {
 737                         $joins .= sprintf("STRAIGHT_JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`
 738                                 AND NOT `contact`.`blocked`
 739                                 AND ((NOT `contact`.`readonly` AND NOT `contact`.`pending` AND (`contact`.`rel` IN (%s, %s)))
 740                                 OR `contact`.`self` OR `item`.`gravity` != %d OR `contact`.`uid` = 0)
 741                                 STRAIGHT_JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id` AND NOT `author`.`blocked`
 742                                 STRAIGHT_JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id` AND NOT `owner`.`blocked`
 743                                 LEFT JOIN `user-item` ON `user-item`.`iid` = $master_table_key AND `user-item`.`uid` = %d
 744                                 LEFT JOIN `user-contact` AS `user-author` ON `user-author`.`cid` = $master_table.`author-id` AND `user-author`.`uid` = %d
 745                                 LEFT JOIN `user-contact` AS `user-owner` ON `user-owner`.`cid` = $master_table.`owner-id` AND `user-owner`.`uid` = %d",
 746                                 Contact::SHARING, Contact::FRIEND, GRAVITY_PARENT, intval($uid), intval($uid), intval($uid));
 747                 } else {
 748                         if (strpos($sql_commands, "`contact`.") !== false) {
 749                                 $joins .= "LEFT JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`";
 750                         }
 751                         if (strpos($sql_commands, "`author`.") !== false) {
 752                                 $joins .= " LEFT JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id`";
 753                         }
 754                         if (strpos($sql_commands, "`owner`.") !== false) {
 755                                 $joins .= " LEFT JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id`";
 756                         }
 757                 }
 758                 if (strpos($sql_commands, "`causer`.") !== false) {
 759                         $joins .= " LEFT JOIN `contact` AS `causer` ON `causer`.`id` = `item`.`causer-id`";
 760                 }
 761
 762                 if (strpos($sql_commands, "`group_member`.") !== false) {
 763                         $joins .= " STRAIGHT_JOIN `group_member` ON `group_member`.`contact-id` = $master_table.`contact-id`";
 764                 }
 765
 766                 if (strpos($sql_commands, "`user`.") !== false) {
 767                         $joins .= " STRAIGHT_JOIN `user` ON `user`.`uid` = $master_table.`uid`";
 768                 }
 769
 770                 if (strpos($sql_commands, "`event`.") !== false) {
 771                         $joins .= " LEFT JOIN `event` ON `event-id` = `event`.`id`";
 772                 }
 773
 774                 if (strpos($sql_commands, "`diaspora-interaction`.") !== false) {
 775                         $joins .= " LEFT JOIN `diaspora-interaction` ON `diaspora-interaction`.`uri-id` = `item`.`uri-id`";
 776                 }
 777
 778                 if (strpos($sql_commands, "`item-content`.") !== false) {
 779                         $joins .= " LEFT JOIN `item-content` ON `item-content`.`uri-id` = `item`.`uri-id`";
 780                 }
 781
 782                 if (strpos($sql_commands, "`post-delivery-data`.") !== false) {
 783                         $joins .= " LEFT JOIN `post-delivery-data` ON `post-delivery-data`.`uri-id` = `item`.`uri-id` AND `item`.`origin`";
 784                 }
 785
 786                 if (strpos($sql_commands, "`verb`.") !== false) {
 787                         $joins .= " LEFT JOIN `verb` ON `verb`.`id` = `item`.`vid`";
 788                 }
 789
 790                 if (strpos($sql_commands, "`permissionset`.") !== false) {
 791                         $joins .= " LEFT JOIN `permissionset` ON `permissionset`.`id` = `item`.`psid`";
 792                 }
 793
 794                 if ((strpos($sql_commands, "`parent-item`.") !== false) || (strpos($sql_commands, "`parent-item-author`.") !== false)) {
 795                         $joins .= " STRAIGHT_JOIN `item` AS `parent-item` ON `parent-item`.`id` = `item`.`parent`";
 796
 797                         if (strpos($sql_commands, "`parent-item-author`.") !== false) {
 798                                 $joins .= " STRAIGHT_JOIN `contact` AS `parent-item-author` ON `parent-item-author`.`id` = `parent-item`.`author-id`";
 799                         }
 800                 }
 801
 802                 return $joins;
 803         }
 804
 805         /**
 806          * Add the field list for the "select" functions
 807          *
 808          * @param array $fields The field definition array
 809          * @param array $selected The array with the selected fields from the "select" functions
 810          *
 811          * @return string The field list
 812          */
 813         private static function constructSelectFields(array $fields, array $selected)
 814         {
 815                 if (!empty($selected)) {
 816                         $selected = array_merge($selected, ['internal-uri-id', 'internal-uid', 'internal-psid', 'internal-network']);
 817                 }
 818
 819                 if (in_array('verb', $selected)) {
 820                         $selected = array_merge($selected, ['internal-verb']);
 821                 }
 822
 823                 if (in_array('ignored', $selected)) {
 824                         $selected[] = 'internal-user-ignored';
 825                 }
 826
 827                 $legacy_fields = array_merge(Post\DeliveryData::LEGACY_FIELD_LIST, self::MIXED_CONTENT_FIELDLIST);
 828
 829                 $selection = [];
 830                 foreach ($fields as $table => $table_fields) {
 831                         foreach ($table_fields as $field => $select) {
 832                                 if (empty($selected) || in_array($select, $selected)) {
 833                                         if (self::isLegacyMode() && in_array($select, $legacy_fields)) {
 834                                                 $selection[] = "`item`.`".$select."` AS `internal-item-" . $select . "`";
 835                                         }
 836                                         if (is_int($field)) {
 837                                                 $selection[] = "`" . $table . "`.`" . $select . "`";
 838                                         } else {
 839                                                 $selection[] = "`" . $table . "`.`" . $field . "` AS `" . $select . "`";
 840                                         }
 841                                 }
 842                         }
 843                 }
 844                 return implode(", ", $selection);
 845         }
 846
 847         /**
 848          * add table definition to fields in an SQL query
 849          *
 850          * @param string $query SQL query
 851          * @param array $fields The field definition array
 852          *
 853          * @return string the changed SQL query
 854          */
 855         private static function addTablesToFields($query, $fields)
 856         {
 857                 foreach ($fields as $table => $table_fields) {
 858                         foreach ($table_fields as $alias => $field) {
 859                                 if (is_int($alias)) {
 860                                         $replace_field = $field;
 861                                 } else {
 862                                         $replace_field = $alias;
 863                                 }
 864
 865                                 $search = "/([^\.])`" . $field . "`/i";
 866                                 $replace = "$1`" . $table . "`.`" . $replace_field . "`";
 867                                 $query = preg_replace($search, $replace, $query);
 868                         }
 869                 }
 870                 return $query;
 871         }
 872
 873         /**
 874          * Update existing item entries
 875          *
 876          * @param array $fields    The fields that are to be changed
 877          * @param array $condition The condition for finding the item entries
 878          *
 879          * In the future we may have to change permissions as well.
 880          * Then we had to add the user id as third parameter.
 881          *
 882          * A return value of "0" doesn't mean an error - but that 0 rows had been changed.
 883          *
 884          * @return integer|boolean number of affected rows - or "false" if there was an error
 885          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 886          */
 887         public static function update(array $fields, array $condition)
 888         {
 889                 if (empty($condition) || empty($fields)) {
 890                         return false;
 891                 }
 892
 893                 $data_fields = $fields;
 894
 895                 // To ensure the data integrity we do it in an transaction
 896                 DBA::transaction();
 897
 898                 // We cannot simply expand the condition to check for origin entries
 899                 // The condition needn't to be a simple array but could be a complex condition.
 900                 // And we have to execute this query before the update to ensure to fetch the same data.
 901                 $items = DBA::select('item', ['id', 'origin', 'uri', 'uri-id', 'icid', 'uid', 'file'], $condition);
 902
 903                 $content_fields = [];
 904                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
 905                         if (isset($fields[$field])) {
 906                                 $content_fields[$field] = $fields[$field];
 907                                 if (in_array($field, self::CONTENT_FIELDLIST) || !self::isLegacyMode()) {
 908                                         unset($fields[$field]);
 909                                 } else {
 910                                         $fields[$field] = null;
 911                                 }
 912                         }
 913                 }
 914
 915                 $delivery_data = Post\DeliveryData::extractFields($fields);
 916
 917                 $clear_fields = ['bookmark', 'type', 'author-name', 'author-avatar', 'author-link', 'owner-name', 'owner-avatar', 'owner-link', 'postopts', 'inform'];
 918                 foreach ($clear_fields as $field) {
 919                         if (array_key_exists($field, $fields)) {
 920                                 $fields[$field] = null;
 921                         }
 922                 }
 923
 924                 if (array_key_exists('file', $fields)) {
 925                         $files = $fields['file'];
 926                         $fields['file'] = null;
 927                 } else {
 928                         $files = null;
 929                 }
 930
 931                 if (!empty($content_fields['verb'])) {
 932                         $fields['vid'] = Verb::getID($content_fields['verb']);
 933                 }
 934
 935                 if (!empty($fields)) {
 936                         $success = DBA::update('item', $fields, $condition);
 937
 938                         if (!$success) {
 939                                 DBA::close($items);
 940                                 DBA::rollback();
 941                                 return false;
 942                         }
 943                 }
 944
 945                 // When there is no content for the "old" item table, this will count the fetched items
 946                 $rows = DBA::affectedRows();
 947
 948                 $notify_items = [];
 949
 950                 while ($item = DBA::fetch($items)) {
 951                         Post\User::update($item['uri-id'], $item['uid'], $data_fields);
 952
 953                         if (empty($content_fields['verb']) || !in_array($content_fields['verb'], self::ACTIVITIES)) {
 954                                 if (!empty($content_fields['body'])) {
 955                                         $content_fields['raw-body'] = trim($content_fields['raw-body'] ?? $content_fields['body']);
 956
 957                                         // Remove all media attachments from the body and store them in the post-media table
 958                                         $content_fields['raw-body'] = Post\Media::insertFromBody($item['uri-id'], $content_fields['raw-body']);
 959                                         $content_fields['raw-body'] = self::setHashtags($content_fields['raw-body']);
 960                                 }
 961
 962                                 self::updateContent($content_fields, ['uri-id' => $item['uri-id']]);
 963
 964                                 if (empty($item['icid'])) {
 965                                         $item_content = DBA::selectFirst('item-content', [], ['uri-id' => $item['uri-id']]);
 966                                         if (DBA::isResult($item_content)) {
 967                                                 $item_fields = ['icid' => $item_content['id']];
 968                                                 // Clear all fields in the item table that have a content in the item-content table
 969                                                 if (self::isLegacyMode()) {
 970                                                         foreach ($item_content as $field => $content) {
 971                                                                 if (in_array($field, self::MIXED_CONTENT_FIELDLIST) && !empty($content)) {
 972                                                                         $item_fields[$field] = null;
 973                                                                 }
 974                                                         }
 975                                                 }
 976                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
 977                                         }
 978                                 }
 979                         }
 980
 981                         if (!is_null($files)) {
 982                                 Post\Category::storeTextByURIId($item['uri-id'], $item['uid'], $files);
 983                                 if (!empty($item['file'])) {
 984                                         DBA::update('item', ['file' => ''], ['id' => $item['id']]);
 985                                 }
 986                         }
 987
 988                         if (!empty($fields['attach'])) {
 989                                 Post\Media::insertFromAttachment($item['uri-id'], $fields['attach']);
 990                         }
 991
 992                         Post\DeliveryData::update($item['uri-id'], $delivery_data);
 993
 994                         self::updateThread($item['id']);
 995
 996                         // We only need to notfiy others when it is an original entry from us.
 997                         // Only call the notifier when the item has some content relevant change.
 998                         if ($item['origin'] && in_array('edited', array_keys($fields))) {
 999                                 $notify_items[] = $item['id'];
1000                         }
1001                 }
1002
1003                 DBA::close($items);
1004                 DBA::commit();
1005
1006                 foreach ($notify_items as $notify_item) {
1007                         Worker::add(PRIORITY_HIGH, "Notifier", Delivery::POST, $notify_item);
1008                 }
1009
1010                 return $rows;
1011         }
1012
1013         /**
1014          * Delete an item and notify others about it - if it was ours
1015          *
1016          * @param array   $condition The condition for finding the item entries
1017          * @param integer $priority  Priority for the notification
1018          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1019          */
1020         public static function markForDeletion($condition, $priority = PRIORITY_HIGH)
1021         {
1022                 $items = Post::select(['id'], $condition);
1023                 while ($item = Post::fetch($items)) {
1024                         self::markForDeletionById($item['id'], $priority);
1025                 }
1026                 DBA::close($items);
1027         }
1028
1029         /**
1030          * Delete an item for an user and notify others about it - if it was ours
1031          *
1032          * @param array   $condition The condition for finding the item entries
1033          * @param integer $uid       User who wants to delete this item
1034          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1035          */
1036         public static function deleteForUser($condition, $uid)
1037         {
1038                 if ($uid == 0) {
1039                         return;
1040                 }
1041
1042                 $items = Post::select(['id', 'uid', 'uri-id'], $condition);
1043                 while ($item = Post::fetch($items)) {
1044                         Post\User::update($item['uri-id'], $item['uid'], ['hidden' => true]);
1045
1046                         // "Deleting" global items just means hiding them
1047                         if ($item['uid'] == 0) {
1048                                 DBA::update('user-item', ['hidden' => true], ['iid' => $item['id'], 'uid' => $uid], true);
1049                         } elseif ($item['uid'] == $uid) {
1050                                 self::markForDeletionById($item['id'], PRIORITY_HIGH);
1051                         } else {
1052                                 Logger::log('Wrong ownership. Not deleting item ' . $item['id']);
1053                         }
1054                 }
1055                 DBA::close($items);
1056         }
1057
1058         /**
1059          * Mark an item for deletion, delete related data and notify others about it - if it was ours
1060          *
1061          * @param integer $item_id
1062          * @param integer $priority Priority for the notification
1063          *
1064          * @return boolean success
1065          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1066          */
1067         public static function markForDeletionById($item_id, $priority = PRIORITY_HIGH)
1068         {
1069                 Logger::info('Mark item for deletion by id', ['id' => $item_id, 'callstack' => System::callstack()]);
1070                 // locate item to be deleted
1071                 $fields = ['id', 'uri', 'uri-id', 'uid', 'parent', 'parent-uri', 'origin',
1072                         'deleted', 'file', 'resource-id', 'event-id',
1073                         'verb', 'object-type', 'object', 'target', 'contact-id',
1074                         'icid', 'psid', 'gravity'];
1075                 $item = Post::selectFirst($fields, ['id' => $item_id]);
1076                 if (!DBA::isResult($item)) {
1077                         Logger::info('Item not found.', ['id' => $item_id]);
1078                         return false;
1079                 }
1080
1081                 if ($item['deleted']) {
1082                         Logger::info('Item has already been marked for deletion.', ['id' => $item_id]);
1083                         return false;
1084                 }
1085
1086                 $parent = Post::selectFirst(['origin'], ['id' => $item['parent']]);
1087                 if (!DBA::isResult($parent)) {
1088                         $parent = ['origin' => false];
1089                 }
1090
1091                 // clean up categories and tags so they don't end up as orphans
1092
1093                 $matches = [];
1094                 $cnt = preg_match_all('/<(.*?)>/', $item['file'], $matches, PREG_SET_ORDER);
1095
1096                 if ($cnt) {
1097                         foreach ($matches as $mtch) {
1098                                 FileTag::unsaveFile($item['uid'], $item['id'], $mtch[1],true);
1099                         }
1100                 }
1101
1102                 $matches = [];
1103
1104                 $cnt = preg_match_all('/\[(.*?)\]/', $item['file'], $matches, PREG_SET_ORDER);
1105
1106                 if ($cnt) {
1107                         foreach ($matches as $mtch) {
1108                                 FileTag::unsaveFile($item['uid'], $item['id'], $mtch[1],false);
1109                         }
1110                 }
1111
1112                 /*
1113                  * If item is a link to a photo resource, nuke all the associated photos
1114                  * (visitors will not have photo resources)
1115                  * This only applies to photos uploaded from the photos page. Photos inserted into a post do not
1116                  * generate a resource-id and therefore aren't intimately linked to the item.
1117                  */
1118                 /// @TODO: this should first check if photo is used elsewhere
1119                 if (strlen($item['resource-id'])) {
1120                         Photo::delete(['resource-id' => $item['resource-id'], 'uid' => $item['uid']]);
1121                 }
1122
1123                 // If item is a link to an event, delete the event.
1124                 if (intval($item['event-id'])) {
1125                         Event::delete($item['event-id']);
1126                 }
1127
1128                 // If item has attachments, drop them
1129                 $attachments = Post\Media::getByURIId($item['uri-id'], [Post\Media::DOCUMENT]);
1130                 foreach($attachments as $attachment) {
1131                         if (preg_match("|attach/(\d+)|", $attachment['url'], $matches)) {
1132                                 Attach::delete(['id' => $matches[1], 'uid' => $item['uid']]);
1133                         }
1134                 }
1135
1136                 // Set the item to "deleted"
1137                 $item_fields = ['deleted' => true, 'edited' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()];
1138                 DBA::update('item', $item_fields, ['id' => $item['id']]);
1139
1140                 Post\Category::storeTextByURIId($item['uri-id'], $item['uid'], '');
1141                 self::deleteThread($item['id'], $item['parent-uri']);
1142
1143                 if (!Post::exists(["`uri` = ? AND `uid` != 0 AND NOT `deleted`", $item['uri']])) {
1144                         self::markForDeletion(['uri' => $item['uri'], 'uid' => 0, 'deleted' => false], $priority);
1145                 }
1146
1147                 Post\DeliveryData::delete($item['uri-id']);
1148
1149                 // When the permission set will be used in photo and events as well,
1150                 // this query here needs to be extended.
1151                 // @todo Currently deactivated. We need the permission set in the deletion process.
1152                 // This is a reminder to add the removal somewhere else.
1153                 //if (!empty($item['psid']) && !self::exists(['psid' => $item['psid'], 'deleted' => false])) {
1154                 //      DBA::delete('permissionset', ['id' => $item['psid']], ['cascade' => false]);
1155                 //}
1156
1157                 // If it's the parent of a comment thread, kill all the kids
1158                 if ($item['gravity'] == GRAVITY_PARENT) {
1159                         self::markForDeletion(['parent' => $item['parent'], 'deleted' => false], $priority);
1160                 }
1161
1162                 // Is it our comment and/or our thread?
1163                 if (($item['origin'] || $parent['origin']) && ($item['uid'] != 0)) {
1164                         // When we delete the original post we will delete all existing copies on the server as well
1165                         self::markForDeletion(['uri' => $item['uri'], 'deleted' => false], $priority);
1166
1167                         // send the notification upstream/downstream
1168                         if ($priority) {
1169                                 Worker::add(['priority' => $priority, 'dont_fork' => true], "Notifier", Delivery::DELETION, intval($item['id']));
1170                         }
1171                 } elseif ($item['uid'] != 0) {
1172                         Post\User::update($item['uri-id'], $item['uid'], ['hidden' => true]);
1173
1174                         // When we delete just our local user copy of an item, we have to set a marker to hide it
1175                         $global_item = Post::selectFirst(['id'], ['uri' => $item['uri'], 'uid' => 0, 'deleted' => false]);
1176                         if (DBA::isResult($global_item)) {
1177                                 DBA::update('user-item', ['hidden' => true], ['iid' => $global_item['id'], 'uid' => $item['uid']], true);
1178                         }
1179                 }
1180
1181                 Logger::info('Item has been marked for deletion.', ['id' => $item_id]);
1182
1183                 return true;
1184         }
1185
1186
1187         private static function guid($item, $notify)
1188         {
1189                 if (!empty($item['guid'])) {
1190                         return Strings::escapeTags(trim($item['guid']));
1191                 }
1192
1193                 if ($notify) {
1194                         // We have to avoid duplicates. So we create the GUID in form of a hash of the plink or uri.
1195                         // We add the hash of our own host because our host is the original creator of the post.
1196                         $prefix_host = DI::baseUrl()->getHostname();
1197                 } else {
1198                         $prefix_host = '';
1199
1200                         // We are only storing the post so we create a GUID from the original hostname.
1201                         if (!empty($item['author-link'])) {
1202                                 $parsed = parse_url($item['author-link']);
1203                                 if (!empty($parsed['host'])) {
1204                                         $prefix_host = $parsed['host'];
1205                                 }
1206                         }
1207
1208                         if (empty($prefix_host) && !empty($item['plink'])) {
1209                                 $parsed = parse_url($item['plink']);
1210                                 if (!empty($parsed['host'])) {
1211                                         $prefix_host = $parsed['host'];
1212                                 }
1213                         }
1214
1215                         if (empty($prefix_host) && !empty($item['uri'])) {
1216                                 $parsed = parse_url($item['uri']);
1217                                 if (!empty($parsed['host'])) {
1218                                         $prefix_host = $parsed['host'];
1219                                 }
1220                         }
1221
1222                         // Is it in the format data@host.tld? - Used for mail contacts
1223                         if (empty($prefix_host) && !empty($item['author-link']) && strstr($item['author-link'], '@')) {
1224                                 $mailparts = explode('@', $item['author-link']);
1225                                 $prefix_host = array_pop($mailparts);
1226                         }
1227                 }
1228
1229                 if (!empty($item['plink'])) {
1230                         $guid = self::guidFromUri($item['plink'], $prefix_host);
1231                 } elseif (!empty($item['uri'])) {
1232                         $guid = self::guidFromUri($item['uri'], $prefix_host);
1233                 } else {
1234                         $guid = System::createUUID(hash('crc32', $prefix_host));
1235                 }
1236
1237                 return $guid;
1238         }
1239
1240         private static function contactId($item)
1241         {
1242                 if (!empty($item['contact-id']) && DBA::exists('contact', ['self' => true, 'id' => $item['contact-id']])) {
1243                         return $item['contact-id'];
1244                 } elseif (($item['gravity'] == GRAVITY_PARENT) && !empty($item['uid']) && !empty($item['contact-id']) && Contact::isSharing($item['contact-id'], $item['uid'])) {
1245                         return $item['contact-id'];
1246                 } elseif (!empty($item['uid']) && !Contact::isSharing($item['author-id'], $item['uid'])) {
1247                         return $item['author-id'];
1248                 } elseif (!empty($item['contact-id'])) {
1249                         return $item['contact-id'];
1250                 } else {
1251                         $contact_id = Contact::getIdForURL($item['author-link'], $item['uid']);
1252                         if (!empty($contact_id)) {
1253                                 return $contact_id;
1254                         }
1255                 }
1256                 return $item['author-id'];
1257         }
1258
1259         // This function will finally cover most of the preparation functionality in mod/item.php
1260         public static function prepare(&$item)
1261         {
1262                 /*
1263                  * @TODO: Unused code triggering inspection errors
1264                  *
1265                 $data = BBCode::getAttachmentData($item['body']);
1266                 if ((preg_match_all("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", $item['body'], $match, PREG_SET_ORDER) || isset($data["type"]))
1267                         && ($posttype != self::PT_PERSONAL_NOTE)) {
1268                         $posttype = self::PT_PAGE;
1269                         $objecttype = ACTIVITY_OBJ_BOOKMARK;
1270                 }
1271                  */
1272         }
1273
1274         /**
1275          * Write an item array into a spool file to be inserted later.
1276          * This command is called whenever there are issues storing an item.
1277          *
1278          * @param array $item The item fields that are to be inserted
1279          * @throws \Exception
1280          */
1281         private static function spool($orig_item)
1282         {
1283                 // Now we store the data in the spool directory
1284                 // We use "microtime" to keep the arrival order and "mt_rand" to avoid duplicates
1285                 $file = 'item-' . round(microtime(true) * 10000) . '-' . mt_rand() . '.msg';
1286
1287                 $spoolpath = get_spoolpath();
1288                 if ($spoolpath != "") {
1289                         $spool = $spoolpath . '/' . $file;
1290
1291                         file_put_contents($spool, json_encode($orig_item));
1292                         Logger::warning("Item wasn't stored - Item was spooled into file", ['file' => $file]);
1293                 }
1294         }
1295
1296         /**
1297          * Check if the item array is a duplicate
1298          *
1299          * @param array $item
1300          * @return boolean is it a duplicate?
1301          */
1302         private static function isDuplicate(array $item)
1303         {
1304                 // Checking if there is already an item with the same guid
1305                 $condition = ['guid' => $item['guid'], 'network' => $item['network'], 'uid' => $item['uid']];
1306                 if (Post::exists($condition)) {
1307                         Logger::notice('Found already existing item', [
1308                                 'guid' => $item['guid'],
1309                                 'uid' => $item['uid'],
1310                                 'network' => $item['network']
1311                         ]);
1312                         return true;
1313                 }
1314
1315                 $condition = ["`uri` = ? AND `network` IN (?, ?) AND `uid` = ?",
1316                         $item['uri'], $item['network'], Protocol::DFRN, $item['uid']];
1317                 if (Post::exists($condition)) {
1318                         Logger::notice('duplicated item with the same uri found.', $item);
1319                         return true;
1320                 }
1321
1322                 // On Friendica and Diaspora the GUID is unique
1323                 if (in_array($item['network'], [Protocol::DFRN, Protocol::DIASPORA])) {
1324                         $condition = ['guid' => $item['guid'], 'uid' => $item['uid']];
1325                         if (Post::exists($condition)) {
1326                                 Logger::notice('duplicated item with the same guid found.', $item);
1327                                 return true;
1328                         }
1329                 } elseif ($item['network'] == Protocol::OSTATUS) {
1330                         // Check for an existing post with the same content. There seems to be a problem with OStatus.
1331                         $condition = ["`body` = ? AND `network` = ? AND `created` = ? AND `contact-id` = ? AND `uid` = ?",
1332                                         $item['body'], $item['network'], $item['created'], $item['contact-id'], $item['uid']];
1333                         if (Post::exists($condition)) {
1334                                 Logger::notice('duplicated item with the same body found.', $item);
1335                                 return true;
1336                         }
1337                 }
1338
1339                 /*
1340                  * Check for already added items.
1341                  * There is a timing issue here that sometimes creates double postings.
1342                  * An unique index would help - but the limitations of MySQL (maximum size of index values) prevent this.
1343                  */
1344                 if (($item['uid'] == 0) && Post::exists(['uri' => trim($item['uri']), 'uid' => 0])) {
1345                         Logger::notice('Global item already stored.', ['uri' => $item['uri'], 'network' => $item['network']]);
1346                         return true;
1347                 }
1348
1349                 return false;
1350         }
1351
1352         /**
1353          * Check if the item array is valid
1354          *
1355          * @param array $item
1356          * @return boolean item is valid
1357          */
1358         public static function isValid(array $item)
1359         {
1360                 // When there is no content then we don't post it
1361                 if ($item['body'] . $item['title'] == '') {
1362                         Logger::notice('No body, no title.');
1363                         return false;
1364                 }
1365
1366                 if (!empty($item['uid'])) {
1367                         $owner = User::getOwnerDataById($item['uid'], false);
1368                         if (!$owner) {
1369                                 Logger::notice('Missing item user owner data', ['uid' => $item['uid']]);
1370                                 return false;
1371                         }
1372
1373                         if ($owner['account_expired'] || $owner['account_removed']) {
1374                                 Logger::notice('Item user has been deleted/expired/removed', ['uid' => $item['uid'], 'deleted' => $owner['deleted'], 'account_expired' => $owner['account_expired'], 'account_removed' => $owner['account_removed']]);
1375                                 return false;
1376                         }
1377                 }
1378
1379                 if (!empty($item['author-id']) && Contact::isBlocked($item['author-id'])) {
1380                         Logger::notice('Author is blocked node-wide', ['author-link' => $item['author-link'], 'item-uri' => $item['uri']]);
1381                         return false;
1382                 }
1383
1384                 if (!empty($item['author-link']) && Network::isUrlBlocked($item['author-link'])) {
1385                         Logger::notice('Author server is blocked', ['author-link' => $item['author-link'], 'item-uri' => $item['uri']]);
1386                         return false;
1387                 }
1388
1389                 if (!empty($item['owner-id']) && Contact::isBlocked($item['owner-id'])) {
1390                         Logger::notice('Owner is blocked node-wide', ['owner-link' => $item['owner-link'], 'item-uri' => $item['uri']]);
1391                         return false;
1392                 }
1393
1394                 if (!empty($item['owner-link']) && Network::isUrlBlocked($item['owner-link'])) {
1395                         Logger::notice('Owner server is blocked', ['owner-link' => $item['owner-link'], 'item-uri' => $item['uri']]);
1396                         return false;
1397                 }
1398
1399                 if (!empty($item['uid']) && !self::isAllowedByUser($item, $item['uid'])) {
1400                         return false;
1401                 }
1402
1403                 if ($item['verb'] == Activity::FOLLOW) {
1404                         if (!$item['origin'] && ($item['author-id'] == Contact::getPublicIdByUserId($item['uid']))) {
1405                                 // Our own follow request can be relayed to us. We don't store it to avoid notification chaos.
1406                                 Logger::info("Follow: Don't store not origin follow request", ['parent-uri' => $item['parent-uri']]);
1407                                 return false;
1408                         }
1409
1410                         $condition = ['verb' => Activity::FOLLOW, 'uid' => $item['uid'],
1411                                 'parent-uri' => $item['parent-uri'], 'author-id' => $item['author-id']];
1412                         if (Post::exists($condition)) {
1413                                 // It happens that we receive multiple follow requests by the same author - we only store one.
1414                                 Logger::info('Follow: Found existing follow request from author', ['author-id' => $item['author-id'], 'parent-uri' => $item['parent-uri']]);
1415                                 return false;
1416                         }
1417                 }
1418
1419                 return true;
1420         }
1421
1422         /**
1423          * Check if the item array is too old
1424          *
1425          * @param array $item
1426          * @return boolean item is too old
1427          */
1428         public static function isTooOld(array $item)
1429         {
1430                 // check for create date and expire time
1431                 $expire_interval = DI::config()->get('system', 'dbclean-expire-days', 0);
1432
1433                 $user = DBA::selectFirst('user', ['expire'], ['uid' => $item['uid']]);
1434                 if (DBA::isResult($user) && ($user['expire'] > 0) && (($user['expire'] < $expire_interval) || ($expire_interval == 0))) {
1435                         $expire_interval = $user['expire'];
1436                 }
1437
1438                 if (($expire_interval > 0) && !empty($item['created'])) {
1439                         $expire_date = time() - ($expire_interval * 86400);
1440                         $created_date = strtotime($item['created']);
1441                         if ($created_date < $expire_date) {
1442                                 Logger::notice('Item created before expiration interval.', [
1443                                         'created' => date('c', $created_date),
1444                                         'expired' => date('c', $expire_date),
1445                                         '$item' => $item
1446                                 ]);
1447                                 return true;
1448                         }
1449                 }
1450
1451                 return false;
1452         }
1453
1454         /**
1455          * Return the id of the given item array if it has been stored before
1456          *
1457          * @param array $item
1458          * @return integer item id
1459          */
1460         private static function getDuplicateID(array $item)
1461         {
1462                 if (empty($item['network']) || in_array($item['network'], Protocol::FEDERATED)) {
1463                         $condition = ["`uri` = ? AND `uid` = ? AND `network` IN (?, ?, ?, ?)",
1464                                 trim($item['uri']), $item['uid'],
1465                                 Protocol::ACTIVITYPUB, Protocol::DIASPORA, Protocol::DFRN, Protocol::OSTATUS];
1466                         $existing = Post::selectFirst(['id', 'network'], $condition);
1467                         if (DBA::isResult($existing)) {
1468                                 // We only log the entries with a different user id than 0. Otherwise we would have too many false positives
1469                                 if ($item['uid'] != 0) {
1470                                         Logger::notice('Item already existed for user', [
1471                                                 'uri' => $item['uri'],
1472                                                 'uid' => $item['uid'],
1473                                                 'network' => $item['network'],
1474                                                 'existing_id' => $existing["id"],
1475                                                 'existing_network' => $existing["network"]
1476                                         ]);
1477                                 }
1478
1479                                 return $existing["id"];
1480                         }
1481                 }
1482                 return 0;
1483         }
1484
1485         /**
1486          * Fetch top-level parent data for the given item array
1487          *
1488          * @param array $item
1489          * @return array item array with parent data
1490          * @throws \Exception
1491          */
1492         private static function getTopLevelParent(array $item)
1493         {
1494                 $fields = ['uid', 'uri', 'parent-uri', 'id', 'deleted',
1495                         'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
1496                         'wall', 'private', 'forum_mode', 'origin', 'author-id'];
1497                 $condition = ['uri' => $item['thr-parent'], 'uid' => $item['uid']];
1498                 $params = ['order' => ['id' => false]];
1499                 $parent = Post::selectFirst($fields, $condition, $params);
1500
1501                 if (!DBA::isResult($parent)) {
1502                         Logger::notice('item parent was not found - ignoring item', ['thr-parent' => $item['thr-parent'], 'uid' => $item['uid']]);
1503                         return [];
1504                 }
1505
1506                 if ($parent['uri'] == $parent['parent-uri']) {
1507                         return $parent;
1508                 }
1509
1510                 $condition = ['uri' => $parent['parent-uri'],
1511                         'parent-uri' => $parent['parent-uri'],
1512                         'uid' => $parent['uid']];
1513                 $params = ['order' => ['id' => false]];
1514                 $toplevel_parent = Post::selectFirst($fields, $condition, $params);
1515                 if (!DBA::isResult($toplevel_parent)) {
1516                         Logger::notice('item top level parent was not found - ignoring item', ['parent-uri' => $parent['parent-uri'], 'uid' => $parent['uid']]);
1517                         return [];
1518                 }
1519
1520                 return $toplevel_parent;
1521         }
1522
1523         /**
1524          * Get the gravity for the given item array
1525          *
1526          * @param array $item
1527          * @return integer gravity
1528          */
1529         private static function getGravity(array $item)
1530         {
1531                 $activity = DI::activity();
1532
1533                 if (isset($item['gravity'])) {
1534                         return intval($item['gravity']);
1535                 } elseif ($item['parent-uri'] === $item['uri']) {
1536                         return GRAVITY_PARENT;
1537                 } elseif ($activity->match($item['verb'], Activity::POST)) {
1538                         return GRAVITY_COMMENT;
1539                 } elseif ($activity->match($item['verb'], Activity::FOLLOW)) {
1540                         return GRAVITY_ACTIVITY;
1541                 } elseif ($activity->match($item['verb'], Activity::ANNOUNCE)) {
1542                         return GRAVITY_ACTIVITY;
1543                 }
1544                 Logger::info('Unknown gravity for verb', ['verb' => $item['verb']]);
1545                 return GRAVITY_UNKNOWN;   // Should not happen
1546         }
1547
1548         public static function insert($item, $notify = false, $dontcache = false)
1549         {
1550                 $structure = self::getItemFields();
1551
1552                 $orig_item = $item;
1553
1554                 $priority = PRIORITY_HIGH;
1555
1556                 // If it is a posting where users should get notifications, then define it as wall posting
1557                 if ($notify) {
1558                         $item['wall'] = 1;
1559                         $item['origin'] = 1;
1560                         $item['network'] = Protocol::DFRN;
1561                         $item['protocol'] = Conversation::PARCEL_DIRECT;
1562                         $item['direction'] = Conversation::PUSH;
1563
1564                         if (in_array($notify, PRIORITIES)) {
1565                                 $priority = $notify;
1566                         }
1567                 } else {
1568                         $item['network'] = trim(($item['network'] ?? '') ?: Protocol::PHANTOM);
1569                 }
1570
1571                 $uid = intval($item['uid']);
1572
1573                 $item['guid'] = self::guid($item, $notify);
1574                 $item['uri'] = substr(trim($item['uri'] ?? '') ?: self::newURI($item['uid'], $item['guid']), 0, 255);
1575
1576                 // Store URI data
1577                 $item['uri-id'] = ItemURI::insert(['uri' => $item['uri'], 'guid' => $item['guid']]);
1578
1579                 // Backward compatibility: parent-uri used to be the direct parent uri.
1580                 // If it is provided without a thr-parent, it probably is the old behavior.
1581                 $item['thr-parent'] = trim($item['thr-parent'] ?? $item['parent-uri'] ?? $item['uri']);
1582                 $item['parent-uri'] = $item['thr-parent'];
1583
1584                 // Store conversation data
1585                 $item = Conversation::insert($item);
1586
1587                 /*
1588                  * Do we already have this item?
1589                  * We have to check several networks since Friendica posts could be repeated
1590                  * via OStatus (maybe Diasporsa as well)
1591                  */
1592                 $duplicate = self::getDuplicateID($item);
1593                 if ($duplicate) {
1594                         return $duplicate;
1595                 }
1596
1597                 // Additional duplicate checks
1598                 /// @todo Check why the first duplication check returns the item number and the second a 0
1599                 if (self::isDuplicate($item)) {
1600                         return 0;
1601                 }
1602
1603                 $item['wall']          = intval($item['wall'] ?? 0);
1604                 $item['extid']         = trim($item['extid'] ?? '');
1605                 $item['author-name']   = trim($item['author-name'] ?? '');
1606                 $item['author-link']   = trim($item['author-link'] ?? '');
1607                 $item['author-avatar'] = trim($item['author-avatar'] ?? '');
1608                 $item['owner-name']    = trim($item['owner-name'] ?? '');
1609                 $item['owner-link']    = trim($item['owner-link'] ?? '');
1610                 $item['owner-avatar']  = trim($item['owner-avatar'] ?? '');
1611                 $item['received']      = (isset($item['received'])  ? DateTimeFormat::utc($item['received'])  : DateTimeFormat::utcNow());
1612                 $item['created']       = (isset($item['created'])   ? DateTimeFormat::utc($item['created'])   : $item['received']);
1613                 $item['edited']        = (isset($item['edited'])    ? DateTimeFormat::utc($item['edited'])    : $item['created']);
1614                 $item['changed']       = (isset($item['changed'])   ? DateTimeFormat::utc($item['changed'])   : $item['created']);
1615                 $item['commented']     = (isset($item['commented']) ? DateTimeFormat::utc($item['commented']) : $item['created']);
1616                 $item['title']         = substr(trim($item['title'] ?? ''), 0, 255);
1617                 $item['location']      = trim($item['location'] ?? '');
1618                 $item['coord']         = trim($item['coord'] ?? '');
1619                 $item['visible']       = (isset($item['visible']) ? intval($item['visible']) : 1);
1620                 $item['deleted']       = 0;
1621                 $item['post-type']     = ($item['post-type'] ?? '') ?: self::PT_ARTICLE;
1622                 $item['verb']          = trim($item['verb'] ?? '');
1623                 $item['object-type']   = trim($item['object-type'] ?? '');
1624                 $item['object']        = trim($item['object'] ?? '');
1625                 $item['target-type']   = trim($item['target-type'] ?? '');
1626                 $item['target']        = trim($item['target'] ?? '');
1627                 $item['plink']         = substr(trim($item['plink'] ?? ''), 0, 255);
1628                 $item['allow_cid']     = trim($item['allow_cid'] ?? '');
1629                 $item['allow_gid']     = trim($item['allow_gid'] ?? '');
1630                 $item['deny_cid']      = trim($item['deny_cid'] ?? '');
1631                 $item['deny_gid']      = trim($item['deny_gid'] ?? '');
1632                 $item['private']       = intval($item['private'] ?? self::PUBLIC);
1633                 $item['body']          = trim($item['body'] ?? '');
1634                 $item['raw-body']      = trim($item['raw-body'] ?? $item['body']);
1635                 $item['app']           = trim($item['app'] ?? '');
1636                 $item['origin']        = intval($item['origin'] ?? 0);
1637                 $item['postopts']      = trim($item['postopts'] ?? '');
1638                 $item['resource-id']   = trim($item['resource-id'] ?? '');
1639                 $item['event-id']      = intval($item['event-id'] ?? 0);
1640                 $item['inform']        = trim($item['inform'] ?? '');
1641                 $item['file']          = trim($item['file'] ?? '');
1642
1643                 // Items cannot be stored before they happen ...
1644                 if ($item['created'] > DateTimeFormat::utcNow()) {
1645                         $item['created'] = DateTimeFormat::utcNow();
1646                 }
1647
1648                 // We haven't invented time travel by now.
1649                 if ($item['edited'] > DateTimeFormat::utcNow()) {
1650                         $item['edited'] = DateTimeFormat::utcNow();
1651                 }
1652
1653                 $item['plink'] = ($item['plink'] ?? '') ?: DI::baseUrl() . '/display/' . urlencode($item['guid']);
1654
1655                 $item['gravity'] = self::getGravity($item);
1656
1657                 $item['language'] = self::getLanguage($item);
1658
1659                 $default = ['url' => $item['author-link'], 'name' => $item['author-name'],
1660                         'photo' => $item['author-avatar'], 'network' => $item['network']];
1661                 $item['author-id'] = ($item['author-id'] ?? 0) ?: Contact::getIdForURL($item['author-link'], 0, null, $default);
1662
1663                 $default = ['url' => $item['owner-link'], 'name' => $item['owner-name'],
1664                         'photo' => $item['owner-avatar'], 'network' => $item['network']];
1665                 $item['owner-id'] = ($item['owner-id'] ?? 0) ?: Contact::getIdForURL($item['owner-link'], 0, null, $default);
1666
1667                 $actor = ($item['gravity'] == GRAVITY_PARENT) ? $item['owner-id'] : $item['author-id'];
1668                 if (!$item['origin'] && ($item['uid'] != 0) && Contact::isSharing($actor, $item['uid'])) {
1669                         $item['post-type'] = self::PT_FOLLOWER;
1670                 }
1671
1672                 // Ensure that there is an avatar cache
1673                 Contact::checkAvatarCache($item['author-id']);
1674                 Contact::checkAvatarCache($item['owner-id']);
1675
1676                 // The contact-id should be set before "self::insert" was called - but there seems to be issues sometimes
1677                 $item["contact-id"] = self::contactId($item);
1678
1679                 if (!empty($item['direction']) && in_array($item['direction'], [Conversation::PUSH, Conversation::RELAY]) &&
1680                         self::isTooOld($item)) {
1681                         Logger::info('Item is too old', ['item' => $item]);
1682                         return 0;
1683                 }
1684
1685                 if (!self::isValid($item)) {
1686                         return 0;
1687                 }
1688
1689                 if ($item['gravity'] !== GRAVITY_PARENT) {
1690                         $toplevel_parent = self::getTopLevelParent($item);
1691                         if (empty($toplevel_parent)) {
1692                                 return 0;
1693                         }
1694
1695                         // If the thread originated from this node, we check the permission against the thread starter
1696                         $condition = ['uri' => $toplevel_parent['uri'], 'wall' => true];
1697                         $localTopLevelParent = Post::selectFirst(['uid'], $condition);
1698                         if (!empty($localTopLevelParent['uid']) && !self::isAllowedByUser($item, $localTopLevelParent['uid'])) {
1699                                 return 0;
1700                         }
1701
1702                         $parent_id          = $toplevel_parent['id'];
1703                         $item['parent-uri'] = $toplevel_parent['uri'];
1704                         $item['deleted']    = $toplevel_parent['deleted'];
1705                         $item['allow_cid']  = $toplevel_parent['allow_cid'];
1706                         $item['allow_gid']  = $toplevel_parent['allow_gid'];
1707                         $item['deny_cid']   = $toplevel_parent['deny_cid'];
1708                         $item['deny_gid']   = $toplevel_parent['deny_gid'];
1709                         $parent_origin      = $toplevel_parent['origin'];
1710
1711                         // Don't federate received participation messages
1712                         if ($item['verb'] != Activity::FOLLOW) {
1713                                 $item['wall'] = $toplevel_parent['wall'];
1714                         } else {
1715                                 $item['wall'] = false;
1716                         }
1717
1718                         /*
1719                          * If the parent is private, force privacy for the entire conversation
1720                          * This differs from the above settings as it subtly allows comments from
1721                          * email correspondents to be private even if the overall thread is not.
1722                          */
1723                         if ($toplevel_parent['private']) {
1724                                 $item['private'] = $toplevel_parent['private'];
1725                         }
1726
1727                         /*
1728                          * Edge case. We host a public forum that was originally posted to privately.
1729                          * The original author commented, but as this is a comment, the permissions
1730                          * weren't fixed up so it will still show the comment as private unless we fix it here.
1731                          */
1732                         if ((intval($toplevel_parent['forum_mode']) == 1) && ($toplevel_parent['private'] != self::PUBLIC)) {
1733                                 $item['private'] = self::PUBLIC;
1734                         }
1735
1736                         // If its a post that originated here then tag the thread as "mention"
1737                         if ($item['origin'] && $item['uid']) {
1738                                 DBA::update('thread', ['mention' => true], ['iid' => $parent_id]);
1739                                 Logger::info('tagged thread as mention', ['parent' => $parent_id, 'uid' => $item['uid']]);
1740                         }
1741
1742                         // Update the contact relations
1743                         Contact\Relation::store($toplevel_parent['author-id'], $item['author-id'], $item['created']);
1744
1745                         unset($item['parent_origin']);
1746                 } else {
1747                         $parent_id = 0;
1748                         $parent_origin = $item['origin'];
1749                 }
1750
1751                 // We don't store the causer link, only the id
1752                 unset($item['causer-link']);
1753
1754                 // We don't store these fields anymore in the item table
1755                 unset($item['author-link']);
1756                 unset($item['author-name']);
1757                 unset($item['author-avatar']);
1758                 unset($item['author-network']);
1759
1760                 unset($item['owner-link']);
1761                 unset($item['owner-name']);
1762                 unset($item['owner-avatar']);
1763
1764                 $item['parent-uri-id'] = ItemURI::getIdByURI($item['parent-uri']);
1765                 $item['thr-parent-id'] = ItemURI::getIdByURI($item['thr-parent']);
1766
1767                 // Is this item available in the global items (with uid=0)?
1768                 if ($item["uid"] == 0) {
1769                         $item["global"] = true;
1770
1771                         // Set the global flag on all items if this was a global item entry
1772                         DBA::update('item', ['global' => true], ['uri' => $item["uri"]]);
1773                 } else {
1774                         $item["global"] = Post::exists(['uid' => 0, 'uri' => $item["uri"]]);
1775                 }
1776
1777                 // ACL settings
1778                 if (!empty($item["allow_cid"] . $item["allow_gid"] . $item["deny_cid"] . $item["deny_gid"])) {
1779                         $item["private"] = self::PRIVATE;
1780                 }
1781
1782                 if ($notify) {
1783                         $item['edit'] = false;
1784                         $item['parent'] = $parent_id;
1785                         Hook::callAll('post_local', $item);
1786                         unset($item['edit']);
1787                 } else {
1788                         Hook::callAll('post_remote', $item);
1789                 }
1790
1791                 // Set after the insert because top-level posts are self-referencing
1792                 unset($item['parent']);
1793
1794                 if (!empty($item['cancel'])) {
1795                         Logger::log('post cancelled by addon.');
1796                         return 0;
1797                 }
1798
1799                 if (empty($item['vid']) && !empty($item['verb'])) {
1800                         $item['vid'] = Verb::getID($item['verb']);
1801                 }
1802
1803                 // Creates or assigns the permission set
1804                 $item['psid'] = PermissionSet::getIdFromACL(
1805                         $item['uid'],
1806                         $item['allow_cid'],
1807                         $item['allow_gid'],
1808                         $item['deny_cid'],
1809                         $item['deny_gid']
1810                 );
1811
1812                 unset($item['allow_cid']);
1813                 unset($item['allow_gid']);
1814                 unset($item['deny_cid']);
1815                 unset($item['deny_gid']);
1816
1817                 // This array field is used to trigger some automatic reactions
1818                 // It is mainly used in the "post_local" hook.
1819                 unset($item['api_source']);
1820
1821                 if ($item['verb'] == Activity::ANNOUNCE) {
1822                         self::setOwnerforResharedItem($item);
1823                 }
1824
1825                 // Remove all media attachments from the body and store them in the post-media table
1826                 $item['raw-body'] = Post\Media::insertFromBody($item['uri-id'], $item['raw-body']);
1827                 $item['raw-body'] = self::setHashtags($item['raw-body']);
1828
1829                 // Check for hashtags in the body and repair or add hashtag links
1830                 $item['body'] = self::setHashtags($item['body']);
1831
1832                 if (!empty($item['attach'])) {
1833                         Post\Media::insertFromAttachment($item['uri-id'], $item['attach']);
1834                 }
1835
1836                 // Fill the cache field
1837                 self::putInCache($item);
1838
1839                 if (stristr($item['verb'], Activity::POKE)) {
1840                         $notify_type = Delivery::POKE;
1841                 } else {
1842                         $notify_type = Delivery::POST;
1843                 }
1844
1845                 if (!in_array($item['verb'], self::ACTIVITIES)) {
1846                         $item['icid'] = self::insertContent($item);
1847                         if (empty($item['icid'])) {
1848                                 // This shouldn't happen
1849                                 Logger::warning('No content stored, quitting', ['guid' => $item['guid'], 'uri-id' => $item['uri-id'], 'causer-id' => ($item['causer-id'] ?? 0), 'post-type' => $item['post-type'], 'network' => $item['network']]);
1850                                 return 0;
1851                         }
1852                 }
1853
1854                 $body = $item['body'];
1855                 $verb = $item['verb'];
1856
1857                 // We just remove everything that is content
1858                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
1859                         unset($item[$field]);
1860                 }
1861
1862                 unset($item['activity']);
1863
1864                 // Filling item related side tables
1865
1866                 // Diaspora signature
1867                 if (!empty($item['diaspora_signed_text'])) {
1868                         DBA::replace('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $item['diaspora_signed_text']]);
1869                 }
1870
1871                 unset($item['diaspora_signed_text']);
1872
1873                 // Attached file links
1874                 if (!empty($item['file'])) {
1875                         Post\Category::storeTextByURIId($item['uri-id'], $item['uid'], $item['file']);
1876                 }
1877
1878                 unset($item['file']);
1879
1880                 // Delivery relevant data
1881                 $delivery_data = Post\DeliveryData::extractFields($item);
1882                 unset($item['postopts']);
1883                 unset($item['inform']);
1884
1885                 if (!empty($item['origin']) || !empty($item['wall']) || !empty($delivery_data['postopts']) || !empty($delivery_data['inform'])) {
1886                         Post\DeliveryData::insert($item['uri-id'], $delivery_data);
1887                 }
1888
1889                 // Store tags from the body if this hadn't been handled previously in the protocol classes
1890                 if (!Tag::existsForPost($item['uri-id'])) {
1891                         Tag::storeFromBody($item['uri-id'], $body);
1892                 }
1893
1894                 if (Post\User::insert($item['uri-id'], $item['uid'], $item)) {
1895                         // Remove all fields that aren't part of the item table
1896                         foreach ($item as $field => $value) {
1897                                 if (!in_array($field, $structure['item'])) {
1898                                         unset($item[$field]);
1899                                 }
1900                         }
1901
1902                         $condition = ['uri-id' => $item['uri-id'], 'uid' => $item['uid'], 'network' => $item['network']];
1903                         if (DBA::exists('item', $condition)) {
1904                                 Logger::notice('Item is already inserted - aborting', $condition);
1905                                 return 0;
1906                         }
1907
1908                         $result = DBA::insert('item', $item);
1909
1910                         // When the item was successfully stored we fetch the ID of the item.
1911                         $current_post = DBA::lastInsertId();
1912                 } else {
1913                         Logger::notice('Post-User is already inserted - aborting', ['uid' => $item['uid'], 'uri-id' => $item['uri-id']]);
1914                         return 0;
1915                 }
1916
1917                 if (empty($current_post) || !DBA::isResult($result)) {
1918                         // On failure store the data into a spool file so that the "SpoolPost" worker can try again later.
1919                         Logger::warning('Could not store item. it will be spooled', ['result' => $result, 'id' => $current_post]);
1920                         self::spool($orig_item);
1921                         return 0;
1922                 }
1923
1924                 Logger::notice('created item', ['id' => $current_post, 'uid' => $item['uid'], 'network' => $item['network'], 'uri-id' => $item['uri-id'], 'guid' => $item['guid']]);
1925
1926                 if (!$parent_id || ($item['gravity'] === GRAVITY_PARENT)) {
1927                         $parent_id = $current_post;
1928                 }
1929
1930                 // Set parent id
1931                 DBA::update('item', ['parent' => $parent_id], ['id' => $current_post]);
1932
1933                 $item['id'] = $current_post;
1934                 $item['parent'] = $parent_id;
1935
1936                 // update the commented timestamp on the parent
1937                 if (DI::config()->get('system', 'like_no_comment')) {
1938                         // Update when it is a comment
1939                         $update_commented = in_array($item['gravity'], [GRAVITY_PARENT, GRAVITY_COMMENT]);
1940                 } else {
1941                         // Update when it isn't a follow or tag verb
1942                         $update_commented = !in_array($verb, [Activity::FOLLOW, Activity::TAG]);
1943                 }
1944
1945                 if ($update_commented) {
1946                         DBA::update('item', ['commented' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1947                 } else {
1948                         DBA::update('item', ['changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1949                 }
1950
1951                 if ($item['gravity'] === GRAVITY_PARENT) {
1952                         self::addThread($current_post);
1953                 } else {
1954                         self::updateThread($parent_id);
1955                 }
1956
1957                 // In that function we check if this is a forum post. Additionally we delete the item under certain circumstances
1958                 if (self::tagDeliver($item['uid'], $current_post)) {
1959                         // Get the user information for the logging
1960                         $user = User::getById($uid);
1961
1962                         Logger::notice('Item had been deleted', ['id' => $current_post, 'user' => $uid, 'account-type' => $user['account-type']]);
1963                         return 0;
1964                 }
1965
1966                 if (!$dontcache) {
1967                         $posted_item = Post::selectFirst(self::ITEM_FIELDLIST, ['id' => $current_post]);
1968                         if (DBA::isResult($posted_item)) {
1969                                 if ($notify) {
1970                                         Hook::callAll('post_local_end', $posted_item);
1971                                 } else {
1972                                         Hook::callAll('post_remote_end', $posted_item);
1973                                 }
1974                         } else {
1975                                 Logger::log('new item not found in DB, id ' . $current_post);
1976                         }
1977                 }
1978
1979                 if ($item['gravity'] === GRAVITY_PARENT) {
1980                         self::addShadow($current_post);
1981                 } else {
1982                         self::addShadowPost($current_post);
1983                 }
1984
1985                 self::updateContact($item);
1986
1987                 UserItem::setNotification($current_post);
1988
1989                 check_user_notification($current_post);
1990
1991                 // Distribute items to users who subscribed to their tags
1992                 self::distributeByTags($item);
1993
1994                 // Automatically reshare the item if the "remote_self" option is selected
1995                 self::autoReshare($item);
1996
1997                 $transmit = $notify || ($item['visible'] && ($parent_origin || $item['origin']));
1998
1999                 if ($transmit) {
2000                         $transmit_item = Post::selectFirst(['verb', 'origin'], ['id' => $item['id']]);
2001                         // Don't relay participation messages
2002                         if (($transmit_item['verb'] == Activity::FOLLOW) &&
2003                                 (!$transmit_item['origin'] || ($item['author-id'] != Contact::getPublicIdByUserId($uid)))) {
2004                                 Logger::info('Participation messages will not be relayed', ['item' => $item['id'], 'uri' => $item['uri'], 'verb' => $transmit_item['verb']]);
2005                                 $transmit = false;
2006                         }
2007                 }
2008
2009                 if ($transmit) {
2010                         Worker::add(['priority' => $priority, 'dont_fork' => true], 'Notifier', $notify_type, $current_post);
2011                 }
2012
2013                 return $current_post;
2014         }
2015
2016         /**
2017          * Change the owner of a parent item if it had been shared by a forum
2018          *
2019          * (public) forum posts in the new format consist of the regular post by the author
2020          * followed by an announce message sent from the forum account.
2021          * Changing the owner helps in grouping forum posts.
2022          *
2023          * @param array $item
2024          * @return void
2025          */
2026         private static function setOwnerforResharedItem(array $item)
2027         {
2028                 $parent = Post::selectFirst(['id', 'causer-id', 'owner-id', 'author-id', 'author-link', 'origin', 'post-type'],
2029                         ['uri-id' => $item['thr-parent-id'], 'uid' => $item['uid']]);
2030                 if (!DBA::isResult($parent)) {
2031                         Logger::error('Parent not found', ['uri-id' => $item['thr-parent-id'], 'uid' => $item['uid']]);
2032                         return;
2033                 }
2034
2035                 $author = Contact::selectFirst(['url', 'contact-type'], ['id' => $item['author-id']]);
2036                 if (!DBA::isResult($author)) {
2037                         Logger::error('Author not found', ['id' => $item['author-id']]);
2038                         return;
2039                 }
2040
2041                 $cid = Contact::getIdForURL($author['url'], $item['uid']);
2042                 if (empty($cid) || !Contact::isSharing($cid, $item['uid'])) {
2043                         Logger::info('The resharer is not a following contact: quit', ['resharer' => $author['url'], 'uid' => $item['uid']]);
2044                         return;
2045                 }
2046
2047                 if ($author['contact-type'] != Contact::TYPE_COMMUNITY) {
2048                         if ($parent['post-type'] == self::PT_ANNOUNCEMENT) {
2049                                 Logger::info('The parent is already marked as announced: quit', ['causer' => $parent['causer-id'], 'owner' => $parent['owner-id'], 'author' => $parent['author-id'], 'uid' => $item['uid']]);
2050                                 return;
2051                         }
2052
2053                         if (Contact::isSharing($parent['owner-id'], $item['uid'])) {
2054                                 Logger::info('The resharer is no forum: quit', ['resharer' => $item['author-id'], 'owner' => $parent['owner-id'], 'author' => $parent['author-id'], 'uid' => $item['uid']]);
2055                                 return;
2056                         }
2057                         self::update(['post-type' => self::PT_ANNOUNCEMENT, 'causer-id' => $item['author-id']], ['id' => $parent['id']]);
2058                         Logger::info('Set announcement post-type', ['uri-id' => $item['uri-id'], 'thr-parent-id' => $item['thr-parent-id'], 'uid' => $item['uid']]);
2059                         return;
2060                 }
2061
2062                 self::update(['owner-id' => $item['author-id'], 'contact-id' => $cid], ['id' => $parent['id']]);
2063                 Logger::info('Change owner of the parent', ['uri-id' => $item['uri-id'], 'thr-parent-id' => $item['thr-parent-id'], 'uid' => $item['uid'], 'owner-id' => $item['author-id'], 'contact-id' => $cid]);
2064         }
2065
2066         /**
2067          * Distribute the given item to users who subscribed to their tags
2068          *
2069          * @param array $item     Processed item
2070          */
2071         private static function distributeByTags(array $item)
2072         {
2073                 if (($item['uid'] != 0) || ($item['gravity'] != GRAVITY_PARENT) || !in_array($item['network'], Protocol::FEDERATED)) {
2074                         return;
2075                 }
2076
2077                 $uids = Tag::getUIDListByURIId($item['uri-id']);
2078                 foreach ($uids as $uid) {
2079                         if (Contact::isSharing($item['author-id'], $uid)) {
2080                                 $fields = [];
2081                         } else {
2082                                 $fields = ['post-type' => self::PT_TAG];
2083                         }
2084
2085                         $stored = self::storeForUserByUriId($item['uri-id'], $uid, $fields);
2086                         Logger::info('Stored item for users', ['uri-id' => $item['uri-id'], 'uid' => $uid, 'fields' => $fields, 'stored' => $stored]);
2087                 }
2088         }
2089
2090         /**
2091          * Insert a new item content entry
2092          *
2093          * @param array $item The item fields that are to be inserted
2094          * @throws \Exception
2095          */
2096         private static function insertContent(array $item)
2097         {
2098                 $fields = ['uri-plink-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
2099
2100                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2101                         if (isset($item[$field])) {
2102                                 $fields[$field] = $item[$field];
2103                         }
2104                 }
2105
2106                 $item_content = DBA::selectFirst('item-content', ['id'], ['uri-id' => $item['uri-id']]);
2107                 if (DBA::isResult($item_content)) {
2108                         $icid = $item_content['id'];
2109                         Logger::info('Existing content found', ['icid' => $icid, 'uri' => $item['uri']]);
2110                         return $icid;
2111                 }
2112
2113                 DBA::replace('item-content', $fields);
2114
2115                 $item_content = DBA::selectFirst('item-content', ['id'], ['uri-id' => $item['uri-id']]);
2116                 if (DBA::isResult($item_content)) {
2117                         $icid = $item_content['id'];
2118                         Logger::notice('Content inserted', ['icid' => $icid, 'uri' => $item['uri']]);
2119                         return $icid;
2120                 }
2121
2122                 // This shouldn't happen.
2123                 Logger::error("Content wasn't inserted", $item);
2124                 return null;
2125         }
2126
2127         /**
2128          * Update existing item content entries
2129          *
2130          * @param array $item      The item fields that are to be changed
2131          * @param array $condition The condition for finding the item content entries
2132          * @throws \Exception
2133          */
2134         private static function updateContent($item, $condition)
2135         {
2136                 // We have to select only the fields from the "item-content" table
2137                 $fields = [];
2138                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2139                         if (isset($item[$field])) {
2140                                 $fields[$field] = $item[$field];
2141                         }
2142                 }
2143
2144                 if (empty($fields)) {
2145                         return;
2146                 }
2147
2148                 DBA::update('item-content', $fields, $condition, true);
2149                 Logger::info('Updated content', ['condition' => $condition]);
2150         }
2151
2152         /**
2153          * Distributes public items to the receivers
2154          *
2155          * @param integer $itemid      Item ID that should be added
2156          * @param string  $signed_text Original text (for Diaspora signatures), JSON encoded.
2157          * @throws \Exception
2158          */
2159         public static function distribute($itemid, $signed_text = '')
2160         {
2161                 $condition = ["`id` IN (SELECT `parent` FROM `item` WHERE `id` = ?)", $itemid];
2162                 $parent = Post::selectFirst(['owner-id'], $condition);
2163                 if (!DBA::isResult($parent)) {
2164                         return;
2165                 }
2166
2167                 // Only distribute public items from native networks
2168                 $condition = ['id' => $itemid, 'uid' => 0,
2169                         'network' => array_merge(Protocol::FEDERATED ,['']),
2170                         'visible' => true, 'deleted' => false, 'moderated' => false, 'private' => [self::PUBLIC, self::UNLISTED]];
2171                 $item = Post::selectFirst(self::ITEM_FIELDLIST, $condition);
2172                 if (!DBA::isResult($item)) {
2173                         return;
2174                 }
2175
2176                 $origin = $item['origin'];
2177
2178                 $users = [];
2179
2180                 /// @todo add a field "pcid" in the contact table that referrs to the public contact id.
2181                 $owner = DBA::selectFirst('contact', ['url', 'nurl', 'alias'], ['id' => $parent['owner-id']]);
2182                 if (!DBA::isResult($owner)) {
2183                         return;
2184                 }
2185
2186                 $condition = ['nurl' => $owner['nurl'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2187                 $contacts = DBA::select('contact', ['uid'], $condition);
2188                 while ($contact = DBA::fetch($contacts)) {
2189                         if ($contact['uid'] == 0) {
2190                                 continue;
2191                         }
2192
2193                         $users[$contact['uid']] = $contact['uid'];
2194                 }
2195                 DBA::close($contacts);
2196
2197                 $condition = ['alias' => $owner['url'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2198                 $contacts = DBA::select('contact', ['uid'], $condition);
2199                 while ($contact = DBA::fetch($contacts)) {
2200                         if ($contact['uid'] == 0) {
2201                                 continue;
2202                         }
2203
2204                         $users[$contact['uid']] = $contact['uid'];
2205                 }
2206                 DBA::close($contacts);
2207
2208                 if (!empty($owner['alias'])) {
2209                         $condition = ['nurl' => Strings::normaliseLink($owner['alias']), 'rel' => [Contact::SHARING, Contact::FRIEND]];
2210                         $contacts = DBA::select('contact', ['uid'], $condition);
2211                         while ($contact = DBA::fetch($contacts)) {
2212                                 if ($contact['uid'] == 0) {
2213                                         continue;
2214                                 }
2215
2216                                 $users[$contact['uid']] = $contact['uid'];
2217                         }
2218                         DBA::close($contacts);
2219                 }
2220
2221                 $origin_uid = 0;
2222
2223                 if ($item['uri'] != $item['parent-uri']) {
2224                         $parents = Post::select(['uid', 'origin'], ["`uri` = ? AND `uid` != 0", $item['parent-uri']]);
2225                         while ($parent = Post::fetch($parents)) {
2226                                 $users[$parent['uid']] = $parent['uid'];
2227                                 if ($parent['origin'] && !$origin) {
2228                                         $origin_uid = $parent['uid'];
2229                                 }
2230                         }
2231                         DBA::close($parents);
2232                 }
2233
2234                 foreach ($users as $uid) {
2235                         if ($origin_uid == $uid) {
2236                                 $item['diaspora_signed_text'] = $signed_text;
2237                         }
2238                         self::storeForUser($item, $uid);
2239                 }
2240         }
2241
2242         /**
2243          * Store a public item defined by their URI-ID for the given users
2244          *
2245          * @param integer $uri_id URI-ID of the given item
2246          * @param integer $uid    The user that will receive the item entry
2247          * @param array   $fields Additional fields to be stored
2248          * @return integer stored item id
2249          */
2250         public static function storeForUserByUriId(int $uri_id, int $uid, array $fields = [])
2251         {
2252                 $item = Post::selectFirst(self::ITEM_FIELDLIST, ['uri-id' => $uri_id, 'uid' => 0]);
2253                 if (!DBA::isResult($item)) {
2254                         return 0;
2255                 }
2256
2257                 if (($item['private'] == self::PRIVATE) || !in_array($item['network'], Protocol::FEDERATED)) {
2258                         Logger::notice('Item is private or not from a federated network. It will not be stored for the user.', ['uri-id' => $uri_id, 'uid' => $uid, 'private' => $item['private'], 'network' => $item['network']]);
2259                         return 0;
2260                 }
2261
2262                 $item['post-type'] = self::PT_STORED;
2263
2264                 $item = array_merge($item, $fields);
2265
2266                 $stored = self::storeForUser($item, $uid);
2267                 Logger::info('Public item stored for user', ['uri-id' => $item['uri-id'], 'uid' => $uid, 'stored' => $stored]);
2268                 return $stored;
2269         }
2270
2271         /**
2272          * Store a public item array for the given users
2273          *
2274          * @param array   $item   The item entry that will be stored
2275          * @param integer $uid    The user that will receive the item entry
2276          * @return integer stored item id
2277          * @throws \Exception
2278          */
2279         private static function storeForUser(array $item, int $uid)
2280         {
2281                 if (Post::exists(['uri-id' => $item['uri-id'], 'uid' => $uid])) {
2282                         Logger::info('Item already exists', ['uri-id' => $item['uri-id'], 'uid' => $uid]);
2283                         return 0;
2284                 }
2285
2286                 unset($item['id']);
2287                 unset($item['parent']);
2288                 unset($item['mention']);
2289                 unset($item['starred']);
2290                 unset($item['unseen']);
2291                 unset($item['psid']);
2292
2293                 $item['uid'] = $uid;
2294                 $item['origin'] = 0;
2295                 $item['wall'] = 0;
2296
2297                 if ($item['gravity'] == GRAVITY_PARENT) {
2298                         $contact = Contact::getByURLForUser($item['owner-link'], $uid, false, ['id']);
2299                 } else {
2300                         $contact = Contact::getByURLForUser($item['author-link'], $uid, false, ['id']);
2301                 }
2302
2303                 if (!empty($contact['id'])) {
2304                         $item['contact-id'] = $contact['id'];
2305                 } else {
2306                         // Shouldn't happen at all
2307                         Logger::warning('contact-id could not be fetched', ['uid' => $uid, 'item' => $item]);
2308                         $self = DBA::selectFirst('contact', ['id'], ['self' => true, 'uid' => $uid]);
2309                         if (!DBA::isResult($self)) {
2310                                 // Shouldn't happen even less
2311                                 Logger::warning('self contact could not be fetched', ['uid' => $uid, 'item' => $item]);
2312                                 return 0;
2313                         }
2314                         $item['contact-id'] = $self['id'];
2315                 }
2316
2317                 /// @todo Handling of "event-id"
2318
2319                 $notify = false;
2320                 if ($item['gravity'] == GRAVITY_PARENT) {
2321                         $contact = DBA::selectFirst('contact', [], ['id' => $item['contact-id'], 'self' => false]);
2322                         if (DBA::isResult($contact)) {
2323                                 $notify = self::isRemoteSelf($contact, $item);
2324                         }
2325                 }
2326
2327                 $distributed = self::insert($item, $notify, true);
2328
2329                 if (!$distributed) {
2330                         Logger::info("Distributed public item wasn't stored", ['uri-id' => $item['uri-id'], 'user' => $uid]);
2331                 } else {
2332                         Logger::info('Distributed public item was stored', ['uri-id' => $item['uri-id'], 'user' => $uid, 'stored' => $distributed]);
2333                 }
2334                 return $distributed;
2335         }
2336
2337         /**
2338          * Add a shadow entry for a given item id that is a thread starter
2339          *
2340          * We store every public item entry additionally with the user id "0".
2341          * This is used for the community page and for the search.
2342          * It is planned that in the future we will store public item entries only once.
2343          *
2344          * @param integer $itemid Item ID that should be added
2345          * @throws \Exception
2346          */
2347         private static function addShadow($itemid)
2348         {
2349                 $fields = ['uid', 'private', 'moderated', 'visible', 'deleted', 'network', 'uri'];
2350                 $condition = ['id' => $itemid, 'parent' => [0, $itemid]];
2351                 $item = Post::selectFirst($fields, $condition);
2352
2353                 if (!DBA::isResult($item)) {
2354                         return;
2355                 }
2356
2357                 // is it already a copy?
2358                 if (($itemid == 0) || ($item['uid'] == 0)) {
2359                         return;
2360                 }
2361
2362                 // Is it a visible public post?
2363                 if (!$item["visible"] || $item["deleted"] || $item["moderated"] || ($item["private"] == self::PRIVATE)) {
2364                         return;
2365                 }
2366
2367                 // is it an entry from a connector? Only add an entry for natively connected networks
2368                 if (!in_array($item["network"], array_merge(Protocol::FEDERATED ,['']))) {
2369                         return;
2370                 }
2371
2372                 if (Post::exists(['uri' => $item['uri'], 'uid' => 0])) {
2373                         return;
2374                 }
2375
2376                 $item = Post::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2377
2378                 if (DBA::isResult($item)) {
2379                         // Preparing public shadow (removing user specific data)
2380                         $item['uid'] = 0;
2381                         unset($item['id']);
2382                         unset($item['parent']);
2383                         unset($item['wall']);
2384                         unset($item['mention']);
2385                         unset($item['origin']);
2386                         unset($item['starred']);
2387                         unset($item['postopts']);
2388                         unset($item['inform']);
2389                         unset($item['post-type']);
2390                         if ($item['uri'] == $item['parent-uri']) {
2391                                 $item['contact-id'] = $item['owner-id'];
2392                         } else {
2393                                 $item['contact-id'] = $item['author-id'];
2394                         }
2395
2396                         $public_shadow = self::insert($item, false, true);
2397
2398                         Logger::info('Stored public shadow', ['thread' => $itemid, 'id' => $public_shadow]);
2399                 }
2400         }
2401
2402         /**
2403          * Add a shadow entry for a given item id that is a comment
2404          *
2405          * This function does the same like the function above - but for comments
2406          *
2407          * @param integer $itemid Item ID that should be added
2408          * @throws \Exception
2409          */
2410         private static function addShadowPost($itemid)
2411         {
2412                 $item = Post::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2413                 if (!DBA::isResult($item)) {
2414                         return;
2415                 }
2416
2417                 // Is it a toplevel post?
2418                 if ($item['gravity'] == GRAVITY_PARENT) {
2419                         self::addShadow($itemid);
2420                         return;
2421                 }
2422
2423                 // Is this a shadow entry?
2424                 if ($item['uid'] == 0) {
2425                         return;
2426                 }
2427
2428                 // Is there a shadow parent?
2429                 if (!Post::exists(['uri' => $item['parent-uri'], 'uid' => 0])) {
2430                         return;
2431                 }
2432
2433                 // Is there already a shadow entry?
2434                 if (Post::exists(['uri' => $item['uri'], 'uid' => 0])) {
2435                         return;
2436                 }
2437
2438                 // Save "origin" and "parent" state
2439                 $origin = $item['origin'];
2440                 $parent = $item['parent'];
2441
2442                 // Preparing public shadow (removing user specific data)
2443                 $item['uid'] = 0;
2444                 unset($item['id']);
2445                 unset($item['parent']);
2446                 unset($item['wall']);
2447                 unset($item['mention']);
2448                 unset($item['origin']);
2449                 unset($item['starred']);
2450                 unset($item['postopts']);
2451                 unset($item['inform']);
2452                 unset($item['post-type']);
2453                 $item['contact-id'] = Contact::getIdForURL($item['author-link']);
2454
2455                 $public_shadow = self::insert($item, false, true);
2456
2457                 Logger::info('Stored public shadow', ['uri' => $item['uri'], 'id' => $public_shadow]);
2458
2459                 // If this was a comment to a Diaspora post we don't get our comment back.
2460                 // This means that we have to distribute the comment by ourselves.
2461                 if ($origin && Post::exists(['id' => $parent, 'network' => Protocol::DIASPORA])) {
2462                         self::distribute($public_shadow);
2463                 }
2464         }
2465
2466         /**
2467          * Adds a language specification in a "language" element of given $arr.
2468          * Expects "body" element to exist in $arr.
2469          *
2470          * @param array $item
2471          * @return string detected language
2472          * @throws \Text_LanguageDetect_Exception
2473          */
2474         private static function getLanguage(array $item)
2475         {
2476                 if (!in_array($item['gravity'], [GRAVITY_PARENT, GRAVITY_COMMENT]) || empty($item['body'])) {
2477                         return '';
2478                 }
2479
2480                 // Convert attachments to links
2481                 $naked_body = BBCode::removeAttachment($item['body']);
2482                 if (empty($naked_body)) {
2483                         return '';
2484                 }
2485
2486                 // Remove links and pictures
2487                 $naked_body = BBCode::removeLinks($naked_body);
2488
2489                 // Convert the title and the body to plain text
2490                 $naked_body = trim($item['title'] . "\n" . BBCode::toPlaintext($naked_body));
2491
2492                 // Remove possibly remaining links
2493                 $naked_body = preg_replace(Strings::autoLinkRegEx(), '', $naked_body);
2494
2495                 if (empty($naked_body)) {
2496                         return '';
2497                 }
2498
2499                 $ld = new Language(DI::l10n()->getAvailableLanguages());
2500                 $languages = $ld->detect($naked_body)->limit(0, 3)->close();
2501                 if (is_array($languages)) {
2502                         return json_encode($languages);
2503                 }
2504
2505                 return '';
2506         }
2507
2508         public static function getLanguageMessage(array $item)
2509         {
2510                 $iso639 = new \Matriphe\ISO639\ISO639;
2511
2512                 $used_languages = '';
2513                 foreach (json_decode($item['language'], true) as $language => $reliability) {
2514                         $used_languages .= $iso639->languageByCode1($language) . ' (' . $language . "): " . number_format($reliability, 5) . '\n';
2515                 }
2516                 $used_languages = DI::l10n()->t('Detected languages in this post:\n%s', $used_languages);
2517                 return $used_languages;
2518         }
2519
2520         /**
2521          * Creates an unique guid out of a given uri
2522          *
2523          * @param string $uri uri of an item entry
2524          * @param string $host hostname for the GUID prefix
2525          * @return string unique guid
2526          */
2527         public static function guidFromUri($uri, $host)
2528         {
2529                 // Our regular guid routine is using this kind of prefix as well
2530                 // We have to avoid that different routines could accidentally create the same value
2531                 $parsed = parse_url($uri);
2532
2533                 // We use a hash of the hostname as prefix for the guid
2534                 $guid_prefix = hash("crc32", $host);
2535
2536                 // Remove the scheme to make sure that "https" and "http" doesn't make a difference
2537                 unset($parsed["scheme"]);
2538
2539                 // Glue it together to be able to make a hash from it
2540                 $host_id = implode("/", $parsed);
2541
2542                 // We could use any hash algorithm since it isn't a security issue
2543                 $host_hash = hash("ripemd128", $host_id);
2544
2545                 return $guid_prefix.$host_hash;
2546         }
2547
2548         /**
2549          * generate an unique URI
2550          *
2551          * @param integer $uid  User id
2552          * @param string  $guid An existing GUID (Otherwise it will be generated)
2553          *
2554          * @return string
2555          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2556          */
2557         public static function newURI($uid, $guid = "")
2558         {
2559                 if ($guid == "") {
2560                         $guid = System::createUUID();
2561                 }
2562
2563                 return DI::baseUrl()->get() . '/objects/' . $guid;
2564         }
2565
2566         /**
2567          * Set "success_update" and "last-item" to the date of the last time we heard from this contact
2568          *
2569          * This can be used to filter for inactive contacts.
2570          * Only do this for public postings to avoid privacy problems, since poco data is public.
2571          * Don't set this value if it isn't from the owner (could be an author that we don't know)
2572          *
2573          * @param array $arr Contains the just posted item record
2574          * @throws \Exception
2575          */
2576         private static function updateContact($arr)
2577         {
2578                 // Unarchive the author
2579                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["author-id"]]);
2580                 if (DBA::isResult($contact)) {
2581                         Contact::unmarkForArchival($contact);
2582                 }
2583
2584                 // Unarchive the contact if it's not our own contact
2585                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["contact-id"], 'self' => false]);
2586                 if (DBA::isResult($contact)) {
2587                         Contact::unmarkForArchival($contact);
2588                 }
2589
2590                 /// @todo On private posts we could obfuscate the date
2591                 $update = ($arr['private'] != self::PRIVATE) || in_array($arr['network'], Protocol::FEDERATED);
2592
2593                 // Is it a forum? Then we don't care about the rules from above
2594                 if (!$update && in_array($arr["network"], [Protocol::ACTIVITYPUB, Protocol::DFRN]) && ($arr["parent-uri"] === $arr["uri"])) {
2595                         if (DBA::exists('contact', ['id' => $arr['contact-id'], 'forum' => true])) {
2596                                 $update = true;
2597                         }
2598                 }
2599
2600                 if ($update) {
2601                         // The "self" contact id is used (for example in the connectors) when the contact is unknown
2602                         // So we have to ensure to only update the last item when it had been our own post,
2603                         // or it had been done by a "regular" contact.
2604                         if (!empty($arr['wall'])) {
2605                                 $condition = ['id' => $arr['contact-id']];
2606                         } else {
2607                                 $condition = ['id' => $arr['contact-id'], 'self' => false];
2608                         }
2609                         DBA::update('contact', ['failed' => false, 'success_update' => $arr['received'], 'last-item' => $arr['received']], $condition);
2610                 }
2611                 // Now do the same for the system wide contacts with uid=0
2612                 if ($arr['private'] != self::PRIVATE) {
2613                         DBA::update('contact', ['failed' => false, 'success_update' => $arr['received'], 'last-item' => $arr['received']],
2614                                 ['id' => $arr['owner-id']]);
2615
2616                         if ($arr['owner-id'] != $arr['author-id']) {
2617                                 DBA::update('contact', ['failed' => false, 'success_update' => $arr['received'], 'last-item' => $arr['received']],
2618                                         ['id' => $arr['author-id']]);
2619                         }
2620                 }
2621         }
2622
2623         public static function setHashtags($body)
2624         {
2625                 $body = BBCode::performWithEscapedTags($body, ['noparse', 'pre', 'code'], function ($body) {
2626                         $tags = BBCode::getTags($body);
2627
2628                         // No hashtags?
2629                         if (!count($tags)) {
2630                                 return $body;
2631                         }
2632
2633                         // This sorting is important when there are hashtags that are part of other hashtags
2634                         // Otherwise there could be problems with hashtags like #test and #test2
2635                         // Because of this we are sorting from the longest to the shortest tag.
2636                         usort($tags, function ($a, $b) {
2637                                 return strlen($b) <=> strlen($a);
2638                         });
2639
2640                         $URLSearchString = "^\[\]";
2641
2642                         // All hashtags should point to the home server if "local_tags" is activated
2643                         if (DI::config()->get('system', 'local_tags')) {
2644                                 $body = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2645                                         "#[url=" . DI::baseUrl() . "/search?tag=$2]$2[/url]", $body);
2646                         }
2647
2648                         // mask hashtags inside of url, bookmarks and attachments to avoid urls in urls
2649                         $body = preg_replace_callback("/\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2650                                 function ($match) {
2651                                         return ("[url=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/url]");
2652                                 }, $body);
2653
2654                         $body = preg_replace_callback("/\[bookmark\=([$URLSearchString]*)\](.*?)\[\/bookmark\]/ism",
2655                                 function ($match) {
2656                                         return ("[bookmark=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/bookmark]");
2657                                 }, $body);
2658
2659                         $body = preg_replace_callback("/\[attachment (.*)\](.*?)\[\/attachment\]/ism",
2660                                 function ($match) {
2661                                         return ("[attachment " . str_replace("#", "&num;", $match[1]) . "]" . $match[2] . "[/attachment]");
2662                                 }, $body);
2663
2664                         // Repair recursive urls
2665                         $body = preg_replace("/&num;\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2666                                 "&num;$2", $body);
2667
2668                         foreach ($tags as $tag) {
2669                                 if ((strpos($tag, '#') !== 0) || strpos($tag, '[url=') || strlen($tag) < 2 || $tag[1] == '#') {
2670                                         continue;
2671                                 }
2672
2673                                 $basetag = str_replace('_', ' ', substr($tag, 1));
2674                                 $newtag = '#[url=' . DI::baseUrl() . '/search?tag=' . $basetag . ']' . $basetag . '[/url]';
2675
2676                                 $body = str_replace($tag, $newtag, $body);
2677                         }
2678
2679                         // Convert back the masked hashtags
2680                         $body = str_replace("&num;", "#", $body);
2681
2682                         return $body;
2683                 });
2684
2685                 return $body;
2686         }
2687
2688         /**
2689          * look for mention tags and setup a second delivery chain for forum/community posts if appropriate
2690          *
2691          * @param int $uid
2692          * @param int $item_id
2693          * @return boolean true if item was deleted, else false
2694          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2695          * @throws \ImagickException
2696          */
2697         private static function tagDeliver($uid, $item_id)
2698         {
2699                 $mention = false;
2700
2701                 $user = DBA::selectFirst('user', [], ['uid' => $uid]);
2702                 if (!DBA::isResult($user)) {
2703                         return false;
2704                 }
2705
2706                 $community_page = (($user['page-flags'] == User::PAGE_FLAGS_COMMUNITY) ? true : false);
2707                 $prvgroup = (($user['page-flags'] == User::PAGE_FLAGS_PRVGROUP) ? true : false);
2708
2709                 $item = Post::selectFirst(self::ITEM_FIELDLIST, ['id' => $item_id]);
2710                 if (!DBA::isResult($item)) {
2711                         return false;
2712                 }
2713
2714                 $link = Strings::normaliseLink(DI::baseUrl() . '/profile/' . $user['nickname']);
2715
2716                 /*
2717                  * Diaspora uses their own hardwired link URL in @-tags
2718                  * instead of the one we supply with webfinger
2719                  */
2720                 $dlink = Strings::normaliseLink(DI::baseUrl() . '/u/' . $user['nickname']);
2721
2722                 $cnt = preg_match_all('/[\@\!]\[url\=(.*?)\](.*?)\[\/url\]/ism', $item['body'], $matches, PREG_SET_ORDER);
2723                 if ($cnt) {
2724                         foreach ($matches as $mtch) {
2725                                 if (Strings::compareLink($link, $mtch[1]) || Strings::compareLink($dlink, $mtch[1])) {
2726                                         $mention = true;
2727                                         Logger::log('mention found: ' . $mtch[2]);
2728                                 }
2729                         }
2730                 }
2731
2732                 if (!$mention) {
2733                         $tags = Tag::getByURIId($item['uri-id'], [Tag::MENTION, Tag::EXCLUSIVE_MENTION]);
2734                         foreach ($tags as $tag) {
2735                                 if (Strings::compareLink($link, $tag['url']) || Strings::compareLink($dlink, $tag['url'])) {
2736                                         $mention = true;
2737                                         DI::logger()->info('mention found in tag.', ['url' => $tag['url']]);
2738                                 }
2739                         }
2740                 }
2741
2742                 if (!$mention) {
2743                         if (($community_page || $prvgroup) &&
2744                                   !$item['wall'] && !$item['origin'] && ($item['gravity'] == GRAVITY_PARENT)) {
2745                                 Logger::info('Delete private group/communiy top-level item without mention', ['id' => $item_id, 'guid'=> $item['guid']]);
2746                                 DBA::delete('item', ['id' => $item_id]);
2747                                 return true;
2748                         }
2749                         return false;
2750                 }
2751
2752                 $arr = ['item' => $item, 'user' => $user];
2753
2754                 Hook::callAll('tagged', $arr);
2755
2756                 if (!$community_page && !$prvgroup) {
2757                         return false;
2758                 }
2759
2760                 /*
2761                  * tgroup delivery - setup a second delivery chain
2762                  * prevent delivery looping - only proceed
2763                  * if the message originated elsewhere and is a top-level post
2764                  */
2765                 if ($item['wall'] || $item['origin'] || ($item['id'] != $item['parent'])) {
2766                         return false;
2767                 }
2768
2769                 // now change this copy of the post to a forum head message and deliver to all the tgroup members
2770                 $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'], ['uid' => $uid, 'self' => true]);
2771                 if (!DBA::isResult($self)) {
2772                         return false;
2773                 }
2774
2775                 $owner_id = Contact::getIdForURL($self['url']);
2776
2777                 // also reset all the privacy bits to the forum default permissions
2778
2779                 $private = ($user['allow_cid'] || $user['allow_gid'] || $user['deny_cid'] || $user['deny_gid']) ? self::PRIVATE : self::PUBLIC;
2780
2781                 $psid = PermissionSet::getIdFromACL(
2782                         $user['uid'],
2783                         $user['allow_cid'],
2784                         $user['allow_gid'],
2785                         $user['deny_cid'],
2786                         $user['deny_gid']
2787                 );
2788
2789                 $forum_mode = ($prvgroup ? 2 : 1);
2790
2791                 $fields = ['wall' => true, 'origin' => true, 'forum_mode' => $forum_mode, 'contact-id' => $self['id'],
2792                         'owner-id' => $owner_id, 'private' => $private, 'psid' => $psid];
2793                 self::update($fields, ['id' => $item_id]);
2794
2795                 Worker::add(['priority' => PRIORITY_HIGH, 'dont_fork' => true], 'Notifier', Delivery::POST, $item_id);
2796
2797                 self::performActivity($item_id, 'announce', $uid);
2798
2799                 return false;
2800         }
2801
2802         /**
2803          * Automatically reshare the item if the "remote_self" option is selected
2804          *
2805          * @param array $item
2806          * @return void
2807          */
2808         private static function autoReshare(array $item)
2809         {
2810                 if ($item['gravity'] != GRAVITY_PARENT) {
2811                         return;
2812                 }
2813
2814                 if (!DBA::exists('contact', ['id' => $item['contact-id'], 'remote_self' => Contact::MIRROR_NATIVE_RESHARE])) {
2815                         return;
2816                 }
2817
2818                 if (!in_array($item['network'], [Protocol::ACTIVITYPUB, Protocol::DFRN])) {
2819                         return;
2820                 }
2821
2822                 Logger::info('Automatically reshare item', ['uid' => $item['uid'], 'id' => $item['id'], 'guid' => $item['guid'], 'uri-id' => $item['uri-id']]);
2823
2824                 self::performActivity($item['id'], 'announce', $item['uid']);
2825         }
2826
2827         public static function isRemoteSelf($contact, &$datarray)
2828         {
2829                 if (!$contact['remote_self']) {
2830                         return false;
2831                 }
2832
2833                 // Prevent the forwarding of posts that are forwarded
2834                 if (!empty($datarray["extid"]) && ($datarray["extid"] == Protocol::DFRN)) {
2835                         Logger::info('Already forwarded');
2836                         return false;
2837                 }
2838
2839                 // Prevent to forward already forwarded posts
2840                 if ($datarray["app"] == DI::baseUrl()->getHostname()) {
2841                         Logger::info('Already forwarded (second test)');
2842                         return false;
2843                 }
2844
2845                 // Only forward posts
2846                 if ($datarray["verb"] != Activity::POST) {
2847                         Logger::info('No post');
2848                         return false;
2849                 }
2850
2851                 if (($contact['network'] != Protocol::FEED) && ($datarray['private'] == self::PRIVATE)) {
2852                         Logger::info('Not public');
2853                         return false;
2854                 }
2855
2856                 $datarray2 = $datarray;
2857                 Logger::info('remote-self start', ['contact' => $contact['url'], 'remote_self'=> $contact['remote_self'], 'item' => $datarray]);
2858                 if ($contact['remote_self'] == Contact::MIRROR_OWN_POST) {
2859                         $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'],
2860                                         ['uid' => $contact['uid'], 'self' => true]);
2861                         if (DBA::isResult($self)) {
2862                                 $datarray['contact-id'] = $self["id"];
2863
2864                                 $datarray['owner-name'] = $self["name"];
2865                                 $datarray['owner-link'] = $self["url"];
2866                                 $datarray['owner-avatar'] = $self["thumb"];
2867
2868                                 $datarray['author-name']   = $datarray['owner-name'];
2869                                 $datarray['author-link']   = $datarray['owner-link'];
2870                                 $datarray['author-avatar'] = $datarray['owner-avatar'];
2871
2872                                 unset($datarray['edited']);
2873
2874                                 unset($datarray['network']);
2875                                 unset($datarray['owner-id']);
2876                                 unset($datarray['author-id']);
2877                         }
2878
2879                         if ($contact['network'] != Protocol::FEED) {
2880                                 $old_uri_id = $datarray["uri-id"] ?? 0;
2881                                 $datarray["guid"] = System::createUUID();
2882                                 unset($datarray["plink"]);
2883                                 $datarray["uri"] = self::newURI($contact['uid'], $datarray["guid"]);
2884                                 $datarray["uri-id"] = ItemURI::getIdByURI($datarray["uri"]);
2885                                 $datarray["extid"] = Protocol::DFRN;
2886                                 $urlpart = parse_url($datarray2['author-link']);
2887                                 $datarray["app"] = $urlpart["host"];
2888                                 if (!empty($old_uri_id)) {
2889                                         Post\Media::copy($old_uri_id, $datarray["uri-id"]);
2890                                 }
2891
2892                                 unset($datarray["parent-uri"]);
2893                                 unset($datarray["thr-parent"]);
2894                         } else {
2895                                 $datarray['private'] = self::PUBLIC;
2896                         }
2897                 }
2898
2899                 if ($contact['network'] != Protocol::FEED) {
2900                         // Store the original post
2901                         $result = self::insert($datarray2);
2902                         Logger::info('remote-self post original item', ['contact' => $contact['url'], 'result'=> $result, 'item' => $datarray2]);
2903                 } else {
2904                         $datarray["app"] = "Feed";
2905                         $result = true;
2906                 }
2907
2908                 // Trigger automatic reactions for addons
2909                 $datarray['api_source'] = true;
2910
2911                 // We have to tell the hooks who we are - this really should be improved
2912                 $_SESSION['authenticated'] = true;
2913                 $_SESSION['uid'] = $contact['uid'];
2914
2915                 return (bool)$result;
2916         }
2917
2918         /**
2919          *
2920          * @param string $s
2921          * @param int    $uid
2922          * @param array  $item
2923          * @param int    $cid
2924          * @return string
2925          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2926          * @throws \ImagickException
2927          */
2928         public static function fixPrivatePhotos($s, $uid, $item = null, $cid = 0)
2929         {
2930                 if (DI::config()->get('system', 'disable_embedded')) {
2931                         return $s;
2932                 }
2933
2934                 Logger::info('check for photos');
2935                 $site = substr(DI::baseUrl(), strpos(DI::baseUrl(), '://'));
2936
2937                 $orig_body = $s;
2938                 $new_body = '';
2939
2940                 $img_start = strpos($orig_body, '[img');
2941                 $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2942                 $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2943
2944                 while (($img_st_close !== false) && ($img_len !== false)) {
2945                         $img_st_close++; // make it point to AFTER the closing bracket
2946                         $image = substr($orig_body, $img_start + $img_st_close, $img_len);
2947
2948                         Logger::info('found photo', ['image' => $image]);
2949
2950                         if (stristr($image, $site . '/photo/')) {
2951                                 // Only embed locally hosted photos
2952                                 $replace = false;
2953                                 $i = basename($image);
2954                                 $i = str_replace(['.jpg', '.png', '.gif'], ['', '', ''], $i);
2955                                 $x = strpos($i, '-');
2956
2957                                 if ($x) {
2958                                         $res = substr($i, $x + 1);
2959                                         $i = substr($i, 0, $x);
2960                                         $photo = Photo::getPhotoForUser($uid, $i, $res);
2961                                         if (DBA::isResult($photo)) {
2962                                                 /*
2963                                                  * Check to see if we should replace this photo link with an embedded image
2964                                                  * 1. No need to do so if the photo is public
2965                                                  * 2. If there's a contact-id provided, see if they're in the access list
2966                                                  *    for the photo. If so, embed it.
2967                                                  * 3. Otherwise, if we have an item, see if the item permissions match the photo
2968                                                  *    permissions, regardless of order but first check to see if they're an exact
2969                                                  *    match to save some processing overhead.
2970                                                  */
2971                                                 if (self::hasPermissions($photo)) {
2972                                                         if ($cid) {
2973                                                                 $recips = self::enumeratePermissions($photo);
2974                                                                 if (in_array($cid, $recips)) {
2975                                                                         $replace = true;
2976                                                                 }
2977                                                         } elseif ($item) {
2978                                                                 if (self::samePermissions($uid, $item, $photo)) {
2979                                                                         $replace = true;
2980                                                                 }
2981                                                         }
2982                                                 }
2983                                                 if ($replace) {
2984                                                         $photo_img = Photo::getImageForPhoto($photo);
2985                                                         // If a custom width and height were specified, apply before embedding
2986                                                         if (preg_match("/\[img\=([0-9]*)x([0-9]*)\]/is", substr($orig_body, $img_start, $img_st_close), $match)) {
2987                                                                 Logger::info('scaling photo');
2988
2989                                                                 $width = intval($match[1]);
2990                                                                 $height = intval($match[2]);
2991
2992                                                                 $photo_img->scaleDown(max($width, $height));
2993                                                         }
2994
2995                                                         $data = $photo_img->asString();
2996                                                         $type = $photo_img->getType();
2997
2998                                                         Logger::info('replacing photo');
2999                                                         $image = 'data:' . $type . ';base64,' . base64_encode($data);
3000                                                         Logger::debug('replaced', ['image' => $image]);
3001                                                 }
3002                                         }
3003                                 }
3004                         }
3005
3006                         $new_body = $new_body . substr($orig_body, 0, $img_start + $img_st_close) . $image . '[/img]';
3007                         $orig_body = substr($orig_body, $img_start + $img_st_close + $img_len + strlen('[/img]'));
3008                         if ($orig_body === false) {
3009                                 $orig_body = '';
3010                         }
3011
3012                         $img_start = strpos($orig_body, '[img');
3013                         $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
3014                         $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
3015                 }
3016
3017                 $new_body = $new_body . $orig_body;
3018
3019                 return $new_body;
3020         }
3021
3022         private static function hasPermissions($obj)
3023         {
3024                 return !empty($obj['allow_cid']) || !empty($obj['allow_gid']) ||
3025                         !empty($obj['deny_cid']) || !empty($obj['deny_gid']);
3026         }
3027
3028         private static function samePermissions($uid, $obj1, $obj2)
3029         {
3030                 // first part is easy. Check that these are exactly the same.
3031                 if (($obj1['allow_cid'] == $obj2['allow_cid'])
3032                         && ($obj1['allow_gid'] == $obj2['allow_gid'])
3033                         && ($obj1['deny_cid'] == $obj2['deny_cid'])
3034                         && ($obj1['deny_gid'] == $obj2['deny_gid'])) {
3035                         return true;
3036                 }
3037
3038                 // This is harder. Parse all the permissions and compare the resulting set.
3039                 $recipients1 = self::enumeratePermissions($obj1);
3040                 $recipients2 = self::enumeratePermissions($obj2);
3041                 sort($recipients1);
3042                 sort($recipients2);
3043
3044                 /// @TODO Comparison of arrays, maybe use array_diff_assoc() here?
3045                 return ($recipients1 == $recipients2);
3046         }
3047
3048         /**
3049          * Returns an array of contact-ids that are allowed to see this object
3050          *
3051          * @param array $obj        Item array with at least uid, allow_cid, allow_gid, deny_cid and deny_gid
3052          * @param bool  $check_dead Prunes unavailable contacts from the result
3053          * @return array
3054          * @throws \Exception
3055          */
3056         public static function enumeratePermissions(array $obj, bool $check_dead = false)
3057         {
3058                 $aclFormater = DI::aclFormatter();
3059
3060                 $allow_people = $aclFormater->expand($obj['allow_cid']);
3061                 $allow_groups = Group::expand($obj['uid'], $aclFormater->expand($obj['allow_gid']), $check_dead);
3062                 $deny_people  = $aclFormater->expand($obj['deny_cid']);
3063                 $deny_groups  = Group::expand($obj['uid'], $aclFormater->expand($obj['deny_gid']), $check_dead);
3064                 $recipients   = array_unique(array_merge($allow_people, $allow_groups));
3065                 $deny         = array_unique(array_merge($deny_people, $deny_groups));
3066                 $recipients   = array_diff($recipients, $deny);
3067                 return $recipients;
3068         }
3069
3070         public static function expire(int $uid, int $days, string $network = "", bool $force = false)
3071         {
3072                 if (!$uid || ($days < 1)) {
3073                         return;
3074                 }
3075
3076                 $condition = ["`uid` = ? AND NOT `deleted` AND `gravity` = ?",
3077                         $uid, GRAVITY_PARENT];
3078
3079                 /*
3080                  * $expire_network_only = save your own wall posts
3081                  * and just expire conversations started by others
3082                  */
3083                 $expire_network_only = DI::pConfig()->get($uid, 'expire', 'network_only', false);
3084
3085                 if ($expire_network_only) {
3086                         $condition[0] .= " AND NOT `wall`";
3087                 }
3088
3089                 if ($network != "") {
3090                         $condition[0] .= " AND `network` = ?";
3091                         $condition[] = $network;
3092                 }
3093
3094                 $condition[0] .= " AND `received` < UTC_TIMESTAMP() - INTERVAL ? DAY";
3095                 $condition[] = $days;
3096
3097                 $items = Post::select(['file', 'resource-id', 'starred', 'type', 'id', 'post-type'], $condition);
3098
3099                 if (!DBA::isResult($items)) {
3100                         return;
3101                 }
3102
3103                 $expire_items = DI::pConfig()->get($uid, 'expire', 'items', true);
3104
3105                 // Forcing expiring of items - but not notes and marked items
3106                 if ($force) {
3107                         $expire_items = true;
3108                 }
3109
3110                 $expire_notes = DI::pConfig()->get($uid, 'expire', 'notes', true);
3111                 $expire_starred = DI::pConfig()->get($uid, 'expire', 'starred', true);
3112                 $expire_photos = DI::pConfig()->get($uid, 'expire', 'photos', false);
3113
3114                 $expired = 0;
3115
3116                 $priority = DI::config()->get('system', 'expire-notify-priority');
3117
3118                 while ($item = Post::fetch($items)) {
3119                         // don't expire filed items
3120
3121                         if (strpos($item['file'], '[') !== false) {
3122                                 continue;
3123                         }
3124
3125                         // Only expire posts, not photos and photo comments
3126
3127                         if (!$expire_photos && strlen($item['resource-id'])) {
3128                                 continue;
3129                         } elseif (!$expire_starred && intval($item['starred'])) {
3130                                 continue;
3131                         } elseif (!$expire_notes && (($item['type'] == 'note') || ($item['post-type'] == self::PT_PERSONAL_NOTE))) {
3132                                 continue;
3133                         } elseif (!$expire_items && ($item['type'] != 'note') && ($item['post-type'] != self::PT_PERSONAL_NOTE)) {
3134                                 continue;
3135                         }
3136
3137                         self::markForDeletionById($item['id'], $priority);
3138
3139                         ++$expired;
3140                 }
3141                 DBA::close($items);
3142                 Logger::log('User ' . $uid . ": expired $expired items; expire items: $expire_items, expire notes: $expire_notes, expire starred: $expire_starred, expire photos: $expire_photos");
3143         }
3144
3145         public static function firstPostDate($uid, $wall = false)
3146         {
3147                 $condition = ['uid' => $uid, 'wall' => $wall, 'deleted' => false, 'visible' => true, 'moderated' => false];
3148                 $params = ['order' => ['received' => false]];
3149                 $thread = DBA::selectFirst('thread', ['received'], $condition, $params);
3150                 if (DBA::isResult($thread)) {
3151                         return substr(DateTimeFormat::local($thread['received']), 0, 10);
3152                 }
3153                 return false;
3154         }
3155
3156         /**
3157          * add/remove activity to an item
3158          *
3159          * Toggle activities as like,dislike,attend of an item
3160          *
3161          * @param int $item_id
3162          * @param string $verb
3163          *            Activity verb. One of
3164          *            like, unlike, dislike, undislike, attendyes, unattendyes,
3165          *            attendno, unattendno, attendmaybe, unattendmaybe,
3166          *            announce, unannouce
3167          * @return bool
3168          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3169          * @throws \ImagickException
3170          * @hook  'post_local_end'
3171          *            array $arr
3172          *            'post_id' => ID of posted item
3173          */
3174         public static function performActivity(int $item_id, string $verb, int $uid)
3175         {
3176                 if (empty($uid)) {
3177                         return false;
3178                 }
3179
3180                 Logger::notice('Start create activity', ['verb' => $verb, 'item' => $item_id, 'user' => $uid]);
3181
3182                 $item = Post::selectFirst(self::ITEM_FIELDLIST, ['id' => $item_id]);
3183                 if (!DBA::isResult($item)) {
3184                         Logger::log('like: unknown item ' . $item_id);
3185                         return false;
3186                 }
3187
3188                 $item_uri = $item['uri'];
3189
3190                 if (!in_array($item['uid'], [0, $uid])) {
3191                         return false;
3192                 }
3193
3194                 if (!Post::exists(['uri-id' => $item['parent-uri-id'], 'uid' => $uid])) {
3195                         $stored = self::storeForUserByUriId($item['parent-uri-id'], $uid);
3196                         if (($item['parent-uri-id'] == $item['uri-id']) && !empty($stored)) {
3197                                 $item = Post::selectFirst(self::ITEM_FIELDLIST, ['id' => $stored]);
3198                                 if (!DBA::isResult($item)) {
3199                                         Logger::info('Could not fetch just created item - should not happen', ['stored' => $stored, 'uid' => $uid, 'item-uri' => $item_uri]);
3200                                         return false;
3201                                 }
3202                         }
3203                 }
3204
3205                 // Retrieves the local post owner
3206                 $owner = User::getOwnerDataById($uid);
3207                 if (empty($owner)) {
3208                         Logger::info('Empty owner for user', ['uid' => $uid]);
3209                         return false;
3210                 }
3211
3212                 // Retrieve the current logged in user's public contact
3213                 $author_id = Contact::getIdForURL($owner['url']);
3214                 if (empty($author_id)) {
3215                         Logger::info('Empty public contact');
3216                         return false;
3217                 }
3218
3219                 $activity = null;
3220                 switch ($verb) {
3221                         case 'like':
3222                         case 'unlike':
3223                                 $activity = Activity::LIKE;
3224                                 break;
3225                         case 'dislike':
3226                         case 'undislike':
3227                                 $activity = Activity::DISLIKE;
3228                                 break;
3229                         case 'attendyes':
3230                         case 'unattendyes':
3231                                 $activity = Activity::ATTEND;
3232                                 break;
3233                         case 'attendno':
3234                         case 'unattendno':
3235                                 $activity = Activity::ATTENDNO;
3236                                 break;
3237                         case 'attendmaybe':
3238                         case 'unattendmaybe':
3239                                 $activity = Activity::ATTENDMAYBE;
3240                                 break;
3241                         case 'follow':
3242                         case 'unfollow':
3243                                 $activity = Activity::FOLLOW;
3244                                 break;
3245                         case 'announce':
3246                         case 'unannounce':
3247                                 $activity = Activity::ANNOUNCE;
3248                                 break;
3249                         default:
3250                                 Logger::notice('unknown verb', ['verb' => $verb, 'item' => $item_id]);
3251                                 return false;
3252                 }
3253
3254                 $mode = Strings::startsWith($verb, 'un') ? 'delete' : 'create';
3255
3256                 // Enable activity toggling instead of on/off
3257                 $event_verb_flag = $activity === Activity::ATTEND || $activity === Activity::ATTENDNO || $activity === Activity::ATTENDMAYBE;
3258
3259                 // Look for an existing verb row
3260                 // Event participation activities are mutually exclusive, only one of them can exist at all times.
3261                 if ($event_verb_flag) {
3262                         $verbs = [Activity::ATTEND, Activity::ATTENDNO, Activity::ATTENDMAYBE];
3263
3264                         // Translate to the index based activity index
3265                         $vids = [];
3266                         foreach ($verbs as $verb) {
3267                                 $vids[] = Verb::getID($verb);
3268                         }
3269                 } else {
3270                         $vids = Verb::getID($activity);
3271                 }
3272
3273                 $condition = ['vid' => $vids, 'deleted' => false, 'gravity' => GRAVITY_ACTIVITY,
3274                         'author-id' => $author_id, 'uid' => $item['uid'], 'thr-parent' => $item_uri];
3275                 $like_item = Post::selectFirst(['id', 'guid', 'verb'], $condition);
3276
3277                 if (DBA::isResult($like_item)) {
3278                         /**
3279                          * Truth table for existing activities
3280                          *
3281                          * |          Inputs            ||      Outputs      |
3282                          * |----------------------------||-------------------|
3283                          * |  Mode  | Event | Same verb || Delete? | Return? |
3284                          * |--------|-------|-----------||---------|---------|
3285                          * | create |  Yes  |    Yes    ||   No    |   Yes   |
3286                          * | create |  Yes  |    No     ||   Yes   |   No    |
3287                          * | create |  No   |    Yes    ||   No    |   Yes   |
3288                          * | create |  No   |    No     ||        N/A†       |
3289                          * | delete |  Yes  |    Yes    ||   Yes   |   N/A‡  |
3290                          * | delete |  Yes  |    No     ||   No    |   N/A‡  |
3291                          * | delete |  No   |    Yes    ||   Yes   |   N/A‡  |
3292                          * | delete |  No   |    No     ||        N/A†       |
3293                          * |--------|-------|-----------||---------|---------|
3294                          * |   A    |   B   |     C     || A xor C | !B or C |
3295                          *
3296                          * † Can't happen: It's impossible to find an existing non-event activity without
3297                          *                 the same verb because we are only looking for this single verb.
3298                          *
3299                          * ‡ The "mode = delete" is returning early whether an existing activity was found or not.
3300                          */
3301                         if ($mode == 'create' xor $like_item['verb'] == $activity) {
3302                                 self::markForDeletionById($like_item['id']);
3303                         }
3304
3305                         if (!$event_verb_flag || $like_item['verb'] == $activity) {
3306                                 return true;
3307                         }
3308                 }
3309
3310                 // No need to go further if we aren't creating anything
3311                 if ($mode == 'delete') {
3312                         return true;
3313                 }
3314
3315                 $objtype = $item['resource-id'] ? Activity\ObjectType::IMAGE : Activity\ObjectType::NOTE;
3316
3317                 $new_item = [
3318                         'guid'          => System::createUUID(),
3319                         'uri'           => self::newURI($item['uid']),
3320                         'uid'           => $item['uid'],
3321                         'contact-id'    => $owner['id'],
3322                         'wall'          => $item['wall'],
3323                         'origin'        => 1,
3324                         'network'       => Protocol::DFRN,
3325                         'protocol'      => Conversation::PARCEL_DIRECT,
3326                         'direction'     => Conversation::PUSH,
3327                         'gravity'       => GRAVITY_ACTIVITY,
3328                         'parent'        => $item['id'],
3329                         'thr-parent'    => $item['uri'],
3330                         'owner-id'      => $author_id,
3331                         'author-id'     => $author_id,
3332                         'body'          => $activity,
3333                         'verb'          => $activity,
3334                         'object-type'   => $objtype,
3335                         'allow_cid'     => $item['allow_cid'],
3336                         'allow_gid'     => $item['allow_gid'],
3337                         'deny_cid'      => $item['deny_cid'],
3338                         'deny_gid'      => $item['deny_gid'],
3339                         'visible'       => 1,
3340                         'unseen'        => 1,
3341                 ];
3342
3343                 $signed = Diaspora::createLikeSignature($uid, $new_item);
3344                 if (!empty($signed)) {
3345                         $new_item['diaspora_signed_text'] = json_encode($signed);
3346                 }
3347
3348                 $new_item_id = self::insert($new_item);
3349
3350                 // If the parent item isn't visible then set it to visible
3351                 if (!$item['visible']) {
3352                         self::update(['visible' => true], ['id' => $item['id']]);
3353                 }
3354
3355                 $new_item['id'] = $new_item_id;
3356
3357                 Hook::callAll('post_local_end', $new_item);
3358
3359                 return true;
3360         }
3361
3362         private static function addThread($itemid, $onlyshadow = false)
3363         {
3364                 $fields = ['uid', 'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private', 'pubmail',
3365                         'moderated', 'visible', 'starred', 'contact-id', 'post-type', 'uri-id',
3366                         'deleted', 'origin', 'forum_mode', 'mention', 'network', 'author-id', 'owner-id'];
3367                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3368                 $item = Post::selectFirst($fields, $condition);
3369
3370                 if (!DBA::isResult($item)) {
3371                         return;
3372                 }
3373
3374                 $item['iid'] = $itemid;
3375
3376                 if (!$onlyshadow) {
3377                         $result = DBA::replace('thread', $item);
3378
3379                         Logger::info('Add thread', ['item' => $itemid, 'result' => $result]);
3380                 }
3381         }
3382
3383         private static function updateThread($itemid, $setmention = false)
3384         {
3385                 $fields = ['uid', 'guid', 'created', 'edited', 'commented', 'received', 'changed', 'post-type',
3386                         'wall', 'private', 'pubmail', 'moderated', 'visible', 'starred', 'contact-id', 'uri-id',
3387                         'deleted', 'origin', 'forum_mode', 'network', 'author-id', 'owner-id'];
3388
3389                 $item = Post::selectFirst($fields, ['id' => $itemid, 'gravity' => GRAVITY_PARENT]);
3390                 if (!DBA::isResult($item)) {
3391                         return;
3392                 }
3393
3394                 if ($setmention) {
3395                         $item["mention"] = 1;
3396                 }
3397
3398                 $fields = [];
3399
3400                 foreach ($item as $field => $data) {
3401                         if (!in_array($field, ["guid"])) {
3402                                 $fields[$field] = $data;
3403                         }
3404                 }
3405
3406                 $result = DBA::update('thread', $fields, ['iid' => $itemid]);
3407
3408                 Logger::info('Update thread', ['item' => $itemid, 'guid' => $item["guid"], 'result' => $result]);
3409         }
3410
3411         private static function deleteThread($itemid, $itemuri = "")
3412         {
3413                 $item = DBA::selectFirst('thread', ['uid'], ['iid' => $itemid]);
3414                 if (!DBA::isResult($item)) {
3415                         Logger::info('No thread found', ['id' => $itemid]);
3416                         return;
3417                 }
3418
3419                 $result = DBA::delete('thread', ['iid' => $itemid], ['cascade' => false]);
3420
3421                 Logger::info('Deleted thread', ['item' => $itemid, 'result' => $result]);
3422
3423                 if ($itemuri != "") {
3424                         $condition = ["`uri` = ? AND NOT `deleted` AND NOT (`uid` IN (?, 0))", $itemuri, $item["uid"]];
3425                         if (!Post::exists($condition)) {
3426                                 DBA::delete('item', ['uri' => $itemuri, 'uid' => 0]);
3427                                 Logger::debug('Deleted shadow item', ['id' => $itemid, 'uri' => $itemuri]);
3428                         }
3429                 }
3430         }
3431
3432         /**
3433          * Fetch the SQL condition for the given user id
3434          *
3435          * @param integer $owner_id User ID for which the permissions should be fetched
3436          * @return array condition
3437          */
3438         public static function getPermissionsConditionArrayByUserId(int $owner_id)
3439         {
3440                 $local_user = local_user();
3441                 $remote_user = Session::getRemoteContactID($owner_id);
3442
3443                 // default permissions - anonymous user
3444                 $condition = ["`private` != ?", self::PRIVATE];
3445
3446                 if ($local_user && ($local_user == $owner_id)) {
3447                         // Profile owner - everything is visible
3448                         $condition = [];
3449                 } elseif ($remote_user) {
3450                          // Authenticated visitor - fetch the matching permissionsets
3451                         $set = PermissionSet::get($owner_id, $remote_user);
3452                         if (!empty($set)) {
3453                                 $condition = ["(`private` != ? OR (`private` = ? AND `wall`
3454                                         AND `psid` IN (" . implode(', ', array_fill(0, count($set), '?')) . ")))",
3455                                         self::PRIVATE, self::PRIVATE];
3456                                 $condition = array_merge($condition, $set);
3457                         }
3458                 }
3459
3460                 return $condition;
3461         }
3462
3463         public static function getPermissionsSQLByUserId($owner_id)
3464         {
3465                 $local_user = local_user();
3466                 $remote_user = Session::getRemoteContactID($owner_id);
3467
3468                 /*
3469                  * Construct permissions
3470                  *
3471                  * default permissions - anonymous user
3472                  */
3473                 $sql = sprintf(" AND `private` != %d", self::PRIVATE);
3474
3475                 // Profile owner - everything is visible
3476                 if ($local_user && ($local_user == $owner_id)) {
3477                         $sql = '';
3478                 } elseif ($remote_user) {
3479                         /*
3480                          * Authenticated visitor. Unless pre-verified,
3481                          * check that the contact belongs to this $owner_id
3482                          * and load the groups the visitor belongs to.
3483                          * If pre-verified, the caller is expected to have already
3484                          * done this and passed the groups into this function.
3485                          */
3486                         $set = PermissionSet::get($owner_id, $remote_user);
3487
3488                         if (!empty($set)) {
3489                                 $sql_set = sprintf(" OR (`private` = %d AND `wall` AND `psid` IN (", self::PRIVATE) . implode(',', $set) . "))";
3490                         } else {
3491                                 $sql_set = '';
3492                         }
3493
3494                         $sql = sprintf(" AND (`private` != %d", self::PRIVATE) . $sql_set . ")";
3495                 }
3496
3497                 return $sql;
3498         }
3499
3500         /**
3501          * get translated item type
3502          *
3503          * @param $item
3504          * @return string
3505          */
3506         public static function postType($item)
3507         {
3508                 if (!empty($item['event-id'])) {
3509                         return DI::l10n()->t('event');
3510                 } elseif (!empty($item['resource-id'])) {
3511                         return DI::l10n()->t('photo');
3512                 } elseif ($item['gravity'] == GRAVITY_ACTIVITY) {
3513                         return DI::l10n()->t('activity');
3514                 } elseif ($item['gravity'] == GRAVITY_COMMENT) {
3515                         return DI::l10n()->t('comment');
3516                 }
3517
3518                 return DI::l10n()->t('post');
3519         }
3520
3521         /**
3522          * Sets the "rendered-html" field of the provided item
3523          *
3524          * Body is preserved to avoid side-effects as we modify it just-in-time for spoilers and private image links
3525          *
3526          * @param array $item
3527          * @param bool  $update
3528          *
3529          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3530          * @todo Remove reference, simply return "rendered-html" and "rendered-hash"
3531          */
3532         public static function putInCache(&$item, $update = false)
3533         {
3534                 // Save original body to prevent addons to modify it
3535                 $body = $item['body'];
3536
3537                 $rendered_hash = $item['rendered-hash'] ?? '';
3538                 $rendered_html = $item['rendered-html'] ?? '';
3539
3540                 if ($rendered_hash == ''
3541                         || $rendered_html == ''
3542                         || $rendered_hash != hash('md5', BBCode::VERSION . '::' . $body)
3543                         || DI::config()->get('system', 'ignore_cache')
3544                 ) {
3545                         self::addRedirToImageTags($item);
3546
3547                         $item['rendered-html'] = BBCode::convert($item['body']);
3548                         $item['rendered-hash'] = hash('md5', BBCode::VERSION . '::' . $body);
3549
3550                         $hook_data = ['item' => $item, 'rendered-html' => $item['rendered-html'], 'rendered-hash' => $item['rendered-hash']];
3551                         Hook::callAll('put_item_in_cache', $hook_data);
3552                         $item['rendered-html'] = $hook_data['rendered-html'];
3553                         $item['rendered-hash'] = $hook_data['rendered-hash'];
3554                         unset($hook_data);
3555
3556                         // Force an update if the generated values differ from the existing ones
3557                         if ($rendered_hash != $item['rendered-hash']) {
3558                                 $update = true;
3559                         }
3560
3561                         // Only compare the HTML when we forcefully ignore the cache
3562                         if (DI::config()->get('system', 'ignore_cache') && ($rendered_html != $item['rendered-html'])) {
3563                                 $update = true;
3564                         }
3565
3566                         if ($update && !empty($item['id'])) {
3567                                 self::update(
3568                                         [
3569                                                 'rendered-html' => $item['rendered-html'],
3570                                                 'rendered-hash' => $item['rendered-hash']
3571                                         ],
3572                                         ['id' => $item['id']]
3573                                 );
3574                         }
3575                 }
3576
3577                 $item['body'] = $body;
3578         }
3579
3580         /**
3581          * Find any non-embedded images in private items and add redir links to them
3582          *
3583          * @param array &$item The field array of an item row
3584          */
3585         private static function addRedirToImageTags(array &$item)
3586         {
3587                 $app = DI::app();
3588
3589                 $matches = [];
3590                 $cnt = preg_match_all('|\[img\](http[^\[]*?/photo/[a-fA-F0-9]+?(-[0-9]\.[\w]+?)?)\[\/img\]|', $item['body'], $matches, PREG_SET_ORDER);
3591                 if ($cnt) {
3592                         foreach ($matches as $mtch) {
3593                                 if (strpos($mtch[1], '/redir') !== false) {
3594                                         continue;
3595                                 }
3596
3597                                 if ((local_user() == $item['uid']) && ($item['private'] == self::PRIVATE) && ($item['contact-id'] != $app->contact['id']) && ($item['network'] == Protocol::DFRN)) {
3598                                         $img_url = 'redir/' . $item['contact-id'] . '?url=' . urlencode($mtch[1]);
3599                                         $item['body'] = str_replace($mtch[0], '[img]' . $img_url . '[/img]', $item['body']);
3600                                 }
3601                         }
3602                 }
3603         }
3604
3605         /**
3606          * Given an item array, convert the body element from bbcode to html and add smilie icons.
3607          * If attach is true, also add icons for item attachments.
3608          *
3609          * @param array   $item
3610          * @param boolean $attach
3611          * @param boolean $is_preview
3612          * @return string item body html
3613          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3614          * @throws \ImagickException
3615          * @hook  prepare_body_init item array before any work
3616          * @hook  prepare_body_content_filter ('item'=>item array, 'filter_reasons'=>string array) before first bbcode to html
3617          * @hook  prepare_body ('item'=>item array, 'html'=>body string, 'is_preview'=>boolean, 'filter_reasons'=>string array) after first bbcode to html
3618          * @hook  prepare_body_final ('item'=>item array, 'html'=>body string) after attach icons and blockquote special case handling (spoiler, author)
3619          */
3620         public static function prepareBody(array &$item, $attach = false, $is_preview = false)
3621         {
3622                 $a = DI::app();
3623                 Hook::callAll('prepare_body_init', $item);
3624
3625                 // In order to provide theme developers more possibilities, event items
3626                 // are treated differently.
3627                 if ($item['object-type'] === Activity\ObjectType::EVENT && isset($item['event-id'])) {
3628                         $ev = Event::getItemHTML($item);
3629                         return $ev;
3630                 }
3631
3632                 $tags = Tag::populateFromItem($item);
3633
3634                 $item['tags'] = $tags['tags'];
3635                 $item['hashtags'] = $tags['hashtags'];
3636                 $item['mentions'] = $tags['mentions'];
3637
3638                 // Compile eventual content filter reasons
3639                 $filter_reasons = [];
3640                 if (!$is_preview && public_contact() != $item['author-id']) {
3641                         if (!empty($item['content-warning']) && (!local_user() || !DI::pConfig()->get(local_user(), 'system', 'disable_cw', false))) {
3642                                 $filter_reasons[] = DI::l10n()->t('Content warning: %s', $item['content-warning']);
3643                         }
3644
3645                         $hook_data = [
3646                                 'item' => $item,
3647                                 'filter_reasons' => $filter_reasons
3648                         ];
3649                         Hook::callAll('prepare_body_content_filter', $hook_data);
3650                         $filter_reasons = $hook_data['filter_reasons'];
3651                         unset($hook_data);
3652                 }
3653
3654                 // Update the cached values if there is no "zrl=..." on the links.
3655                 $update = (!Session::isAuthenticated() && ($item["uid"] == 0));
3656
3657                 // Or update it if the current viewer is the intented viewer.
3658                 if (($item["uid"] == local_user()) && ($item["uid"] != 0)) {
3659                         $update = true;
3660                 }
3661
3662                 self::putInCache($item, $update);
3663                 $s = $item["rendered-html"];
3664
3665                 $hook_data = [
3666                         'item' => $item,
3667                         'html' => $s,
3668                         'preview' => $is_preview,
3669                         'filter_reasons' => $filter_reasons
3670                 ];
3671                 Hook::callAll('prepare_body', $hook_data);
3672                 $s = $hook_data['html'];
3673                 unset($hook_data);
3674
3675                 if (!$attach) {
3676                         // Replace the blockquotes with quotes that are used in mails.
3677                         $mailquote = '<blockquote type="cite" class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">';
3678                         $s = str_replace(['<blockquote>', '<blockquote class="spoiler">', '<blockquote class="author">'], [$mailquote, $mailquote, $mailquote], $s);
3679                         return $s;
3680                 }
3681
3682                 $as = '';
3683                 $vhead = false;
3684                 foreach (Post\Media::getByURIId($item['uri-id'], [Post\Media::DOCUMENT, Post\Media::TORRENT, Post\Media::UNKNOWN]) as $attachment) {
3685                         $mime = $attachment['mimetype'];
3686
3687                         $the_url = Contact::magicLinkById($item['author-id'], $attachment['url']);
3688
3689                         if (strpos($mime, 'video') !== false) {
3690                                 if (!$vhead) {
3691                                         $vhead = true;
3692                                         DI::page()['htmlhead'] .= Renderer::replaceMacros(Renderer::getMarkupTemplate('videos_head.tpl'));
3693                                 }
3694
3695                                 $as .= Renderer::replaceMacros(Renderer::getMarkupTemplate('video_top.tpl'), [
3696                                         '$video' => [
3697                                                 'id'     => $item['author-id'],
3698                                                 'title'  => DI::l10n()->t('View Video'),
3699                                                 'src'    => $the_url,
3700                                                 'mime'   => $mime,
3701                                         ],
3702                                 ]);
3703                         }
3704
3705                         $filetype = strtolower(substr($mime, 0, strpos($mime, '/')));
3706                         if ($filetype) {
3707                                 $filesubtype = strtolower(substr($mime, strpos($mime, '/') + 1));
3708                                 $filesubtype = str_replace('.', '-', $filesubtype);
3709                         } else {
3710                                 $filetype = 'unkn';
3711                                 $filesubtype = 'unkn';
3712                         }
3713
3714                         $title = Strings::escapeHtml(trim(($attachment['description'] ?? '') ?: $attachment['url']));
3715                         $title .= ' ' . ($attachment['size'] ?? 0) . ' ' . DI::l10n()->t('bytes');
3716
3717                         $icon = '<div class="attachtype icon s22 type-' . $filetype . ' subtype-' . $filesubtype . '"></div>';
3718                         $as .= '<a href="' . strip_tags($the_url) . '" title="' . $title . '" class="attachlink" target="_blank" rel="noopener noreferrer" >' . $icon . '</a>';
3719                 }
3720
3721                 if ($as != '') {
3722                         $s .= '<div class="body-attach">'.$as.'<div class="clear"></div></div>';
3723                 }
3724
3725                 // Map.
3726                 if (strpos($s, '<div class="map">') !== false && !empty($item['coord'])) {
3727                         $x = Map::byCoordinates(trim($item['coord']));
3728                         if ($x) {
3729                                 $s = preg_replace('/\<div class\=\"map\"\>/', '$0' . $x, $s);
3730                         }
3731                 }
3732
3733                 // Replace friendica image url size with theme preference.
3734                 if (!empty($a->theme_info['item_image_size'])) {
3735                         $ps = $a->theme_info['item_image_size'];
3736                         $s = preg_replace('|(<img[^>]+src="[^"]+/photo/[0-9a-f]+)-[0-9]|', "$1-" . $ps, $s);
3737                 }
3738
3739                 $s = HTML::applyContentFilter($s, $filter_reasons);
3740
3741                 $hook_data = ['item' => $item, 'html' => $s];
3742                 Hook::callAll('prepare_body_final', $hook_data);
3743
3744                 return $hook_data['html'];
3745         }
3746
3747         /**
3748          * get private link for item
3749          *
3750          * @param array $item
3751          * @return boolean|array False if item has not plink, otherwise array('href'=>plink url, 'title'=>translated title)
3752          * @throws \Exception
3753          */
3754         public static function getPlink($item)
3755         {
3756                 if (local_user()) {
3757                         $ret = [
3758                                 'href' => "display/" . $item['guid'],
3759                                 'orig' => "display/" . $item['guid'],
3760                                 'title' => DI::l10n()->t('View on separate page'),
3761                                 'orig_title' => DI::l10n()->t('view on separate page'),
3762                         ];
3763
3764                         if (!empty($item['plink'])) {
3765                                 $ret["href"] = DI::baseUrl()->remove($item['plink']);
3766                                 $ret["title"] = DI::l10n()->t('link to source');
3767                         }
3768                 } elseif (!empty($item['plink']) && ($item['private'] != self::PRIVATE)) {
3769                         $ret = [
3770                                 'href' => $item['plink'],
3771                                 'orig' => $item['plink'],
3772                                 'title' => DI::l10n()->t('link to source'),
3773                         ];
3774                 } else {
3775                         $ret = [];
3776                 }
3777
3778                 return $ret;
3779         }
3780
3781         /**
3782          * Is the given item array a post that is sent as starting post to a forum?
3783          *
3784          * @param array $item
3785          * @param array $owner
3786          *
3787          * @return boolean "true" when it is a forum post
3788          */
3789         public static function isForumPost(array $item, array $owner = [])
3790         {
3791                 if (empty($owner)) {
3792                         $owner = User::getOwnerDataById($item['uid']);
3793                         if (empty($owner)) {
3794                                 return false;
3795                         }
3796                 }
3797
3798                 if (($item['author-id'] == $item['owner-id']) ||
3799                         ($owner['id'] == $item['contact-id']) ||
3800                         ($item['uri'] != $item['parent-uri']) ||
3801                         $item['origin']) {
3802                         return false;
3803                 }
3804
3805                 return Contact::isForum($item['contact-id']);
3806         }
3807
3808         /**
3809          * Search item id for given URI or plink
3810          *
3811          * @param string $uri
3812          * @param integer $uid
3813          *
3814          * @return integer item id
3815          */
3816         public static function searchByLink($uri, $uid = 0)
3817         {
3818                 $ssl_uri = str_replace('http://', 'https://', $uri);
3819                 $uris = [$uri, $ssl_uri, Strings::normaliseLink($uri)];
3820
3821                 $item = DBA::selectFirst('item', ['id'], ['uri' => $uris, 'uid' => $uid]);
3822                 if (DBA::isResult($item)) {
3823                         return $item['id'];
3824                 }
3825
3826                 $itemcontent = DBA::selectFirst('item-content', ['uri-id'], ['plink' => $uris]);
3827                 if (!DBA::isResult($itemcontent)) {
3828                         return 0;
3829                 }
3830
3831                 $itemuri = DBA::selectFirst('item-uri', ['uri'], ['id' => $itemcontent['uri-id']]);
3832                 if (!DBA::isResult($itemuri)) {
3833                         return 0;
3834                 }
3835
3836                 $item = DBA::selectFirst('item', ['id'], ['uri' => $itemuri['uri'], 'uid' => $uid]);
3837                 if (DBA::isResult($item)) {
3838                         return $item['id'];
3839                 }
3840
3841                 return 0;
3842         }
3843
3844         /**
3845          * Return the URI for a link to the post
3846          *
3847          * @param string $uri URI or link to post
3848          *
3849          * @return string URI
3850          */
3851         public static function getURIByLink(string $uri)
3852         {
3853                 $ssl_uri = str_replace('http://', 'https://', $uri);
3854                 $uris = [$uri, $ssl_uri, Strings::normaliseLink($uri)];
3855
3856                 $item = DBA::selectFirst('item', ['uri'], ['uri' => $uris]);
3857                 if (DBA::isResult($item)) {
3858                         return $item['uri'];
3859                 }
3860
3861                 $itemcontent = DBA::selectFirst('item-content', ['uri-id'], ['plink' => $uris]);
3862                 if (!DBA::isResult($itemcontent)) {
3863                         return '';
3864                 }
3865
3866                 $itemuri = DBA::selectFirst('item-uri', ['uri'], ['id' => $itemcontent['uri-id']]);
3867                 if (DBA::isResult($itemuri)) {
3868                         return $itemuri['uri'];
3869                 }
3870
3871                 return '';
3872         }
3873
3874         /**
3875          * Fetches item for given URI or plink
3876          *
3877          * @param string $uri
3878          * @param integer $uid
3879          *
3880          * @return integer item id
3881          */
3882         public static function fetchByLink(string $uri, int $uid = 0)
3883         {
3884                 Logger::info('Trying to fetch link', ['uid' => $uid, 'uri' => $uri]);
3885                 $item_id = self::searchByLink($uri, $uid);
3886                 if (!empty($item_id)) {
3887                         Logger::info('Link found', ['uid' => $uid, 'uri' => $uri, 'id' => $item_id]);
3888                         return $item_id;
3889                 }
3890
3891                 if ($fetched_uri = ActivityPub\Processor::fetchMissingActivity($uri)) {
3892                         $item_id = self::searchByLink($fetched_uri, $uid);
3893                 } else {
3894                         $item_id = Diaspora::fetchByURL($uri);
3895                 }
3896
3897                 if (!empty($item_id)) {
3898                         Logger::info('Link fetched', ['uid' => $uid, 'uri' => $uri, 'id' => $item_id]);
3899                         return $item_id;
3900                 }
3901
3902                 Logger::info('Link not found', ['uid' => $uid, 'uri' => $uri]);
3903                 return 0;
3904         }
3905
3906         /**
3907          * Return share data from an item array (if the item is shared item)
3908          * We are providing the complete Item array, because at some time in the future
3909          * we hopefully will define these values not in the body anymore but in some item fields.
3910          * This function is meant to replace all similar functions in the system.
3911          *
3912          * @param array $item
3913          *
3914          * @return array with share information
3915          */
3916         public static function getShareArray($item)
3917         {
3918                 if (!preg_match("/(.*?)\[share(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism", $item['body'], $matches)) {
3919                         return [];
3920                 }
3921
3922                 $attribute_string = $matches[2];
3923                 $attributes = ['comment' => trim($matches[1]), 'shared' => trim($matches[3])];
3924                 foreach (['author', 'profile', 'avatar', 'guid', 'posted', 'link'] as $field) {
3925                         if (preg_match("/$field=(['\"])(.+?)\\1/ism", $attribute_string, $matches)) {
3926                                 $attributes[$field] = trim(html_entity_decode($matches[2] ?? '', ENT_QUOTES, 'UTF-8'));
3927                         }
3928                 }
3929                 return $attributes;
3930         }
3931
3932         /**
3933          * Fetch item information for shared items from the original items and adds it.
3934          *
3935          * @param array $item
3936          *
3937          * @return array item array with data from the original item
3938          */
3939         public static function addShareDataFromOriginal(array $item)
3940         {
3941                 $shared = self::getShareArray($item);
3942                 if (empty($shared)) {
3943                         return $item;
3944                 }
3945
3946                 // Real reshares always have got a GUID.
3947                 if (empty($shared['guid'])) {
3948                         return $item;
3949                 }
3950
3951                 $uid = $item['uid'] ?? 0;
3952
3953                 // first try to fetch the item via the GUID. This will work for all reshares that had been created on this system
3954                 $shared_item = Post::selectFirst(['title', 'body'], ['guid' => $shared['guid'], 'uid' => [0, $uid]]);
3955                 if (!DBA::isResult($shared_item)) {
3956                         if (empty($shared['link'])) {
3957                                 return $item;
3958                         }
3959
3960                         // Otherwhise try to find (and possibly fetch) the item via the link. This should work for Diaspora and ActivityPub posts
3961                         $id = self::fetchByLink($shared['link'] ?? '', $uid);
3962                         if (empty($id)) {
3963                                 Logger::info('Original item not found', ['url' => $shared['link'] ?? '', 'callstack' => System::callstack()]);
3964                                 return $item;
3965                         }
3966
3967                         $shared_item = Post::selectFirst(['title', 'body'], ['id' => $id]);
3968                         if (!DBA::isResult($shared_item)) {
3969                                 return $item;
3970                         }
3971                         Logger::info('Got shared data from url', ['url' => $shared['link'], 'callstack' => System::callstack()]);
3972                 } else {
3973                         Logger::info('Got shared data from guid', ['guid' => $shared['guid'], 'callstack' => System::callstack()]);
3974                 }
3975
3976                 if (!empty($shared_item['title'])) {
3977                         $body = '[h3]' . $shared_item['title'] . "[/h3]\n" . $shared_item['body'];
3978                         unset($shared_item['title']);
3979                 } else {
3980                         $body = $shared_item['body'];
3981                 }
3982
3983                 $item['body'] = preg_replace("/\[share ([^\[\]]*)\].*\[\/share\]/ism", '[share $1]' . $body . '[/share]', $item['body']);
3984                 unset($shared_item['body']);
3985
3986                 return array_merge($item, $shared_item);
3987         }
3988
3989         /**
3990          * Check a prospective item array against user-level permissions
3991          *
3992          * @param array $item Expected keys: uri, gravity, and
3993          *                    author-link if is author-id is set,
3994          *                    owner-link if is owner-id is set,
3995          *                    causer-link if is causer-id is set.
3996          * @param int   $user_id Local user ID
3997          * @return bool
3998          * @throws \Exception
3999          */
4000         protected static function isAllowedByUser(array $item, int $user_id)
4001         {
4002                 if (!empty($item['author-id']) && Contact\User::isBlocked($item['author-id'], $user_id)) {
4003                         Logger::notice('Author is blocked by user', ['author-link' => $item['author-link'], 'uid' => $user_id, 'item-uri' => $item['uri']]);
4004                         return false;
4005                 }
4006
4007                 if (!empty($item['owner-id']) && Contact\User::isBlocked($item['owner-id'], $user_id)) {
4008                         Logger::notice('Owner is blocked by user', ['owner-link' => $item['owner-link'], 'uid' => $user_id, 'item-uri' => $item['uri']]);
4009                         return false;
4010                 }
4011
4012                 // The causer is set during a thread completion, for example because of a reshare. It countains the responsible actor.
4013                 if (!empty($item['causer-id']) && Contact\User::isBlocked($item['causer-id'], $user_id)) {
4014                         Logger::notice('Causer is blocked by user', ['causer-link' => $item['causer-link'] ?? $item['causer-id'], 'uid' => $user_id, 'item-uri' => $item['uri']]);
4015                         return false;
4016                 }
4017
4018                 if (!empty($item['causer-id']) && ($item['gravity'] === GRAVITY_PARENT) && Contact\User::isIgnored($item['causer-id'], $user_id)) {
4019                         Logger::notice('Causer is ignored by user', ['causer-link' => $item['causer-link'] ?? $item['causer-id'], 'uid' => $user_id, 'item-uri' => $item['uri']]);
4020                         return false;
4021                 }
4022
4023                 return true;
4024         }
4025 }