src/Model/Item.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2020, Friendica
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 namespace Friendica\Model;
  23
  24 use Friendica\Content\Text\BBCode;
  25 use Friendica\Content\Text\HTML;
  26 use Friendica\Core\Hook;
  27 use Friendica\Core\Logger;
  28 use Friendica\Core\Protocol;
  29 use Friendica\Core\Renderer;
  30 use Friendica\Core\Session;
  31 use Friendica\Core\System;
  32 use Friendica\Core\Worker;
  33 use Friendica\Database\DBA;
  34 use Friendica\DI;
  35 use Friendica\Model\Post\Category;
  36 use Friendica\Protocol\Activity;
  37 use Friendica\Protocol\ActivityPub;
  38 use Friendica\Protocol\Diaspora;
  39 use Friendica\Protocol\OStatus;
  40 use Friendica\Util\DateTimeFormat;
  41 use Friendica\Util\Map;
  42 use Friendica\Util\Network;
  43 use Friendica\Util\Security;
  44 use Friendica\Util\Strings;
  45 use Friendica\Util\XML;
  46 use Friendica\Worker\Delivery;
  47 use Text_LanguageDetect;
  48 use Friendica\Repository\PermissionSet as RepPermissionSet;
  49
  50 class Item
  51 {
  52         // Posting types, inspired by https://www.w3.org/TR/activitystreams-vocabulary/#object-types
  53         const PT_ARTICLE = 0;
  54         const PT_NOTE = 1;
  55         const PT_PAGE = 2;
  56         const PT_IMAGE = 16;
  57         const PT_AUDIO = 17;
  58         const PT_VIDEO = 18;
  59         const PT_DOCUMENT = 19;
  60         const PT_EVENT = 32;
  61         const PT_PERSONAL_NOTE = 128;
  62
  63         // Field list that is used to display the items
  64         const DISPLAY_FIELDLIST = [
  65                 'uid', 'id', 'parent', 'uri-id', 'uri', 'thr-parent', 'parent-uri', 'guid', 'network', 'gravity',
  66                 'commented', 'created', 'edited', 'received', 'verb', 'object-type', 'postopts', 'plink',
  67                 'wall', 'private', 'starred', 'origin', 'title', 'body', 'file', 'attach', 'language',
  68                 'content-warning', 'location', 'coord', 'app', 'rendered-hash', 'rendered-html', 'object',
  69                 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'item_id',
  70                 'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
  71                 'owner-id', 'owner-link', 'owner-name', 'owner-avatar', 'owner-network',
  72                 'contact-id', 'contact-uid', 'contact-link', 'contact-name', 'contact-avatar',
  73                 'writable', 'self', 'cid', 'alias', 'pinned',
  74                 'event-id', 'event-created', 'event-edited', 'event-start', 'event-finish',
  75                 'event-summary', 'event-desc', 'event-location', 'event-type',
  76                 'event-nofinish', 'event-adjust', 'event-ignore', 'event-id',
  77                 'delivery_queue_count', 'delivery_queue_done', 'delivery_queue_failed', 'activity'
  78         ];
  79
  80         // Field list that is used to deliver items via the protocols
  81         const DELIVER_FIELDLIST = ['uid', 'id', 'parent', 'uri-id', 'uri', 'thr-parent', 'parent-uri', 'guid',
  82                         'parent-guid', 'created', 'edited', 'verb', 'object-type', 'object', 'target',
  83                         'private', 'title', 'body', 'location', 'coord', 'app',
  84                         'attach', 'deleted', 'extid', 'post-type',
  85                         'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
  86                         'author-id', 'author-link', 'owner-link', 'contact-uid',
  87                         'signed_text', 'signature', 'signer', 'network'];
  88
  89         // Field list for "item-content" table that is mixed with the item table
  90         const MIXED_CONTENT_FIELDLIST = ['title', 'content-warning', 'body', 'location',
  91                         'coord', 'app', 'rendered-hash', 'rendered-html', 'verb',
  92                         'object-type', 'object', 'target-type', 'target', 'plink'];
  93
  94         // Field list for "item-content" table that is not present in the "item" table
  95         const CONTENT_FIELDLIST = ['language'];
  96
  97         // All fields in the item table
  98         const ITEM_FIELDLIST = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent',
  99                         'guid', 'uri-id', 'parent-uri-id', 'thr-parent-id',
 100                         'contact-id', 'type', 'wall', 'gravity', 'extid', 'icid', 'iaid', 'psid',
 101                         'created', 'edited', 'commented', 'received', 'changed', 'verb',
 102                         'postopts', 'plink', 'resource-id', 'event-id', 'attach', 'inform',
 103                         'file', 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'post-type',
 104                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 105                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global', 'network',
 106                         'title', 'content-warning', 'body', 'location', 'coord', 'app',
 107                         'rendered-hash', 'rendered-html', 'object-type', 'object', 'target-type', 'target',
 108                         'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
 109                         'owner-id', 'owner-link', 'owner-name', 'owner-avatar'];
 110
 111         // Never reorder or remove entries from this list. Just add new ones at the end, if needed.
 112         // The item-activity table only stores the index and needs this array to know the matching activity.
 113         const ACTIVITIES = [
 114                 Activity::LIKE, Activity::DISLIKE,
 115                 Activity::ATTEND, Activity::ATTENDNO, Activity::ATTENDMAYBE,
 116                 Activity::FOLLOW,
 117                 Activity::ANNOUNCE];
 118
 119         const PUBLIC = 0;
 120         const PRIVATE = 1;
 121         const UNLISTED = 2;
 122
 123         private static $legacy_mode = null;
 124
 125         public static function isLegacyMode()
 126         {
 127                 if (is_null(self::$legacy_mode)) {
 128                         self::$legacy_mode = (DI::config()->get("system", "post_update_version") < 1279);
 129                 }
 130
 131                 return self::$legacy_mode;
 132         }
 133
 134         /**
 135          * Set the pinned state of an item
 136          *
 137          * @param integer $iid    Item ID
 138          * @param integer $uid    User ID
 139          * @param boolean $pinned Pinned state
 140          */
 141         public static function setPinned(int $iid, int $uid, bool $pinned)
 142         {
 143                 DBA::update('user-item', ['pinned' => $pinned], ['iid' => $iid, 'uid' => $uid], true);
 144         }
 145
 146         /**
 147          * Get the pinned state
 148          *
 149          * @param integer $iid Item ID
 150          * @param integer $uid User ID
 151          *
 152          * @return boolean pinned state
 153          */
 154         public static function getPinned(int $iid, int $uid)
 155         {
 156                 $useritem = DBA::selectFirst('user-item', ['pinned'], ['iid' => $iid, 'uid' => $uid]);
 157                 if (!DBA::isResult($useritem)) {
 158                         return false;
 159                 }
 160                 return (bool)$useritem['pinned'];
 161         }
 162
 163         /**
 164          * Select pinned rows from the item table for a given user
 165          *
 166          * @param integer $uid       User ID
 167          * @param array   $selected  Array of selected fields, empty for all
 168          * @param array   $condition Array of fields for condition
 169          * @param array   $params    Array of several parameters
 170          *
 171          * @return boolean|object
 172          * @throws \Exception
 173          */
 174         public static function selectPinned(int $uid, array $selected = [], array $condition = [], $params = [])
 175         {
 176                 $useritems = DBA::select('user-item', ['iid'], ['uid' => $uid, 'pinned' => true]);
 177                 if (!DBA::isResult($useritems)) {
 178                         return $useritems;
 179                 }
 180
 181                 $pinned = [];
 182                 while ($useritem = DBA::fetch($useritems)) {
 183                         $pinned[] = $useritem['iid'];
 184                 }
 185                 DBA::close($useritems);
 186
 187                 if (empty($pinned)) {
 188                         return [];
 189                 }
 190
 191                 if (empty($condition) || !is_array($condition)) {
 192                         $condition = ['iid' => $pinned];
 193                 } else {
 194                         reset($condition);
 195                         $first_key = key($condition);
 196                         if (!is_int($first_key)) {
 197                                 $condition['iid'] = $pinned;
 198                         } else {
 199                                 $values_string = substr(str_repeat("?, ", count($pinned)), 0, -2);
 200                                 $condition[0] = '(' . $condition[0] . ") AND `iid` IN (" . $values_string . ")";
 201                                 $condition = array_merge($condition, $pinned);
 202                         }
 203                 }
 204
 205                 return self::selectThreadForUser($uid, $selected, $condition, $params);
 206         }
 207
 208         /**
 209          * returns an activity index from an activity string
 210          *
 211          * @param string $activity activity string
 212          * @return integer Activity index
 213          */
 214         public static function activityToIndex($activity)
 215         {
 216                 $index = array_search($activity, self::ACTIVITIES);
 217
 218                 if (is_bool($index)) {
 219                         $index = -1;
 220                 }
 221
 222                 return $index;
 223         }
 224
 225         /**
 226          * returns an activity string from an activity index
 227          *
 228          * @param integer $index activity index
 229          * @return string Activity string
 230          */
 231         private static function indexToActivity($index)
 232         {
 233                 if (is_null($index) || !array_key_exists($index, self::ACTIVITIES)) {
 234                         return '';
 235                 }
 236
 237                 return self::ACTIVITIES[$index];
 238         }
 239
 240         /**
 241          * Fetch a single item row
 242          *
 243          * @param mixed $stmt statement object
 244          * @return array current row
 245          */
 246         public static function fetch($stmt)
 247         {
 248                 $row = DBA::fetch($stmt);
 249
 250                 if (is_bool($row)) {
 251                         return $row;
 252                 }
 253
 254                 // ---------------------- Transform item structure data ----------------------
 255
 256                 // We prefer the data from the user's contact over the public one
 257                 if (!empty($row['author-link']) && !empty($row['contact-link']) &&
 258                         ($row['author-link'] == $row['contact-link'])) {
 259                         if (isset($row['author-avatar']) && !empty($row['contact-avatar'])) {
 260                                 $row['author-avatar'] = $row['contact-avatar'];
 261                         }
 262                         if (isset($row['author-name']) && !empty($row['contact-name'])) {
 263                                 $row['author-name'] = $row['contact-name'];
 264                         }
 265                 }
 266
 267                 if (!empty($row['owner-link']) && !empty($row['contact-link']) &&
 268                         ($row['owner-link'] == $row['contact-link'])) {
 269                         if (isset($row['owner-avatar']) && !empty($row['contact-avatar'])) {
 270                                 $row['owner-avatar'] = $row['contact-avatar'];
 271                         }
 272                         if (isset($row['owner-name']) && !empty($row['contact-name'])) {
 273                                 $row['owner-name'] = $row['contact-name'];
 274                         }
 275                 }
 276
 277                 // We can always comment on posts from these networks
 278                 if (array_key_exists('writable', $row) &&
 279                         in_array($row['internal-network'], Protocol::FEDERATED)) {
 280                         $row['writable'] = true;
 281                 }
 282
 283                 // ---------------------- Transform item content data ----------------------
 284
 285                 // Fetch data from the item-content table whenever there is content there
 286                 if (self::isLegacyMode()) {
 287                         $legacy_fields = array_merge(Post\DeliveryData::LEGACY_FIELD_LIST, self::MIXED_CONTENT_FIELDLIST);
 288                         foreach ($legacy_fields as $field) {
 289                                 if (empty($row[$field]) && !empty($row['internal-item-' . $field])) {
 290                                         $row[$field] = $row['internal-item-' . $field];
 291                                 }
 292                                 unset($row['internal-item-' . $field]);
 293                         }
 294                 }
 295
 296                 if (!empty($row['internal-iaid']) && array_key_exists('verb', $row)) {
 297                         $row['verb'] = self::indexToActivity($row['internal-activity']);
 298                         if (array_key_exists('title', $row)) {
 299                                 $row['title'] = '';
 300                         }
 301                         if (array_key_exists('body', $row)) {
 302                                 $row['body'] = $row['verb'];
 303                         }
 304                         if (array_key_exists('object', $row)) {
 305                                 $row['object'] = '';
 306                         }
 307                         if (array_key_exists('object-type', $row)) {
 308                                 $row['object-type'] = Activity\ObjectType::NOTE;
 309                         }
 310                 } elseif (array_key_exists('verb', $row) && in_array($row['verb'], ['', Activity::POST, Activity::SHARE])) {
 311                         // Posts don't have a target - but having tags or files.
 312                         // We safe some performance by building tag and file strings only here.
 313                         // We remove the target since they aren't used for this type.
 314                         // In mail posts we do store some mail header data in the object.
 315                         if (array_key_exists('target', $row)) {
 316                                 $row['target'] = '';
 317                         }
 318                 }
 319
 320                 if (!array_key_exists('verb', $row) || in_array($row['verb'], ['', Activity::POST, Activity::SHARE])) {
 321                         // Build the file string out of the term entries
 322                         if (array_key_exists('file', $row) && empty($row['file'])) {
 323                                 $row['file'] = Category::getTextByURIId($row['internal-uri-id'], $row['internal-uid']);
 324                         }
 325                 }
 326
 327                 if ($row['internal-psid'] == RepPermissionSet::PUBLIC) {
 328                         if (array_key_exists('allow_cid', $row)) {
 329                                 $row['allow_cid'] = '';
 330                         }
 331                         if (array_key_exists('allow_gid', $row)) {
 332                                 $row['allow_gid'] = '';
 333                         }
 334                         if (array_key_exists('deny_cid', $row)) {
 335                                 $row['deny_cid'] = '';
 336                         }
 337                         if (array_key_exists('deny_gid', $row)) {
 338                                 $row['deny_gid'] = '';
 339                         }
 340                 }
 341
 342                 if (array_key_exists('ignored', $row) && array_key_exists('internal-user-ignored', $row) && !is_null($row['internal-user-ignored'])) {
 343                         $row['ignored'] = $row['internal-user-ignored'];
 344                 }
 345
 346                 // Remove internal fields
 347                 unset($row['internal-activity']);
 348                 unset($row['internal-network']);
 349                 unset($row['internal-uri-id']);
 350                 unset($row['internal-uid']);
 351                 unset($row['internal-psid']);
 352                 unset($row['internal-iaid']);
 353                 unset($row['internal-user-ignored']);
 354                 unset($row['interaction']);
 355
 356                 return $row;
 357         }
 358
 359         /**
 360          * Fills an array with data from an item query
 361          *
 362          * @param object $stmt statement object
 363          * @param bool   $do_close
 364          * @return array Data array
 365          */
 366         public static function inArray($stmt, $do_close = true) {
 367                 if (is_bool($stmt)) {
 368                         return $stmt;
 369                 }
 370
 371                 $data = [];
 372                 while ($row = self::fetch($stmt)) {
 373                         $data[] = $row;
 374                 }
 375                 if ($do_close) {
 376                         DBA::close($stmt);
 377                 }
 378                 return $data;
 379         }
 380
 381         /**
 382          * Check if item data exists
 383          *
 384          * @param array $condition array of fields for condition
 385          *
 386          * @return boolean Are there rows for that condition?
 387          * @throws \Exception
 388          */
 389         public static function exists($condition) {
 390                 $stmt = self::select(['id'], $condition, ['limit' => 1]);
 391
 392                 if (is_bool($stmt)) {
 393                         $retval = $stmt;
 394                 } else {
 395                         $retval = (DBA::numRows($stmt) > 0);
 396                 }
 397
 398                 DBA::close($stmt);
 399
 400                 return $retval;
 401         }
 402
 403         /**
 404          * Retrieve a single record from the item table for a given user and returns it in an associative array
 405          *
 406          * @param integer $uid User ID
 407          * @param array   $selected
 408          * @param array   $condition
 409          * @param array   $params
 410          * @return bool|array
 411          * @throws \Exception
 412          * @see   DBA::select
 413          */
 414         public static function selectFirstForUser($uid, array $selected = [], array $condition = [], $params = [])
 415         {
 416                 $params['uid'] = $uid;
 417
 418                 if (empty($selected)) {
 419                         $selected = Item::DISPLAY_FIELDLIST;
 420                 }
 421
 422                 return self::selectFirst($selected, $condition, $params);
 423         }
 424
 425         /**
 426          * Select rows from the item table for a given user
 427          *
 428          * @param integer $uid       User ID
 429          * @param array   $selected  Array of selected fields, empty for all
 430          * @param array   $condition Array of fields for condition
 431          * @param array   $params    Array of several parameters
 432          *
 433          * @return boolean|object
 434          * @throws \Exception
 435          */
 436         public static function selectForUser($uid, array $selected = [], array $condition = [], $params = [])
 437         {
 438                 $params['uid'] = $uid;
 439
 440                 if (empty($selected)) {
 441                         $selected = Item::DISPLAY_FIELDLIST;
 442                 }
 443
 444                 return self::select($selected, $condition, $params);
 445         }
 446
 447         /**
 448          * Retrieve a single record from the item table and returns it in an associative array
 449          *
 450          * @param array $fields
 451          * @param array $condition
 452          * @param array $params
 453          * @return bool|array
 454          * @throws \Exception
 455          * @see   DBA::select
 456          */
 457         public static function selectFirst(array $fields = [], array $condition = [], $params = [])
 458         {
 459                 $params['limit'] = 1;
 460
 461                 $result = self::select($fields, $condition, $params);
 462
 463                 if (is_bool($result)) {
 464                         return $result;
 465                 } else {
 466                         $row = self::fetch($result);
 467                         DBA::close($result);
 468                         return $row;
 469                 }
 470         }
 471
 472         /**
 473          * Select rows from the item table and returns them as an array
 474          *
 475          * @param array $selected  Array of selected fields, empty for all
 476          * @param array $condition Array of fields for condition
 477          * @param array $params    Array of several parameters
 478          *
 479          * @return array
 480          * @throws \Exception
 481          */
 482         public static function selectToArray(array $fields = [], array $condition = [], $params = [])
 483         {
 484                 $result = self::select($fields, $condition, $params);
 485
 486                 if (is_bool($result)) {
 487                         return [];
 488                 }
 489
 490                 $data = [];
 491                 while ($row = self::fetch($result)) {
 492                         $data[] = $row;
 493                 }
 494                 DBA::close($result);
 495
 496                 return $data;
 497         }
 498
 499         /**
 500          * Select rows from the item table
 501          *
 502          * @param array $selected  Array of selected fields, empty for all
 503          * @param array $condition Array of fields for condition
 504          * @param array $params    Array of several parameters
 505          *
 506          * @return boolean|object
 507          * @throws \Exception
 508          */
 509         public static function select(array $selected = [], array $condition = [], $params = [])
 510         {
 511                 $uid = 0;
 512                 $usermode = false;
 513
 514                 if (isset($params['uid'])) {
 515                         $uid = $params['uid'];
 516                         $usermode = true;
 517                 }
 518
 519                 $fields = self::fieldlist($usermode);
 520
 521                 $select_fields = self::constructSelectFields($fields, $selected);
 522
 523                 $condition_string = DBA::buildCondition($condition);
 524
 525                 $condition_string = self::addTablesToFields($condition_string, $fields);
 526
 527                 if ($usermode) {
 528                         $condition_string = $condition_string . ' AND ' . self::condition(false);
 529                 }
 530
 531                 $param_string = self::addTablesToFields(DBA::buildParameter($params), $fields);
 532
 533                 $table = "`item` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, false, $usermode);
 534
 535                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 536
 537                 return DBA::p($sql, $condition);
 538         }
 539
 540         /**
 541          * Select rows from the starting post in the item table
 542          *
 543          * @param integer $uid       User ID
 544          * @param array   $selected
 545          * @param array   $condition Array of fields for condition
 546          * @param array   $params    Array of several parameters
 547          *
 548          * @return boolean|object
 549          * @throws \Exception
 550          */
 551         public static function selectThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 552         {
 553                 $params['uid'] = $uid;
 554
 555                 if (empty($selected)) {
 556                         $selected = Item::DISPLAY_FIELDLIST;
 557                 }
 558
 559                 return self::selectThread($selected, $condition, $params);
 560         }
 561
 562         /**
 563          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 564          *
 565          * @param integer $uid User ID
 566          * @param array   $selected
 567          * @param array   $condition
 568          * @param array   $params
 569          * @return bool|array
 570          * @throws \Exception
 571          * @see   DBA::select
 572          */
 573         public static function selectFirstThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 574         {
 575                 $params['uid'] = $uid;
 576
 577                 if (empty($selected)) {
 578                         $selected = Item::DISPLAY_FIELDLIST;
 579                 }
 580
 581                 return self::selectFirstThread($selected, $condition, $params);
 582         }
 583
 584         /**
 585          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 586          *
 587          * @param array $fields
 588          * @param array $condition
 589          * @param array $params
 590          * @return bool|array
 591          * @throws \Exception
 592          * @see   DBA::select
 593          */
 594         public static function selectFirstThread(array $fields = [], array $condition = [], $params = [])
 595         {
 596                 $params['limit'] = 1;
 597                 $result = self::selectThread($fields, $condition, $params);
 598
 599                 if (is_bool($result)) {
 600                         return $result;
 601                 } else {
 602                         $row = self::fetch($result);
 603                         DBA::close($result);
 604                         return $row;
 605                 }
 606         }
 607
 608         /**
 609          * Select rows from the starting post in the item table
 610          *
 611          * @param array $selected  Array of selected fields, empty for all
 612          * @param array $condition Array of fields for condition
 613          * @param array $params    Array of several parameters
 614          *
 615          * @return boolean|object
 616          * @throws \Exception
 617          */
 618         public static function selectThread(array $selected = [], array $condition = [], $params = [])
 619         {
 620                 $uid = 0;
 621                 $usermode = false;
 622
 623                 if (isset($params['uid'])) {
 624                         $uid = $params['uid'];
 625                         $usermode = true;
 626                 }
 627
 628                 $fields = self::fieldlist($usermode);
 629
 630                 $fields['thread'] = ['mention', 'ignored', 'iid'];
 631
 632                 $threadfields = ['thread' => ['iid', 'uid', 'contact-id', 'owner-id', 'author-id',
 633                         'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private',
 634                         'pubmail', 'moderated', 'visible', 'starred', 'ignored', 'post-type',
 635                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'network']];
 636
 637                 $select_fields = self::constructSelectFields($fields, $selected);
 638
 639                 $condition_string = DBA::buildCondition($condition);
 640
 641                 $condition_string = self::addTablesToFields($condition_string, $threadfields);
 642                 $condition_string = self::addTablesToFields($condition_string, $fields);
 643
 644                 if ($usermode) {
 645                         $condition_string = $condition_string . ' AND ' . self::condition(true);
 646                 }
 647
 648                 $param_string = DBA::buildParameter($params);
 649                 $param_string = self::addTablesToFields($param_string, $threadfields);
 650                 $param_string = self::addTablesToFields($param_string, $fields);
 651
 652                 $table = "`thread` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, true, $usermode);
 653
 654                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 655
 656                 return DBA::p($sql, $condition);
 657         }
 658
 659         /**
 660          * Returns a list of fields that are associated with the item table
 661          *
 662          * @param $usermode
 663          * @return array field list
 664          */
 665         private static function fieldlist($usermode)
 666         {
 667                 $fields = [];
 668
 669                 $fields['item'] = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent',
 670                         'guid', 'uri-id', 'parent-uri-id', 'thr-parent-id',
 671                         'contact-id', 'owner-id', 'author-id', 'type', 'wall', 'gravity', 'extid',
 672                         'created', 'edited', 'commented', 'received', 'changed', 'psid',
 673                         'resource-id', 'event-id', 'attach', 'post-type', 'file',
 674                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 675                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global',
 676                         'id' => 'item_id', 'network', 'icid', 'iaid',
 677                         'uri-id' => 'internal-uri-id', 'uid' => 'internal-uid',
 678                         'network' => 'internal-network', 'iaid' => 'internal-iaid', 'psid' => 'internal-psid'];
 679
 680                 if ($usermode) {
 681                         $fields['user-item'] = ['pinned', 'notification-type', 'ignored' => 'internal-user-ignored'];
 682                 }
 683
 684                 $fields['item-activity'] = ['activity', 'activity' => 'internal-activity'];
 685
 686                 $fields['item-content'] = array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST);
 687
 688                 $fields['post-delivery-data'] = array_merge(Post\DeliveryData::LEGACY_FIELD_LIST, Post\DeliveryData::FIELD_LIST);
 689
 690                 $fields['permissionset'] = ['allow_cid', 'allow_gid', 'deny_cid', 'deny_gid'];
 691
 692                 $fields['author'] = ['url' => 'author-link', 'name' => 'author-name', 'addr' => 'author-addr',
 693                         'thumb' => 'author-avatar', 'nick' => 'author-nick', 'network' => 'author-network'];
 694
 695                 $fields['owner'] = ['url' => 'owner-link', 'name' => 'owner-name', 'addr' => 'owner-addr',
 696                         'thumb' => 'owner-avatar', 'nick' => 'owner-nick', 'network' => 'owner-network'];
 697
 698                 $fields['contact'] = ['url' => 'contact-link', 'name' => 'contact-name', 'thumb' => 'contact-avatar',
 699                         'writable', 'self', 'id' => 'cid', 'alias', 'uid' => 'contact-uid',
 700                         'photo', 'name-date', 'uri-date', 'avatar-date', 'thumb', 'dfrn-id'];
 701
 702                 $fields['parent-item'] = ['guid' => 'parent-guid', 'network' => 'parent-network'];
 703
 704                 $fields['parent-item-author'] = ['url' => 'parent-author-link', 'name' => 'parent-author-name'];
 705
 706                 $fields['event'] = ['created' => 'event-created', 'edited' => 'event-edited',
 707                         'start' => 'event-start','finish' => 'event-finish',
 708                         'summary' => 'event-summary','desc' => 'event-desc',
 709                         'location' => 'event-location', 'type' => 'event-type',
 710                         'nofinish' => 'event-nofinish','adjust' => 'event-adjust',
 711                         'ignore' => 'event-ignore', 'id' => 'event-id'];
 712
 713                 $fields['diaspora-interaction'] = ['interaction', 'interaction' => 'signed_text'];
 714
 715                 return $fields;
 716         }
 717
 718         /**
 719          * Returns SQL condition for the "select" functions
 720          *
 721          * @param boolean $thread_mode Called for the items (false) or for the threads (true)
 722          *
 723          * @return string SQL condition
 724          */
 725         private static function condition($thread_mode)
 726         {
 727                 if ($thread_mode) {
 728                         $master_table = "`thread`";
 729                 } else {
 730                         $master_table = "`item`";
 731                 }
 732                 return sprintf("$master_table.`visible` AND NOT $master_table.`deleted` AND NOT $master_table.`moderated`
 733                         AND (`user-item`.`hidden` IS NULL OR NOT `user-item`.`hidden`)
 734                         AND (`user-author`.`blocked` IS NULL OR NOT `user-author`.`blocked`)
 735                         AND (`user-author`.`ignored` IS NULL OR NOT `user-author`.`ignored` OR `item`.`gravity` != %d)
 736                         AND (`user-owner`.`blocked` IS NULL OR NOT `user-owner`.`blocked`)
 737                         AND (`user-owner`.`ignored` IS NULL OR NOT `user-owner`.`ignored` OR `item`.`gravity` != %d) ",
 738                         GRAVITY_PARENT, GRAVITY_PARENT);
 739         }
 740
 741         /**
 742          * Returns all needed "JOIN" commands for the "select" functions
 743          *
 744          * @param integer $uid          User ID
 745          * @param string  $sql_commands The parts of the built SQL commands in the "select" functions
 746          * @param boolean $thread_mode  Called for the items (false) or for the threads (true)
 747          *
 748          * @param         $user_mode
 749          * @return string The SQL joins for the "select" functions
 750          */
 751         private static function constructJoins($uid, $sql_commands, $thread_mode, $user_mode)
 752         {
 753                 if ($thread_mode) {
 754                         $master_table = "`thread`";
 755                         $master_table_key = "`thread`.`iid`";
 756                         $joins = "STRAIGHT_JOIN `item` ON `item`.`id` = `thread`.`iid` ";
 757                 } else {
 758                         $master_table = "`item`";
 759                         $master_table_key = "`item`.`id`";
 760                         $joins = '';
 761                 }
 762
 763                 if ($user_mode) {
 764                         $joins .= sprintf("STRAIGHT_JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`
 765                                 AND NOT `contact`.`blocked`
 766                                 AND ((NOT `contact`.`readonly` AND NOT `contact`.`pending` AND (`contact`.`rel` IN (%s, %s)))
 767                                 OR `contact`.`self` OR `item`.`gravity` != %d OR `contact`.`uid` = 0)
 768                                 STRAIGHT_JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id` AND NOT `author`.`blocked`
 769                                 STRAIGHT_JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id` AND NOT `owner`.`blocked`
 770                                 LEFT JOIN `user-item` ON `user-item`.`iid` = $master_table_key AND `user-item`.`uid` = %d
 771                                 LEFT JOIN `user-contact` AS `user-author` ON `user-author`.`cid` = $master_table.`author-id` AND `user-author`.`uid` = %d
 772                                 LEFT JOIN `user-contact` AS `user-owner` ON `user-owner`.`cid` = $master_table.`owner-id` AND `user-owner`.`uid` = %d",
 773                                 Contact::SHARING, Contact::FRIEND, GRAVITY_PARENT, intval($uid), intval($uid), intval($uid));
 774                 } else {
 775                         if (strpos($sql_commands, "`contact`.") !== false) {
 776                                 $joins .= "LEFT JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`";
 777                         }
 778                         if (strpos($sql_commands, "`author`.") !== false) {
 779                                 $joins .= " LEFT JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id`";
 780                         }
 781                         if (strpos($sql_commands, "`owner`.") !== false) {
 782                                 $joins .= " LEFT JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id`";
 783                         }
 784                 }
 785
 786                 if (strpos($sql_commands, "`group_member`.") !== false) {
 787                         $joins .= " STRAIGHT_JOIN `group_member` ON `group_member`.`contact-id` = $master_table.`contact-id`";
 788                 }
 789
 790                 if (strpos($sql_commands, "`user`.") !== false) {
 791                         $joins .= " STRAIGHT_JOIN `user` ON `user`.`uid` = $master_table.`uid`";
 792                 }
 793
 794                 if (strpos($sql_commands, "`event`.") !== false) {
 795                         $joins .= " LEFT JOIN `event` ON `event-id` = `event`.`id`";
 796                 }
 797
 798                 if (strpos($sql_commands, "`diaspora-interaction`.") !== false) {
 799                         $joins .= " LEFT JOIN `diaspora-interaction` ON `diaspora-interaction`.`uri-id` = `item`.`uri-id`";
 800                 }
 801
 802                 if (strpos($sql_commands, "`item-activity`.") !== false) {
 803                         $joins .= " LEFT JOIN `item-activity` ON `item-activity`.`uri-id` = `item`.`uri-id`";
 804                 }
 805
 806                 if (strpos($sql_commands, "`item-content`.") !== false) {
 807                         $joins .= " LEFT JOIN `item-content` ON `item-content`.`uri-id` = `item`.`uri-id`";
 808                 }
 809
 810                 if (strpos($sql_commands, "`post-delivery-data`.") !== false) {
 811                         $joins .= " LEFT JOIN `post-delivery-data` ON `post-delivery-data`.`uri-id` = `item`.`uri-id` AND `item`.`origin`";
 812                 }
 813
 814                 if (strpos($sql_commands, "`permissionset`.") !== false) {
 815                         $joins .= " LEFT JOIN `permissionset` ON `permissionset`.`id` = `item`.`psid`";
 816                 }
 817
 818                 if ((strpos($sql_commands, "`parent-item`.") !== false) || (strpos($sql_commands, "`parent-author`.") !== false)) {
 819                         $joins .= " STRAIGHT_JOIN `item` AS `parent-item` ON `parent-item`.`id` = `item`.`parent`";
 820                 }
 821
 822                 if (strpos($sql_commands, "`parent-item-author`.") !== false) {
 823                         $joins .= " STRAIGHT_JOIN `contact` AS `parent-item-author` ON `parent-item-author`.`id` = `parent-item`.`author-id`";
 824                 }
 825
 826                 return $joins;
 827         }
 828
 829         /**
 830          * Add the field list for the "select" functions
 831          *
 832          * @param array $fields The field definition array
 833          * @param array $selected The array with the selected fields from the "select" functions
 834          *
 835          * @return string The field list
 836          */
 837         private static function constructSelectFields(array $fields, array $selected)
 838         {
 839                 if (!empty($selected)) {
 840                         $selected = array_merge($selected, ['internal-uri-id', 'internal-uid', 'internal-psid', 'internal-iaid', 'internal-network']);
 841                 }
 842
 843                 if (in_array('verb', $selected)) {
 844                         $selected[] = 'internal-activity';
 845                 }
 846
 847                 if (in_array('ignored', $selected)) {
 848                         $selected[] = 'internal-user-ignored';
 849                 }
 850
 851                 $legacy_fields = array_merge(Post\DeliveryData::LEGACY_FIELD_LIST, self::MIXED_CONTENT_FIELDLIST);
 852
 853                 $selection = [];
 854                 foreach ($fields as $table => $table_fields) {
 855                         foreach ($table_fields as $field => $select) {
 856                                 if (empty($selected) || in_array($select, $selected)) {
 857                                         if (self::isLegacyMode() && in_array($select, $legacy_fields)) {
 858                                                 $selection[] = "`item`.`".$select."` AS `internal-item-" . $select . "`";
 859                                         }
 860                                         if (is_int($field)) {
 861                                                 $selection[] = "`" . $table . "`.`" . $select . "`";
 862                                         } else {
 863                                                 $selection[] = "`" . $table . "`.`" . $field . "` AS `" . $select . "`";
 864                                         }
 865                                 }
 866                         }
 867                 }
 868                 return implode(", ", $selection);
 869         }
 870
 871         /**
 872          * add table definition to fields in an SQL query
 873          *
 874          * @param string $query SQL query
 875          * @param array $fields The field definition array
 876          *
 877          * @return string the changed SQL query
 878          */
 879         private static function addTablesToFields($query, $fields)
 880         {
 881                 foreach ($fields as $table => $table_fields) {
 882                         foreach ($table_fields as $alias => $field) {
 883                                 if (is_int($alias)) {
 884                                         $replace_field = $field;
 885                                 } else {
 886                                         $replace_field = $alias;
 887                                 }
 888
 889                                 $search = "/([^\.])`" . $field . "`/i";
 890                                 $replace = "$1`" . $table . "`.`" . $replace_field . "`";
 891                                 $query = preg_replace($search, $replace, $query);
 892                         }
 893                 }
 894                 return $query;
 895         }
 896
 897         /**
 898          * Update existing item entries
 899          *
 900          * @param array $fields    The fields that are to be changed
 901          * @param array $condition The condition for finding the item entries
 902          *
 903          * In the future we may have to change permissions as well.
 904          * Then we had to add the user id as third parameter.
 905          *
 906          * A return value of "0" doesn't mean an error - but that 0 rows had been changed.
 907          *
 908          * @return integer|boolean number of affected rows - or "false" if there was an error
 909          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 910          */
 911         public static function update(array $fields, array $condition)
 912         {
 913                 if (empty($condition) || empty($fields)) {
 914                         return false;
 915                 }
 916
 917                 // To ensure the data integrity we do it in an transaction
 918                 DBA::transaction();
 919
 920                 // We cannot simply expand the condition to check for origin entries
 921                 // The condition needn't to be a simple array but could be a complex condition.
 922                 // And we have to execute this query before the update to ensure to fetch the same data.
 923                 $items = DBA::select('item', ['id', 'origin', 'uri', 'uri-id', 'iaid', 'icid', 'uid', 'file'], $condition);
 924
 925                 $content_fields = [];
 926                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
 927                         if (isset($fields[$field])) {
 928                                 $content_fields[$field] = $fields[$field];
 929                                 if (in_array($field, self::CONTENT_FIELDLIST) || !self::isLegacyMode()) {
 930                                         unset($fields[$field]);
 931                                 } else {
 932                                         $fields[$field] = null;
 933                                 }
 934                         }
 935                 }
 936
 937                 $delivery_data = Post\DeliveryData::extractFields($fields);
 938
 939                 $clear_fields = ['bookmark', 'type', 'author-name', 'author-avatar', 'author-link', 'owner-name', 'owner-avatar', 'owner-link', 'postopts', 'inform'];
 940                 foreach ($clear_fields as $field) {
 941                         if (array_key_exists($field, $fields)) {
 942                                 $fields[$field] = null;
 943                         }
 944                 }
 945
 946                 if (array_key_exists('file', $fields)) {
 947                         $files = $fields['file'];
 948                         $fields['file'] = null;
 949                 } else {
 950                         $files = null;
 951                 }
 952
 953                 if (!empty($fields)) {
 954                         $success = DBA::update('item', $fields, $condition);
 955
 956                         if (!$success) {
 957                                 DBA::close($items);
 958                                 DBA::rollback();
 959                                 return false;
 960                         }
 961                 }
 962
 963                 // When there is no content for the "old" item table, this will count the fetched items
 964                 $rows = DBA::affectedRows();
 965
 966                 $notify_items = [];
 967
 968                 while ($item = DBA::fetch($items)) {
 969                         if (!empty($item['iaid']) || (!empty($content_fields['verb']) && (self::activityToIndex($content_fields['verb']) >= 0))) {
 970                                 self::updateActivity($content_fields, ['uri-id' => $item['uri-id']]);
 971
 972                                 if (empty($item['iaid'])) {
 973                                         $item_activity = DBA::selectFirst('item-activity', ['id'], ['uri-id' => $item['uri-id']]);
 974                                         if (DBA::isResult($item_activity)) {
 975                                                 $item_fields = ['iaid' => $item_activity['id'], 'icid' => null];
 976                                                 foreach (self::MIXED_CONTENT_FIELDLIST as $field) {
 977                                                         if (self::isLegacyMode()) {
 978                                                                 $item_fields[$field] = null;
 979                                                         } else {
 980                                                                 unset($item_fields[$field]);
 981                                                         }
 982                                                 }
 983                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
 984
 985                                                 if (!empty($item['icid']) && !DBA::exists('item', ['icid' => $item['icid']])) {
 986                                                         DBA::delete('item-content', ['id' => $item['icid']]);
 987                                                 }
 988                                         }
 989                                 } elseif (!empty($item['icid'])) {
 990                                         DBA::update('item', ['icid' => null], ['id' => $item['id']]);
 991
 992                                         if (!DBA::exists('item', ['icid' => $item['icid']])) {
 993                                                 DBA::delete('item-content', ['id' => $item['icid']]);
 994                                         }
 995                                 }
 996                         } else {
 997                                 self::updateContent($content_fields, ['uri-id' => $item['uri-id']]);
 998
 999                                 if (empty($item['icid'])) {
1000                                         $item_content = DBA::selectFirst('item-content', [], ['uri-id' => $item['uri-id']]);
1001                                         if (DBA::isResult($item_content)) {
1002                                                 $item_fields = ['icid' => $item_content['id']];
1003                                                 // Clear all fields in the item table that have a content in the item-content table
1004                                                 foreach ($item_content as $field => $content) {
1005                                                         if (in_array($field, self::MIXED_CONTENT_FIELDLIST) && !empty($item_content[$field])) {
1006                                                                 if (self::isLegacyMode()) {
1007                                                                         $item_fields[$field] = null;
1008                                                                 } else {
1009                                                                         unset($item_fields[$field]);
1010                                                                 }
1011                                                         }
1012                                                 }
1013                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
1014                                         }
1015                                 }
1016                         }
1017
1018                         if (!is_null($files)) {
1019                                 Category::storeTextByURIId($item['uri-id'], $item['uid'], $files);
1020                                 if (!empty($item['file'])) {
1021                                         DBA::update('item', ['file' => ''], ['id' => $item['id']]);
1022                                 }
1023                         }
1024
1025                         Post\DeliveryData::update($item['uri-id'], $delivery_data);
1026
1027                         self::updateThread($item['id']);
1028
1029                         // We only need to notfiy others when it is an original entry from us.
1030                         // Only call the notifier when the item has some content relevant change.
1031                         if ($item['origin'] && in_array('edited', array_keys($fields))) {
1032                                 $notify_items[] = $item['id'];
1033                         }
1034                 }
1035
1036                 DBA::close($items);
1037                 DBA::commit();
1038
1039                 foreach ($notify_items as $notify_item) {
1040                         Worker::add(PRIORITY_HIGH, "Notifier", Delivery::POST, $notify_item);
1041                 }
1042
1043                 return $rows;
1044         }
1045
1046         /**
1047          * Delete an item and notify others about it - if it was ours
1048          *
1049          * @param array   $condition The condition for finding the item entries
1050          * @param integer $priority  Priority for the notification
1051          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1052          */
1053         public static function markForDeletion($condition, $priority = PRIORITY_HIGH)
1054         {
1055                 $items = self::select(['id'], $condition);
1056                 while ($item = self::fetch($items)) {
1057                         self::markForDeletionById($item['id'], $priority);
1058                 }
1059                 DBA::close($items);
1060         }
1061
1062         /**
1063          * Delete an item for an user and notify others about it - if it was ours
1064          *
1065          * @param array   $condition The condition for finding the item entries
1066          * @param integer $uid       User who wants to delete this item
1067          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1068          */
1069         public static function deleteForUser($condition, $uid)
1070         {
1071                 if ($uid == 0) {
1072                         return;
1073                 }
1074
1075                 $items = self::select(['id', 'uid'], $condition);
1076                 while ($item = self::fetch($items)) {
1077                         // "Deleting" global items just means hiding them
1078                         if ($item['uid'] == 0) {
1079                                 DBA::update('user-item', ['hidden' => true], ['iid' => $item['id'], 'uid' => $uid], true);
1080
1081                                 // Delete notifications
1082                                 DBA::delete('notify', ['iid' => $item['id'], 'uid' => $uid]);
1083                         } elseif ($item['uid'] == $uid) {
1084                                 self::markForDeletionById($item['id'], PRIORITY_HIGH);
1085                         } else {
1086                                 Logger::log('Wrong ownership. Not deleting item ' . $item['id']);
1087                         }
1088                 }
1089                 DBA::close($items);
1090         }
1091
1092         /**
1093          * Mark an item for deletion, delete related data and notify others about it - if it was ours
1094          *
1095          * @param integer $item_id
1096          * @param integer $priority Priority for the notification
1097          *
1098          * @return boolean success
1099          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1100          */
1101         public static function markForDeletionById($item_id, $priority = PRIORITY_HIGH)
1102         {
1103                 Logger::info('Mark item for deletion by id', ['id' => $item_id, 'callstack' => System::callstack()]);
1104                 // locate item to be deleted
1105                 $fields = ['id', 'uri', 'uri-id', 'uid', 'parent', 'parent-uri', 'origin',
1106                         'deleted', 'file', 'resource-id', 'event-id', 'attach',
1107                         'verb', 'object-type', 'object', 'target', 'contact-id',
1108                         'icid', 'iaid', 'psid'];
1109                 $item = self::selectFirst($fields, ['id' => $item_id]);
1110                 if (!DBA::isResult($item)) {
1111                         Logger::info('Item not found.', ['id' => $item_id]);
1112                         return false;
1113                 }
1114
1115                 if ($item['deleted']) {
1116                         Logger::info('Item has already been marked for deletion.', ['id' => $item_id]);
1117                         return false;
1118                 }
1119
1120                 $parent = self::selectFirst(['origin'], ['id' => $item['parent']]);
1121                 if (!DBA::isResult($parent)) {
1122                         $parent = ['origin' => false];
1123                 }
1124
1125                 // clean up categories and tags so they don't end up as orphans
1126
1127                 $matches = false;
1128                 $cnt = preg_match_all('/<(.*?)>/', $item['file'], $matches, PREG_SET_ORDER);
1129
1130                 if ($cnt) {
1131                         foreach ($matches as $mtch) {
1132                                 FileTag::unsaveFile($item['uid'], $item['id'], $mtch[1],true);
1133                         }
1134                 }
1135
1136                 $matches = false;
1137
1138                 $cnt = preg_match_all('/\[(.*?)\]/', $item['file'], $matches, PREG_SET_ORDER);
1139
1140                 if ($cnt) {
1141                         foreach ($matches as $mtch) {
1142                                 FileTag::unsaveFile($item['uid'], $item['id'], $mtch[1],false);
1143                         }
1144                 }
1145
1146                 /*
1147                  * If item is a link to a photo resource, nuke all the associated photos
1148                  * (visitors will not have photo resources)
1149                  * This only applies to photos uploaded from the photos page. Photos inserted into a post do not
1150                  * generate a resource-id and therefore aren't intimately linked to the item.
1151                  */
1152                 /// @TODO: this should first check if photo is used elsewhere
1153                 if (strlen($item['resource-id'])) {
1154                         Photo::delete(['resource-id' => $item['resource-id'], 'uid' => $item['uid']]);
1155                 }
1156
1157                 // If item is a link to an event, delete the event.
1158                 if (intval($item['event-id'])) {
1159                         Event::delete($item['event-id']);
1160                 }
1161
1162                 // If item has attachments, drop them
1163                 /// @TODO: this should first check if attachment is used elsewhere
1164                 foreach (explode(",", $item['attach']) as $attach) {
1165                         preg_match("|attach/(\d+)|", $attach, $matches);
1166                         if (is_array($matches) && count($matches) > 1) {
1167                                 Attach::delete(['id' => $matches[1], 'uid' => $item['uid']]);
1168                         }
1169                 }
1170
1171                 // Delete notifications
1172                 DBA::delete('notify', ['iid' => $item['id'], 'uid' => $item['uid']]);
1173
1174                 // Set the item to "deleted"
1175                 $item_fields = ['deleted' => true, 'edited' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()];
1176                 DBA::update('item', $item_fields, ['id' => $item['id']]);
1177
1178                 Category::storeTextByURIId($item['uri-id'], $item['uid'], '');
1179                 self::deleteThread($item['id'], $item['parent-uri']);
1180
1181                 if (!self::exists(["`uri` = ? AND `uid` != 0 AND NOT `deleted`", $item['uri']])) {
1182                         self::markForDeletion(['uri' => $item['uri'], 'uid' => 0, 'deleted' => false], $priority);
1183                 }
1184
1185                 Post\DeliveryData::delete($item['uri-id']);
1186
1187                 // We don't delete the item-activity here, since we need some of the data for ActivityPub
1188
1189                 if (!empty($item['icid']) && !self::exists(['icid' => $item['icid'], 'deleted' => false])) {
1190                         DBA::delete('item-content', ['id' => $item['icid']], ['cascade' => false]);
1191                 }
1192                 // When the permission set will be used in photo and events as well,
1193                 // this query here needs to be extended.
1194                 // @todo Currently deactivated. We need the permission set in the deletion process.
1195                 // This is a reminder to add the removal somewhere else.
1196                 //if (!empty($item['psid']) && !self::exists(['psid' => $item['psid'], 'deleted' => false])) {
1197                 //      DBA::delete('permissionset', ['id' => $item['psid']], ['cascade' => false]);
1198                 //}
1199
1200                 // If it's the parent of a comment thread, kill all the kids
1201                 if ($item['id'] == $item['parent']) {
1202                         self::markForDeletion(['parent' => $item['parent'], 'deleted' => false], $priority);
1203                 }
1204
1205                 // Is it our comment and/or our thread?
1206                 if ($item['origin'] || $parent['origin']) {
1207                         // When we delete the original post we will delete all existing copies on the server as well
1208                         self::markForDeletion(['uri' => $item['uri'], 'deleted' => false], $priority);
1209
1210                         // send the notification upstream/downstream
1211                         Worker::add(['priority' => $priority, 'dont_fork' => true], "Notifier", Delivery::DELETION, intval($item['id']));
1212                 } elseif ($item['uid'] != 0) {
1213
1214                         // When we delete just our local user copy of an item, we have to set a marker to hide it
1215                         $global_item = self::selectFirst(['id'], ['uri' => $item['uri'], 'uid' => 0, 'deleted' => false]);
1216                         if (DBA::isResult($global_item)) {
1217                                 DBA::update('user-item', ['hidden' => true], ['iid' => $global_item['id'], 'uid' => $item['uid']], true);
1218                         }
1219                 }
1220
1221                 Logger::info('Item has been marked for deletion.', ['id' => $item_id]);
1222
1223                 return true;
1224         }
1225
1226
1227         private static function guid($item, $notify)
1228         {
1229                 if (!empty($item['guid'])) {
1230                         return Strings::escapeTags(trim($item['guid']));
1231                 }
1232
1233                 if ($notify) {
1234                         // We have to avoid duplicates. So we create the GUID in form of a hash of the plink or uri.
1235                         // We add the hash of our own host because our host is the original creator of the post.
1236                         $prefix_host = DI::baseUrl()->getHostname();
1237                 } else {
1238                         $prefix_host = '';
1239
1240                         // We are only storing the post so we create a GUID from the original hostname.
1241                         if (!empty($item['author-link'])) {
1242                                 $parsed = parse_url($item['author-link']);
1243                                 if (!empty($parsed['host'])) {
1244                                         $prefix_host = $parsed['host'];
1245                                 }
1246                         }
1247
1248                         if (empty($prefix_host) && !empty($item['plink'])) {
1249                                 $parsed = parse_url($item['plink']);
1250                                 if (!empty($parsed['host'])) {
1251                                         $prefix_host = $parsed['host'];
1252                                 }
1253                         }
1254
1255                         if (empty($prefix_host) && !empty($item['uri'])) {
1256                                 $parsed = parse_url($item['uri']);
1257                                 if (!empty($parsed['host'])) {
1258                                         $prefix_host = $parsed['host'];
1259                                 }
1260                         }
1261
1262                         // Is it in the format data@host.tld? - Used for mail contacts
1263                         if (empty($prefix_host) && !empty($item['author-link']) && strstr($item['author-link'], '@')) {
1264                                 $mailparts = explode('@', $item['author-link']);
1265                                 $prefix_host = array_pop($mailparts);
1266                         }
1267                 }
1268
1269                 if (!empty($item['plink'])) {
1270                         $guid = self::guidFromUri($item['plink'], $prefix_host);
1271                 } elseif (!empty($item['uri'])) {
1272                         $guid = self::guidFromUri($item['uri'], $prefix_host);
1273                 } else {
1274                         $guid = System::createUUID(hash('crc32', $prefix_host));
1275                 }
1276
1277                 return $guid;
1278         }
1279
1280         private static function contactId($item)
1281         {
1282                 if (!empty($item['contact-id']) && DBA::exists('contact', ['self' => true, 'id' => $item['contact-id']])) {
1283                         return $item['contact-id'];
1284                 } elseif (($item['gravity'] == GRAVITY_PARENT) && !empty($item['uid']) && !empty($item['contact-id']) && Contact::isSharing($item['contact-id'], $item['uid'])) {
1285                         return $item['contact-id'];
1286                 } elseif (!empty($item['uid']) && !Contact::isSharing($item['author-id'], $item['uid'])) {
1287                         return $item['author-id'];
1288                 } elseif (!empty($item['contact-id'])) {
1289                         return $item['contact-id'];
1290                 } else {
1291                         $contact_id = Contact::getIdForURL($item['author-link'], $item['uid']);
1292                         if (!empty($contact_id)) {
1293                                 return $contact_id;
1294                         }
1295                 }
1296                 return $item['author-id'];
1297         }
1298
1299         // This function will finally cover most of the preparation functionality in mod/item.php
1300         public static function prepare(&$item)
1301         {
1302                 /*
1303                  * @TODO: Unused code triggering inspection errors
1304                  *
1305                 $data = BBCode::getAttachmentData($item['body']);
1306                 if ((preg_match_all("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", $item['body'], $match, PREG_SET_ORDER) || isset($data["type"]))
1307                         && ($posttype != Item::PT_PERSONAL_NOTE)) {
1308                         $posttype = Item::PT_PAGE;
1309                         $objecttype = ACTIVITY_OBJ_BOOKMARK;
1310                 }
1311                  */
1312         }
1313
1314         /**
1315          * Write an item array into a spool file to be inserted later.
1316          * This command is called whenever there are issues storing an item.
1317          *
1318          * @param array $item The item fields that are to be inserted
1319          * @throws \Exception
1320          */
1321         private static function spool($orig_item)
1322         {
1323                 // Now we store the data in the spool directory
1324                 // We use "microtime" to keep the arrival order and "mt_rand" to avoid duplicates
1325                 $file = 'item-' . round(microtime(true) * 10000) . '-' . mt_rand() . '.msg';
1326
1327                 $spoolpath = get_spoolpath();
1328                 if ($spoolpath != "") {
1329                         $spool = $spoolpath . '/' . $file;
1330
1331                         file_put_contents($spool, json_encode($orig_item));
1332                         Logger::warning("Item wasn't stored - Item was spooled into file", ['file' => $file]);
1333                 }
1334         }
1335
1336         private static function isDuplicate($item)
1337         {
1338                 // Checking if there is already an item with the same guid
1339                 $condition = ['guid' => $item['guid'], 'network' => $item['network'], 'uid' => $item['uid']];
1340                 if (self::exists($condition)) {
1341                         Logger::notice('Found already existing item', [
1342                                 'guid' => $item['guid'],
1343                                 'uid' => $item['uid'],
1344                                 'network' => $item['network']
1345                         ]);
1346                         return true;
1347                 }
1348
1349                 $condition = ["`uri` = ? AND `network` IN (?, ?) AND `uid` = ?",
1350                         $item['uri'], $item['network'], Protocol::DFRN, $item['uid']];
1351                 if (self::exists($condition)) {
1352                         Logger::notice('duplicated item with the same uri found.', $item);
1353                         return true;
1354                 }
1355
1356                 // On Friendica and Diaspora the GUID is unique
1357                 if (in_array($item['network'], [Protocol::DFRN, Protocol::DIASPORA])) {
1358                         $condition = ['guid' => $item['guid'], 'uid' => $item['uid']];
1359                         if (self::exists($condition)) {
1360                                 Logger::notice('duplicated item with the same guid found.', $item);
1361                                 return true;
1362                         }
1363                 } elseif ($item['network'] == Protocol::OSTATUS) {
1364                         // Check for an existing post with the same content. There seems to be a problem with OStatus.
1365                         $condition = ["`body` = ? AND `network` = ? AND `created` = ? AND `contact-id` = ? AND `uid` = ?",
1366                                         $item['body'], $item['network'], $item['created'], $item['contact-id'], $item['uid']];
1367                         if (self::exists($condition)) {
1368                                 Logger::notice('duplicated item with the same body found.', $item);
1369                                 return true;
1370                         }
1371                 }
1372
1373                 /*
1374                  * Check for already added items.
1375                  * There is a timing issue here that sometimes creates double postings.
1376                  * An unique index would help - but the limitations of MySQL (maximum size of index values) prevent this.
1377                  */
1378                 if (($item["uid"] == 0) && self::exists(['uri' => trim($item['uri']), 'uid' => 0])) {
1379                         Logger::notice('Global item already stored.', ['uri' => $item['uri'], 'network' => $item['network']]);
1380                         return true;
1381                 }
1382
1383                 return false;
1384         }
1385
1386         private static function validItem($item)
1387         {
1388                 // When there is no content then we don't post it
1389                 if ($item['body'].$item['title'] == '') {
1390                         Logger::notice('No body, no title.');
1391                         return false;
1392                 }
1393
1394                 // check for create date and expire time
1395                 $expire_interval = DI::config()->get('system', 'dbclean-expire-days', 0);
1396
1397                 $user = DBA::selectFirst('user', ['expire'], ['uid' => $item['uid']]);
1398                 if (DBA::isResult($user) && ($user['expire'] > 0) && (($user['expire'] < $expire_interval) || ($expire_interval == 0))) {
1399                         $expire_interval = $user['expire'];
1400                 }
1401
1402                 if (($expire_interval > 0) && !empty($item['created'])) {
1403                         $expire_date = time() - ($expire_interval * 86400);
1404                         $created_date = strtotime($item['created']);
1405                         if ($created_date < $expire_date) {
1406                                 Logger::notice('Item created before expiration interval.', [
1407                                         'created' => date('c', $created_date),
1408                                         'expired' => date('c', $expire_date),
1409                                         '$item' => $item
1410                                 ]);
1411                                 return false;
1412                         }
1413                 }
1414
1415                 if (Contact::isBlocked($item['author-id'])) {
1416                         Logger::notice('Author is blocked node-wide', ['author-link' => $item['author-link'], 'item-uri' => $item['uri']]);
1417                         return false;
1418                 }
1419
1420                 if (!empty($item['author-link']) && Network::isUrlBlocked($item['author-link'])) {
1421                         Logger::notice('Author server is blocked', ['author-link' => $item['author-link'], 'item-uri' => $item['uri']]);
1422                         return false;
1423                 }
1424
1425                 if (!empty($item['uid']) && Contact::isBlockedByUser($item['author-id'], $item['uid'])) {
1426                         Logger::notice('Author is blocked by user', ['author-link' => $item['author-link'], 'uid' => $item['uid'], 'item-uri' => $item['uri']]);
1427                         return false;
1428                 }
1429
1430                 if (Contact::isBlocked($item['owner-id'])) {
1431                         Logger::notice('Owner is blocked node-wide', ['owner-link' => $item['owner-link'], 'item-uri' => $item['uri']]);
1432                         return false;
1433                 }
1434
1435                 if (!empty($item['owner-link']) && Network::isUrlBlocked($item['owner-link'])) {
1436                         Logger::notice('Owner server is blocked', ['owner-link' => $item['owner-link'], 'item-uri' => $item['uri']]);
1437                         return false;
1438                 }
1439
1440                 if (!empty($item['uid']) && Contact::isBlockedByUser($item['owner-id'], $item['uid'])) {
1441                         Logger::notice('Owner is blocked by user', ['owner-link' => $item['owner-link'], 'uid' => $item['uid'], 'item-uri' => $item['uri']]);
1442                         return false;
1443                 }
1444
1445                 // The causer is set during a thread completion, for example because of a reshare. It countains the responsible actor.
1446                 if (!empty($item['uid']) && !empty($item['causer-id']) && Contact::isBlockedByUser($item['causer-id'], $item['uid'])) {
1447                         Logger::notice('Causer is blocked by user', ['causer-link' => $item['causer-link'], 'uid' => $item['uid'], 'item-uri' => $item['uri']]);
1448                         return false;
1449                 }
1450
1451                 if (!empty($item['uid']) && !empty($item['causer-id']) && ($item['parent-uri'] == $item['uri']) && Contact::isIgnoredByUser($item['causer-id'], $item['uid'])) {
1452                         Logger::notice('Causer is ignored by user', ['causer-link' => $item['causer-link'], 'uid' => $item['uid'], 'item-uri' => $item['uri']]);
1453                         return false;
1454                 }
1455
1456                 if ($item['verb'] == Activity::FOLLOW) {
1457                         if (!$item['origin'] && ($item['author-id'] == Contact::getPublicIdByUserId($item['uid']))) {
1458                                 // Our own follow request can be relayed to us. We don't store it to avoid notification chaos.
1459                                 Logger::log("Follow: Don't store not origin follow request from us for " . $item['parent-uri'], Logger::DEBUG);
1460                                 return false;
1461                         }
1462
1463                         $condition = ['verb' => Activity::FOLLOW, 'uid' => $item['uid'],
1464                                 'parent-uri' => $item['parent-uri'], 'author-id' => $item['author-id']];
1465                         if (self::exists($condition)) {
1466                                 // It happens that we receive multiple follow requests by the same author - we only store one.
1467                                 Logger::log('Follow: Found existing follow request from author ' . $item['author-id'] . ' for ' . $item['parent-uri'], Logger::DEBUG);
1468                                 return false;
1469                         }
1470                 }
1471
1472                 return true;
1473         }
1474
1475         private static function getDuplicateID($item)
1476         {
1477                 if (empty($item['network']) || in_array($item['network'], Protocol::FEDERATED)) {
1478                         $condition = ["`uri` = ? AND `uid` = ? AND `network` IN (?, ?, ?, ?)",
1479                                 trim($item['uri']), $item['uid'],
1480                                 Protocol::ACTIVITYPUB, Protocol::DIASPORA, Protocol::DFRN, Protocol::OSTATUS];
1481                         $existing = self::selectFirst(['id', 'network'], $condition);
1482                         if (DBA::isResult($existing)) {
1483                                 // We only log the entries with a different user id than 0. Otherwise we would have too many false positives
1484                                 if ($item['uid'] != 0) {
1485                                         Logger::notice('Item already existed for user', [
1486                                                 'uri' => $item['uri'],
1487                                                 'uid' => $item['uid'],
1488                                                 'network' => $item['network'],
1489                                                 'existing_id' => $existing["id"],
1490                                                 'existing_network' => $existing["network"]
1491                                         ]);
1492                                 }
1493
1494                                 return $existing["id"];
1495                         }
1496                 }
1497                 return 0;
1498         }
1499
1500         private static function getParentData($item)
1501         {
1502                 // find the parent and snarf the item id and ACLs
1503                 // and anything else we need to inherit
1504
1505                 $fields = ['uri', 'parent-uri', 'id', 'deleted',
1506                         'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
1507                         'wall', 'private', 'forum_mode', 'origin', 'author-id'];
1508                 $condition = ['uri' => $item['parent-uri'], 'uid' => $item['uid']];
1509                 $params = ['order' => ['id' => false]];
1510                 $parent = self::selectFirst($fields, $condition, $params);
1511
1512                 if (!DBA::isResult($parent)) {
1513                         Logger::info('item parent was not found - ignoring item', ['parent-uri' => $item['parent-uri'], 'uid' => $item['uid']]);
1514                         return [];
1515                 } else {
1516                         // is the new message multi-level threaded?
1517                         // even though we don't support it now, preserve the info
1518                         // and re-attach to the conversation parent.
1519                         if ($parent['uri'] != $parent['parent-uri']) {
1520                                 $item['parent-uri'] = $parent['parent-uri'];
1521
1522                                 $condition = ['uri' => $item['parent-uri'],
1523                                         'parent-uri' => $item['parent-uri'],
1524                                         'uid' => $item['uid']];
1525                                 $params = ['order' => ['id' => false]];
1526                                 $toplevel_parent = self::selectFirst($fields, $condition, $params);
1527
1528                                 if (DBA::isResult($toplevel_parent)) {
1529                                         $parent = $toplevel_parent;
1530                                 }
1531                         }
1532
1533                         $item["parent"]        = $parent['id'];
1534                         $item["deleted"]       = $parent['deleted'];
1535                         $item["allow_cid"]     = $parent['allow_cid'];
1536                         $item['allow_gid']     = $parent['allow_gid'];
1537                         $item['deny_cid']      = $parent['deny_cid'];
1538                         $item['deny_gid']      = $parent['deny_gid'];
1539                         $item['parent_origin'] = $parent['origin'];
1540
1541                         // Don't federate received participation messages
1542                         if ($item['verb'] != Activity::FOLLOW) {
1543                                 $item['wall'] = $parent['wall'];
1544                         } else {
1545                                 $item['wall'] = false;
1546                         }
1547
1548                         /*
1549                          * If the parent is private, force privacy for the entire conversation
1550                          * This differs from the above settings as it subtly allows comments from
1551                          * email correspondents to be private even if the overall thread is not.
1552                          */
1553                         if ($parent['private']) {
1554                                 $item['private'] = $parent['private'];
1555                         }
1556
1557                         /*
1558                          * Edge case. We host a public forum that was originally posted to privately.
1559                          * The original author commented, but as this is a comment, the permissions
1560                          * weren't fixed up so it will still show the comment as private unless we fix it here.
1561                          */
1562                         if ((intval($parent['forum_mode']) == 1) && ($parent['private'] != self::PUBLIC)) {
1563                                 $item['private'] = self::PUBLIC;
1564                         }
1565
1566                         // If its a post that originated here then tag the thread as "mention"
1567                         if ($item['origin'] && $item['uid']) {
1568                                 DBA::update('thread', ['mention' => true], ['iid' => $item["parent"]]);
1569                                 Logger::info('tagged thread as mention', ['parent' => $item["parent"], 'uid' => $item['uid']]);
1570                         }
1571
1572                         // Update the contact relations
1573                         if ($item['author-id'] != $parent['author-id']) {
1574                                 DBA::update('contact-relation', ['last-interaction' => $item['created']], ['cid' => $parent['author-id'], 'relation-cid' => $item['author-id']], true);
1575                         }
1576                 }
1577
1578                 return $item;
1579         }
1580
1581         private static function getGravity($item)
1582         {
1583                 $activity = DI::activity();
1584
1585                 if (isset($item['gravity'])) {
1586                         return intval($item['gravity']);
1587                 } elseif ($item['parent-uri'] === $item['uri']) {
1588                         return GRAVITY_PARENT;
1589                 } elseif ($activity->match($item['verb'], Activity::POST)) {
1590                         return GRAVITY_COMMENT;
1591                 } elseif ($activity->match($item['verb'], Activity::FOLLOW)) {
1592                         return GRAVITY_ACTIVITY;
1593                 }
1594                 Logger::info('Unknown gravity for verb', ['verb' => $item['verb']]);
1595                 return GRAVITY_UNKNOWN;   // Should not happen
1596         }
1597
1598         public static function insert($item, $dummy = false, $notify = false, $dontcache = false)
1599         {
1600                 $orig_item = $item;
1601
1602                 $priority = PRIORITY_HIGH;
1603
1604                 // If it is a posting where users should get notifications, then define it as wall posting
1605                 if ($notify) {
1606                         $item['wall'] = 1;
1607                         $item['origin'] = 1;
1608                         $item['network'] = Protocol::DFRN;
1609                         $item['protocol'] = Conversation::PARCEL_DFRN;
1610
1611                         if (is_int($notify)) {
1612                                 $priority = $notify;
1613                         }
1614                 } else {
1615                         $item['network'] = trim(($item['network'] ?? '') ?: Protocol::PHANTOM);
1616                 }
1617
1618                 $uid = intval($item['uid']);
1619
1620                 $item['guid'] = self::guid($item, $notify);
1621                 $item['uri'] = substr(Strings::escapeTags(trim(($item['uri'] ?? '') ?: self::newURI($item['uid'], $item['guid']))), 0, 255);
1622
1623                 // Store URI data
1624                 $item['uri-id'] = ItemURI::insert(['uri' => $item['uri'], 'guid' => $item['guid']]);
1625
1626                 // Store conversation data
1627                 $item = Conversation::insert($item);
1628
1629                 if (!empty($item['thr-parent'])) {
1630                         $item['parent-uri'] = $item['thr-parent'];
1631                 }
1632
1633                 /*
1634                  * Do we already have this item?
1635                  * We have to check several networks since Friendica posts could be repeated
1636                  * via OStatus (maybe Diasporsa as well)
1637                  */
1638                 $duplicate = self::getDuplicateID($item);
1639                 if ($duplicate) {
1640                         return $duplicate;
1641                 }
1642
1643                 // Additional duplicate checks
1644                 /// @todo Check why the first duplication check returns the item number and the second a 0
1645                 if (self::isDuplicate($item)) {
1646                         return 0;
1647                 }
1648
1649                 $item['wall']          = intval($item['wall'] ?? 0);
1650                 $item['extid']         = trim($item['extid'] ?? '');
1651                 $item['author-name']   = trim($item['author-name'] ?? '');
1652                 $item['author-link']   = trim($item['author-link'] ?? '');
1653                 $item['author-avatar'] = trim($item['author-avatar'] ?? '');
1654                 $item['owner-name']    = trim($item['owner-name'] ?? '');
1655                 $item['owner-link']    = trim($item['owner-link'] ?? '');
1656                 $item['owner-avatar']  = trim($item['owner-avatar'] ?? '');
1657                 $item['received']      = (isset($item['received'])  ? DateTimeFormat::utc($item['received'])  : DateTimeFormat::utcNow());
1658                 $item['created']       = (isset($item['created'])   ? DateTimeFormat::utc($item['created'])   : $item['received']);
1659                 $item['edited']        = (isset($item['edited'])    ? DateTimeFormat::utc($item['edited'])    : $item['created']);
1660                 $item['changed']       = (isset($item['changed'])   ? DateTimeFormat::utc($item['changed'])   : $item['created']);
1661                 $item['commented']     = (isset($item['commented']) ? DateTimeFormat::utc($item['commented']) : $item['created']);
1662                 $item['title']         = substr(trim($item['title'] ?? ''), 0, 255);
1663                 $item['location']      = trim($item['location'] ?? '');
1664                 $item['coord']         = trim($item['coord'] ?? '');
1665                 $item['visible']       = (isset($item['visible']) ? intval($item['visible']) : 1);
1666                 $item['deleted']       = 0;
1667                 $item['parent-uri']    = trim(($item['parent-uri'] ?? '') ?: $item['uri']);
1668                 $item['post-type']     = ($item['post-type'] ?? '') ?: self::PT_ARTICLE;
1669                 $item['verb']          = trim($item['verb'] ?? '');
1670                 $item['object-type']   = trim($item['object-type'] ?? '');
1671                 $item['object']        = trim($item['object'] ?? '');
1672                 $item['target-type']   = trim($item['target-type'] ?? '');
1673                 $item['target']        = trim($item['target'] ?? '');
1674                 $item['plink']         = substr(trim($item['plink'] ?? ''), 0, 255);
1675                 $item['allow_cid']     = trim($item['allow_cid'] ?? '');
1676                 $item['allow_gid']     = trim($item['allow_gid'] ?? '');
1677                 $item['deny_cid']      = trim($item['deny_cid'] ?? '');
1678                 $item['deny_gid']      = trim($item['deny_gid'] ?? '');
1679                 $item['private']       = intval($item['private'] ?? self::PUBLIC);
1680                 $item['body']          = trim($item['body'] ?? '');
1681                 $item['attach']        = trim($item['attach'] ?? '');
1682                 $item['app']           = trim($item['app'] ?? '');
1683                 $item['origin']        = intval($item['origin'] ?? 0);
1684                 $item['postopts']      = trim($item['postopts'] ?? '');
1685                 $item['resource-id']   = trim($item['resource-id'] ?? '');
1686                 $item['event-id']      = intval($item['event-id'] ?? 0);
1687                 $item['inform']        = trim($item['inform'] ?? '');
1688                 $item['file']          = trim($item['file'] ?? '');
1689
1690                 self::addLanguageToItemArray($item);
1691
1692                 // Items cannot be stored before they happen ...
1693                 if ($item['created'] > DateTimeFormat::utcNow()) {
1694                         $item['created'] = DateTimeFormat::utcNow();
1695                 }
1696
1697                 // We haven't invented time travel by now.
1698                 if ($item['edited'] > DateTimeFormat::utcNow()) {
1699                         $item['edited'] = DateTimeFormat::utcNow();
1700                 }
1701
1702                 $item['plink'] = ($item['plink'] ?? '') ?: DI::baseUrl() . '/display/' . urlencode($item['guid']);
1703
1704                 $item['gravity'] = self::getGravity($item);
1705
1706                 $default = ['url' => $item['author-link'], 'name' => $item['author-name'],
1707                         'photo' => $item['author-avatar'], 'network' => $item['network']];
1708
1709                 $item['author-id'] = ($item['author-id'] ?? 0) ?: Contact::getIdForURL($item['author-link'], 0, false, $default);
1710
1711                 unset($item['author-link']);
1712                 unset($item['author-name']);
1713                 unset($item['author-avatar']);
1714                 unset($item['author-network']);
1715
1716                 $default = ['url' => $item['owner-link'], 'name' => $item['owner-name'],
1717                         'photo' => $item['owner-avatar'], 'network' => $item['network']];
1718
1719                 $item['owner-id'] = ($item['owner-id'] ?? 0) ?: Contact::getIdForURL($item['owner-link'], 0, false, $default);
1720
1721                 unset($item['owner-link']);
1722                 unset($item['owner-name']);
1723                 unset($item['owner-avatar']);
1724
1725                 // The contact-id should be set before "self::insert" was called - but there seems to be issues sometimes
1726                 $item["contact-id"] = self::contactId($item);
1727
1728                 if ($item['network'] == Protocol::PHANTOM) {
1729                         $item['network'] = Protocol::DFRN;
1730                         Logger::notice('Missing network, setting to {network}.', [
1731                                 'uri' => $item["uri"],
1732                                 'network' => $item['network'],
1733                                 'callstack' => System::callstack()
1734                         ]);
1735                 }
1736
1737                 if (!self::validItem($item)) {
1738                         return 0;
1739                 }
1740
1741                 // We don't store the causer, we only have it here for the checks in the function above
1742                 unset($item['causer-id']);
1743                 unset($item['causer-link']);
1744
1745                 $item['thr-parent'] = $item['parent-uri'];
1746
1747                 if ($item['parent-uri'] != $item['uri']) {
1748                         $item = self::getParentData($item);
1749                         if (empty($item)) {
1750                                 return 0;
1751                         }
1752
1753                         $parent_id = $item['parent'];
1754                         unset($item['parent']);
1755                         $parent_origin = $item['parent_origin'];
1756                         unset($item['parent_origin']);
1757                 } else {
1758                         $parent_id = 0;
1759                         $parent_origin = $item['origin'];
1760                 }
1761
1762                 $item['parent-uri-id'] = ItemURI::getIdByURI($item['parent-uri']);
1763                 $item['thr-parent-id'] = ItemURI::getIdByURI($item['thr-parent']);
1764
1765                 // Is this item available in the global items (with uid=0)?
1766                 if ($item["uid"] == 0) {
1767                         $item["global"] = true;
1768
1769                         // Set the global flag on all items if this was a global item entry
1770                         DBA::update('item', ['global' => true], ['uri' => $item["uri"]]);
1771                 } else {
1772                         $item["global"] = self::exists(['uid' => 0, 'uri' => $item["uri"]]);
1773                 }
1774
1775                 // ACL settings
1776                 if (!empty($item["allow_cid"] . $item["allow_gid"] . $item["deny_cid"] . $item["deny_gid"])) {
1777                         $item["private"] = self::PRIVATE;
1778                 }
1779
1780                 if ($notify) {
1781                         $item['edit'] = false;
1782                         $item['parent'] = $parent_id;
1783                         Hook::callAll('post_local', $item);
1784                         unset($item['edit']);
1785                         unset($item['parent']);
1786                 } else {
1787                         Hook::callAll('post_remote', $item);
1788                 }
1789
1790                 if (!empty($item['cancel'])) {
1791                         Logger::log('post cancelled by addon.');
1792                         return 0;
1793                 }
1794
1795                 if (empty($item['vid']) && !empty($item['verb'])) {
1796                         $item['vid'] = Verb::getID($item['verb']);
1797                 }
1798
1799                 // Creates or assigns the permission set
1800                 $item['psid'] = PermissionSet::getIdFromACL(
1801                         $item['uid'],
1802                         $item['allow_cid'],
1803                         $item['allow_gid'],
1804                         $item['deny_cid'],
1805                         $item['deny_gid']
1806                 );
1807
1808                 unset($item['allow_cid']);
1809                 unset($item['allow_gid']);
1810                 unset($item['deny_cid']);
1811                 unset($item['deny_gid']);
1812
1813                 // This array field is used to trigger some automatic reactions
1814                 // It is mainly used in the "post_local" hook.
1815                 unset($item['api_source']);
1816
1817                 // Filling item related side tables
1818                 if (!empty($item['dsprsig'])) {
1819                         $dsprsig = json_decode(base64_decode($item['dsprsig']));
1820
1821                         /*
1822                          * Friendica servers lower than 3.4.3-2 had double encoded the signature ...
1823                          * We can check for this condition when we decode and encode the stuff again.
1824                          */
1825                         if (base64_encode(base64_decode(base64_decode($dsprsig->signature))) == base64_decode($dsprsig->signature)) {
1826                                 $dsprsig->signature = base64_decode($dsprsig->signature);
1827                                 Logger::log("Repaired double encoded signature from handle ".$dsprsig->signer, Logger::DEBUG);
1828                         }
1829
1830                         if (!empty($dsprsig->signed_text) && empty($dsprsig->signature) && empty($dsprsig->signer)) {
1831                                 DBA::insert('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $dsprsig->signed_text], true);
1832                         }
1833                 }
1834
1835                 unset($item['dsprsig']);
1836
1837                 if (!empty($item['diaspora_signed_text'])) {
1838                         DBA::insert('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $item['diaspora_signed_text']], true);
1839                 }
1840
1841                 unset($item['diaspora_signed_text']);
1842
1843                 if (array_key_exists('file', $item) && !empty($item['file'])) {
1844                         Category::storeTextByURIId($item['uri-id'], $item['uid'], $item['file']);
1845                 }
1846
1847                 unset($item['file']);
1848
1849                 $delivery_data = Post\DeliveryData::extractFields($item);
1850                 unset($item['postopts']);
1851                 unset($item['inform']);
1852
1853                 // Check for hashtags in the body and repair or add hashtag links
1854                 self::setHashtags($item);
1855
1856                 // Store tags from the body if this hadn't been handled previously in the protocol classes
1857                 if (!Tag::existsForPost($item['uri-id'])) {
1858                         Tag::storeFromBody($item['uri-id'], $item['body']);
1859                 }
1860
1861                 // Fill the cache field
1862                 self::putInCache($item);
1863
1864                 if (stristr($item['verb'], Activity::POKE)) {
1865                         $notify_type = Delivery::POKE;
1866                 } else {
1867                         $notify_type = Delivery::POST;
1868                 }
1869
1870                 // We are doing this outside of the transaction to avoid timing problems
1871                 if (!self::insertActivity($item)) {
1872                         self::insertContent($item);
1873                 }
1874
1875                 $like_no_comment = DI::config()->get('system', 'like_no_comment');
1876
1877                 DBA::transaction();
1878                 $ret = DBA::insert('item', $item);
1879
1880                 // When the item was successfully stored we fetch the ID of the item.
1881                 if (DBA::isResult($ret)) {
1882                         $current_post = DBA::lastInsertId();
1883                 } else {
1884                         // This can happen - for example - if there are locking timeouts.
1885                         DBA::rollback();
1886
1887                         // Store the data into a spool file so that we can try again later.
1888                         self::spool($orig_item);
1889                         return 0;
1890                 }
1891
1892                 if ($current_post == 0) {
1893                         // This is one of these error messages that never should occur.
1894                         Logger::log("couldn't find created item - we better quit now.");
1895                         DBA::rollback();
1896                         return 0;
1897                 }
1898
1899                 // How much entries have we created?
1900                 // We wouldn't need this query when we could use an unique index - but MySQL has length problems with them.
1901                 $entries = DBA::count('item', ['uri' => $item['uri'], 'uid' => $item['uid'], 'network' => $item['network']]);
1902
1903                 if ($entries > 1) {
1904                         // There are duplicates. We delete our just created entry.
1905                         Logger::info('Delete duplicated item', ['id' => $current_post, 'uri' => $item['uri'], 'uid' => $item['uid'], 'guid' => $item['guid']]);
1906
1907                         // Yes, we could do a rollback here - but we possibly are still having users with MyISAM.
1908                         DBA::delete('item', ['id' => $current_post]);
1909                         DBA::commit();
1910                         return 0;
1911                 } elseif ($entries == 0) {
1912                         // This really should never happen since we quit earlier if there were problems.
1913                         Logger::log("Something is terribly wrong. We haven't found our created entry.");
1914                         DBA::rollback();
1915                         return 0;
1916                 }
1917
1918                 Logger::log('created item '.$current_post);
1919
1920                 if (!$parent_id || ($item['parent-uri'] === $item['uri'])) {
1921                         $parent_id = $current_post;
1922                 }
1923
1924                 // Set parent id
1925                 DBA::update('item', ['parent' => $parent_id], ['id' => $current_post]);
1926
1927                 $item['id'] = $current_post;
1928                 $item['parent'] = $parent_id;
1929
1930                 // update the commented timestamp on the parent
1931                 // Only update "commented" if it is really a comment
1932                 if (($item['gravity'] != GRAVITY_ACTIVITY) || !$like_no_comment) {
1933                         DBA::update('item', ['commented' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1934                 } else {
1935                         DBA::update('item', ['changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1936                 }
1937
1938                 if ($item['parent-uri'] === $item['uri']) {
1939                         self::addThread($current_post);
1940                 } else {
1941                         self::updateThread($parent_id);
1942                 }
1943
1944                 if (!empty($item['origin']) || !empty($item['wall']) || !empty($delivery_data['postopts']) || !empty($delivery_data['inform'])) {
1945                         Post\DeliveryData::insert($item['uri-id'], $delivery_data);
1946                 }
1947
1948                 DBA::commit();
1949
1950                 // In that function we check if this is a forum post. Additionally we delete the item under certain circumstances
1951                 if (self::tagDeliver($item['uid'], $current_post)) {
1952                         // Get the user information for the logging
1953                         $user = User::getById($uid);
1954
1955                         Logger::notice('Item had been deleted', ['id' => $current_post, 'user' => $uid, 'account-type' => $user['account-type']]);
1956                         return 0;
1957                 }
1958
1959                 if (!$dontcache) {
1960                         $posted_item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $current_post]);
1961                         if (DBA::isResult($posted_item)) {
1962                                 if ($notify) {
1963                                         Hook::callAll('post_local_end', $posted_item);
1964                                 } else {
1965                                         Hook::callAll('post_remote_end', $posted_item);
1966                                 }
1967                         } else {
1968                                 Logger::log('new item not found in DB, id ' . $current_post);
1969                         }
1970                 }
1971
1972                 if ($item['parent-uri'] === $item['uri']) {
1973                         self::addShadow($current_post);
1974                 } else {
1975                         self::addShadowPost($current_post);
1976                 }
1977
1978                 self::updateContact($item);
1979
1980                 UserItem::setNotification($current_post);
1981
1982                 check_user_notification($current_post);
1983
1984                 $transmit = $notify || ($item['visible'] && ($parent_origin || $item['origin']));
1985
1986                 if ($transmit) {
1987                         $transmit_item = Item::selectFirst(['verb', 'origin'], ['id' => $item['id']]);
1988                         // Don't relay participation messages
1989                         if (($transmit_item['verb'] == Activity::FOLLOW) &&
1990                                 (!$transmit_item['origin'] || ($item['author-id'] != Contact::getPublicIdByUserId($uid)))) {
1991                                 Logger::info('Participation messages will not be relayed', ['item' => $item['id'], 'uri' => $item['uri'], 'verb' => $transmit_item['verb']]);
1992                                 $transmit = false;
1993                         }
1994                 }
1995
1996                 if ($transmit) {
1997                         Worker::add(['priority' => $priority, 'dont_fork' => true], 'Notifier', $notify_type, $current_post);
1998                 }
1999
2000                 return $current_post;
2001         }
2002
2003         /**
2004          * Insert a new item content entry
2005          *
2006          * @param array $item The item fields that are to be inserted
2007          * @return bool
2008          * @throws \Exception
2009          */
2010         private static function insertActivity(&$item)
2011         {
2012                 $activity_index = self::activityToIndex($item['verb']);
2013
2014                 if ($activity_index < 0) {
2015                         return false;
2016                 }
2017
2018                 $fields = ['activity' => $activity_index, 'uri-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
2019
2020                 // We just remove everything that is content
2021                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2022                         unset($item[$field]);
2023                 }
2024
2025                 // To avoid timing problems, we are using locks.
2026                 $locked = DI::lock()->acquire('item_insert_activity');
2027                 if (!$locked) {
2028                         Logger::log("Couldn't acquire lock for URI " . $item['uri'] . " - proceeding anyway.");
2029                 }
2030
2031                 // Do we already have this content?
2032                 $item_activity = DBA::selectFirst('item-activity', ['id'], ['uri-id' => $item['uri-id']]);
2033                 if (DBA::isResult($item_activity)) {
2034                         $item['iaid'] = $item_activity['id'];
2035                         Logger::log('Fetched activity for URI ' . $item['uri'] . ' (' . $item['iaid'] . ')');
2036                 } elseif (DBA::insert('item-activity', $fields)) {
2037                         $item['iaid'] = DBA::lastInsertId();
2038                         Logger::log('Inserted activity for URI ' . $item['uri'] . ' (' . $item['iaid'] . ')');
2039                 } else {
2040                         // This shouldn't happen.
2041                         Logger::log('Could not insert activity for URI ' . $item['uri'] . ' - should not happen');
2042                         DI::lock()->release('item_insert_activity');
2043                         return false;
2044                 }
2045                 if ($locked) {
2046                         DI::lock()->release('item_insert_activity');
2047                 }
2048                 return true;
2049         }
2050
2051         /**
2052          * Insert a new item content entry
2053          *
2054          * @param array $item The item fields that are to be inserted
2055          * @throws \Exception
2056          */
2057         private static function insertContent(&$item)
2058         {
2059                 $fields = ['uri-plink-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
2060
2061                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2062                         if (isset($item[$field])) {
2063                                 $fields[$field] = $item[$field];
2064                                 unset($item[$field]);
2065                         }
2066                 }
2067
2068                 // To avoid timing problems, we are using locks.
2069                 $locked = DI::lock()->acquire('item_insert_content');
2070                 if (!$locked) {
2071                         Logger::log("Couldn't acquire lock for URI " . $item['uri'] . " - proceeding anyway.");
2072                 }
2073
2074                 // Do we already have this content?
2075                 $item_content = DBA::selectFirst('item-content', ['id'], ['uri-id' => $item['uri-id']]);
2076                 if (DBA::isResult($item_content)) {
2077                         $item['icid'] = $item_content['id'];
2078                         Logger::log('Fetched content for URI ' . $item['uri'] . ' (' . $item['icid'] . ')');
2079                 } elseif (DBA::insert('item-content', $fields)) {
2080                         $item['icid'] = DBA::lastInsertId();
2081                         Logger::log('Inserted content for URI ' . $item['uri'] . ' (' . $item['icid'] . ')');
2082                 } else {
2083                         // This shouldn't happen.
2084                         Logger::log('Could not insert content for URI ' . $item['uri'] . ' - should not happen');
2085                 }
2086                 if ($locked) {
2087                         DI::lock()->release('item_insert_content');
2088                 }
2089         }
2090
2091         /**
2092          * Update existing item content entries
2093          *
2094          * @param array $item      The item fields that are to be changed
2095          * @param array $condition The condition for finding the item content entries
2096          * @return bool
2097          * @throws \Exception
2098          */
2099         private static function updateActivity($item, $condition)
2100         {
2101                 if (empty($item['verb'])) {
2102                         return false;
2103                 }
2104                 $activity_index = self::activityToIndex($item['verb']);
2105
2106                 if ($activity_index < 0) {
2107                         return false;
2108                 }
2109
2110                 $fields = ['activity' => $activity_index];
2111
2112                 Logger::log('Update activity for ' . json_encode($condition));
2113
2114                 DBA::update('item-activity', $fields, $condition, true);
2115
2116                 return true;
2117         }
2118
2119         /**
2120          * Update existing item content entries
2121          *
2122          * @param array $item      The item fields that are to be changed
2123          * @param array $condition The condition for finding the item content entries
2124          * @throws \Exception
2125          */
2126         private static function updateContent($item, $condition)
2127         {
2128                 // We have to select only the fields from the "item-content" table
2129                 $fields = [];
2130                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2131                         if (isset($item[$field])) {
2132                                 $fields[$field] = $item[$field];
2133                         }
2134                 }
2135
2136                 if (empty($fields)) {
2137                         // when there are no fields at all, just use the condition
2138                         // This is to ensure that we always store content.
2139                         $fields = $condition;
2140                 }
2141
2142                 Logger::log('Update content for ' . json_encode($condition));
2143
2144                 DBA::update('item-content', $fields, $condition, true);
2145         }
2146
2147         /**
2148          * Distributes public items to the receivers
2149          *
2150          * @param integer $itemid      Item ID that should be added
2151          * @param string  $signed_text Original text (for Diaspora signatures), JSON encoded.
2152          * @throws \Exception
2153          */
2154         public static function distribute($itemid, $signed_text = '')
2155         {
2156                 $condition = ["`id` IN (SELECT `parent` FROM `item` WHERE `id` = ?)", $itemid];
2157                 $parent = self::selectFirst(['owner-id'], $condition);
2158                 if (!DBA::isResult($parent)) {
2159                         return;
2160                 }
2161
2162                 // Only distribute public items from native networks
2163                 $condition = ['id' => $itemid, 'uid' => 0,
2164                         'network' => array_merge(Protocol::FEDERATED ,['']),
2165                         'visible' => true, 'deleted' => false, 'moderated' => false, 'private' => [self::PUBLIC, self::UNLISTED]];
2166                 $item = self::selectFirst(self::ITEM_FIELDLIST, $condition);
2167                 if (!DBA::isResult($item)) {
2168                         return;
2169                 }
2170
2171                 $origin = $item['origin'];
2172
2173                 unset($item['id']);
2174                 unset($item['parent']);
2175                 unset($item['mention']);
2176                 unset($item['wall']);
2177                 unset($item['origin']);
2178                 unset($item['starred']);
2179
2180                 $users = [];
2181
2182                 /// @todo add a field "pcid" in the contact table that referrs to the public contact id.
2183                 $owner = DBA::selectFirst('contact', ['url', 'nurl', 'alias'], ['id' => $parent['owner-id']]);
2184                 if (!DBA::isResult($owner)) {
2185                         return;
2186                 }
2187
2188                 $condition = ['nurl' => $owner['nurl'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2189                 $contacts = DBA::select('contact', ['uid'], $condition);
2190                 while ($contact = DBA::fetch($contacts)) {
2191                         if ($contact['uid'] == 0) {
2192                                 continue;
2193                         }
2194
2195                         $users[$contact['uid']] = $contact['uid'];
2196                 }
2197                 DBA::close($contacts);
2198
2199                 $condition = ['alias' => $owner['url'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2200                 $contacts = DBA::select('contact', ['uid'], $condition);
2201                 while ($contact = DBA::fetch($contacts)) {
2202                         if ($contact['uid'] == 0) {
2203                                 continue;
2204                         }
2205
2206                         $users[$contact['uid']] = $contact['uid'];
2207                 }
2208                 DBA::close($contacts);
2209
2210                 if (!empty($owner['alias'])) {
2211                         $condition = ['url' => $owner['alias'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2212                         $contacts = DBA::select('contact', ['uid'], $condition);
2213                         while ($contact = DBA::fetch($contacts)) {
2214                                 if ($contact['uid'] == 0) {
2215                                         continue;
2216                                 }
2217
2218                                 $users[$contact['uid']] = $contact['uid'];
2219                         }
2220                         DBA::close($contacts);
2221                 }
2222
2223                 $origin_uid = 0;
2224
2225                 if ($item['uri'] != $item['parent-uri']) {
2226                         $parents = self::select(['uid', 'origin'], ["`uri` = ? AND `uid` != 0", $item['parent-uri']]);
2227                         while ($parent = self::fetch($parents)) {
2228                                 $users[$parent['uid']] = $parent['uid'];
2229                                 if ($parent['origin'] && !$origin) {
2230                                         $origin_uid = $parent['uid'];
2231                                 }
2232                         }
2233                 }
2234
2235                 foreach ($users as $uid) {
2236                         if ($origin_uid == $uid) {
2237                                 $item['diaspora_signed_text'] = $signed_text;
2238                         }
2239                         self::storeForUser($itemid, $item, $uid);
2240                 }
2241         }
2242
2243         /**
2244          * Store public items for the receivers
2245          *
2246          * @param integer $itemid Item ID that should be added
2247          * @param array   $item   The item entry that will be stored
2248          * @param integer $uid    The user that will receive the item entry
2249          * @throws \Exception
2250          */
2251         private static function storeForUser($itemid, $item, $uid)
2252         {
2253                 $item['uid'] = $uid;
2254                 $item['origin'] = 0;
2255                 $item['wall'] = 0;
2256                 if ($item['uri'] == $item['parent-uri']) {
2257                         $item['contact-id'] = Contact::getIdForURL($item['owner-link'], $uid);
2258                 } else {
2259                         $item['contact-id'] = Contact::getIdForURL($item['author-link'], $uid);
2260                 }
2261
2262                 if (empty($item['contact-id'])) {
2263                         $self = DBA::selectFirst('contact', ['id'], ['self' => true, 'uid' => $uid]);
2264                         if (!DBA::isResult($self)) {
2265                                 return;
2266                         }
2267                         $item['contact-id'] = $self['id'];
2268                 }
2269
2270                 /// @todo Handling of "event-id"
2271
2272                 $notify = false;
2273                 if ($item['uri'] == $item['parent-uri']) {
2274                         $contact = DBA::selectFirst('contact', [], ['id' => $item['contact-id'], 'self' => false]);
2275                         if (DBA::isResult($contact)) {
2276                                 $notify = self::isRemoteSelf($contact, $item);
2277                         }
2278                 }
2279
2280                 $distributed = self::insert($item, false, $notify, true);
2281
2282                 if (!$distributed) {
2283                         Logger::log("Distributed public item " . $itemid . " for user " . $uid . " wasn't stored", Logger::DEBUG);
2284                 } else {
2285                         Logger::log("Distributed public item " . $itemid . " for user " . $uid . " with id " . $distributed, Logger::DEBUG);
2286                 }
2287         }
2288
2289         /**
2290          * Add a shadow entry for a given item id that is a thread starter
2291          *
2292          * We store every public item entry additionally with the user id "0".
2293          * This is used for the community page and for the search.
2294          * It is planned that in the future we will store public item entries only once.
2295          *
2296          * @param integer $itemid Item ID that should be added
2297          * @throws \Exception
2298          */
2299         public static function addShadow($itemid)
2300         {
2301                 $fields = ['uid', 'private', 'moderated', 'visible', 'deleted', 'network', 'uri'];
2302                 $condition = ['id' => $itemid, 'parent' => [0, $itemid]];
2303                 $item = self::selectFirst($fields, $condition);
2304
2305                 if (!DBA::isResult($item)) {
2306                         return;
2307                 }
2308
2309                 // is it already a copy?
2310                 if (($itemid == 0) || ($item['uid'] == 0)) {
2311                         return;
2312                 }
2313
2314                 // Is it a visible public post?
2315                 if (!$item["visible"] || $item["deleted"] || $item["moderated"] || ($item["private"] == Item::PRIVATE)) {
2316                         return;
2317                 }
2318
2319                 // is it an entry from a connector? Only add an entry for natively connected networks
2320                 if (!in_array($item["network"], array_merge(Protocol::FEDERATED ,['']))) {
2321                         return;
2322                 }
2323
2324                 if (self::exists(['uri' => $item['uri'], 'uid' => 0])) {
2325                         return;
2326                 }
2327
2328                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2329
2330                 if (DBA::isResult($item)) {
2331                         // Preparing public shadow (removing user specific data)
2332                         $item['uid'] = 0;
2333                         unset($item['id']);
2334                         unset($item['parent']);
2335                         unset($item['wall']);
2336                         unset($item['mention']);
2337                         unset($item['origin']);
2338                         unset($item['starred']);
2339                         unset($item['postopts']);
2340                         unset($item['inform']);
2341                         if ($item['uri'] == $item['parent-uri']) {
2342                                 $item['contact-id'] = $item['owner-id'];
2343                         } else {
2344                                 $item['contact-id'] = $item['author-id'];
2345                         }
2346
2347                         $public_shadow = self::insert($item, false, false, true);
2348
2349                         Logger::log("Stored public shadow for thread ".$itemid." under id ".$public_shadow, Logger::DEBUG);
2350                 }
2351         }
2352
2353         /**
2354          * Add a shadow entry for a given item id that is a comment
2355          *
2356          * This function does the same like the function above - but for comments
2357          *
2358          * @param integer $itemid Item ID that should be added
2359          * @throws \Exception
2360          */
2361         public static function addShadowPost($itemid)
2362         {
2363                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2364                 if (!DBA::isResult($item)) {
2365                         return;
2366                 }
2367
2368                 // Is it a toplevel post?
2369                 if ($item['id'] == $item['parent']) {
2370                         self::addShadow($itemid);
2371                         return;
2372                 }
2373
2374                 // Is this a shadow entry?
2375                 if ($item['uid'] == 0) {
2376                         return;
2377                 }
2378
2379                 // Is there a shadow parent?
2380                 if (!self::exists(['uri' => $item['parent-uri'], 'uid' => 0])) {
2381                         return;
2382                 }
2383
2384                 // Is there already a shadow entry?
2385                 if (self::exists(['uri' => $item['uri'], 'uid' => 0])) {
2386                         return;
2387                 }
2388
2389                 // Save "origin" and "parent" state
2390                 $origin = $item['origin'];
2391                 $parent = $item['parent'];
2392
2393                 // Preparing public shadow (removing user specific data)
2394                 $item['uid'] = 0;
2395                 unset($item['id']);
2396                 unset($item['parent']);
2397                 unset($item['wall']);
2398                 unset($item['mention']);
2399                 unset($item['origin']);
2400                 unset($item['starred']);
2401                 unset($item['postopts']);
2402                 unset($item['inform']);
2403                 $item['contact-id'] = Contact::getIdForURL($item['author-link']);
2404
2405                 $public_shadow = self::insert($item, false, false, true);
2406
2407                 Logger::log("Stored public shadow for comment ".$item['uri']." under id ".$public_shadow, Logger::DEBUG);
2408
2409                 // If this was a comment to a Diaspora post we don't get our comment back.
2410                 // This means that we have to distribute the comment by ourselves.
2411                 if ($origin && self::exists(['id' => $parent, 'network' => Protocol::DIASPORA])) {
2412                         self::distribute($public_shadow);
2413                 }
2414         }
2415
2416         /**
2417          * Adds a language specification in a "language" element of given $arr.
2418          * Expects "body" element to exist in $arr.
2419          *
2420          * @param $item
2421          * @throws \Text_LanguageDetect_Exception
2422          */
2423         private static function addLanguageToItemArray(&$item)
2424         {
2425                 $naked_body = BBCode::toPlaintext($item['body'], false);
2426
2427                 $ld = new Text_LanguageDetect();
2428                 $ld->setNameMode(2);
2429                 $languages = $ld->detect($naked_body, 3);
2430
2431                 if (is_array($languages)) {
2432                         $item['language'] = json_encode($languages);
2433                 }
2434         }
2435
2436         /**
2437          * Creates an unique guid out of a given uri
2438          *
2439          * @param string $uri uri of an item entry
2440          * @param string $host hostname for the GUID prefix
2441          * @return string unique guid
2442          */
2443         public static function guidFromUri($uri, $host)
2444         {
2445                 // Our regular guid routine is using this kind of prefix as well
2446                 // We have to avoid that different routines could accidentally create the same value
2447                 $parsed = parse_url($uri);
2448
2449                 // We use a hash of the hostname as prefix for the guid
2450                 $guid_prefix = hash("crc32", $host);
2451
2452                 // Remove the scheme to make sure that "https" and "http" doesn't make a difference
2453                 unset($parsed["scheme"]);
2454
2455                 // Glue it together to be able to make a hash from it
2456                 $host_id = implode("/", $parsed);
2457
2458                 // We could use any hash algorithm since it isn't a security issue
2459                 $host_hash = hash("ripemd128", $host_id);
2460
2461                 return $guid_prefix.$host_hash;
2462         }
2463
2464         /**
2465          * generate an unique URI
2466          *
2467          * @param integer $uid  User id
2468          * @param string  $guid An existing GUID (Otherwise it will be generated)
2469          *
2470          * @return string
2471          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2472          */
2473         public static function newURI($uid, $guid = "")
2474         {
2475                 if ($guid == "") {
2476                         $guid = System::createUUID();
2477                 }
2478
2479                 return DI::baseUrl()->get() . '/objects/' . $guid;
2480         }
2481
2482         /**
2483          * Set "success_update" and "last-item" to the date of the last time we heard from this contact
2484          *
2485          * This can be used to filter for inactive contacts.
2486          * Only do this for public postings to avoid privacy problems, since poco data is public.
2487          * Don't set this value if it isn't from the owner (could be an author that we don't know)
2488          *
2489          * @param array $arr Contains the just posted item record
2490          * @throws \Exception
2491          */
2492         private static function updateContact($arr)
2493         {
2494                 // Unarchive the author
2495                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["author-id"]]);
2496                 if (DBA::isResult($contact)) {
2497                         Contact::unmarkForArchival($contact);
2498                 }
2499
2500                 // Unarchive the contact if it's not our own contact
2501                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["contact-id"], 'self' => false]);
2502                 if (DBA::isResult($contact)) {
2503                         Contact::unmarkForArchival($contact);
2504                 }
2505
2506                 /// @todo On private posts we could obfuscate the date
2507                 $update = ($arr['private'] != self::PRIVATE);
2508
2509                 // Is it a forum? Then we don't care about the rules from above
2510                 if (!$update && in_array($arr["network"], [Protocol::ACTIVITYPUB, Protocol::DFRN]) && ($arr["parent-uri"] === $arr["uri"])) {
2511                         if (DBA::exists('contact', ['id' => $arr['contact-id'], 'forum' => true])) {
2512                                 $update = true;
2513                         }
2514                 }
2515
2516                 if ($update) {
2517                         // The "self" contact id is used (for example in the connectors) when the contact is unknown
2518                         // So we have to ensure to only update the last item when it had been our own post,
2519                         // or it had been done by a "regular" contact.
2520                         if (!empty($arr['wall'])) {
2521                                 $condition = ['id' => $arr['contact-id']];
2522                         } else {
2523                                 $condition = ['id' => $arr['contact-id'], 'self' => false];
2524                         }
2525                         DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']], $condition);
2526                 }
2527                 // Now do the same for the system wide contacts with uid=0
2528                 if ($arr['private'] != self::PRIVATE) {
2529                         DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2530                                 ['id' => $arr['owner-id']]);
2531
2532                         if ($arr['owner-id'] != $arr['author-id']) {
2533                                 DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2534                                         ['id' => $arr['author-id']]);
2535                         }
2536                 }
2537         }
2538
2539         public static function setHashtags(&$item)
2540         {
2541                 $tags = BBCode::getTags($item["body"]);
2542
2543                 // No hashtags?
2544                 if (!count($tags)) {
2545                         return false;
2546                 }
2547
2548                 // What happens in [code], stays in [code]!
2549                 // escape the # and the [
2550                 // hint: we will also get in trouble with #tags, when we want markdown in posts -> ### Headline 3
2551                 $item["body"] = preg_replace_callback("/\[code(.*?)\](.*?)\[\/code\]/ism",
2552                         function ($match) {
2553                                 // we truly ESCape all # and [ to prevent gettin weird tags in [code] blocks
2554                                 $find = ['#', '['];
2555                                 $replace = [chr(27).'sharp', chr(27).'leftsquarebracket'];
2556                                 return ("[code" . $match[1] . "]" . str_replace($find, $replace, $match[2]) . "[/code]");
2557                         }, $item["body"]);
2558
2559                 // This sorting is important when there are hashtags that are part of other hashtags
2560                 // Otherwise there could be problems with hashtags like #test and #test2
2561                 // Because of this we are sorting from the longest to the shortest tag.
2562                 usort($tags, function($a, $b) {
2563                         return strlen($b) <=> strlen($a);
2564                 });
2565
2566                 $URLSearchString = "^\[\]";
2567
2568                 // All hashtags should point to the home server if "local_tags" is activated
2569                 if (DI::config()->get('system', 'local_tags')) {
2570                         $item["body"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2571                                         "#[url=".DI::baseUrl()."/search?tag=$2]$2[/url]", $item["body"]);
2572                 }
2573
2574                 // mask hashtags inside of url, bookmarks and attachments to avoid urls in urls
2575                 $item["body"] = preg_replace_callback("/\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2576                         function ($match) {
2577                                 return ("[url=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/url]");
2578                         }, $item["body"]);
2579
2580                 $item["body"] = preg_replace_callback("/\[bookmark\=([$URLSearchString]*)\](.*?)\[\/bookmark\]/ism",
2581                         function ($match) {
2582                                 return ("[bookmark=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/bookmark]");
2583                         }, $item["body"]);
2584
2585                 $item["body"] = preg_replace_callback("/\[attachment (.*)\](.*?)\[\/attachment\]/ism",
2586                         function ($match) {
2587                                 return ("[attachment " . str_replace("#", "&num;", $match[1]) . "]" . $match[2] . "[/attachment]");
2588                         }, $item["body"]);
2589
2590                 // Repair recursive urls
2591                 $item["body"] = preg_replace("/&num;\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2592                                 "&num;$2", $item["body"]);
2593
2594                 foreach ($tags as $tag) {
2595                         if ((strpos($tag, '#') !== 0) || strpos($tag, '[url=') || strlen($tag) < 2 || $tag[1] == '#') {
2596                                 continue;
2597                         }
2598
2599                         $basetag = str_replace('_',' ',substr($tag,1));
2600                         $newtag = '#[url=' . DI::baseUrl() . '/search?tag=' . $basetag . ']' . $basetag . '[/url]';
2601
2602                         $item["body"] = str_replace($tag, $newtag, $item["body"]);
2603                 }
2604
2605                 // Convert back the masked hashtags
2606                 $item["body"] = str_replace("&num;", "#", $item["body"]);
2607
2608                 // Remember! What happens in [code], stays in [code]
2609                 // roleback the # and [
2610                 $item["body"] = preg_replace_callback("/\[code(.*?)\](.*?)\[\/code\]/ism",
2611                         function ($match) {
2612                                 // we truly unESCape all sharp and leftsquarebracket
2613                                 $find = [chr(27).'sharp', chr(27).'leftsquarebracket'];
2614                                 $replace = ['#', '['];
2615                                 return ("[code" . $match[1] . "]" . str_replace($find, $replace, $match[2]) . "[/code]");
2616                         }, $item["body"]);
2617         }
2618
2619         /**
2620          * look for mention tags and setup a second delivery chain for forum/community posts if appropriate
2621          *
2622          * @param int $uid
2623          * @param int $item_id
2624          * @return boolean true if item was deleted, else false
2625          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2626          * @throws \ImagickException
2627          */
2628         private static function tagDeliver($uid, $item_id)
2629         {
2630                 $mention = false;
2631
2632                 $user = DBA::selectFirst('user', [], ['uid' => $uid]);
2633                 if (!DBA::isResult($user)) {
2634                         return false;
2635                 }
2636
2637                 $community_page = (($user['page-flags'] == User::PAGE_FLAGS_COMMUNITY) ? true : false);
2638                 $prvgroup = (($user['page-flags'] == User::PAGE_FLAGS_PRVGROUP) ? true : false);
2639
2640                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $item_id]);
2641                 if (!DBA::isResult($item)) {
2642                         return false;
2643                 }
2644
2645                 $link = Strings::normaliseLink(DI::baseUrl() . '/profile/' . $user['nickname']);
2646
2647                 /*
2648                  * Diaspora uses their own hardwired link URL in @-tags
2649                  * instead of the one we supply with webfinger
2650                  */
2651                 $dlink = Strings::normaliseLink(DI::baseUrl() . '/u/' . $user['nickname']);
2652
2653                 $cnt = preg_match_all('/[\@\!]\[url\=(.*?)\](.*?)\[\/url\]/ism', $item['body'], $matches, PREG_SET_ORDER);
2654                 if ($cnt) {
2655                         foreach ($matches as $mtch) {
2656                                 if (Strings::compareLink($link, $mtch[1]) || Strings::compareLink($dlink, $mtch[1])) {
2657                                         $mention = true;
2658                                         Logger::log('mention found: ' . $mtch[2]);
2659                                 }
2660                         }
2661                 }
2662
2663                 if (!$mention) {
2664                         if (($community_page || $prvgroup) &&
2665                                   !$item['wall'] && !$item['origin'] && ($item['id'] == $item['parent'])) {
2666                                 Logger::info('Delete private group/communiy top-level item without mention', ['id' => $item_id, 'guid'=> $item['guid']]);
2667                                 DBA::delete('item', ['id' => $item_id]);
2668                                 return true;
2669                         }
2670                         return false;
2671                 }
2672
2673                 $arr = ['item' => $item, 'user' => $user];
2674
2675                 Hook::callAll('tagged', $arr);
2676
2677                 if (!$community_page && !$prvgroup) {
2678                         return false;
2679                 }
2680
2681                 /*
2682                  * tgroup delivery - setup a second delivery chain
2683                  * prevent delivery looping - only proceed
2684                  * if the message originated elsewhere and is a top-level post
2685                  */
2686                 if ($item['wall'] || $item['origin'] || ($item['id'] != $item['parent'])) {
2687                         return false;
2688                 }
2689
2690                 // now change this copy of the post to a forum head message and deliver to all the tgroup members
2691                 $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'], ['uid' => $uid, 'self' => true]);
2692                 if (!DBA::isResult($self)) {
2693                         return false;
2694                 }
2695
2696                 $owner_id = Contact::getIdForURL($self['url']);
2697
2698                 // also reset all the privacy bits to the forum default permissions
2699
2700                 $private = ($user['allow_cid'] || $user['allow_gid'] || $user['deny_cid'] || $user['deny_gid']) ? self::PRIVATE : self::PUBLIC;
2701
2702                 $psid = PermissionSet::getIdFromACL(
2703                         $user['uid'],
2704                         $user['allow_cid'],
2705                         $user['allow_gid'],
2706                         $user['deny_cid'],
2707                         $user['deny_gid']
2708                 );
2709
2710                 $forum_mode = ($prvgroup ? 2 : 1);
2711
2712                 $fields = ['wall' => true, 'origin' => true, 'forum_mode' => $forum_mode, 'contact-id' => $self['id'],
2713                         'owner-id' => $owner_id, 'private' => $private, 'psid' => $psid];
2714                 self::update($fields, ['id' => $item_id]);
2715
2716                 self::updateThread($item_id);
2717
2718                 Worker::add(['priority' => PRIORITY_HIGH, 'dont_fork' => true], 'Notifier', Delivery::POST, $item_id);
2719
2720                 return false;
2721         }
2722
2723         public static function isRemoteSelf($contact, &$datarray)
2724         {
2725                 if (!$contact['remote_self']) {
2726                         return false;
2727                 }
2728
2729                 // Prevent the forwarding of posts that are forwarded
2730                 if (!empty($datarray["extid"]) && ($datarray["extid"] == Protocol::DFRN)) {
2731                         Logger::log('Already forwarded', Logger::DEBUG);
2732                         return false;
2733                 }
2734
2735                 // Prevent to forward already forwarded posts
2736                 if ($datarray["app"] == DI::baseUrl()->getHostname()) {
2737                         Logger::log('Already forwarded (second test)', Logger::DEBUG);
2738                         return false;
2739                 }
2740
2741                 // Only forward posts
2742                 if ($datarray["verb"] != Activity::POST) {
2743                         Logger::log('No post', Logger::DEBUG);
2744                         return false;
2745                 }
2746
2747                 if (($contact['network'] != Protocol::FEED) && ($datarray['private'] == self::PRIVATE)) {
2748                         Logger::log('Not public', Logger::DEBUG);
2749                         return false;
2750                 }
2751
2752                 $datarray2 = $datarray;
2753                 Logger::log('remote-self start - Contact '.$contact['url'].' - '.$contact['remote_self'].' Item '.print_r($datarray, true), Logger::DEBUG);
2754                 if ($contact['remote_self'] == 2) {
2755                         $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'],
2756                                         ['uid' => $contact['uid'], 'self' => true]);
2757                         if (DBA::isResult($self)) {
2758                                 $datarray['contact-id'] = $self["id"];
2759
2760                                 $datarray['owner-name'] = $self["name"];
2761                                 $datarray['owner-link'] = $self["url"];
2762                                 $datarray['owner-avatar'] = $self["thumb"];
2763
2764                                 $datarray['author-name']   = $datarray['owner-name'];
2765                                 $datarray['author-link']   = $datarray['owner-link'];
2766                                 $datarray['author-avatar'] = $datarray['owner-avatar'];
2767
2768                                 unset($datarray['edited']);
2769
2770                                 unset($datarray['network']);
2771                                 unset($datarray['owner-id']);
2772                                 unset($datarray['author-id']);
2773                         }
2774
2775                         if ($contact['network'] != Protocol::FEED) {
2776                                 $datarray["guid"] = System::createUUID();
2777                                 unset($datarray["plink"]);
2778                                 $datarray["uri"] = self::newURI($contact['uid'], $datarray["guid"]);
2779                                 $datarray["parent-uri"] = $datarray["uri"];
2780                                 $datarray["thr-parent"] = $datarray["uri"];
2781                                 $datarray["extid"] = Protocol::DFRN;
2782                                 $urlpart = parse_url($datarray2['author-link']);
2783                                 $datarray["app"] = $urlpart["host"];
2784                         } else {
2785                                 $datarray['private'] = self::PUBLIC;
2786                         }
2787                 }
2788
2789                 if ($contact['network'] != Protocol::FEED) {
2790                         // Store the original post
2791                         $result = self::insert($datarray2, false, false);
2792                         Logger::log('remote-self post original item - Contact '.$contact['url'].' return '.$result.' Item '.print_r($datarray2, true), Logger::DEBUG);
2793                 } else {
2794                         $datarray["app"] = "Feed";
2795                         $result = true;
2796                 }
2797
2798                 // Trigger automatic reactions for addons
2799                 $datarray['api_source'] = true;
2800
2801                 // We have to tell the hooks who we are - this really should be improved
2802                 $_SESSION["authenticated"] = true;
2803                 $_SESSION["uid"] = $contact['uid'];
2804
2805                 return $result;
2806         }
2807
2808         /**
2809          *
2810          * @param string $s
2811          * @param int    $uid
2812          * @param array  $item
2813          * @param int    $cid
2814          * @return string
2815          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2816          * @throws \ImagickException
2817          */
2818         public static function fixPrivatePhotos($s, $uid, $item = null, $cid = 0)
2819         {
2820                 if (DI::config()->get('system', 'disable_embedded')) {
2821                         return $s;
2822                 }
2823
2824                 Logger::log('check for photos', Logger::DEBUG);
2825                 $site = substr(DI::baseUrl(), strpos(DI::baseUrl(), '://'));
2826
2827                 $orig_body = $s;
2828                 $new_body = '';
2829
2830                 $img_start = strpos($orig_body, '[img');
2831                 $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2832                 $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2833
2834                 while (($img_st_close !== false) && ($img_len !== false)) {
2835                         $img_st_close++; // make it point to AFTER the closing bracket
2836                         $image = substr($orig_body, $img_start + $img_st_close, $img_len);
2837
2838                         Logger::log('found photo ' . $image, Logger::DEBUG);
2839
2840                         if (stristr($image, $site . '/photo/')) {
2841                                 // Only embed locally hosted photos
2842                                 $replace = false;
2843                                 $i = basename($image);
2844                                 $i = str_replace(['.jpg', '.png', '.gif'], ['', '', ''], $i);
2845                                 $x = strpos($i, '-');
2846
2847                                 if ($x) {
2848                                         $res = substr($i, $x + 1);
2849                                         $i = substr($i, 0, $x);
2850                                         $photo = Photo::getPhotoForUser($uid, $i, $res);
2851                                         if (DBA::isResult($photo)) {
2852                                                 /*
2853                                                  * Check to see if we should replace this photo link with an embedded image
2854                                                  * 1. No need to do so if the photo is public
2855                                                  * 2. If there's a contact-id provided, see if they're in the access list
2856                                                  *    for the photo. If so, embed it.
2857                                                  * 3. Otherwise, if we have an item, see if the item permissions match the photo
2858                                                  *    permissions, regardless of order but first check to see if they're an exact
2859                                                  *    match to save some processing overhead.
2860                                                  */
2861                                                 if (self::hasPermissions($photo)) {
2862                                                         if ($cid) {
2863                                                                 $recips = self::enumeratePermissions($photo);
2864                                                                 if (in_array($cid, $recips)) {
2865                                                                         $replace = true;
2866                                                                 }
2867                                                         } elseif ($item) {
2868                                                                 if (self::samePermissions($uid, $item, $photo)) {
2869                                                                         $replace = true;
2870                                                                 }
2871                                                         }
2872                                                 }
2873                                                 if ($replace) {
2874                                                         $photo_img = Photo::getImageForPhoto($photo);
2875                                                         // If a custom width and height were specified, apply before embedding
2876                                                         if (preg_match("/\[img\=([0-9]*)x([0-9]*)\]/is", substr($orig_body, $img_start, $img_st_close), $match)) {
2877                                                                 Logger::log('scaling photo', Logger::DEBUG);
2878
2879                                                                 $width = intval($match[1]);
2880                                                                 $height = intval($match[2]);
2881
2882                                                                 $photo_img->scaleDown(max($width, $height));
2883                                                         }
2884
2885                                                         $data = $photo_img->asString();
2886                                                         $type = $photo_img->getType();
2887
2888                                                         Logger::log('replacing photo', Logger::DEBUG);
2889                                                         $image = 'data:' . $type . ';base64,' . base64_encode($data);
2890                                                         Logger::log('replaced: ' . $image, Logger::DATA);
2891                                                 }
2892                                         }
2893                                 }
2894                         }
2895
2896                         $new_body = $new_body . substr($orig_body, 0, $img_start + $img_st_close) . $image . '[/img]';
2897                         $orig_body = substr($orig_body, $img_start + $img_st_close + $img_len + strlen('[/img]'));
2898                         if ($orig_body === false) {
2899                                 $orig_body = '';
2900                         }
2901
2902                         $img_start = strpos($orig_body, '[img');
2903                         $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2904                         $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2905                 }
2906
2907                 $new_body = $new_body . $orig_body;
2908
2909                 return $new_body;
2910         }
2911
2912         private static function hasPermissions($obj)
2913         {
2914                 return !empty($obj['allow_cid']) || !empty($obj['allow_gid']) ||
2915                         !empty($obj['deny_cid']) || !empty($obj['deny_gid']);
2916         }
2917
2918         private static function samePermissions($uid, $obj1, $obj2)
2919         {
2920                 // first part is easy. Check that these are exactly the same.
2921                 if (($obj1['allow_cid'] == $obj2['allow_cid'])
2922                         && ($obj1['allow_gid'] == $obj2['allow_gid'])
2923                         && ($obj1['deny_cid'] == $obj2['deny_cid'])
2924                         && ($obj1['deny_gid'] == $obj2['deny_gid'])) {
2925                         return true;
2926                 }
2927
2928                 // This is harder. Parse all the permissions and compare the resulting set.
2929                 $recipients1 = self::enumeratePermissions($obj1);
2930                 $recipients2 = self::enumeratePermissions($obj2);
2931                 sort($recipients1);
2932                 sort($recipients2);
2933
2934                 /// @TODO Comparison of arrays, maybe use array_diff_assoc() here?
2935                 return ($recipients1 == $recipients2);
2936         }
2937
2938         /**
2939          * Returns an array of contact-ids that are allowed to see this object
2940          *
2941          * @param array $obj        Item array with at least uid, allow_cid, allow_gid, deny_cid and deny_gid
2942          * @param bool  $check_dead Prunes unavailable contacts from the result
2943          * @return array
2944          * @throws \Exception
2945          */
2946         public static function enumeratePermissions(array $obj, bool $check_dead = false)
2947         {
2948                 $aclFormater = DI::aclFormatter();
2949
2950                 $allow_people = $aclFormater->expand($obj['allow_cid']);
2951                 $allow_groups = Group::expand($obj['uid'], $aclFormater->expand($obj['allow_gid']), $check_dead);
2952                 $deny_people  = $aclFormater->expand($obj['deny_cid']);
2953                 $deny_groups  = Group::expand($obj['uid'], $aclFormater->expand($obj['deny_gid']), $check_dead);
2954                 $recipients   = array_unique(array_merge($allow_people, $allow_groups));
2955                 $deny         = array_unique(array_merge($deny_people, $deny_groups));
2956                 $recipients   = array_diff($recipients, $deny);
2957                 return $recipients;
2958         }
2959
2960         public static function expire($uid, $days, $network = "", $force = false)
2961         {
2962                 if (!$uid || ($days < 1)) {
2963                         return;
2964                 }
2965
2966                 $condition = ["`uid` = ? AND NOT `deleted` AND `id` = `parent` AND `gravity` = ?",
2967                         $uid, GRAVITY_PARENT];
2968
2969                 /*
2970                  * $expire_network_only = save your own wall posts
2971                  * and just expire conversations started by others
2972                  */
2973                 $expire_network_only = DI::pConfig()->get($uid, 'expire', 'network_only', false);
2974
2975                 if ($expire_network_only) {
2976                         $condition[0] .= " AND NOT `wall`";
2977                 }
2978
2979                 if ($network != "") {
2980                         $condition[0] .= " AND `network` = ?";
2981                         $condition[] = $network;
2982                 }
2983
2984                 $condition[0] .= " AND `received` < UTC_TIMESTAMP() - INTERVAL ? DAY";
2985                 $condition[] = $days;
2986
2987                 $items = self::select(['file', 'resource-id', 'starred', 'type', 'id', 'post-type'], $condition);
2988
2989                 if (!DBA::isResult($items)) {
2990                         return;
2991                 }
2992
2993                 $expire_items = DI::pConfig()->get($uid, 'expire', 'items', true);
2994
2995                 // Forcing expiring of items - but not notes and marked items
2996                 if ($force) {
2997                         $expire_items = true;
2998                 }
2999
3000                 $expire_notes = DI::pConfig()->get($uid, 'expire', 'notes', true);
3001                 $expire_starred = DI::pConfig()->get($uid, 'expire', 'starred', true);
3002                 $expire_photos = DI::pConfig()->get($uid, 'expire', 'photos', false);
3003
3004                 $expired = 0;
3005
3006                 while ($item = Item::fetch($items)) {
3007                         // don't expire filed items
3008
3009                         if (strpos($item['file'], '[') !== false) {
3010                                 continue;
3011                         }
3012
3013                         // Only expire posts, not photos and photo comments
3014
3015                         if (!$expire_photos && strlen($item['resource-id'])) {
3016                                 continue;
3017                         } elseif (!$expire_starred && intval($item['starred'])) {
3018                                 continue;
3019                         } elseif (!$expire_notes && (($item['type'] == 'note') || ($item['post-type'] == Item::PT_PERSONAL_NOTE))) {
3020                                 continue;
3021                         } elseif (!$expire_items && ($item['type'] != 'note') && ($item['post-type'] != Item::PT_PERSONAL_NOTE)) {
3022                                 continue;
3023                         }
3024
3025                         self::markForDeletionById($item['id'], PRIORITY_LOW);
3026
3027                         ++$expired;
3028                 }
3029                 DBA::close($items);
3030                 Logger::log('User ' . $uid . ": expired $expired items; expire items: $expire_items, expire notes: $expire_notes, expire starred: $expire_starred, expire photos: $expire_photos");
3031         }
3032
3033         public static function firstPostDate($uid, $wall = false)
3034         {
3035                 $condition = ['uid' => $uid, 'wall' => $wall, 'deleted' => false, 'visible' => true, 'moderated' => false];
3036                 $params = ['order' => ['received' => false]];
3037                 $thread = DBA::selectFirst('thread', ['received'], $condition, $params);
3038                 if (DBA::isResult($thread)) {
3039                         return substr(DateTimeFormat::local($thread['received']), 0, 10);
3040                 }
3041                 return false;
3042         }
3043
3044         /**
3045          * add/remove activity to an item
3046          *
3047          * Toggle activities as like,dislike,attend of an item
3048          *
3049          * @param string $item_id
3050          * @param string $verb
3051          *            Activity verb. One of
3052          *            like, unlike, dislike, undislike, attendyes, unattendyes,
3053          *            attendno, unattendno, attendmaybe, unattendmaybe
3054          * @return bool
3055          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3056          * @throws \ImagickException
3057          * @hook  'post_local_end'
3058          *            array $arr
3059          *            'post_id' => ID of posted item
3060          */
3061         public static function performActivity($item_id, $verb)
3062         {
3063                 if (!Session::isAuthenticated()) {
3064                         return false;
3065                 }
3066
3067                 switch ($verb) {
3068                         case 'like':
3069                         case 'unlike':
3070                                 $activity = Activity::LIKE;
3071                                 break;
3072                         case 'dislike':
3073                         case 'undislike':
3074                                 $activity = Activity::DISLIKE;
3075                                 break;
3076                         case 'attendyes':
3077                         case 'unattendyes':
3078                                 $activity = Activity::ATTEND;
3079                                 break;
3080                         case 'attendno':
3081                         case 'unattendno':
3082                                 $activity = Activity::ATTENDNO;
3083                                 break;
3084                         case 'attendmaybe':
3085                         case 'unattendmaybe':
3086                                 $activity = Activity::ATTENDMAYBE;
3087                                 break;
3088                         case 'follow':
3089                         case 'unfollow':
3090                                 $activity = Activity::FOLLOW;
3091                                 break;
3092                         default:
3093                                 Logger::log('like: unknown verb ' . $verb . ' for item ' . $item_id);
3094                                 return false;
3095                 }
3096
3097                 // Enable activity toggling instead of on/off
3098                 $event_verb_flag = $activity === Activity::ATTEND || $activity === Activity::ATTENDNO || $activity === Activity::ATTENDMAYBE;
3099
3100                 Logger::log('like: verb ' . $verb . ' item ' . $item_id);
3101
3102                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['`id` = ? OR `uri` = ?', $item_id, $item_id]);
3103                 if (!DBA::isResult($item)) {
3104                         Logger::log('like: unknown item ' . $item_id);
3105                         return false;
3106                 }
3107
3108                 $item_uri = $item['uri'];
3109
3110                 $uid = $item['uid'];
3111                 if (($uid == 0) && local_user()) {
3112                         $uid = local_user();
3113                 }
3114
3115                 if (!Security::canWriteToUserWall($uid)) {
3116                         Logger::log('like: unable to write on wall ' . $uid);
3117                         return false;
3118                 }
3119
3120                 // Retrieves the local post owner
3121                 $owner_self_contact = DBA::selectFirst('contact', [], ['uid' => $uid, 'self' => true]);
3122                 if (!DBA::isResult($owner_self_contact)) {
3123                         Logger::log('like: unknown owner ' . $uid);
3124                         return false;
3125                 }
3126
3127                 // Retrieve the current logged in user's public contact
3128                 $author_id = public_contact();
3129
3130                 $author_contact = DBA::selectFirst('contact', ['url'], ['id' => $author_id]);
3131                 if (!DBA::isResult($author_contact)) {
3132                         Logger::log('like: unknown author ' . $author_id);
3133                         return false;
3134                 }
3135
3136                 // Contact-id is the uid-dependant author contact
3137                 if (local_user() == $uid) {
3138                         $item_contact_id = $owner_self_contact['id'];
3139                 } else {
3140                         $item_contact_id = Contact::getIdForURL($author_contact['url'], $uid, true);
3141                         $item_contact = DBA::selectFirst('contact', [], ['id' => $item_contact_id]);
3142                         if (!DBA::isResult($item_contact)) {
3143                                 Logger::log('like: unknown item contact ' . $item_contact_id);
3144                                 return false;
3145                         }
3146                 }
3147
3148                 // Look for an existing verb row
3149                 // event participation are essentially radio toggles. If you make a subsequent choice,
3150                 // we need to eradicate your first choice.
3151                 if ($event_verb_flag) {
3152                         $verbs = [Activity::ATTEND, Activity::ATTENDNO, Activity::ATTENDMAYBE];
3153
3154                         // Translate to the index based activity index
3155                         $activities = [];
3156                         foreach ($verbs as $verb) {
3157                                 $activities[] = self::activityToIndex($verb);
3158                         }
3159                 } else {
3160                         $activities = self::activityToIndex($activity);
3161                 }
3162
3163                 $condition = ['activity' => $activities, 'deleted' => false, 'gravity' => GRAVITY_ACTIVITY,
3164                         'author-id' => $author_id, 'uid' => $item['uid'], 'thr-parent' => $item_uri];
3165
3166                 $like_item = self::selectFirst(['id', 'guid', 'verb'], $condition);
3167
3168                 // If it exists, mark it as deleted
3169                 if (DBA::isResult($like_item)) {
3170                         self::markForDeletionById($like_item['id']);
3171
3172                         if (!$event_verb_flag || $like_item['verb'] == $activity) {
3173                                 return true;
3174                         }
3175                 }
3176
3177                 // Verb is "un-something", just trying to delete existing entries
3178                 if (strpos($verb, 'un') === 0) {
3179                         return true;
3180                 }
3181
3182                 $objtype = $item['resource-id'] ? Activity\ObjectType::IMAGE : Activity\ObjectType::NOTE;
3183
3184                 $new_item = [
3185                         'guid'          => System::createUUID(),
3186                         'uri'           => self::newURI($item['uid']),
3187                         'uid'           => $item['uid'],
3188                         'contact-id'    => $item_contact_id,
3189                         'wall'          => $item['wall'],
3190                         'origin'        => 1,
3191                         'network'       => Protocol::DFRN,
3192                         'gravity'       => GRAVITY_ACTIVITY,
3193                         'parent'        => $item['id'],
3194                         'parent-uri'    => $item['uri'],
3195                         'thr-parent'    => $item['uri'],
3196                         'owner-id'      => $author_id,
3197                         'author-id'     => $author_id,
3198                         'body'          => $activity,
3199                         'verb'          => $activity,
3200                         'object-type'   => $objtype,
3201                         'allow_cid'     => $item['allow_cid'],
3202                         'allow_gid'     => $item['allow_gid'],
3203                         'deny_cid'      => $item['deny_cid'],
3204                         'deny_gid'      => $item['deny_gid'],
3205                         'visible'       => 1,
3206                         'unseen'        => 1,
3207                 ];
3208
3209                 $signed = Diaspora::createLikeSignature($uid, $new_item);
3210                 if (!empty($signed)) {
3211                         $new_item['diaspora_signed_text'] = json_encode($signed);
3212                 }
3213
3214                 $new_item_id = self::insert($new_item);
3215
3216                 // If the parent item isn't visible then set it to visible
3217                 if (!$item['visible']) {
3218                         self::update(['visible' => true], ['id' => $item['id']]);
3219                 }
3220
3221                 $new_item['id'] = $new_item_id;
3222
3223                 Hook::callAll('post_local_end', $new_item);
3224
3225                 return true;
3226         }
3227
3228         private static function addThread($itemid, $onlyshadow = false)
3229         {
3230                 $fields = ['uid', 'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private', 'pubmail',
3231                         'moderated', 'visible', 'starred', 'contact-id', 'post-type',
3232                         'deleted', 'origin', 'forum_mode', 'mention', 'network', 'author-id', 'owner-id'];
3233                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3234                 $item = self::selectFirst($fields, $condition);
3235
3236                 if (!DBA::isResult($item)) {
3237                         return;
3238                 }
3239
3240                 $item['iid'] = $itemid;
3241
3242                 if (!$onlyshadow) {
3243                         $result = DBA::insert('thread', $item);
3244
3245                         Logger::log("Add thread for item ".$itemid." - ".print_r($result, true), Logger::DEBUG);
3246                 }
3247         }
3248
3249         private static function updateThread($itemid, $setmention = false)
3250         {
3251                 $fields = ['uid', 'guid', 'created', 'edited', 'commented', 'received', 'changed', 'post-type',
3252                         'wall', 'private', 'pubmail', 'moderated', 'visible', 'starred', 'contact-id',
3253                         'deleted', 'origin', 'forum_mode', 'network', 'author-id', 'owner-id'];
3254                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3255
3256                 $item = self::selectFirst($fields, $condition);
3257                 if (!DBA::isResult($item)) {
3258                         return;
3259                 }
3260
3261                 if ($setmention) {
3262                         $item["mention"] = 1;
3263                 }
3264
3265                 $fields = [];
3266
3267                 foreach ($item as $field => $data) {
3268                         if (!in_array($field, ["guid"])) {
3269                                 $fields[$field] = $data;
3270                         }
3271                 }
3272
3273                 $result = DBA::update('thread', $fields, ['iid' => $itemid]);
3274
3275                 Logger::log("Update thread for item ".$itemid." - guid ".$item["guid"]." - ".(int)$result, Logger::DEBUG);
3276         }
3277
3278         private static function deleteThread($itemid, $itemuri = "")
3279         {
3280                 $item = DBA::selectFirst('thread', ['uid'], ['iid' => $itemid]);
3281                 if (!DBA::isResult($item)) {
3282                         Logger::log('No thread found for id '.$itemid, Logger::DEBUG);
3283                         return;
3284                 }
3285
3286                 $result = DBA::delete('thread', ['iid' => $itemid], ['cascade' => false]);
3287
3288                 Logger::log("deleteThread: Deleted thread for item ".$itemid." - ".print_r($result, true), Logger::DEBUG);
3289
3290                 if ($itemuri != "") {
3291                         $condition = ["`uri` = ? AND NOT `deleted` AND NOT (`uid` IN (?, 0))", $itemuri, $item["uid"]];
3292                         if (!self::exists($condition)) {
3293                                 DBA::delete('item', ['uri' => $itemuri, 'uid' => 0]);
3294                                 Logger::debug('Deleted shadow item', ['id' => $itemid, 'uri' => $itemuri]);
3295                         }
3296                 }
3297         }
3298
3299         public static function getPermissionsSQLByUserId($owner_id)
3300         {
3301                 $local_user = local_user();
3302                 $remote_user = Session::getRemoteContactID($owner_id);
3303
3304                 /*
3305                  * Construct permissions
3306                  *
3307                  * default permissions - anonymous user
3308                  */
3309                 $sql = sprintf(" AND `item`.`private` != %d", self::PRIVATE);
3310
3311                 // Profile owner - everything is visible
3312                 if ($local_user && ($local_user == $owner_id)) {
3313                         $sql = '';
3314                 } elseif ($remote_user) {
3315                         /*
3316                          * Authenticated visitor. Unless pre-verified,
3317                          * check that the contact belongs to this $owner_id
3318                          * and load the groups the visitor belongs to.
3319                          * If pre-verified, the caller is expected to have already
3320                          * done this and passed the groups into this function.
3321                          */
3322                         $set = PermissionSet::get($owner_id, $remote_user);
3323
3324                         if (!empty($set)) {
3325                                 $sql_set = sprintf(" OR (`item`.`private` = %d AND `item`.`wall` AND `item`.`psid` IN (", self::PRIVATE) . implode(',', $set) . "))";
3326                         } else {
3327                                 $sql_set = '';
3328                         }
3329
3330                         $sql = sprintf(" AND (`item`.`private` != %d", self::PRIVATE) . $sql_set . ")";
3331                 }
3332
3333                 return $sql;
3334         }
3335
3336         /**
3337          * get translated item type
3338          *
3339          * @param $item
3340          * @return string
3341          */
3342         public static function postType($item)
3343         {
3344                 if (!empty($item['event-id'])) {
3345                         return DI::l10n()->t('event');
3346                 } elseif (!empty($item['resource-id'])) {
3347                         return DI::l10n()->t('photo');
3348                 } elseif (!empty($item['verb']) && $item['verb'] !== Activity::POST) {
3349                         return DI::l10n()->t('activity');
3350                 } elseif ($item['id'] != $item['parent']) {
3351                         return DI::l10n()->t('comment');
3352                 }
3353
3354                 return DI::l10n()->t('post');
3355         }
3356
3357         /**
3358          * Sets the "rendered-html" field of the provided item
3359          *
3360          * Body is preserved to avoid side-effects as we modify it just-in-time for spoilers and private image links
3361          *
3362          * @param array $item
3363          * @param bool  $update
3364          *
3365          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3366          * @todo Remove reference, simply return "rendered-html" and "rendered-hash"
3367          */
3368         public static function putInCache(&$item, $update = false)
3369         {
3370                 $body = $item["body"];
3371
3372                 $rendered_hash = $item['rendered-hash'] ?? '';
3373                 $rendered_html = $item['rendered-html'] ?? '';
3374
3375                 if ($rendered_hash == ''
3376                         || $rendered_html == ""
3377                         || $rendered_hash != hash("md5", $item["body"])
3378                         || DI::config()->get("system", "ignore_cache")
3379                 ) {
3380                         self::addRedirToImageTags($item);
3381
3382                         $item["rendered-html"] = BBCode::convert($item["body"]);
3383                         $item["rendered-hash"] = hash("md5", $item["body"]);
3384
3385                         $hook_data = ['item' => $item, 'rendered-html' => $item['rendered-html'], 'rendered-hash' => $item['rendered-hash']];
3386                         Hook::callAll('put_item_in_cache', $hook_data);
3387                         $item['rendered-html'] = $hook_data['rendered-html'];
3388                         $item['rendered-hash'] = $hook_data['rendered-hash'];
3389                         unset($hook_data);
3390
3391                         // Force an update if the generated values differ from the existing ones
3392                         if ($rendered_hash != $item["rendered-hash"]) {
3393                                 $update = true;
3394                         }
3395
3396                         // Only compare the HTML when we forcefully ignore the cache
3397                         if (DI::config()->get("system", "ignore_cache") && ($rendered_html != $item["rendered-html"])) {
3398                                 $update = true;
3399                         }
3400
3401                         if ($update && !empty($item["id"])) {
3402                                 self::update(
3403                                         [
3404                                                 'rendered-html' => $item["rendered-html"],
3405                                                 'rendered-hash' => $item["rendered-hash"]
3406                                         ],
3407                                         ['id' => $item["id"]]
3408                                 );
3409                         }
3410                 }
3411
3412                 $item["body"] = $body;
3413         }
3414
3415         /**
3416          * Find any non-embedded images in private items and add redir links to them
3417          *
3418          * @param array &$item The field array of an item row
3419          */
3420         private static function addRedirToImageTags(array &$item)
3421         {
3422                 $app = DI::app();
3423
3424                 $matches = [];
3425                 $cnt = preg_match_all('|\[img\](http[^\[]*?/photo/[a-fA-F0-9]+?(-[0-9]\.[\w]+?)?)\[\/img\]|', $item['body'], $matches, PREG_SET_ORDER);
3426                 if ($cnt) {
3427                         foreach ($matches as $mtch) {
3428                                 if (strpos($mtch[1], '/redir') !== false) {
3429                                         continue;
3430                                 }
3431
3432                                 if ((local_user() == $item['uid']) && ($item['private'] == self::PRIVATE) && ($item['contact-id'] != $app->contact['id']) && ($item['network'] == Protocol::DFRN)) {
3433                                         $img_url = 'redir/' . $item['contact-id'] . '?url=' . urlencode($mtch[1]);
3434                                         $item['body'] = str_replace($mtch[0], '[img]' . $img_url . '[/img]', $item['body']);
3435                                 }
3436                         }
3437                 }
3438         }
3439
3440         /**
3441          * Given an item array, convert the body element from bbcode to html and add smilie icons.
3442          * If attach is true, also add icons for item attachments.
3443          *
3444          * @param array   $item
3445          * @param boolean $attach
3446          * @param boolean $is_preview
3447          * @return string item body html
3448          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3449          * @throws \ImagickException
3450          * @hook  prepare_body_init item array before any work
3451          * @hook  prepare_body_content_filter ('item'=>item array, 'filter_reasons'=>string array) before first bbcode to html
3452          * @hook  prepare_body ('item'=>item array, 'html'=>body string, 'is_preview'=>boolean, 'filter_reasons'=>string array) after first bbcode to html
3453          * @hook  prepare_body_final ('item'=>item array, 'html'=>body string) after attach icons and blockquote special case handling (spoiler, author)
3454          */
3455         public static function prepareBody(array &$item, $attach = false, $is_preview = false)
3456         {
3457                 $a = DI::app();
3458                 Hook::callAll('prepare_body_init', $item);
3459
3460                 // In order to provide theme developers more possibilities, event items
3461                 // are treated differently.
3462                 if ($item['object-type'] === Activity\ObjectType::EVENT && isset($item['event-id'])) {
3463                         $ev = Event::getItemHTML($item);
3464                         return $ev;
3465                 }
3466
3467                 $tags = Tag::populateFromItem($item);
3468
3469                 $item['tags'] = $tags['tags'];
3470                 $item['hashtags'] = $tags['hashtags'];
3471                 $item['mentions'] = $tags['mentions'];
3472
3473                 // Compile eventual content filter reasons
3474                 $filter_reasons = [];
3475                 if (!$is_preview && public_contact() != $item['author-id']) {
3476                         if (!empty($item['content-warning']) && (!local_user() || !DI::pConfig()->get(local_user(), 'system', 'disable_cw', false))) {
3477                                 $filter_reasons[] = DI::l10n()->t('Content warning: %s', $item['content-warning']);
3478                         }
3479
3480                         $hook_data = [
3481                                 'item' => $item,
3482                                 'filter_reasons' => $filter_reasons
3483                         ];
3484                         Hook::callAll('prepare_body_content_filter', $hook_data);
3485                         $filter_reasons = $hook_data['filter_reasons'];
3486                         unset($hook_data);
3487                 }
3488
3489                 // Update the cached values if there is no "zrl=..." on the links.
3490                 $update = (!Session::isAuthenticated() && ($item["uid"] == 0));
3491
3492                 // Or update it if the current viewer is the intented viewer.
3493                 if (($item["uid"] == local_user()) && ($item["uid"] != 0)) {
3494                         $update = true;
3495                 }
3496
3497                 self::putInCache($item, $update);
3498                 $s = $item["rendered-html"];
3499
3500                 $hook_data = [
3501                         'item' => $item,
3502                         'html' => $s,
3503                         'preview' => $is_preview,
3504                         'filter_reasons' => $filter_reasons
3505                 ];
3506                 Hook::callAll('prepare_body', $hook_data);
3507                 $s = $hook_data['html'];
3508                 unset($hook_data);
3509
3510                 if (!$attach) {
3511                         // Replace the blockquotes with quotes that are used in mails.
3512                         $mailquote = '<blockquote type="cite" class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">';
3513                         $s = str_replace(['<blockquote>', '<blockquote class="spoiler">', '<blockquote class="author">'], [$mailquote, $mailquote, $mailquote], $s);
3514                         return $s;
3515                 }
3516
3517                 $as = '';
3518                 $vhead = false;
3519                 $matches = [];
3520                 preg_match_all('|\[attach\]href=\"(.*?)\" length=\"(.*?)\" type=\"(.*?)\"(?: title=\"(.*?)\")?|', $item['attach'], $matches, PREG_SET_ORDER);
3521                 foreach ($matches as $mtch) {
3522                         $mime = $mtch[3];
3523
3524                         $the_url = Contact::magicLinkById($item['author-id'], $mtch[1]);
3525
3526                         if (strpos($mime, 'video') !== false) {
3527                                 if (!$vhead) {
3528                                         $vhead = true;
3529                                         DI::page()['htmlhead'] .= Renderer::replaceMacros(Renderer::getMarkupTemplate('videos_head.tpl'));
3530                                 }
3531
3532                                 $url_parts = explode('/', $the_url);
3533                                 $id = end($url_parts);
3534                                 $as .= Renderer::replaceMacros(Renderer::getMarkupTemplate('video_top.tpl'), [
3535                                         '$video' => [
3536                                                 'id'     => $id,
3537                                                 'title'  => DI::l10n()->t('View Video'),
3538                                                 'src'    => $the_url,
3539                                                 'mime'   => $mime,
3540                                         ],
3541                                 ]);
3542                         }
3543
3544                         $filetype = strtolower(substr($mime, 0, strpos($mime, '/')));
3545                         if ($filetype) {
3546                                 $filesubtype = strtolower(substr($mime, strpos($mime, '/') + 1));
3547                                 $filesubtype = str_replace('.', '-', $filesubtype);
3548                         } else {
3549                                 $filetype = 'unkn';
3550                                 $filesubtype = 'unkn';
3551                         }
3552
3553                         $title = Strings::escapeHtml(trim(($mtch[4] ?? '') ?: $mtch[1]));
3554                         $title .= ' ' . $mtch[2] . ' ' . DI::l10n()->t('bytes');
3555
3556                         $icon = '<div class="attachtype icon s22 type-' . $filetype . ' subtype-' . $filesubtype . '"></div>';
3557                         $as .= '<a href="' . strip_tags($the_url) . '" title="' . $title . '" class="attachlink" target="_blank" rel="noopener noreferrer" >' . $icon . '</a>';
3558                 }
3559
3560                 if ($as != '') {
3561                         $s .= '<div class="body-attach">'.$as.'<div class="clear"></div></div>';
3562                 }
3563
3564                 // Map.
3565                 if (strpos($s, '<div class="map">') !== false && !empty($item['coord'])) {
3566                         $x = Map::byCoordinates(trim($item['coord']));
3567                         if ($x) {
3568                                 $s = preg_replace('/\<div class\=\"map\"\>/', '$0' . $x, $s);
3569                         }
3570                 }
3571
3572                 // Replace friendica image url size with theme preference.
3573                 if (!empty($a->theme_info['item_image_size'])) {
3574                         $ps = $a->theme_info['item_image_size'];
3575                         $s = preg_replace('|(<img[^>]+src="[^"]+/photo/[0-9a-f]+)-[0-9]|', "$1-" . $ps, $s);
3576                 }
3577
3578                 $s = HTML::applyContentFilter($s, $filter_reasons);
3579
3580                 $hook_data = ['item' => $item, 'html' => $s];
3581                 Hook::callAll('prepare_body_final', $hook_data);
3582
3583                 return $hook_data['html'];
3584         }
3585
3586         /**
3587          * get private link for item
3588          *
3589          * @param array $item
3590          * @return boolean|array False if item has not plink, otherwise array('href'=>plink url, 'title'=>translated title)
3591          * @throws \Exception
3592          */
3593         public static function getPlink($item)
3594         {
3595                 $a = DI::app();
3596
3597                 if ($a->user['nickname'] != "") {
3598                         $ret = [
3599                                 'href' => "display/" . $item['guid'],
3600                                 'orig' => "display/" . $item['guid'],
3601                                 'title' => DI::l10n()->t('View on separate page'),
3602                                 'orig_title' => DI::l10n()->t('view on separate page'),
3603                         ];
3604
3605                         if (!empty($item['plink'])) {
3606                                 $ret["href"] = DI::baseUrl()->remove($item['plink']);
3607                                 $ret["title"] = DI::l10n()->t('link to source');
3608                         }
3609
3610                 } elseif (!empty($item['plink']) && ($item['private'] != self::PRIVATE)) {
3611                         $ret = [
3612                                 'href' => $item['plink'],
3613                                 'orig' => $item['plink'],
3614                                 'title' => DI::l10n()->t('link to source'),
3615                         ];
3616                 } else {
3617                         $ret = [];
3618                 }
3619
3620                 return $ret;
3621         }
3622
3623         /**
3624          * Is the given item array a post that is sent as starting post to a forum?
3625          *
3626          * @param array $item
3627          * @param array $owner
3628          *
3629          * @return boolean "true" when it is a forum post
3630          */
3631         public static function isForumPost(array $item, array $owner = [])
3632         {
3633                 if (empty($owner)) {
3634                         $owner = User::getOwnerDataById($item['uid']);
3635                         if (empty($owner)) {
3636                                 return false;
3637                         }
3638                 }
3639
3640                 if (($item['author-id'] == $item['owner-id']) ||
3641                         ($owner['id'] == $item['contact-id']) ||
3642                         ($item['uri'] != $item['parent-uri']) ||
3643                         $item['origin']) {
3644                         return false;
3645                 }
3646
3647                 return Contact::isForum($item['contact-id']);
3648         }
3649
3650         /**
3651          * Search item id for given URI or plink
3652          *
3653          * @param string $uri
3654          * @param integer $uid
3655          *
3656          * @return integer item id
3657          */
3658         public static function searchByLink($uri, $uid = 0)
3659         {
3660                 $ssl_uri = str_replace('http://', 'https://', $uri);
3661                 $uris = [$uri, $ssl_uri, Strings::normaliseLink($uri)];
3662
3663                 $item = DBA::selectFirst('item', ['id'], ['uri' => $uris, 'uid' => $uid]);
3664                 if (DBA::isResult($item)) {
3665                         return $item['id'];
3666                 }
3667
3668                 $itemcontent = DBA::selectFirst('item-content', ['uri-id'], ['plink' => $uris]);
3669                 if (!DBA::isResult($itemcontent)) {
3670                         return 0;
3671                 }
3672
3673                 $itemuri = DBA::selectFirst('item-uri', ['uri'], ['id' => $itemcontent['uri-id']]);
3674                 if (!DBA::isResult($itemuri)) {
3675                         return 0;
3676                 }
3677
3678                 $item = DBA::selectFirst('item', ['id'], ['uri' => $itemuri['uri'], 'uid' => $uid]);
3679                 if (DBA::isResult($item)) {
3680                         return $item['id'];
3681                 }
3682
3683                 return 0;
3684         }
3685
3686         /**
3687          * Return the URI for a link to the post
3688          *
3689          * @param string $uri URI or link to post
3690          *
3691          * @return string URI
3692          */
3693         public static function getURIByLink(string $uri)
3694         {
3695                 $ssl_uri = str_replace('http://', 'https://', $uri);
3696                 $uris = [$uri, $ssl_uri, Strings::normaliseLink($uri)];
3697
3698                 $item = DBA::selectFirst('item', ['uri'], ['uri' => $uris]);
3699                 if (DBA::isResult($item)) {
3700                         return $item['uri'];
3701                 }
3702
3703                 $itemcontent = DBA::selectFirst('item-content', ['uri-id'], ['plink' => $uris]);
3704                 if (!DBA::isResult($itemcontent)) {
3705                         return '';
3706                 }
3707
3708                 $itemuri = DBA::selectFirst('item-uri', ['uri'], ['id' => $itemcontent['uri-id']]);
3709                 if (DBA::isResult($itemuri)) {
3710                         return $itemuri['uri'];
3711                 }
3712
3713                 return '';
3714         }
3715
3716         /**
3717          * Fetches item for given URI or plink
3718          *
3719          * @param string $uri
3720          * @param integer $uid
3721          *
3722          * @return integer item id
3723          */
3724         public static function fetchByLink($uri, $uid = 0)
3725         {
3726                 $item_id = self::searchByLink($uri, $uid);
3727                 if (!empty($item_id)) {
3728                         return $item_id;
3729                 }
3730
3731                 if ($fetched_uri = ActivityPub\Processor::fetchMissingActivity($uri)) {
3732                         $item_id = self::searchByLink($fetched_uri, $uid);
3733                 } else {
3734                         $item_id = Diaspora::fetchByURL($uri);
3735                 }
3736
3737                 if (!empty($item_id)) {
3738                         return $item_id;
3739                 }
3740
3741                 return 0;
3742         }
3743
3744         /**
3745          * Return share data from an item array (if the item is shared item)
3746          * We are providing the complete Item array, because at some time in the future
3747          * we hopefully will define these values not in the body anymore but in some item fields.
3748          * This function is meant to replace all similar functions in the system.
3749          *
3750          * @param array $item
3751          *
3752          * @return array with share information
3753          */
3754         public static function getShareArray($item)
3755         {
3756                 if (!preg_match("/(.*?)\[share(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism", $item['body'], $matches)) {
3757                         return [];
3758                 }
3759
3760                 $attribute_string = $matches[2];
3761                 $attributes = ['comment' => trim($matches[1]), 'shared' => trim($matches[3])];
3762                 foreach (['author', 'profile', 'avatar', 'guid', 'posted', 'link'] as $field) {
3763                         if (preg_match("/$field=(['\"])(.+?)\\1/ism", $attribute_string, $matches)) {
3764                                 $attributes[$field] = trim(html_entity_decode($matches[2] ?? '', ENT_QUOTES, 'UTF-8'));
3765                         }
3766                 }
3767                 return $attributes;
3768         }
3769
3770         /**
3771          * Fetch item information for shared items from the original items and adds it.
3772          *
3773          * @param array $item
3774          *
3775          * @return array item array with data from the original item
3776          */
3777         public static function addShareDataFromOriginal($item)
3778         {
3779                 $shared = self::getShareArray($item);
3780                 if (empty($shared)) {
3781                         return $item;
3782                 }
3783
3784                 // Real reshares always have got a GUID.
3785                 if (empty($shared['guid'])) {
3786                         return $item;
3787                 }
3788
3789                 $uid = $item['uid'] ?? 0;
3790
3791                 // first try to fetch the item via the GUID. This will work for all reshares that had been created on this system
3792                 $shared_item = self::selectFirst(['title', 'body', 'attach'], ['guid' => $shared['guid'], 'uid' => [0, $uid]]);
3793                 if (!DBA::isResult($shared_item)) {
3794                         if (empty($shared['link'])) {
3795                                 return $item;
3796                         }
3797
3798                         // Otherwhise try to find (and possibly fetch) the item via the link. This should work for Diaspora and ActivityPub posts
3799                         $id = self::fetchByLink($shared['link'], $uid);
3800                         if (empty($id)) {
3801                                 Logger::info('Original item not found', ['url' => $shared['link'], 'callstack' => System::callstack()]);
3802                                 return $item;
3803                         }
3804
3805                         $shared_item = self::selectFirst(['title', 'body', 'attach'], ['id' => $id]);
3806                         if (!DBA::isResult($shared_item)) {
3807                                 return $item;
3808                         }
3809                         Logger::info('Got shared data from url', ['url' => $shared['link'], 'callstack' => System::callstack()]);
3810                 } else {
3811                         Logger::info('Got shared data from guid', ['guid' => $shared['guid'], 'callstack' => System::callstack()]);
3812                 }
3813
3814                 if (!empty($shared_item['title'])) {
3815                         $body = '[h3]' . $shared_item['title'] . "[/h3]\n" . $shared_item['body'];
3816                         unset($shared_item['title']);
3817                 } else {
3818                         $body = $shared_item['body'];
3819                 }
3820
3821                 $item['body'] = preg_replace("/\[share ([^\[\]]*)\].*\[\/share\]/ism", '[share $1]' . $body . '[/share]', $item['body']);
3822                 unset($shared_item['body']);
3823
3824                 return array_merge($item, $shared_item);
3825         }
3826 }