src/Model/Item.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2020, Friendica
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 namespace Friendica\Model;
  23
  24 use Friendica\Content\Text\BBCode;
  25 use Friendica\Content\Text\HTML;
  26 use Friendica\Core\Hook;
  27 use Friendica\Core\Logger;
  28 use Friendica\Core\Protocol;
  29 use Friendica\Core\Renderer;
  30 use Friendica\Core\Session;
  31 use Friendica\Core\System;
  32 use Friendica\Core\Worker;
  33 use Friendica\Database\DBA;
  34 use Friendica\DI;
  35 use Friendica\Protocol\Activity;
  36 use Friendica\Protocol\ActivityPub;
  37 use Friendica\Protocol\Diaspora;
  38 use Friendica\Protocol\OStatus;
  39 use Friendica\Util\DateTimeFormat;
  40 use Friendica\Util\Map;
  41 use Friendica\Util\Network;
  42 use Friendica\Util\Security;
  43 use Friendica\Util\Strings;
  44 use Friendica\Util\XML;
  45 use Friendica\Worker\Delivery;
  46 use Text_LanguageDetect;
  47 use Friendica\Repository\PermissionSet as RepPermissionSet;
  48
  49 class Item
  50 {
  51         // Posting types, inspired by https://www.w3.org/TR/activitystreams-vocabulary/#object-types
  52         const PT_ARTICLE = 0;
  53         const PT_NOTE = 1;
  54         const PT_PAGE = 2;
  55         const PT_IMAGE = 16;
  56         const PT_AUDIO = 17;
  57         const PT_VIDEO = 18;
  58         const PT_DOCUMENT = 19;
  59         const PT_EVENT = 32;
  60         const PT_PERSONAL_NOTE = 128;
  61
  62         // Field list that is used to display the items
  63         const DISPLAY_FIELDLIST = [
  64                 'uid', 'id', 'parent', 'uri', 'thr-parent', 'parent-uri', 'guid', 'network', 'gravity',
  65                 'commented', 'created', 'edited', 'received', 'verb', 'object-type', 'postopts', 'plink',
  66                 'wall', 'private', 'starred', 'origin', 'title', 'body', 'file', 'attach', 'language',
  67                 'content-warning', 'location', 'coord', 'app', 'rendered-hash', 'rendered-html', 'object',
  68                 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'item_id',
  69                 'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
  70                 'owner-id', 'owner-link', 'owner-name', 'owner-avatar', 'owner-network',
  71                 'contact-id', 'contact-uid', 'contact-link', 'contact-name', 'contact-avatar',
  72                 'writable', 'self', 'cid', 'alias', 'pinned',
  73                 'event-id', 'event-created', 'event-edited', 'event-start', 'event-finish',
  74                 'event-summary', 'event-desc', 'event-location', 'event-type',
  75                 'event-nofinish', 'event-adjust', 'event-ignore', 'event-id',
  76                 'delivery_queue_count', 'delivery_queue_done', 'delivery_queue_failed'
  77         ];
  78
  79         // Field list that is used to deliver items via the protocols
  80         const DELIVER_FIELDLIST = ['uid', 'id', 'parent', 'uri', 'thr-parent', 'parent-uri', 'guid',
  81                         'parent-guid', 'created', 'edited', 'verb', 'object-type', 'object', 'target',
  82                         'private', 'title', 'body', 'location', 'coord', 'app',
  83                         'attach', 'tag', 'deleted', 'extid', 'post-type',
  84                         'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
  85                         'author-id', 'author-link', 'owner-link', 'contact-uid',
  86                         'signed_text', 'signature', 'signer', 'network'];
  87
  88         // Field list for "item-content" table that is mixed with the item table
  89         const MIXED_CONTENT_FIELDLIST = ['title', 'content-warning', 'body', 'location',
  90                         'coord', 'app', 'rendered-hash', 'rendered-html', 'verb',
  91                         'object-type', 'object', 'target-type', 'target', 'plink'];
  92
  93         // Field list for "item-content" table that is not present in the "item" table
  94         const CONTENT_FIELDLIST = ['language'];
  95
  96         // All fields in the item table
  97         const ITEM_FIELDLIST = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent',
  98                         'guid', 'uri-id', 'parent-uri-id', 'thr-parent-id',
  99                         'contact-id', 'type', 'wall', 'gravity', 'extid', 'icid', 'iaid', 'psid',
 100                         'created', 'edited', 'commented', 'received', 'changed', 'verb',
 101                         'postopts', 'plink', 'resource-id', 'event-id', 'tag', 'attach', 'inform',
 102                         'file', 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid', 'post-type',
 103                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 104                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global', 'network',
 105                         'title', 'content-warning', 'body', 'location', 'coord', 'app',
 106                         'rendered-hash', 'rendered-html', 'object-type', 'object', 'target-type', 'target',
 107                         'author-id', 'author-link', 'author-name', 'author-avatar', 'author-network',
 108                         'owner-id', 'owner-link', 'owner-name', 'owner-avatar'];
 109
 110         // Never reorder or remove entries from this list. Just add new ones at the end, if needed.
 111         // The item-activity table only stores the index and needs this array to know the matching activity.
 112         const ACTIVITIES = [
 113                 Activity::LIKE, Activity::DISLIKE,
 114                 Activity::ATTEND, Activity::ATTENDNO, Activity::ATTENDMAYBE,
 115                 Activity::FOLLOW,
 116                 Activity::ANNOUNCE];
 117
 118         const PUBLIC = 0;
 119         const PRIVATE = 1;
 120         const UNLISTED = 2;
 121
 122         private static $legacy_mode = null;
 123
 124         public static function isLegacyMode()
 125         {
 126                 if (is_null(self::$legacy_mode)) {
 127                         self::$legacy_mode = (DI::config()->get("system", "post_update_version") < 1279);
 128                 }
 129
 130                 return self::$legacy_mode;
 131         }
 132
 133         /**
 134          * Set the pinned state of an item
 135          *
 136          * @param integer $iid    Item ID
 137          * @param integer $uid    User ID
 138          * @param boolean $pinned Pinned state
 139          */
 140         public static function setPinned(int $iid, int $uid, bool $pinned)
 141         {
 142                 DBA::update('user-item', ['pinned' => $pinned], ['iid' => $iid, 'uid' => $uid], true);
 143         }
 144
 145         /**
 146          * Get the pinned state
 147          *
 148          * @param integer $iid Item ID
 149          * @param integer $uid User ID
 150          *
 151          * @return boolean pinned state
 152          */
 153         public static function getPinned(int $iid, int $uid)
 154         {
 155                 $useritem = DBA::selectFirst('user-item', ['pinned'], ['iid' => $iid, 'uid' => $uid]);
 156                 if (!DBA::isResult($useritem)) {
 157                         return false;
 158                 }
 159                 return (bool)$useritem['pinned'];
 160         }
 161
 162         /**
 163          * Select pinned rows from the item table for a given user
 164          *
 165          * @param integer $uid       User ID
 166          * @param array   $selected  Array of selected fields, empty for all
 167          * @param array   $condition Array of fields for condition
 168          * @param array   $params    Array of several parameters
 169          *
 170          * @return boolean|object
 171          * @throws \Exception
 172          */
 173         public static function selectPinned(int $uid, array $selected = [], array $condition = [], $params = [])
 174         {
 175                 $useritems = DBA::select('user-item', ['iid'], ['uid' => $uid, 'pinned' => true]);
 176                 if (!DBA::isResult($useritems)) {
 177                         return $useritems;
 178                 }
 179
 180                 $pinned = [];
 181                 while ($useritem = DBA::fetch($useritems)) {
 182                         $pinned[] = $useritem['iid'];
 183                 }
 184                 DBA::close($useritems);
 185
 186                 if (empty($pinned)) {
 187                         return [];
 188                 }
 189
 190                 if (empty($condition) || !is_array($condition)) {
 191                         $condition = ['iid' => $pinned];
 192                 } else {
 193                         reset($condition);
 194                         $first_key = key($condition);
 195                         if (!is_int($first_key)) {
 196                                 $condition['iid'] = $pinned;
 197                         } else {
 198                                 $values_string = substr(str_repeat("?, ", count($pinned)), 0, -2);
 199                                 $condition[0] = '(' . $condition[0] . ") AND `iid` IN (" . $values_string . ")";
 200                                 $condition = array_merge($condition, $pinned);
 201                         }
 202                 }
 203
 204                 return self::selectThreadForUser($uid, $selected, $condition, $params);
 205         }
 206
 207         /**
 208          * returns an activity index from an activity string
 209          *
 210          * @param string $activity activity string
 211          * @return integer Activity index
 212          */
 213         public static function activityToIndex($activity)
 214         {
 215                 $index = array_search($activity, self::ACTIVITIES);
 216
 217                 if (is_bool($index)) {
 218                         $index = -1;
 219                 }
 220
 221                 return $index;
 222         }
 223
 224         /**
 225          * returns an activity string from an activity index
 226          *
 227          * @param integer $index activity index
 228          * @return string Activity string
 229          */
 230         private static function indexToActivity($index)
 231         {
 232                 if (is_null($index) || !array_key_exists($index, self::ACTIVITIES)) {
 233                         return '';
 234                 }
 235
 236                 return self::ACTIVITIES[$index];
 237         }
 238
 239         /**
 240          * Fetch a single item row
 241          *
 242          * @param mixed $stmt statement object
 243          * @return array current row
 244          */
 245         public static function fetch($stmt)
 246         {
 247                 $row = DBA::fetch($stmt);
 248
 249                 if (is_bool($row)) {
 250                         return $row;
 251                 }
 252
 253                 // ---------------------- Transform item structure data ----------------------
 254
 255                 // We prefer the data from the user's contact over the public one
 256                 if (!empty($row['author-link']) && !empty($row['contact-link']) &&
 257                         ($row['author-link'] == $row['contact-link'])) {
 258                         if (isset($row['author-avatar']) && !empty($row['contact-avatar'])) {
 259                                 $row['author-avatar'] = $row['contact-avatar'];
 260                         }
 261                         if (isset($row['author-name']) && !empty($row['contact-name'])) {
 262                                 $row['author-name'] = $row['contact-name'];
 263                         }
 264                 }
 265
 266                 if (!empty($row['owner-link']) && !empty($row['contact-link']) &&
 267                         ($row['owner-link'] == $row['contact-link'])) {
 268                         if (isset($row['owner-avatar']) && !empty($row['contact-avatar'])) {
 269                                 $row['owner-avatar'] = $row['contact-avatar'];
 270                         }
 271                         if (isset($row['owner-name']) && !empty($row['contact-name'])) {
 272                                 $row['owner-name'] = $row['contact-name'];
 273                         }
 274                 }
 275
 276                 // We can always comment on posts from these networks
 277                 if (array_key_exists('writable', $row) &&
 278                         in_array($row['internal-network'], Protocol::FEDERATED)) {
 279                         $row['writable'] = true;
 280                 }
 281
 282                 // ---------------------- Transform item content data ----------------------
 283
 284                 // Fetch data from the item-content table whenever there is content there
 285                 if (self::isLegacyMode()) {
 286                         $legacy_fields = array_merge(ItemDeliveryData::LEGACY_FIELD_LIST, self::MIXED_CONTENT_FIELDLIST);
 287                         foreach ($legacy_fields as $field) {
 288                                 if (empty($row[$field]) && !empty($row['internal-item-' . $field])) {
 289                                         $row[$field] = $row['internal-item-' . $field];
 290                                 }
 291                                 unset($row['internal-item-' . $field]);
 292                         }
 293                 }
 294
 295                 if (!empty($row['internal-iaid']) && array_key_exists('verb', $row)) {
 296                         $row['verb'] = self::indexToActivity($row['internal-activity']);
 297                         if (array_key_exists('title', $row)) {
 298                                 $row['title'] = '';
 299                         }
 300                         if (array_key_exists('body', $row)) {
 301                                 $row['body'] = $row['verb'];
 302                         }
 303                         if (array_key_exists('object', $row)) {
 304                                 $row['object'] = '';
 305                         }
 306                         if (array_key_exists('object-type', $row)) {
 307                                 $row['object-type'] = Activity\ObjectType::NOTE;
 308                         }
 309                 } elseif (array_key_exists('verb', $row) && in_array($row['verb'], ['', Activity::POST, Activity::SHARE])) {
 310                         // Posts don't have a target - but having tags or files.
 311                         // We safe some performance by building tag and file strings only here.
 312                         // We remove the target since they aren't used for this type.
 313                         // In mail posts we do store some mail header data in the object.
 314                         if (array_key_exists('target', $row)) {
 315                                 $row['target'] = '';
 316                         }
 317                 }
 318
 319                 if (!array_key_exists('verb', $row) || in_array($row['verb'], ['', Activity::POST, Activity::SHARE])) {
 320                         // Build the tag string out of the term entries
 321                         if (array_key_exists('tag', $row) && empty($row['tag'])) {
 322                                 $row['tag'] = Term::tagTextFromItemId($row['internal-iid']);
 323                         }
 324
 325                         // Build the file string out of the term entries
 326                         if (array_key_exists('file', $row) && empty($row['file'])) {
 327                                 $row['file'] = Term::fileTextFromItemId($row['internal-iid']);
 328                         }
 329                 }
 330
 331                 if ($row['internal-psid'] == RepPermissionSet::PUBLIC) {
 332                         if (array_key_exists('allow_cid', $row)) {
 333                                 $row['allow_cid'] = '';
 334                         }
 335                         if (array_key_exists('allow_gid', $row)) {
 336                                 $row['allow_gid'] = '';
 337                         }
 338                         if (array_key_exists('deny_cid', $row)) {
 339                                 $row['deny_cid'] = '';
 340                         }
 341                         if (array_key_exists('deny_gid', $row)) {
 342                                 $row['deny_gid'] = '';
 343                         }
 344                 }
 345
 346                 if (array_key_exists('ignored', $row) && array_key_exists('internal-user-ignored', $row) && !is_null($row['internal-user-ignored'])) {
 347                         $row['ignored'] = $row['internal-user-ignored'];
 348                 }
 349
 350                 // Remove internal fields
 351                 unset($row['internal-activity']);
 352                 unset($row['internal-network']);
 353                 unset($row['internal-iid']);
 354                 unset($row['internal-psid']);
 355                 unset($row['internal-iaid']);
 356                 unset($row['internal-user-ignored']);
 357                 unset($row['interaction']);
 358
 359                 return $row;
 360         }
 361
 362         /**
 363          * Fills an array with data from an item query
 364          *
 365          * @param object $stmt statement object
 366          * @param bool   $do_close
 367          * @return array Data array
 368          */
 369         public static function inArray($stmt, $do_close = true) {
 370                 if (is_bool($stmt)) {
 371                         return $stmt;
 372                 }
 373
 374                 $data = [];
 375                 while ($row = self::fetch($stmt)) {
 376                         $data[] = $row;
 377                 }
 378                 if ($do_close) {
 379                         DBA::close($stmt);
 380                 }
 381                 return $data;
 382         }
 383
 384         /**
 385          * Check if item data exists
 386          *
 387          * @param array $condition array of fields for condition
 388          *
 389          * @return boolean Are there rows for that condition?
 390          * @throws \Exception
 391          */
 392         public static function exists($condition) {
 393                 $stmt = self::select(['id'], $condition, ['limit' => 1]);
 394
 395                 if (is_bool($stmt)) {
 396                         $retval = $stmt;
 397                 } else {
 398                         $retval = (DBA::numRows($stmt) > 0);
 399                 }
 400
 401                 DBA::close($stmt);
 402
 403                 return $retval;
 404         }
 405
 406         /**
 407          * Retrieve a single record from the item table for a given user and returns it in an associative array
 408          *
 409          * @param integer $uid User ID
 410          * @param array   $selected
 411          * @param array   $condition
 412          * @param array   $params
 413          * @return bool|array
 414          * @throws \Exception
 415          * @see   DBA::select
 416          */
 417         public static function selectFirstForUser($uid, array $selected = [], array $condition = [], $params = [])
 418         {
 419                 $params['uid'] = $uid;
 420
 421                 if (empty($selected)) {
 422                         $selected = Item::DISPLAY_FIELDLIST;
 423                 }
 424
 425                 return self::selectFirst($selected, $condition, $params);
 426         }
 427
 428         /**
 429          * Select rows from the item table for a given user
 430          *
 431          * @param integer $uid       User ID
 432          * @param array   $selected  Array of selected fields, empty for all
 433          * @param array   $condition Array of fields for condition
 434          * @param array   $params    Array of several parameters
 435          *
 436          * @return boolean|object
 437          * @throws \Exception
 438          */
 439         public static function selectForUser($uid, array $selected = [], array $condition = [], $params = [])
 440         {
 441                 $params['uid'] = $uid;
 442
 443                 if (empty($selected)) {
 444                         $selected = Item::DISPLAY_FIELDLIST;
 445                 }
 446
 447                 return self::select($selected, $condition, $params);
 448         }
 449
 450         /**
 451          * Retrieve a single record from the item table and returns it in an associative array
 452          *
 453          * @param array $fields
 454          * @param array $condition
 455          * @param array $params
 456          * @return bool|array
 457          * @throws \Exception
 458          * @see   DBA::select
 459          */
 460         public static function selectFirst(array $fields = [], array $condition = [], $params = [])
 461         {
 462                 $params['limit'] = 1;
 463
 464                 $result = self::select($fields, $condition, $params);
 465
 466                 if (is_bool($result)) {
 467                         return $result;
 468                 } else {
 469                         $row = self::fetch($result);
 470                         DBA::close($result);
 471                         return $row;
 472                 }
 473         }
 474
 475         /**
 476          * Select rows from the item table and returns them as an array
 477          *
 478          * @param array $selected  Array of selected fields, empty for all
 479          * @param array $condition Array of fields for condition
 480          * @param array $params    Array of several parameters
 481          *
 482          * @return array
 483          * @throws \Exception
 484          */
 485         public static function selectToArray(array $fields = [], array $condition = [], $params = [])
 486         {
 487                 $result = self::select($fields, $condition, $params);
 488
 489                 if (is_bool($result)) {
 490                         return [];
 491                 }
 492
 493                 $data = [];
 494                 while ($row = self::fetch($result)) {
 495                         $data[] = $row;
 496                 }
 497                 DBA::close($result);
 498
 499                 return $data;
 500         }
 501
 502         /**
 503          * Select rows from the item table
 504          *
 505          * @param array $selected  Array of selected fields, empty for all
 506          * @param array $condition Array of fields for condition
 507          * @param array $params    Array of several parameters
 508          *
 509          * @return boolean|object
 510          * @throws \Exception
 511          */
 512         public static function select(array $selected = [], array $condition = [], $params = [])
 513         {
 514                 $uid = 0;
 515                 $usermode = false;
 516
 517                 if (isset($params['uid'])) {
 518                         $uid = $params['uid'];
 519                         $usermode = true;
 520                 }
 521
 522                 $fields = self::fieldlist($usermode);
 523
 524                 $select_fields = self::constructSelectFields($fields, $selected);
 525
 526                 $condition_string = DBA::buildCondition($condition);
 527
 528                 $condition_string = self::addTablesToFields($condition_string, $fields);
 529
 530                 if ($usermode) {
 531                         $condition_string = $condition_string . ' AND ' . self::condition(false);
 532                 }
 533
 534                 $param_string = self::addTablesToFields(DBA::buildParameter($params), $fields);
 535
 536                 $table = "`item` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, false, $usermode);
 537
 538                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 539
 540                 return DBA::p($sql, $condition);
 541         }
 542
 543         /**
 544          * Select rows from the starting post in the item table
 545          *
 546          * @param integer $uid       User ID
 547          * @param array   $selected
 548          * @param array   $condition Array of fields for condition
 549          * @param array   $params    Array of several parameters
 550          *
 551          * @return boolean|object
 552          * @throws \Exception
 553          */
 554         public static function selectThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 555         {
 556                 $params['uid'] = $uid;
 557
 558                 if (empty($selected)) {
 559                         $selected = Item::DISPLAY_FIELDLIST;
 560                 }
 561
 562                 return self::selectThread($selected, $condition, $params);
 563         }
 564
 565         /**
 566          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 567          *
 568          * @param integer $uid User ID
 569          * @param array   $selected
 570          * @param array   $condition
 571          * @param array   $params
 572          * @return bool|array
 573          * @throws \Exception
 574          * @see   DBA::select
 575          */
 576         public static function selectFirstThreadForUser($uid, array $selected = [], array $condition = [], $params = [])
 577         {
 578                 $params['uid'] = $uid;
 579
 580                 if (empty($selected)) {
 581                         $selected = Item::DISPLAY_FIELDLIST;
 582                 }
 583
 584                 return self::selectFirstThread($selected, $condition, $params);
 585         }
 586
 587         /**
 588          * Retrieve a single record from the starting post in the item table and returns it in an associative array
 589          *
 590          * @param array $fields
 591          * @param array $condition
 592          * @param array $params
 593          * @return bool|array
 594          * @throws \Exception
 595          * @see   DBA::select
 596          */
 597         public static function selectFirstThread(array $fields = [], array $condition = [], $params = [])
 598         {
 599                 $params['limit'] = 1;
 600                 $result = self::selectThread($fields, $condition, $params);
 601
 602                 if (is_bool($result)) {
 603                         return $result;
 604                 } else {
 605                         $row = self::fetch($result);
 606                         DBA::close($result);
 607                         return $row;
 608                 }
 609         }
 610
 611         /**
 612          * Select rows from the starting post in the item table
 613          *
 614          * @param array $selected  Array of selected fields, empty for all
 615          * @param array $condition Array of fields for condition
 616          * @param array $params    Array of several parameters
 617          *
 618          * @return boolean|object
 619          * @throws \Exception
 620          */
 621         public static function selectThread(array $selected = [], array $condition = [], $params = [])
 622         {
 623                 $uid = 0;
 624                 $usermode = false;
 625
 626                 if (isset($params['uid'])) {
 627                         $uid = $params['uid'];
 628                         $usermode = true;
 629                 }
 630
 631                 $fields = self::fieldlist($usermode);
 632
 633                 $fields['thread'] = ['mention', 'ignored', 'iid'];
 634
 635                 $threadfields = ['thread' => ['iid', 'uid', 'contact-id', 'owner-id', 'author-id',
 636                         'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private',
 637                         'pubmail', 'moderated', 'visible', 'starred', 'ignored', 'post-type',
 638                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'network']];
 639
 640                 $select_fields = self::constructSelectFields($fields, $selected);
 641
 642                 $condition_string = DBA::buildCondition($condition);
 643
 644                 $condition_string = self::addTablesToFields($condition_string, $threadfields);
 645                 $condition_string = self::addTablesToFields($condition_string, $fields);
 646
 647                 if ($usermode) {
 648                         $condition_string = $condition_string . ' AND ' . self::condition(true);
 649                 }
 650
 651                 $param_string = DBA::buildParameter($params);
 652                 $param_string = self::addTablesToFields($param_string, $threadfields);
 653                 $param_string = self::addTablesToFields($param_string, $fields);
 654
 655                 $table = "`thread` " . self::constructJoins($uid, $select_fields . $condition_string . $param_string, true, $usermode);
 656
 657                 $sql = "SELECT " . $select_fields . " FROM " . $table . $condition_string . $param_string;
 658
 659                 return DBA::p($sql, $condition);
 660         }
 661
 662         /**
 663          * Returns a list of fields that are associated with the item table
 664          *
 665          * @param $usermode
 666          * @return array field list
 667          */
 668         private static function fieldlist($usermode)
 669         {
 670                 $fields = [];
 671
 672                 $fields['item'] = ['id', 'uid', 'parent', 'uri', 'parent-uri', 'thr-parent',
 673                         'guid', 'uri-id', 'parent-uri-id', 'thr-parent-id',
 674                         'contact-id', 'owner-id', 'author-id', 'type', 'wall', 'gravity', 'extid',
 675                         'created', 'edited', 'commented', 'received', 'changed', 'psid',
 676                         'resource-id', 'event-id', 'tag', 'attach', 'post-type', 'file',
 677                         'private', 'pubmail', 'moderated', 'visible', 'starred', 'bookmark',
 678                         'unseen', 'deleted', 'origin', 'forum_mode', 'mention', 'global',
 679                         'id' => 'item_id', 'network', 'icid', 'iaid', 'id' => 'internal-iid',
 680                         'network' => 'internal-network', 'iaid' => 'internal-iaid', 'psid' => 'internal-psid'];
 681
 682                 if ($usermode) {
 683                         $fields['user-item'] = ['pinned', 'notification-type', 'ignored' => 'internal-user-ignored'];
 684                 }
 685
 686                 $fields['item-activity'] = ['activity', 'activity' => 'internal-activity'];
 687
 688                 $fields['item-content'] = array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST);
 689
 690                 $fields['item-delivery-data'] = array_merge(ItemDeliveryData::LEGACY_FIELD_LIST, ItemDeliveryData::FIELD_LIST);
 691
 692                 $fields['permissionset'] = ['allow_cid', 'allow_gid', 'deny_cid', 'deny_gid'];
 693
 694                 $fields['author'] = ['url' => 'author-link', 'name' => 'author-name', 'addr' => 'author-addr',
 695                         'thumb' => 'author-avatar', 'nick' => 'author-nick', 'network' => 'author-network'];
 696
 697                 $fields['owner'] = ['url' => 'owner-link', 'name' => 'owner-name', 'addr' => 'owner-addr',
 698                         'thumb' => 'owner-avatar', 'nick' => 'owner-nick', 'network' => 'owner-network'];
 699
 700                 $fields['contact'] = ['url' => 'contact-link', 'name' => 'contact-name', 'thumb' => 'contact-avatar',
 701                         'writable', 'self', 'id' => 'cid', 'alias', 'uid' => 'contact-uid',
 702                         'photo', 'name-date', 'uri-date', 'avatar-date', 'thumb', 'dfrn-id'];
 703
 704                 $fields['parent-item'] = ['guid' => 'parent-guid', 'network' => 'parent-network'];
 705
 706                 $fields['parent-item-author'] = ['url' => 'parent-author-link', 'name' => 'parent-author-name'];
 707
 708                 $fields['event'] = ['created' => 'event-created', 'edited' => 'event-edited',
 709                         'start' => 'event-start','finish' => 'event-finish',
 710                         'summary' => 'event-summary','desc' => 'event-desc',
 711                         'location' => 'event-location', 'type' => 'event-type',
 712                         'nofinish' => 'event-nofinish','adjust' => 'event-adjust',
 713                         'ignore' => 'event-ignore', 'id' => 'event-id'];
 714
 715                 $fields['diaspora-interaction'] = ['interaction', 'interaction' => 'signed_text'];
 716
 717                 return $fields;
 718         }
 719
 720         /**
 721          * Returns SQL condition for the "select" functions
 722          *
 723          * @param boolean $thread_mode Called for the items (false) or for the threads (true)
 724          *
 725          * @return string SQL condition
 726          */
 727         private static function condition($thread_mode)
 728         {
 729                 if ($thread_mode) {
 730                         $master_table = "`thread`";
 731                 } else {
 732                         $master_table = "`item`";
 733                 }
 734                 return sprintf("$master_table.`visible` AND NOT $master_table.`deleted` AND NOT $master_table.`moderated`
 735                         AND (`user-item`.`hidden` IS NULL OR NOT `user-item`.`hidden`)
 736                         AND (`user-author`.`blocked` IS NULL OR NOT `user-author`.`blocked`)
 737                         AND (`user-author`.`ignored` IS NULL OR NOT `user-author`.`ignored` OR `item`.`gravity` != %d)
 738                         AND (`user-owner`.`blocked` IS NULL OR NOT `user-owner`.`blocked`)
 739                         AND (`user-owner`.`ignored` IS NULL OR NOT `user-owner`.`ignored` OR `item`.`gravity` != %d) ",
 740                         GRAVITY_PARENT, GRAVITY_PARENT);
 741         }
 742
 743         /**
 744          * Returns all needed "JOIN" commands for the "select" functions
 745          *
 746          * @param integer $uid          User ID
 747          * @param string  $sql_commands The parts of the built SQL commands in the "select" functions
 748          * @param boolean $thread_mode  Called for the items (false) or for the threads (true)
 749          *
 750          * @param         $user_mode
 751          * @return string The SQL joins for the "select" functions
 752          */
 753         private static function constructJoins($uid, $sql_commands, $thread_mode, $user_mode)
 754         {
 755                 if ($thread_mode) {
 756                         $master_table = "`thread`";
 757                         $master_table_key = "`thread`.`iid`";
 758                         $joins = "STRAIGHT_JOIN `item` ON `item`.`id` = `thread`.`iid` ";
 759                 } else {
 760                         $master_table = "`item`";
 761                         $master_table_key = "`item`.`id`";
 762                         $joins = '';
 763                 }
 764
 765                 if ($user_mode) {
 766                         $joins .= sprintf("STRAIGHT_JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`
 767                                 AND NOT `contact`.`blocked`
 768                                 AND ((NOT `contact`.`readonly` AND NOT `contact`.`pending` AND (`contact`.`rel` IN (%s, %s)))
 769                                 OR `contact`.`self` OR `item`.`gravity` != %d OR `contact`.`uid` = 0)
 770                                 STRAIGHT_JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id` AND NOT `author`.`blocked`
 771                                 STRAIGHT_JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id` AND NOT `owner`.`blocked`
 772                                 LEFT JOIN `user-item` ON `user-item`.`iid` = $master_table_key AND `user-item`.`uid` = %d
 773                                 LEFT JOIN `user-contact` AS `user-author` ON `user-author`.`cid` = $master_table.`author-id` AND `user-author`.`uid` = %d
 774                                 LEFT JOIN `user-contact` AS `user-owner` ON `user-owner`.`cid` = $master_table.`owner-id` AND `user-owner`.`uid` = %d",
 775                                 Contact::SHARING, Contact::FRIEND, GRAVITY_PARENT, intval($uid), intval($uid), intval($uid));
 776                 } else {
 777                         if (strpos($sql_commands, "`contact`.") !== false) {
 778                                 $joins .= "LEFT JOIN `contact` ON `contact`.`id` = $master_table.`contact-id`";
 779                         }
 780                         if (strpos($sql_commands, "`author`.") !== false) {
 781                                 $joins .= " LEFT JOIN `contact` AS `author` ON `author`.`id` = $master_table.`author-id`";
 782                         }
 783                         if (strpos($sql_commands, "`owner`.") !== false) {
 784                                 $joins .= " LEFT JOIN `contact` AS `owner` ON `owner`.`id` = $master_table.`owner-id`";
 785                         }
 786                 }
 787
 788                 if (strpos($sql_commands, "`group_member`.") !== false) {
 789                         $joins .= " STRAIGHT_JOIN `group_member` ON `group_member`.`contact-id` = $master_table.`contact-id`";
 790                 }
 791
 792                 if (strpos($sql_commands, "`user`.") !== false) {
 793                         $joins .= " STRAIGHT_JOIN `user` ON `user`.`uid` = $master_table.`uid`";
 794                 }
 795
 796                 if (strpos($sql_commands, "`event`.") !== false) {
 797                         $joins .= " LEFT JOIN `event` ON `event-id` = `event`.`id`";
 798                 }
 799
 800                 if (strpos($sql_commands, "`diaspora-interaction`.") !== false) {
 801                         $joins .= " LEFT JOIN `diaspora-interaction` ON `diaspora-interaction`.`uri-id` = `item`.`uri-id`";
 802                 }
 803
 804                 if (strpos($sql_commands, "`item-activity`.") !== false) {
 805                         $joins .= " LEFT JOIN `item-activity` ON `item-activity`.`uri-id` = `item`.`uri-id`";
 806                 }
 807
 808                 if (strpos($sql_commands, "`item-content`.") !== false) {
 809                         $joins .= " LEFT JOIN `item-content` ON `item-content`.`uri-id` = `item`.`uri-id`";
 810                 }
 811
 812                 if (strpos($sql_commands, "`item-delivery-data`.") !== false) {
 813                         $joins .= " LEFT JOIN `item-delivery-data` ON `item-delivery-data`.`iid` = `item`.`id`";
 814                 }
 815
 816                 if (strpos($sql_commands, "`permissionset`.") !== false) {
 817                         $joins .= " LEFT JOIN `permissionset` ON `permissionset`.`id` = `item`.`psid`";
 818                 }
 819
 820                 if ((strpos($sql_commands, "`parent-item`.") !== false) || (strpos($sql_commands, "`parent-author`.") !== false)) {
 821                         $joins .= " STRAIGHT_JOIN `item` AS `parent-item` ON `parent-item`.`id` = `item`.`parent`";
 822                 }
 823
 824                 if (strpos($sql_commands, "`parent-item-author`.") !== false) {
 825                         $joins .= " STRAIGHT_JOIN `contact` AS `parent-item-author` ON `parent-item-author`.`id` = `parent-item`.`author-id`";
 826                 }
 827
 828                 return $joins;
 829         }
 830
 831         /**
 832          * Add the field list for the "select" functions
 833          *
 834          * @param array $fields The field definition array
 835          * @param array $selected The array with the selected fields from the "select" functions
 836          *
 837          * @return string The field list
 838          */
 839         private static function constructSelectFields(array $fields, array $selected)
 840         {
 841                 if (!empty($selected)) {
 842                         $selected = array_merge($selected, ['internal-iid', 'internal-psid', 'internal-iaid', 'internal-network']);
 843                 }
 844
 845                 if (in_array('verb', $selected)) {
 846                         $selected[] = 'internal-activity';
 847                 }
 848
 849                 if (in_array('ignored', $selected)) {
 850                         $selected[] = 'internal-user-ignored';
 851                 }
 852
 853                 $legacy_fields = array_merge(ItemDeliveryData::LEGACY_FIELD_LIST, self::MIXED_CONTENT_FIELDLIST);
 854
 855                 $selection = [];
 856                 foreach ($fields as $table => $table_fields) {
 857                         foreach ($table_fields as $field => $select) {
 858                                 if (empty($selected) || in_array($select, $selected)) {
 859                                         if (self::isLegacyMode() && in_array($select, $legacy_fields)) {
 860                                                 $selection[] = "`item`.`".$select."` AS `internal-item-" . $select . "`";
 861                                         }
 862                                         if (is_int($field)) {
 863                                                 $selection[] = "`" . $table . "`.`" . $select . "`";
 864                                         } else {
 865                                                 $selection[] = "`" . $table . "`.`" . $field . "` AS `" . $select . "`";
 866                                         }
 867                                 }
 868                         }
 869                 }
 870                 return implode(", ", $selection);
 871         }
 872
 873         /**
 874          * add table definition to fields in an SQL query
 875          *
 876          * @param string $query SQL query
 877          * @param array $fields The field definition array
 878          *
 879          * @return string the changed SQL query
 880          */
 881         private static function addTablesToFields($query, $fields)
 882         {
 883                 foreach ($fields as $table => $table_fields) {
 884                         foreach ($table_fields as $alias => $field) {
 885                                 if (is_int($alias)) {
 886                                         $replace_field = $field;
 887                                 } else {
 888                                         $replace_field = $alias;
 889                                 }
 890
 891                                 $search = "/([^\.])`" . $field . "`/i";
 892                                 $replace = "$1`" . $table . "`.`" . $replace_field . "`";
 893                                 $query = preg_replace($search, $replace, $query);
 894                         }
 895                 }
 896                 return $query;
 897         }
 898
 899         /**
 900          * Update existing item entries
 901          *
 902          * @param array $fields    The fields that are to be changed
 903          * @param array $condition The condition for finding the item entries
 904          *
 905          * In the future we may have to change permissions as well.
 906          * Then we had to add the user id as third parameter.
 907          *
 908          * A return value of "0" doesn't mean an error - but that 0 rows had been changed.
 909          *
 910          * @return integer|boolean number of affected rows - or "false" if there was an error
 911          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 912          */
 913         public static function update(array $fields, array $condition)
 914         {
 915                 if (empty($condition) || empty($fields)) {
 916                         return false;
 917                 }
 918
 919                 // To ensure the data integrity we do it in an transaction
 920                 DBA::transaction();
 921
 922                 // We cannot simply expand the condition to check for origin entries
 923                 // The condition needn't to be a simple array but could be a complex condition.
 924                 // And we have to execute this query before the update to ensure to fetch the same data.
 925                 $items = DBA::select('item', ['id', 'origin', 'uri', 'uri-id', 'iaid', 'icid', 'tag', 'file'], $condition);
 926
 927                 $content_fields = [];
 928                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
 929                         if (isset($fields[$field])) {
 930                                 $content_fields[$field] = $fields[$field];
 931                                 if (in_array($field, self::CONTENT_FIELDLIST) || !self::isLegacyMode()) {
 932                                         unset($fields[$field]);
 933                                 } else {
 934                                         $fields[$field] = null;
 935                                 }
 936                         }
 937                 }
 938
 939                 $delivery_data = ItemDeliveryData::extractFields($fields);
 940
 941                 $clear_fields = ['bookmark', 'type', 'author-name', 'author-avatar', 'author-link', 'owner-name', 'owner-avatar', 'owner-link', 'postopts', 'inform'];
 942                 foreach ($clear_fields as $field) {
 943                         if (array_key_exists($field, $fields)) {
 944                                 $fields[$field] = null;
 945                         }
 946                 }
 947
 948                 if (array_key_exists('tag', $fields)) {
 949                         $tags = $fields['tag'];
 950                         $fields['tag'] = null;
 951                 } else {
 952                         $tags = null;
 953                 }
 954
 955                 if (array_key_exists('file', $fields)) {
 956                         $files = $fields['file'];
 957                         $fields['file'] = null;
 958                 } else {
 959                         $files = null;
 960                 }
 961
 962                 if (!empty($fields)) {
 963                         $success = DBA::update('item', $fields, $condition);
 964
 965                         if (!$success) {
 966                                 DBA::close($items);
 967                                 DBA::rollback();
 968                                 return false;
 969                         }
 970                 }
 971
 972                 // When there is no content for the "old" item table, this will count the fetched items
 973                 $rows = DBA::affectedRows();
 974
 975                 $notify_items = [];
 976
 977                 while ($item = DBA::fetch($items)) {
 978                         if (!empty($item['iaid']) || (!empty($content_fields['verb']) && (self::activityToIndex($content_fields['verb']) >= 0))) {
 979                                 self::updateActivity($content_fields, ['uri-id' => $item['uri-id']]);
 980
 981                                 if (empty($item['iaid'])) {
 982                                         $item_activity = DBA::selectFirst('item-activity', ['id'], ['uri-id' => $item['uri-id']]);
 983                                         if (DBA::isResult($item_activity)) {
 984                                                 $item_fields = ['iaid' => $item_activity['id'], 'icid' => null];
 985                                                 foreach (self::MIXED_CONTENT_FIELDLIST as $field) {
 986                                                         if (self::isLegacyMode()) {
 987                                                                 $item_fields[$field] = null;
 988                                                         } else {
 989                                                                 unset($item_fields[$field]);
 990                                                         }
 991                                                 }
 992                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
 993
 994                                                 if (!empty($item['icid']) && !DBA::exists('item', ['icid' => $item['icid']])) {
 995                                                         DBA::delete('item-content', ['id' => $item['icid']]);
 996                                                 }
 997                                         }
 998                                 } elseif (!empty($item['icid'])) {
 999                                         DBA::update('item', ['icid' => null], ['id' => $item['id']]);
1000
1001                                         if (!DBA::exists('item', ['icid' => $item['icid']])) {
1002                                                 DBA::delete('item-content', ['id' => $item['icid']]);
1003                                         }
1004                                 }
1005                         } else {
1006                                 self::updateContent($content_fields, ['uri-id' => $item['uri-id']]);
1007
1008                                 if (empty($item['icid'])) {
1009                                         $item_content = DBA::selectFirst('item-content', [], ['uri-id' => $item['uri-id']]);
1010                                         if (DBA::isResult($item_content)) {
1011                                                 $item_fields = ['icid' => $item_content['id']];
1012                                                 // Clear all fields in the item table that have a content in the item-content table
1013                                                 foreach ($item_content as $field => $content) {
1014                                                         if (in_array($field, self::MIXED_CONTENT_FIELDLIST) && !empty($item_content[$field])) {
1015                                                                 if (self::isLegacyMode()) {
1016                                                                         $item_fields[$field] = null;
1017                                                                 } else {
1018                                                                         unset($item_fields[$field]);
1019                                                                 }
1020                                                         }
1021                                                 }
1022                                                 DBA::update('item', $item_fields, ['id' => $item['id']]);
1023                                         }
1024                                 }
1025                         }
1026
1027                         if (!is_null($tags)) {
1028                                 Term::insertFromTagFieldByItemId($item['id'], $tags);
1029                                 if (!empty($item['tag'])) {
1030                                         DBA::update('item', ['tag' => ''], ['id' => $item['id']]);
1031                                 }
1032                         }
1033
1034                         if (!is_null($files)) {
1035                                 Term::insertFromFileFieldByItemId($item['id'], $files);
1036                                 if (!empty($item['file'])) {
1037                                         DBA::update('item', ['file' => ''], ['id' => $item['id']]);
1038                                 }
1039                         }
1040
1041                         ItemDeliveryData::update($item['id'], $delivery_data);
1042
1043                         self::updateThread($item['id']);
1044
1045                         // We only need to notfiy others when it is an original entry from us.
1046                         // Only call the notifier when the item has some content relevant change.
1047                         if ($item['origin'] && in_array('edited', array_keys($fields))) {
1048                                 $notify_items[] = $item['id'];
1049                         }
1050                 }
1051
1052                 DBA::close($items);
1053                 DBA::commit();
1054
1055                 foreach ($notify_items as $notify_item) {
1056                         Worker::add(PRIORITY_HIGH, "Notifier", Delivery::POST, $notify_item);
1057                 }
1058
1059                 return $rows;
1060         }
1061
1062         /**
1063          * Delete an item and notify others about it - if it was ours
1064          *
1065          * @param array   $condition The condition for finding the item entries
1066          * @param integer $priority  Priority for the notification
1067          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1068          */
1069         public static function markForDeletion($condition, $priority = PRIORITY_HIGH)
1070         {
1071                 $items = self::select(['id'], $condition);
1072                 while ($item = self::fetch($items)) {
1073                         self::markForDeletionById($item['id'], $priority);
1074                 }
1075                 DBA::close($items);
1076         }
1077
1078         /**
1079          * Delete an item for an user and notify others about it - if it was ours
1080          *
1081          * @param array   $condition The condition for finding the item entries
1082          * @param integer $uid       User who wants to delete this item
1083          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1084          */
1085         public static function deleteForUser($condition, $uid)
1086         {
1087                 if ($uid == 0) {
1088                         return;
1089                 }
1090
1091                 $items = self::select(['id', 'uid'], $condition);
1092                 while ($item = self::fetch($items)) {
1093                         // "Deleting" global items just means hiding them
1094                         if ($item['uid'] == 0) {
1095                                 DBA::update('user-item', ['hidden' => true], ['iid' => $item['id'], 'uid' => $uid], true);
1096
1097                                 // Delete notifications
1098                                 DBA::delete('notify', ['iid' => $item['id'], 'uid' => $uid]);
1099                         } elseif ($item['uid'] == $uid) {
1100                                 self::markForDeletionById($item['id'], PRIORITY_HIGH);
1101                         } else {
1102                                 Logger::log('Wrong ownership. Not deleting item ' . $item['id']);
1103                         }
1104                 }
1105                 DBA::close($items);
1106         }
1107
1108         /**
1109          * Mark an item for deletion, delete related data and notify others about it - if it was ours
1110          *
1111          * @param integer $item_id
1112          * @param integer $priority Priority for the notification
1113          *
1114          * @return boolean success
1115          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
1116          */
1117         public static function markForDeletionById($item_id, $priority = PRIORITY_HIGH)
1118         {
1119                 Logger::info('Mark item for deletion by id', ['id' => $item_id, 'callstack' => System::callstack()]);
1120                 // locate item to be deleted
1121                 $fields = ['id', 'uri', 'uid', 'parent', 'parent-uri', 'origin',
1122                         'deleted', 'file', 'resource-id', 'event-id', 'attach',
1123                         'verb', 'object-type', 'object', 'target', 'contact-id',
1124                         'icid', 'iaid', 'psid'];
1125                 $item = self::selectFirst($fields, ['id' => $item_id]);
1126                 if (!DBA::isResult($item)) {
1127                         Logger::info('Item not found.', ['id' => $item_id]);
1128                         return false;
1129                 }
1130
1131                 if ($item['deleted']) {
1132                         Logger::info('Item has already been marked for deletion.', ['id' => $item_id]);
1133                         return false;
1134                 }
1135
1136                 $parent = self::selectFirst(['origin'], ['id' => $item['parent']]);
1137                 if (!DBA::isResult($parent)) {
1138                         $parent = ['origin' => false];
1139                 }
1140
1141                 // clean up categories and tags so they don't end up as orphans
1142
1143                 $matches = false;
1144                 $cnt = preg_match_all('/<(.*?)>/', $item['file'], $matches, PREG_SET_ORDER);
1145
1146                 if ($cnt) {
1147                         foreach ($matches as $mtch) {
1148                                 FileTag::unsaveFile($item['uid'], $item['id'], $mtch[1],true);
1149                         }
1150                 }
1151
1152                 $matches = false;
1153
1154                 $cnt = preg_match_all('/\[(.*?)\]/', $item['file'], $matches, PREG_SET_ORDER);
1155
1156                 if ($cnt) {
1157                         foreach ($matches as $mtch) {
1158                                 FileTag::unsaveFile($item['uid'], $item['id'], $mtch[1],false);
1159                         }
1160                 }
1161
1162                 /*
1163                  * If item is a link to a photo resource, nuke all the associated photos
1164                  * (visitors will not have photo resources)
1165                  * This only applies to photos uploaded from the photos page. Photos inserted into a post do not
1166                  * generate a resource-id and therefore aren't intimately linked to the item.
1167                  */
1168                 /// @TODO: this should first check if photo is used elsewhere
1169                 if (strlen($item['resource-id'])) {
1170                         Photo::delete(['resource-id' => $item['resource-id'], 'uid' => $item['uid']]);
1171                 }
1172
1173                 // If item is a link to an event, delete the event.
1174                 if (intval($item['event-id'])) {
1175                         Event::delete($item['event-id']);
1176                 }
1177
1178                 // If item has attachments, drop them
1179                 /// @TODO: this should first check if attachment is used elsewhere
1180                 foreach (explode(",", $item['attach']) as $attach) {
1181                         preg_match("|attach/(\d+)|", $attach, $matches);
1182                         if (is_array($matches) && count($matches) > 1) {
1183                                 Attach::delete(['id' => $matches[1], 'uid' => $item['uid']]);
1184                         }
1185                 }
1186
1187                 // Delete tags that had been attached to other items
1188                 self::deleteTagsFromItem($item);
1189
1190                 // Delete notifications
1191                 DBA::delete('notify', ['iid' => $item['id'], 'uid' => $item['uid']]);
1192
1193                 // Set the item to "deleted"
1194                 $item_fields = ['deleted' => true, 'edited' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()];
1195                 DBA::update('item', $item_fields, ['id' => $item['id']]);
1196
1197                 Term::insertFromTagFieldByItemId($item['id'], '');
1198                 Term::insertFromFileFieldByItemId($item['id'], '');
1199                 self::deleteThread($item['id'], $item['parent-uri']);
1200
1201                 if (!self::exists(["`uri` = ? AND `uid` != 0 AND NOT `deleted`", $item['uri']])) {
1202                         self::markForDeletion(['uri' => $item['uri'], 'uid' => 0, 'deleted' => false], $priority);
1203                 }
1204
1205                 ItemDeliveryData::delete($item['id']);
1206
1207                 // We don't delete the item-activity here, since we need some of the data for ActivityPub
1208
1209                 if (!empty($item['icid']) && !self::exists(['icid' => $item['icid'], 'deleted' => false])) {
1210                         DBA::delete('item-content', ['id' => $item['icid']], ['cascade' => false]);
1211                 }
1212                 // When the permission set will be used in photo and events as well,
1213                 // this query here needs to be extended.
1214                 // @todo Currently deactivated. We need the permission set in the deletion process.
1215                 // This is a reminder to add the removal somewhere else.
1216                 //if (!empty($item['psid']) && !self::exists(['psid' => $item['psid'], 'deleted' => false])) {
1217                 //      DBA::delete('permissionset', ['id' => $item['psid']], ['cascade' => false]);
1218                 //}
1219
1220                 // If it's the parent of a comment thread, kill all the kids
1221                 if ($item['id'] == $item['parent']) {
1222                         self::markForDeletion(['parent' => $item['parent'], 'deleted' => false], $priority);
1223                 }
1224
1225                 // Is it our comment and/or our thread?
1226                 if ($item['origin'] || $parent['origin']) {
1227                         // When we delete the original post we will delete all existing copies on the server as well
1228                         self::markForDeletion(['uri' => $item['uri'], 'deleted' => false], $priority);
1229
1230                         // send the notification upstream/downstream
1231                         Worker::add(['priority' => $priority, 'dont_fork' => true], "Notifier", Delivery::DELETION, intval($item['id']));
1232                 } elseif ($item['uid'] != 0) {
1233
1234                         // When we delete just our local user copy of an item, we have to set a marker to hide it
1235                         $global_item = self::selectFirst(['id'], ['uri' => $item['uri'], 'uid' => 0, 'deleted' => false]);
1236                         if (DBA::isResult($global_item)) {
1237                                 DBA::update('user-item', ['hidden' => true], ['iid' => $global_item['id'], 'uid' => $item['uid']], true);
1238                         }
1239                 }
1240
1241                 Logger::info('Item has been marked for deletion.', ['id' => $item_id]);
1242
1243                 return true;
1244         }
1245
1246         private static function deleteTagsFromItem($item)
1247         {
1248                 if (($item["verb"] != Activity::TAG) || ($item["object-type"] != Activity\ObjectType::TAGTERM)) {
1249                         return;
1250                 }
1251
1252                 $xo = XML::parseString($item["object"]);
1253                 $xt = XML::parseString($item["target"]);
1254
1255                 if ($xt->type != Activity\ObjectType::NOTE) {
1256                         return;
1257                 }
1258
1259                 $i = self::selectFirst(['id', 'contact-id', 'tag'], ['uri' => $xt->id, 'uid' => $item['uid']]);
1260                 if (!DBA::isResult($i)) {
1261                         return;
1262                 }
1263
1264                 // For tags, the owner cannot remove the tag on the author's copy of the post.
1265                 $owner_remove = ($item["contact-id"] == $i["contact-id"]);
1266                 $author_copy = $item["origin"];
1267
1268                 if (($owner_remove && $author_copy) || !$owner_remove) {
1269                         return;
1270                 }
1271
1272                 $tags = explode(',', $i["tag"]);
1273                 $newtags = [];
1274                 if (count($tags)) {
1275                         foreach ($tags as $tag) {
1276                                 if (trim($tag) !== trim($xo->body)) {
1277                                        $newtags[] = trim($tag);
1278                                 }
1279                         }
1280                 }
1281                 self::update(['tag' => implode(',', $newtags)], ['id' => $i["id"]]);
1282         }
1283
1284         private static function guid($item, $notify)
1285         {
1286                 if (!empty($item['guid'])) {
1287                         return Strings::escapeTags(trim($item['guid']));
1288                 }
1289
1290                 if ($notify) {
1291                         // We have to avoid duplicates. So we create the GUID in form of a hash of the plink or uri.
1292                         // We add the hash of our own host because our host is the original creator of the post.
1293                         $prefix_host = DI::baseUrl()->getHostname();
1294                 } else {
1295                         $prefix_host = '';
1296
1297                         // We are only storing the post so we create a GUID from the original hostname.
1298                         if (!empty($item['author-link'])) {
1299                                 $parsed = parse_url($item['author-link']);
1300                                 if (!empty($parsed['host'])) {
1301                                         $prefix_host = $parsed['host'];
1302                                 }
1303                         }
1304
1305                         if (empty($prefix_host) && !empty($item['plink'])) {
1306                                 $parsed = parse_url($item['plink']);
1307                                 if (!empty($parsed['host'])) {
1308                                         $prefix_host = $parsed['host'];
1309                                 }
1310                         }
1311
1312                         if (empty($prefix_host) && !empty($item['uri'])) {
1313                                 $parsed = parse_url($item['uri']);
1314                                 if (!empty($parsed['host'])) {
1315                                         $prefix_host = $parsed['host'];
1316                                 }
1317                         }
1318
1319                         // Is it in the format data@host.tld? - Used for mail contacts
1320                         if (empty($prefix_host) && !empty($item['author-link']) && strstr($item['author-link'], '@')) {
1321                                 $mailparts = explode('@', $item['author-link']);
1322                                 $prefix_host = array_pop($mailparts);
1323                         }
1324                 }
1325
1326                 if (!empty($item['plink'])) {
1327                         $guid = self::guidFromUri($item['plink'], $prefix_host);
1328                 } elseif (!empty($item['uri'])) {
1329                         $guid = self::guidFromUri($item['uri'], $prefix_host);
1330                 } else {
1331                         $guid = System::createUUID(hash('crc32', $prefix_host));
1332                 }
1333
1334                 return $guid;
1335         }
1336
1337         private static function contactId($item)
1338         {
1339                 if (!empty($item['contact-id']) && DBA::exists('contact', ['self' => true, 'id' => $item['contact-id']])) {
1340                         return $item['contact-id'];
1341                 } elseif (($item['gravity'] == GRAVITY_PARENT) && !empty($item['uid']) && !empty($item['contact-id']) && Contact::isSharing($item['contact-id'], $item['uid'])) {
1342                         return $item['contact-id'];
1343                 } elseif (!empty($item['uid']) && !Contact::isSharing($item['author-id'], $item['uid'])) {
1344                         return $item['author-id'];
1345                 } elseif (!empty($item['contact-id'])) {
1346                         return $item['contact-id'];
1347                 } else {
1348                         $contact_id = Contact::getIdForURL($item['author-link'], $item['uid']);
1349                         if (!empty($contact_id)) {
1350                                 return $contact_id;
1351                         }
1352                 }
1353                 return $item['author-id'];
1354         }
1355
1356         // This function will finally cover most of the preparation functionality in mod/item.php
1357         public static function prepare(&$item)
1358         {
1359                 /*
1360                  * @TODO: Unused code triggering inspection errors
1361                  *
1362                 $data = BBCode::getAttachmentData($item['body']);
1363                 if ((preg_match_all("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism", $item['body'], $match, PREG_SET_ORDER) || isset($data["type"]))
1364                         && ($posttype != Item::PT_PERSONAL_NOTE)) {
1365                         $posttype = Item::PT_PAGE;
1366                         $objecttype = ACTIVITY_OBJ_BOOKMARK;
1367                 }
1368                  */
1369         }
1370
1371         /**
1372          * Write an item array into a spool file to be inserted later.
1373          * This command is called whenever there are issues storing an item.
1374          *
1375          * @param array $item The item fields that are to be inserted
1376          * @throws \Exception
1377          */
1378         private static function spool($orig_item)
1379         {
1380                 // Now we store the data in the spool directory
1381                 // We use "microtime" to keep the arrival order and "mt_rand" to avoid duplicates
1382                 $file = 'item-' . round(microtime(true) * 10000) . '-' . mt_rand() . '.msg';
1383
1384                 $spoolpath = get_spoolpath();
1385                 if ($spoolpath != "") {
1386                         $spool = $spoolpath . '/' . $file;
1387
1388                         file_put_contents($spool, json_encode($orig_item));
1389                         Logger::warning("Item wasn't stored - Item was spooled into file", ['file' => $file]);
1390                 }
1391         }
1392
1393         public static function insert($item, $force_parent = false, $notify = false, $dontcache = false)
1394         {
1395                 $orig_item = $item;
1396
1397                 $priority = PRIORITY_HIGH;
1398
1399                 // If it is a posting where users should get notifications, then define it as wall posting
1400                 if ($notify) {
1401                         $item['wall'] = 1;
1402                         $item['origin'] = 1;
1403                         $item['network'] = Protocol::DFRN;
1404                         $item['protocol'] = Conversation::PARCEL_DFRN;
1405
1406                         if (is_int($notify)) {
1407                                 $priority = $notify;
1408                         }
1409                 } else {
1410                         $item['network'] = trim(($item['network'] ?? '') ?: Protocol::PHANTOM);
1411                 }
1412
1413                 $item['guid'] = self::guid($item, $notify);
1414                 $item['uri'] = substr(Strings::escapeTags(trim(($item['uri'] ?? '') ?: self::newURI($item['uid'], $item['guid']))), 0, 255);
1415
1416                 // Store URI data
1417                 $item['uri-id'] = ItemURI::insert(['uri' => $item['uri'], 'guid' => $item['guid']]);
1418
1419                 // Store conversation data
1420                 $item = Conversation::insert($item);
1421
1422                 /*
1423                  * If a Diaspora signature structure was passed in, pull it out of the
1424                  * item array and set it aside for later storage.
1425                  */
1426
1427                 $dsprsig = null;
1428                 if (isset($item['dsprsig'])) {
1429                         $encoded_signature = $item['dsprsig'];
1430                         $dsprsig = json_decode(base64_decode($item['dsprsig']));
1431                         unset($item['dsprsig']);
1432                 }
1433
1434                 $diaspora_signed_text = '';
1435                 if (isset($item['diaspora_signed_text'])) {
1436                         $diaspora_signed_text = $item['diaspora_signed_text'];
1437                         unset($item['diaspora_signed_text']);
1438                 }
1439
1440                 // Converting the plink
1441                 /// @TODO Check if this is really still needed
1442                 if ($item['network'] == Protocol::OSTATUS) {
1443                         if (isset($item['plink'])) {
1444                                 $item['plink'] = OStatus::convertHref($item['plink']);
1445                         } elseif (isset($item['uri'])) {
1446                                 $item['plink'] = OStatus::convertHref($item['uri']);
1447                         }
1448                 }
1449
1450                 if (!empty($item['thr-parent'])) {
1451                         $item['parent-uri'] = $item['thr-parent'];
1452                 }
1453
1454                 $activity = DI::activity();
1455
1456                 if (isset($item['gravity'])) {
1457                         $item['gravity'] = intval($item['gravity']);
1458                 } elseif ($item['parent-uri'] === $item['uri']) {
1459                         $item['gravity'] = GRAVITY_PARENT;
1460                 } elseif ($activity->match($item['verb'], Activity::POST)) {
1461                         $item['gravity'] = GRAVITY_COMMENT;
1462                 } elseif ($activity->match($item['verb'], Activity::FOLLOW)) {
1463                         $item['gravity'] = GRAVITY_ACTIVITY;
1464                 } else {
1465                         $item['gravity'] = GRAVITY_UNKNOWN;   // Should not happen
1466                         Logger::log('Unknown gravity for verb: ' . $item['verb'], Logger::DEBUG);
1467                 }
1468
1469                 $uid = intval($item['uid']);
1470
1471                 // check for create date and expire time
1472                 $expire_interval = DI::config()->get('system', 'dbclean-expire-days', 0);
1473
1474                 $user = DBA::selectFirst('user', ['expire'], ['uid' => $uid]);
1475                 if (DBA::isResult($user) && ($user['expire'] > 0) && (($user['expire'] < $expire_interval) || ($expire_interval == 0))) {
1476                         $expire_interval = $user['expire'];
1477                 }
1478
1479                 if (($expire_interval > 0) && !empty($item['created'])) {
1480                         $expire_date = time() - ($expire_interval * 86400);
1481                         $created_date = strtotime($item['created']);
1482                         if ($created_date < $expire_date) {
1483                                 Logger::notice('Item created before expiration interval.', [
1484                                         'created' => date('c', $created_date),
1485                                         'expired' => date('c', $expire_date),
1486                                         '$item' => $item
1487                                 ]);
1488                                 return 0;
1489                         }
1490                 }
1491
1492                 /*
1493                  * Do we already have this item?
1494                  * We have to check several networks since Friendica posts could be repeated
1495                  * via OStatus (maybe Diasporsa as well)
1496                  */
1497                 if (empty($item['network']) || in_array($item['network'], Protocol::FEDERATED)) {
1498                         $condition = ["`uri` = ? AND `uid` = ? AND `network` IN (?, ?, ?, ?)",
1499                                 trim($item['uri']), $item['uid'],
1500                                 Protocol::ACTIVITYPUB, Protocol::DIASPORA, Protocol::DFRN, Protocol::OSTATUS];
1501                         $existing = self::selectFirst(['id', 'network'], $condition);
1502                         if (DBA::isResult($existing)) {
1503                                 // We only log the entries with a different user id than 0. Otherwise we would have too many false positives
1504                                 if ($uid != 0) {
1505                                         Logger::notice('Item already existed for user', [
1506                                                 'uri' => $item['uri'],
1507                                                 'uid' => $uid,
1508                                                 'network' => $item['network'],
1509                                                 'existing_id' => $existing["id"],
1510                                                 'existing_network' => $existing["network"]
1511                                         ]);
1512                                 }
1513
1514                                 return $existing["id"];
1515                         }
1516                 }
1517
1518                 $item['wall']          = intval($item['wall'] ?? 0);
1519                 $item['extid']         = trim($item['extid'] ?? '');
1520                 $item['author-name']   = trim($item['author-name'] ?? '');
1521                 $item['author-link']   = trim($item['author-link'] ?? '');
1522                 $item['author-avatar'] = trim($item['author-avatar'] ?? '');
1523                 $item['owner-name']    = trim($item['owner-name'] ?? '');
1524                 $item['owner-link']    = trim($item['owner-link'] ?? '');
1525                 $item['owner-avatar']  = trim($item['owner-avatar'] ?? '');
1526                 $item['received']      = (isset($item['received'])  ? DateTimeFormat::utc($item['received'])  : DateTimeFormat::utcNow());
1527                 $item['created']       = (isset($item['created'])   ? DateTimeFormat::utc($item['created'])   : $item['received']);
1528                 $item['edited']        = (isset($item['edited'])    ? DateTimeFormat::utc($item['edited'])    : $item['created']);
1529                 $item['changed']       = (isset($item['changed'])   ? DateTimeFormat::utc($item['changed'])   : $item['created']);
1530                 $item['commented']     = (isset($item['commented']) ? DateTimeFormat::utc($item['commented']) : $item['created']);
1531                 $item['title']         = substr(trim($item['title'] ?? ''), 0, 255);
1532                 $item['location']      = trim($item['location'] ?? '');
1533                 $item['coord']         = trim($item['coord'] ?? '');
1534                 $item['visible']       = (isset($item['visible']) ? intval($item['visible']) : 1);
1535                 $item['deleted']       = 0;
1536                 $item['parent-uri']    = trim(($item['parent-uri'] ?? '') ?: $item['uri']);
1537                 $item['post-type']     = ($item['post-type'] ?? '') ?: self::PT_ARTICLE;
1538                 $item['verb']          = trim($item['verb'] ?? '');
1539                 $item['object-type']   = trim($item['object-type'] ?? '');
1540                 $item['object']        = trim($item['object'] ?? '');
1541                 $item['target-type']   = trim($item['target-type'] ?? '');
1542                 $item['target']        = trim($item['target'] ?? '');
1543                 $item['plink']         = substr(trim($item['plink'] ?? ''), 0, 255);
1544                 $item['allow_cid']     = trim($item['allow_cid'] ?? '');
1545                 $item['allow_gid']     = trim($item['allow_gid'] ?? '');
1546                 $item['deny_cid']      = trim($item['deny_cid'] ?? '');
1547                 $item['deny_gid']      = trim($item['deny_gid'] ?? '');
1548                 $item['private']       = intval($item['private'] ?? self::PUBLIC);
1549                 $item['body']          = trim($item['body'] ?? '');
1550                 $item['tag']           = trim($item['tag'] ?? '');
1551                 $item['attach']        = trim($item['attach'] ?? '');
1552                 $item['app']           = trim($item['app'] ?? '');
1553                 $item['origin']        = intval($item['origin'] ?? 0);
1554                 $item['postopts']      = trim($item['postopts'] ?? '');
1555                 $item['resource-id']   = trim($item['resource-id'] ?? '');
1556                 $item['event-id']      = intval($item['event-id'] ?? 0);
1557                 $item['inform']        = trim($item['inform'] ?? '');
1558                 $item['file']          = trim($item['file'] ?? '');
1559
1560                 // When there is no content then we don't post it
1561                 if ($item['body'].$item['title'] == '') {
1562                         Logger::notice('No body, no title.');
1563                         return 0;
1564                 }
1565
1566                 self::addLanguageToItemArray($item);
1567
1568                 // Items cannot be stored before they happen ...
1569                 if ($item['created'] > DateTimeFormat::utcNow()) {
1570                         $item['created'] = DateTimeFormat::utcNow();
1571                 }
1572
1573                 // We haven't invented time travel by now.
1574                 if ($item['edited'] > DateTimeFormat::utcNow()) {
1575                         $item['edited'] = DateTimeFormat::utcNow();
1576                 }
1577
1578                 $item['plink'] = ($item['plink'] ?? '') ?: DI::baseUrl() . '/display/' . urlencode($item['guid']);
1579
1580                 $default = ['url' => $item['author-link'], 'name' => $item['author-name'],
1581                         'photo' => $item['author-avatar'], 'network' => $item['network']];
1582
1583                 $item['author-id'] = ($item['author-id'] ?? 0) ?: Contact::getIdForURL($item['author-link'], 0, false, $default);
1584
1585                 if (Contact::isBlocked($item['author-id'])) {
1586                         Logger::notice('Author is blocked node-wide', ['author-link' => $item['author-link'], 'item-uri' => $item['uri']]);
1587                         return 0;
1588                 }
1589
1590                 if (!empty($item['author-link']) && Network::isUrlBlocked($item['author-link'])) {
1591                         Logger::notice('Author server is blocked', ['author-link' => $item['author-link'], 'item-uri' => $item['uri']]);
1592                         return 0;
1593                 }
1594
1595                 if (!empty($uid) && Contact::isBlockedByUser($item['author-id'], $uid)) {
1596                         Logger::notice('Author is blocked by user', ['author-link' => $item['author-link'], 'uid' => $uid, 'item-uri' => $item['uri']]);
1597                         return 0;
1598                 }
1599
1600                 $default = ['url' => $item['owner-link'], 'name' => $item['owner-name'],
1601                         'photo' => $item['owner-avatar'], 'network' => $item['network']];
1602
1603                 $item['owner-id'] = ($item['owner-id'] ?? 0) ?: Contact::getIdForURL($item['owner-link'], 0, false, $default);
1604
1605                 if (Contact::isBlocked($item['owner-id'])) {
1606                         Logger::notice('Owner is blocked node-wide', ['owner-link' => $item['owner-link'], 'item-uri' => $item['uri']]);
1607                         return 0;
1608                 }
1609
1610                 if (!empty($item['owner-link']) && Network::isUrlBlocked($item['owner-link'])) {
1611                         Logger::notice('Owner server is blocked', ['owner-link' => $item['owner-link'], 'item-uri' => $item['uri']]);
1612                         return 0;
1613                 }
1614
1615                 if (!empty($uid) && Contact::isBlockedByUser($item['owner-id'], $uid)) {
1616                         Logger::notice('Owner is blocked by user', ['owner-link' => $item['owner-link'], 'uid' => $uid, 'item-uri' => $item['uri']]);
1617                         return 0;
1618                 }
1619
1620                 // The causer is set during a thread completion, for example because of a reshare. It countains the responsible actor.
1621                 if (!empty($uid) && !empty($item['causer-id']) && Contact::isBlockedByUser($item['causer-id'], $uid)) {
1622                         Logger::notice('Causer is blocked by user', ['causer-link' => $item['causer-link'], 'uid' => $uid, 'item-uri' => $item['uri']]);
1623                         return 0;
1624                 }
1625
1626                 if (!empty($uid) && !empty($item['causer-id']) && ($item['parent-uri'] == $item['uri']) && Contact::isIgnoredByUser($item['causer-id'], $uid)) {
1627                         Logger::notice('Causer is ignored by user', ['causer-link' => $item['causer-link'], 'uid' => $uid, 'item-uri' => $item['uri']]);
1628                         return 0;
1629                 }
1630
1631                 // We don't store the causer, we only have it here for the checks above
1632                 unset($item['causer-id']);
1633                 unset($item['causer-link']);
1634
1635                 // The contact-id should be set before "self::insert" was called - but there seems to be issues sometimes
1636                 $item["contact-id"] = self::contactId($item);
1637
1638                 if ($item['network'] == Protocol::PHANTOM) {
1639                         $item['network'] = Protocol::DFRN;
1640                         Logger::notice('Missing network, setting to {network}.', [
1641                                 'uri' => $item["uri"],
1642                                 'network' => $item['network'],
1643                                 'callstack' => System::callstack()
1644                         ]);
1645                 }
1646
1647                 // Checking if there is already an item with the same guid
1648                 $condition = ['guid' => $item['guid'], 'network' => $item['network'], 'uid' => $item['uid']];
1649                 if (self::exists($condition)) {
1650                         Logger::notice('Found already existing item', [
1651                                 'guid' => $item['guid'],
1652                                 'uid' => $item['uid'],
1653                                 'network' => $item['network']
1654                         ]);
1655                         return 0;
1656                 }
1657
1658                 if ($item['verb'] == Activity::FOLLOW) {
1659                         if (!$item['origin'] && ($item['author-id'] == Contact::getPublicIdByUserId($uid))) {
1660                                 // Our own follow request can be relayed to us. We don't store it to avoid notification chaos.
1661                                 Logger::log("Follow: Don't store not origin follow request from us for " . $item['parent-uri'], Logger::DEBUG);
1662                                 return 0;
1663                         }
1664
1665                         $condition = ['verb' => Activity::FOLLOW, 'uid' => $item['uid'],
1666                                 'parent-uri' => $item['parent-uri'], 'author-id' => $item['author-id']];
1667                         if (self::exists($condition)) {
1668                                 // It happens that we receive multiple follow requests by the same author - we only store one.
1669                                 Logger::log('Follow: Found existing follow request from author ' . $item['author-id'] . ' for ' . $item['parent-uri'], Logger::DEBUG);
1670                                 return 0;
1671                         }
1672                 }
1673
1674                 // Check for hashtags in the body and repair or add hashtag links
1675                 self::setHashtags($item);
1676
1677                 $item['thr-parent'] = $item['parent-uri'];
1678
1679                 $notify_type = Delivery::POST;
1680                 $allow_cid = '';
1681                 $allow_gid = '';
1682                 $deny_cid  = '';
1683                 $deny_gid  = '';
1684
1685                 if ($item['parent-uri'] === $item['uri']) {
1686                         $parent_id = 0;
1687                         $parent_deleted = 0;
1688                         $allow_cid = $item['allow_cid'];
1689                         $allow_gid = $item['allow_gid'];
1690                         $deny_cid  = $item['deny_cid'];
1691                         $deny_gid  = $item['deny_gid'];
1692                 } else {
1693                         // find the parent and snarf the item id and ACLs
1694                         // and anything else we need to inherit
1695
1696                         $fields = ['uri', 'parent-uri', 'id', 'deleted',
1697                                 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid',
1698                                 'wall', 'private', 'forum_mode', 'origin', 'author-id'];
1699                         $condition = ['uri' => $item['parent-uri'], 'uid' => $item['uid']];
1700                         $params = ['order' => ['id' => false]];
1701                         $parent = self::selectFirst($fields, $condition, $params);
1702
1703                         if (DBA::isResult($parent)) {
1704                                 // is the new message multi-level threaded?
1705                                 // even though we don't support it now, preserve the info
1706                                 // and re-attach to the conversation parent.
1707
1708                                 if ($parent['uri'] != $parent['parent-uri']) {
1709                                         $item['parent-uri'] = $parent['parent-uri'];
1710
1711                                         $condition = ['uri' => $item['parent-uri'],
1712                                                 'parent-uri' => $item['parent-uri'],
1713                                                 'uid' => $item['uid']];
1714                                         $params = ['order' => ['id' => false]];
1715                                         $toplevel_parent = self::selectFirst($fields, $condition, $params);
1716
1717                                         if (DBA::isResult($toplevel_parent)) {
1718                                                 $parent = $toplevel_parent;
1719                                         }
1720                                 }
1721
1722                                 $parent_id      = $parent['id'];
1723                                 $parent_deleted = $parent['deleted'];
1724                                 $allow_cid      = $parent['allow_cid'];
1725                                 $allow_gid      = $parent['allow_gid'];
1726                                 $deny_cid       = $parent['deny_cid'];
1727                                 $deny_gid       = $parent['deny_gid'];
1728                                 $item['wall']   = $parent['wall'];
1729
1730                                 /*
1731                                  * If the parent is private, force privacy for the entire conversation
1732                                  * This differs from the above settings as it subtly allows comments from
1733                                  * email correspondents to be private even if the overall thread is not.
1734                                  */
1735                                 if ($parent['private']) {
1736                                         $item['private'] = $parent['private'];
1737                                 }
1738
1739                                 /*
1740                                  * Edge case. We host a public forum that was originally posted to privately.
1741                                  * The original author commented, but as this is a comment, the permissions
1742                                  * weren't fixed up so it will still show the comment as private unless we fix it here.
1743                                  */
1744                                 if ((intval($parent['forum_mode']) == 1) && ($parent['private'] != self::PUBLIC)) {
1745                                         $item['private'] = self::PUBLIC;
1746                                 }
1747
1748                                 // If its a post that originated here then tag the thread as "mention"
1749                                 if ($item['origin'] && $item['uid']) {
1750                                         DBA::update('thread', ['mention' => true], ['iid' => $parent_id]);
1751                                         Logger::log('tagged thread ' . $parent_id . ' as mention for user ' . $item['uid'], Logger::DEBUG);
1752                                 }
1753
1754                                 // Update the contact relations
1755                                 if ($item['author-id'] != $parent['author-id']) {
1756                                         DBA::update('contact-relation', ['last-interaction' => $item['created']], ['cid' => $parent['author-id'], 'relation-cid' => $item['author-id']], true);
1757                                 }
1758                         } else {
1759                                 /*
1760                                  * Allow one to see reply tweets from status.net even when
1761                                  * we don't have or can't see the original post.
1762                                  */
1763                                 if ($force_parent) {
1764                                         Logger::log('$force_parent=true, reply converted to top-level post.');
1765                                         $parent_id = 0;
1766                                         $item['parent-uri'] = $item['uri'];
1767                                         $item['gravity'] = GRAVITY_PARENT;
1768                                 } else {
1769                                         Logger::log('item parent '.$item['parent-uri'].' for '.$item['uid'].' was not found - ignoring item');
1770                                         return 0;
1771                                 }
1772
1773                                 $parent_deleted = 0;
1774                         }
1775                 }
1776
1777                 if (stristr($item['verb'], Activity::POKE)) {
1778                         $notify_type = Delivery::POKE;
1779                 }
1780
1781                 $item['parent-uri-id'] = ItemURI::getIdByURI($item['parent-uri']);
1782                 $item['thr-parent-id'] = ItemURI::getIdByURI($item['thr-parent']);
1783
1784                 $condition = ["`uri` = ? AND `network` IN (?, ?) AND `uid` = ?",
1785                         $item['uri'], $item['network'], Protocol::DFRN, $item['uid']];
1786                 if (self::exists($condition)) {
1787                         Logger::log('duplicated item with the same uri found. '.print_r($item,true));
1788                         return 0;
1789                 }
1790
1791                 // On Friendica and Diaspora the GUID is unique
1792                 if (in_array($item['network'], [Protocol::DFRN, Protocol::DIASPORA])) {
1793                         $condition = ['guid' => $item['guid'], 'uid' => $item['uid']];
1794                         if (self::exists($condition)) {
1795                                 Logger::log('duplicated item with the same guid found. '.print_r($item,true));
1796                                 return 0;
1797                         }
1798                 } elseif ($item['network'] == Protocol::OSTATUS) {
1799                         // Check for an existing post with the same content. There seems to be a problem with OStatus.
1800                         $condition = ["`body` = ? AND `network` = ? AND `created` = ? AND `contact-id` = ? AND `uid` = ?",
1801                                         $item['body'], $item['network'], $item['created'], $item['contact-id'], $item['uid']];
1802                         if (self::exists($condition)) {
1803                                 Logger::log('duplicated item with the same body found. '.print_r($item,true));
1804                                 return 0;
1805                         }
1806                 }
1807
1808                 // Is this item available in the global items (with uid=0)?
1809                 if ($item["uid"] == 0) {
1810                         $item["global"] = true;
1811
1812                         // Set the global flag on all items if this was a global item entry
1813                         DBA::update('item', ['global' => true], ['uri' => $item["uri"]]);
1814                 } else {
1815                         $item["global"] = self::exists(['uid' => 0, 'uri' => $item["uri"]]);
1816                 }
1817
1818                 // ACL settings
1819                 if (strlen($allow_cid) || strlen($allow_gid) || strlen($deny_cid) || strlen($deny_gid)) {
1820                         $private = self::PRIVATE;
1821                 } else {
1822                         $private = $item['private'];
1823                 }
1824
1825                 $item["allow_cid"] = $allow_cid;
1826                 $item["allow_gid"] = $allow_gid;
1827                 $item["deny_cid"] = $deny_cid;
1828                 $item["deny_gid"] = $deny_gid;
1829                 $item["private"] = $private;
1830                 $item["deleted"] = $parent_deleted;
1831
1832                 // Fill the cache field
1833                 self::putInCache($item);
1834
1835                 if ($notify) {
1836                         $item['edit'] = false;
1837                         $item['parent'] = $parent_id;
1838                         Hook::callAll('post_local', $item);
1839                         unset($item['edit']);
1840                         unset($item['parent']);
1841                 } else {
1842                         Hook::callAll('post_remote', $item);
1843                 }
1844
1845                 // This array field is used to trigger some automatic reactions
1846                 // It is mainly used in the "post_local" hook.
1847                 unset($item['api_source']);
1848
1849                 if (!empty($item['cancel'])) {
1850                         Logger::log('post cancelled by addon.');
1851                         return 0;
1852                 }
1853
1854                 /*
1855                  * Check for already added items.
1856                  * There is a timing issue here that sometimes creates double postings.
1857                  * An unique index would help - but the limitations of MySQL (maximum size of index values) prevent this.
1858                  */
1859                 if ($item["uid"] == 0) {
1860                         if (self::exists(['uri' => trim($item['uri']), 'uid' => 0])) {
1861                                 Logger::log('Global item already stored. URI: '.$item['uri'].' on network '.$item['network'], Logger::DEBUG);
1862                                 return 0;
1863                         }
1864                 }
1865
1866                 Logger::log('' . print_r($item,true), Logger::DATA);
1867
1868                 if (array_key_exists('tag', $item)) {
1869                         $tags = $item['tag'];
1870                         unset($item['tag']);
1871                 } else {
1872                         $tags = '';
1873                 }
1874
1875                 if (array_key_exists('file', $item)) {
1876                         $files = $item['file'];
1877                         unset($item['file']);
1878                 } else {
1879                         $files = '';
1880                 }
1881
1882                 // Creates or assigns the permission set
1883                 $item['psid'] = PermissionSet::getIdFromACL(
1884                         $item['uid'],
1885                         $item['allow_cid'],
1886                         $item['allow_gid'],
1887                         $item['deny_cid'],
1888                         $item['deny_gid']
1889                 );
1890
1891                 $item['allow_cid'] = null;
1892                 $item['allow_gid'] = null;
1893                 $item['deny_cid'] = null;
1894                 $item['deny_gid'] = null;
1895
1896                 // We are doing this outside of the transaction to avoid timing problems
1897                 if (!self::insertActivity($item)) {
1898                         self::insertContent($item);
1899                 }
1900
1901                 $delivery_data = ItemDeliveryData::extractFields($item);
1902
1903                 unset($item['postopts']);
1904                 unset($item['inform']);
1905
1906                 // These fields aren't stored anymore in the item table, they are fetched upon request
1907                 unset($item['author-link']);
1908                 unset($item['author-name']);
1909                 unset($item['author-avatar']);
1910                 unset($item['author-network']);
1911
1912                 unset($item['owner-link']);
1913                 unset($item['owner-name']);
1914                 unset($item['owner-avatar']);
1915
1916                 $like_no_comment = DI::config()->get('system', 'like_no_comment');
1917
1918                 DBA::transaction();
1919                 $ret = DBA::insert('item', $item);
1920
1921                 // When the item was successfully stored we fetch the ID of the item.
1922                 if (DBA::isResult($ret)) {
1923                         $current_post = DBA::lastInsertId();
1924                 } else {
1925                         // This can happen - for example - if there are locking timeouts.
1926                         DBA::rollback();
1927
1928                         // Store the data into a spool file so that we can try again later.
1929                         self::spool($orig_item);
1930                         return 0;
1931                 }
1932
1933                 if ($current_post == 0) {
1934                         // This is one of these error messages that never should occur.
1935                         Logger::log("couldn't find created item - we better quit now.");
1936                         DBA::rollback();
1937                         return 0;
1938                 }
1939
1940                 // How much entries have we created?
1941                 // We wouldn't need this query when we could use an unique index - but MySQL has length problems with them.
1942                 $entries = DBA::count('item', ['uri' => $item['uri'], 'uid' => $item['uid'], 'network' => $item['network']]);
1943
1944                 if ($entries > 1) {
1945                         // There are duplicates. We delete our just created entry.
1946                         Logger::info('Delete duplicated item', ['id' => $current_post, 'uri' => $item['uri'], 'uid' => $item['uid'], 'guid' => $item['guid']]);
1947
1948                         // Yes, we could do a rollback here - but we possibly are still having users with MyISAM.
1949                         DBA::delete('item', ['id' => $current_post]);
1950                         DBA::commit();
1951                         return 0;
1952                 } elseif ($entries == 0) {
1953                         // This really should never happen since we quit earlier if there were problems.
1954                         Logger::log("Something is terribly wrong. We haven't found our created entry.");
1955                         DBA::rollback();
1956                         return 0;
1957                 }
1958
1959                 Logger::log('created item '.$current_post);
1960
1961                 if (!$parent_id || ($item['parent-uri'] === $item['uri'])) {
1962                         $parent_id = $current_post;
1963                 }
1964
1965                 // Set parent id
1966                 DBA::update('item', ['parent' => $parent_id], ['id' => $current_post]);
1967
1968                 $item['id'] = $current_post;
1969                 $item['parent'] = $parent_id;
1970
1971                 // update the commented timestamp on the parent
1972                 // Only update "commented" if it is really a comment
1973                 if (($item['gravity'] != GRAVITY_ACTIVITY) || !$like_no_comment) {
1974                         DBA::update('item', ['commented' => DateTimeFormat::utcNow(), 'changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1975                 } else {
1976                         DBA::update('item', ['changed' => DateTimeFormat::utcNow()], ['id' => $parent_id]);
1977                 }
1978
1979                 if ($dsprsig) {
1980                         /*
1981                          * Friendica servers lower than 3.4.3-2 had double encoded the signature ...
1982                          * We can check for this condition when we decode and encode the stuff again.
1983                          */
1984                         if (base64_encode(base64_decode(base64_decode($dsprsig->signature))) == base64_decode($dsprsig->signature)) {
1985                                 $dsprsig->signature = base64_decode($dsprsig->signature);
1986                                 Logger::log("Repaired double encoded signature from handle ".$dsprsig->signer, Logger::DEBUG);
1987                         }
1988
1989                         if (!empty($dsprsig->signed_text) && empty($dsprsig->signature) && empty($dsprsig->signer)) {
1990                                 DBA::insert('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $dsprsig->signed_text], true);
1991                         }
1992                 }
1993
1994                 if (!empty($diaspora_signed_text)) {
1995                         DBA::insert('diaspora-interaction', ['uri-id' => $item['uri-id'], 'interaction' => $diaspora_signed_text], true);
1996                 }
1997
1998                 if ($item['parent-uri'] === $item['uri']) {
1999                         self::addThread($current_post);
2000                 } else {
2001                         self::updateThread($parent_id);
2002                 }
2003
2004                 if (!empty($item['origin']) || !empty($item['wall']) || !empty($delivery_data['postopts']) || !empty($delivery_data['inform'])) {
2005                         ItemDeliveryData::insert($current_post, $delivery_data);
2006                 }
2007
2008                 DBA::commit();
2009
2010                 /*
2011                  * Due to deadlock issues with the "term" table we are doing these steps after the commit.
2012                  * This is not perfect - but a workable solution until we found the reason for the problem.
2013                  */
2014                 if (!empty($tags)) {
2015                         Term::insertFromTagFieldByItemId($current_post, $tags);
2016                 }
2017
2018                 if (!empty($files)) {
2019                         Term::insertFromFileFieldByItemId($current_post, $files);
2020                 }
2021
2022                 // In that function we check if this is a forum post. Additionally we delete the item under certain circumstances
2023                 if (self::tagDeliver($item['uid'], $current_post)) {
2024                         // Get the user information for the logging
2025                         $user = User::getById($uid);
2026
2027                         Logger::notice('Item had been deleted', ['id' => $current_post, 'user' => $uid, 'account-type' => $user['account-type']]);
2028                         return 0;
2029                 }
2030
2031                 if (!$dontcache) {
2032                         $posted_item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $current_post]);
2033                         if (DBA::isResult($posted_item)) {
2034                                 if ($notify) {
2035                                         Hook::callAll('post_local_end', $posted_item);
2036                                 } else {
2037                                         Hook::callAll('post_remote_end', $posted_item);
2038                                 }
2039                         } else {
2040                                 Logger::log('new item not found in DB, id ' . $current_post);
2041                         }
2042                 }
2043
2044                 if ($item['parent-uri'] === $item['uri']) {
2045                         self::addShadow($current_post);
2046                 } else {
2047                         self::addShadowPost($current_post);
2048                 }
2049
2050                 self::updateContact($item);
2051
2052                 UserItem::setNotification($current_post);
2053
2054                 check_user_notification($current_post);
2055
2056                 if ($notify || ($item['visible'] && ((!empty($parent) && $parent['origin']) || $item['origin']))) {
2057                         Worker::add(['priority' => $priority, 'dont_fork' => true], 'Notifier', $notify_type, $current_post);
2058                 }
2059
2060                 return $current_post;
2061         }
2062
2063         /**
2064          * Insert a new item content entry
2065          *
2066          * @param array $item The item fields that are to be inserted
2067          * @return bool
2068          * @throws \Exception
2069          */
2070         private static function insertActivity(&$item)
2071         {
2072                 $activity_index = self::activityToIndex($item['verb']);
2073
2074                 if ($activity_index < 0) {
2075                         return false;
2076                 }
2077
2078                 $fields = ['activity' => $activity_index, 'uri-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
2079
2080                 // We just remove everything that is content
2081                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2082                         unset($item[$field]);
2083                 }
2084
2085                 // To avoid timing problems, we are using locks.
2086                 $locked = DI::lock()->acquire('item_insert_activity');
2087                 if (!$locked) {
2088                         Logger::log("Couldn't acquire lock for URI " . $item['uri'] . " - proceeding anyway.");
2089                 }
2090
2091                 // Do we already have this content?
2092                 $item_activity = DBA::selectFirst('item-activity', ['id'], ['uri-id' => $item['uri-id']]);
2093                 if (DBA::isResult($item_activity)) {
2094                         $item['iaid'] = $item_activity['id'];
2095                         Logger::log('Fetched activity for URI ' . $item['uri'] . ' (' . $item['iaid'] . ')');
2096                 } elseif (DBA::insert('item-activity', $fields)) {
2097                         $item['iaid'] = DBA::lastInsertId();
2098                         Logger::log('Inserted activity for URI ' . $item['uri'] . ' (' . $item['iaid'] . ')');
2099                 } else {
2100                         // This shouldn't happen.
2101                         Logger::log('Could not insert activity for URI ' . $item['uri'] . ' - should not happen');
2102                         DI::lock()->release('item_insert_activity');
2103                         return false;
2104                 }
2105                 if ($locked) {
2106                         DI::lock()->release('item_insert_activity');
2107                 }
2108                 return true;
2109         }
2110
2111         /**
2112          * Insert a new item content entry
2113          *
2114          * @param array $item The item fields that are to be inserted
2115          * @throws \Exception
2116          */
2117         private static function insertContent(&$item)
2118         {
2119                 $fields = ['uri-plink-hash' => (string)$item['uri-id'], 'uri-id' => $item['uri-id']];
2120
2121                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2122                         if (isset($item[$field])) {
2123                                 $fields[$field] = $item[$field];
2124                                 unset($item[$field]);
2125                         }
2126                 }
2127
2128                 // To avoid timing problems, we are using locks.
2129                 $locked = DI::lock()->acquire('item_insert_content');
2130                 if (!$locked) {
2131                         Logger::log("Couldn't acquire lock for URI " . $item['uri'] . " - proceeding anyway.");
2132                 }
2133
2134                 // Do we already have this content?
2135                 $item_content = DBA::selectFirst('item-content', ['id'], ['uri-id' => $item['uri-id']]);
2136                 if (DBA::isResult($item_content)) {
2137                         $item['icid'] = $item_content['id'];
2138                         Logger::log('Fetched content for URI ' . $item['uri'] . ' (' . $item['icid'] . ')');
2139                 } elseif (DBA::insert('item-content', $fields)) {
2140                         $item['icid'] = DBA::lastInsertId();
2141                         Logger::log('Inserted content for URI ' . $item['uri'] . ' (' . $item['icid'] . ')');
2142                 } else {
2143                         // This shouldn't happen.
2144                         Logger::log('Could not insert content for URI ' . $item['uri'] . ' - should not happen');
2145                 }
2146                 if ($locked) {
2147                         DI::lock()->release('item_insert_content');
2148                 }
2149         }
2150
2151         /**
2152          * Update existing item content entries
2153          *
2154          * @param array $item      The item fields that are to be changed
2155          * @param array $condition The condition for finding the item content entries
2156          * @return bool
2157          * @throws \Exception
2158          */
2159         private static function updateActivity($item, $condition)
2160         {
2161                 if (empty($item['verb'])) {
2162                         return false;
2163                 }
2164                 $activity_index = self::activityToIndex($item['verb']);
2165
2166                 if ($activity_index < 0) {
2167                         return false;
2168                 }
2169
2170                 $fields = ['activity' => $activity_index];
2171
2172                 Logger::log('Update activity for ' . json_encode($condition));
2173
2174                 DBA::update('item-activity', $fields, $condition, true);
2175
2176                 return true;
2177         }
2178
2179         /**
2180          * Update existing item content entries
2181          *
2182          * @param array $item      The item fields that are to be changed
2183          * @param array $condition The condition for finding the item content entries
2184          * @throws \Exception
2185          */
2186         private static function updateContent($item, $condition)
2187         {
2188                 // We have to select only the fields from the "item-content" table
2189                 $fields = [];
2190                 foreach (array_merge(self::CONTENT_FIELDLIST, self::MIXED_CONTENT_FIELDLIST) as $field) {
2191                         if (isset($item[$field])) {
2192                                 $fields[$field] = $item[$field];
2193                         }
2194                 }
2195
2196                 if (empty($fields)) {
2197                         // when there are no fields at all, just use the condition
2198                         // This is to ensure that we always store content.
2199                         $fields = $condition;
2200                 }
2201
2202                 Logger::log('Update content for ' . json_encode($condition));
2203
2204                 DBA::update('item-content', $fields, $condition, true);
2205         }
2206
2207         /**
2208          * Distributes public items to the receivers
2209          *
2210          * @param integer $itemid      Item ID that should be added
2211          * @param string  $signed_text Original text (for Diaspora signatures), JSON encoded.
2212          * @throws \Exception
2213          */
2214         public static function distribute($itemid, $signed_text = '')
2215         {
2216                 $condition = ["`id` IN (SELECT `parent` FROM `item` WHERE `id` = ?)", $itemid];
2217                 $parent = self::selectFirst(['owner-id'], $condition);
2218                 if (!DBA::isResult($parent)) {
2219                         return;
2220                 }
2221
2222                 // Only distribute public items from native networks
2223                 $condition = ['id' => $itemid, 'uid' => 0,
2224                         'network' => array_merge(Protocol::FEDERATED ,['']),
2225                         'visible' => true, 'deleted' => false, 'moderated' => false, 'private' => [self::PUBLIC, self::UNLISTED]];
2226                 $item = self::selectFirst(self::ITEM_FIELDLIST, $condition);
2227                 if (!DBA::isResult($item)) {
2228                         return;
2229                 }
2230
2231                 $origin = $item['origin'];
2232
2233                 unset($item['id']);
2234                 unset($item['parent']);
2235                 unset($item['mention']);
2236                 unset($item['wall']);
2237                 unset($item['origin']);
2238                 unset($item['starred']);
2239
2240                 $users = [];
2241
2242                 /// @todo add a field "pcid" in the contact table that referrs to the public contact id.
2243                 $owner = DBA::selectFirst('contact', ['url', 'nurl', 'alias'], ['id' => $parent['owner-id']]);
2244                 if (!DBA::isResult($owner)) {
2245                         return;
2246                 }
2247
2248                 $condition = ['nurl' => $owner['nurl'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2249                 $contacts = DBA::select('contact', ['uid'], $condition);
2250                 while ($contact = DBA::fetch($contacts)) {
2251                         if ($contact['uid'] == 0) {
2252                                 continue;
2253                         }
2254
2255                         $users[$contact['uid']] = $contact['uid'];
2256                 }
2257                 DBA::close($contacts);
2258
2259                 $condition = ['alias' => $owner['url'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2260                 $contacts = DBA::select('contact', ['uid'], $condition);
2261                 while ($contact = DBA::fetch($contacts)) {
2262                         if ($contact['uid'] == 0) {
2263                                 continue;
2264                         }
2265
2266                         $users[$contact['uid']] = $contact['uid'];
2267                 }
2268                 DBA::close($contacts);
2269
2270                 if (!empty($owner['alias'])) {
2271                         $condition = ['url' => $owner['alias'], 'rel' => [Contact::SHARING, Contact::FRIEND]];
2272                         $contacts = DBA::select('contact', ['uid'], $condition);
2273                         while ($contact = DBA::fetch($contacts)) {
2274                                 if ($contact['uid'] == 0) {
2275                                         continue;
2276                                 }
2277
2278                                 $users[$contact['uid']] = $contact['uid'];
2279                         }
2280                         DBA::close($contacts);
2281                 }
2282
2283                 $origin_uid = 0;
2284
2285                 if ($item['uri'] != $item['parent-uri']) {
2286                         $parents = self::select(['uid', 'origin'], ["`uri` = ? AND `uid` != 0", $item['parent-uri']]);
2287                         while ($parent = self::fetch($parents)) {
2288                                 $users[$parent['uid']] = $parent['uid'];
2289                                 if ($parent['origin'] && !$origin) {
2290                                         $origin_uid = $parent['uid'];
2291                                 }
2292                         }
2293                 }
2294
2295                 foreach ($users as $uid) {
2296                         if ($origin_uid == $uid) {
2297                                 $item['diaspora_signed_text'] = $signed_text;
2298                         }
2299                         self::storeForUser($itemid, $item, $uid);
2300                 }
2301         }
2302
2303         /**
2304          * Store public items for the receivers
2305          *
2306          * @param integer $itemid Item ID that should be added
2307          * @param array   $item   The item entry that will be stored
2308          * @param integer $uid    The user that will receive the item entry
2309          * @throws \Exception
2310          */
2311         private static function storeForUser($itemid, $item, $uid)
2312         {
2313                 $item['uid'] = $uid;
2314                 $item['origin'] = 0;
2315                 $item['wall'] = 0;
2316                 if ($item['uri'] == $item['parent-uri']) {
2317                         $item['contact-id'] = Contact::getIdForURL($item['owner-link'], $uid);
2318                 } else {
2319                         $item['contact-id'] = Contact::getIdForURL($item['author-link'], $uid);
2320                 }
2321
2322                 if (empty($item['contact-id'])) {
2323                         $self = DBA::selectFirst('contact', ['id'], ['self' => true, 'uid' => $uid]);
2324                         if (!DBA::isResult($self)) {
2325                                 return;
2326                         }
2327                         $item['contact-id'] = $self['id'];
2328                 }
2329
2330                 /// @todo Handling of "event-id"
2331
2332                 $notify = false;
2333                 if ($item['uri'] == $item['parent-uri']) {
2334                         $contact = DBA::selectFirst('contact', [], ['id' => $item['contact-id'], 'self' => false]);
2335                         if (DBA::isResult($contact)) {
2336                                 $notify = self::isRemoteSelf($contact, $item);
2337                         }
2338                 }
2339
2340                 $distributed = self::insert($item, false, $notify, true);
2341
2342                 if (!$distributed) {
2343                         Logger::log("Distributed public item " . $itemid . " for user " . $uid . " wasn't stored", Logger::DEBUG);
2344                 } else {
2345                         Logger::log("Distributed public item " . $itemid . " for user " . $uid . " with id " . $distributed, Logger::DEBUG);
2346                 }
2347         }
2348
2349         /**
2350          * Add a shadow entry for a given item id that is a thread starter
2351          *
2352          * We store every public item entry additionally with the user id "0".
2353          * This is used for the community page and for the search.
2354          * It is planned that in the future we will store public item entries only once.
2355          *
2356          * @param integer $itemid Item ID that should be added
2357          * @throws \Exception
2358          */
2359         public static function addShadow($itemid)
2360         {
2361                 $fields = ['uid', 'private', 'moderated', 'visible', 'deleted', 'network', 'uri'];
2362                 $condition = ['id' => $itemid, 'parent' => [0, $itemid]];
2363                 $item = self::selectFirst($fields, $condition);
2364
2365                 if (!DBA::isResult($item)) {
2366                         return;
2367                 }
2368
2369                 // is it already a copy?
2370                 if (($itemid == 0) || ($item['uid'] == 0)) {
2371                         return;
2372                 }
2373
2374                 // Is it a visible public post?
2375                 if (!$item["visible"] || $item["deleted"] || $item["moderated"] || ($item["private"] == Item::PRIVATE)) {
2376                         return;
2377                 }
2378
2379                 // is it an entry from a connector? Only add an entry for natively connected networks
2380                 if (!in_array($item["network"], array_merge(Protocol::FEDERATED ,['']))) {
2381                         return;
2382                 }
2383
2384                 if (self::exists(['uri' => $item['uri'], 'uid' => 0])) {
2385                         return;
2386                 }
2387
2388                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2389
2390                 if (DBA::isResult($item)) {
2391                         // Preparing public shadow (removing user specific data)
2392                         $item['uid'] = 0;
2393                         unset($item['id']);
2394                         unset($item['parent']);
2395                         unset($item['wall']);
2396                         unset($item['mention']);
2397                         unset($item['origin']);
2398                         unset($item['starred']);
2399                         unset($item['postopts']);
2400                         unset($item['inform']);
2401                         if ($item['uri'] == $item['parent-uri']) {
2402                                 $item['contact-id'] = $item['owner-id'];
2403                         } else {
2404                                 $item['contact-id'] = $item['author-id'];
2405                         }
2406
2407                         $public_shadow = self::insert($item, false, false, true);
2408
2409                         Logger::log("Stored public shadow for thread ".$itemid." under id ".$public_shadow, Logger::DEBUG);
2410                 }
2411         }
2412
2413         /**
2414          * Add a shadow entry for a given item id that is a comment
2415          *
2416          * This function does the same like the function above - but for comments
2417          *
2418          * @param integer $itemid Item ID that should be added
2419          * @throws \Exception
2420          */
2421         public static function addShadowPost($itemid)
2422         {
2423                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $itemid]);
2424                 if (!DBA::isResult($item)) {
2425                         return;
2426                 }
2427
2428                 // Is it a toplevel post?
2429                 if ($item['id'] == $item['parent']) {
2430                         self::addShadow($itemid);
2431                         return;
2432                 }
2433
2434                 // Is this a shadow entry?
2435                 if ($item['uid'] == 0) {
2436                         return;
2437                 }
2438
2439                 // Is there a shadow parent?
2440                 if (!self::exists(['uri' => $item['parent-uri'], 'uid' => 0])) {
2441                         return;
2442                 }
2443
2444                 // Is there already a shadow entry?
2445                 if (self::exists(['uri' => $item['uri'], 'uid' => 0])) {
2446                         return;
2447                 }
2448
2449                 // Save "origin" and "parent" state
2450                 $origin = $item['origin'];
2451                 $parent = $item['parent'];
2452
2453                 // Preparing public shadow (removing user specific data)
2454                 $item['uid'] = 0;
2455                 unset($item['id']);
2456                 unset($item['parent']);
2457                 unset($item['wall']);
2458                 unset($item['mention']);
2459                 unset($item['origin']);
2460                 unset($item['starred']);
2461                 unset($item['postopts']);
2462                 unset($item['inform']);
2463                 $item['contact-id'] = Contact::getIdForURL($item['author-link']);
2464
2465                 $public_shadow = self::insert($item, false, false, true);
2466
2467                 Logger::log("Stored public shadow for comment ".$item['uri']." under id ".$public_shadow, Logger::DEBUG);
2468
2469                 // If this was a comment to a Diaspora post we don't get our comment back.
2470                 // This means that we have to distribute the comment by ourselves.
2471                 if ($origin && self::exists(['id' => $parent, 'network' => Protocol::DIASPORA])) {
2472                         self::distribute($public_shadow);
2473                 }
2474         }
2475
2476         /**
2477          * Adds a language specification in a "language" element of given $arr.
2478          * Expects "body" element to exist in $arr.
2479          *
2480          * @param $item
2481          * @throws \Text_LanguageDetect_Exception
2482          */
2483         private static function addLanguageToItemArray(&$item)
2484         {
2485                 $naked_body = BBCode::toPlaintext($item['body'], false);
2486
2487                 $ld = new Text_LanguageDetect();
2488                 $ld->setNameMode(2);
2489                 $languages = $ld->detect($naked_body, 3);
2490
2491                 if (is_array($languages)) {
2492                         $item['language'] = json_encode($languages);
2493                 }
2494         }
2495
2496         /**
2497          * Creates an unique guid out of a given uri
2498          *
2499          * @param string $uri uri of an item entry
2500          * @param string $host hostname for the GUID prefix
2501          * @return string unique guid
2502          */
2503         public static function guidFromUri($uri, $host)
2504         {
2505                 // Our regular guid routine is using this kind of prefix as well
2506                 // We have to avoid that different routines could accidentally create the same value
2507                 $parsed = parse_url($uri);
2508
2509                 // We use a hash of the hostname as prefix for the guid
2510                 $guid_prefix = hash("crc32", $host);
2511
2512                 // Remove the scheme to make sure that "https" and "http" doesn't make a difference
2513                 unset($parsed["scheme"]);
2514
2515                 // Glue it together to be able to make a hash from it
2516                 $host_id = implode("/", $parsed);
2517
2518                 // We could use any hash algorithm since it isn't a security issue
2519                 $host_hash = hash("ripemd128", $host_id);
2520
2521                 return $guid_prefix.$host_hash;
2522         }
2523
2524         /**
2525          * generate an unique URI
2526          *
2527          * @param integer $uid  User id
2528          * @param string  $guid An existing GUID (Otherwise it will be generated)
2529          *
2530          * @return string
2531          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2532          */
2533         public static function newURI($uid, $guid = "")
2534         {
2535                 if ($guid == "") {
2536                         $guid = System::createUUID();
2537                 }
2538
2539                 return DI::baseUrl()->get() . '/objects/' . $guid;
2540         }
2541
2542         /**
2543          * Set "success_update" and "last-item" to the date of the last time we heard from this contact
2544          *
2545          * This can be used to filter for inactive contacts.
2546          * Only do this for public postings to avoid privacy problems, since poco data is public.
2547          * Don't set this value if it isn't from the owner (could be an author that we don't know)
2548          *
2549          * @param array $arr Contains the just posted item record
2550          * @throws \Exception
2551          */
2552         private static function updateContact($arr)
2553         {
2554                 // Unarchive the author
2555                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["author-id"]]);
2556                 if (DBA::isResult($contact)) {
2557                         Contact::unmarkForArchival($contact);
2558                 }
2559
2560                 // Unarchive the contact if it's not our own contact
2561                 $contact = DBA::selectFirst('contact', [], ['id' => $arr["contact-id"], 'self' => false]);
2562                 if (DBA::isResult($contact)) {
2563                         Contact::unmarkForArchival($contact);
2564                 }
2565
2566                 /// @todo On private posts we could obfuscate the date
2567                 $update = ($arr['private'] != self::PRIVATE);
2568
2569                 // Is it a forum? Then we don't care about the rules from above
2570                 if (!$update && in_array($arr["network"], [Protocol::ACTIVITYPUB, Protocol::DFRN]) && ($arr["parent-uri"] === $arr["uri"])) {
2571                         if (DBA::exists('contact', ['id' => $arr['contact-id'], 'forum' => true])) {
2572                                 $update = true;
2573                         }
2574                 }
2575
2576                 if ($update) {
2577                         // The "self" contact id is used (for example in the connectors) when the contact is unknown
2578                         // So we have to ensure to only update the last item when it had been our own post,
2579                         // or it had been done by a "regular" contact.
2580                         if (!empty($arr['wall'])) {
2581                                 $condition = ['id' => $arr['contact-id']];
2582                         } else {
2583                                 $condition = ['id' => $arr['contact-id'], 'self' => false];
2584                         }
2585                         DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']], $condition);
2586                 }
2587                 // Now do the same for the system wide contacts with uid=0
2588                 if ($arr['private'] != self::PRIVATE) {
2589                         DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2590                                 ['id' => $arr['owner-id']]);
2591
2592                         if ($arr['owner-id'] != $arr['author-id']) {
2593                                 DBA::update('contact', ['success_update' => $arr['received'], 'last-item' => $arr['received']],
2594                                         ['id' => $arr['author-id']]);
2595                         }
2596                 }
2597         }
2598
2599         public static function setHashtags(&$item)
2600         {
2601                 $tags = BBCode::getTags($item["body"]);
2602
2603                 // No hashtags?
2604                 if (!count($tags)) {
2605                         return false;
2606                 }
2607
2608                 // What happens in [code], stays in [code]!
2609                 // escape the # and the [
2610                 // hint: we will also get in trouble with #tags, when we want markdown in posts -> ### Headline 3
2611                 $item["body"] = preg_replace_callback("/\[code(.*?)\](.*?)\[\/code\]/ism",
2612                         function ($match) {
2613                                 // we truly ESCape all # and [ to prevent gettin weird tags in [code] blocks
2614                                 $find = ['#', '['];
2615                                 $replace = [chr(27).'sharp', chr(27).'leftsquarebracket'];
2616                                 return ("[code" . $match[1] . "]" . str_replace($find, $replace, $match[2]) . "[/code]");
2617                         }, $item["body"]);
2618
2619                 // This sorting is important when there are hashtags that are part of other hashtags
2620                 // Otherwise there could be problems with hashtags like #test and #test2
2621                 // Because of this we are sorting from the longest to the shortest tag.
2622                 usort($tags, function($a, $b) {
2623                         return strlen($b) <=> strlen($a);
2624                 });
2625
2626                 $URLSearchString = "^\[\]";
2627
2628                 // All hashtags should point to the home server if "local_tags" is activated
2629                 if (DI::config()->get('system', 'local_tags')) {
2630                         $item["body"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2631                                         "#[url=".DI::baseUrl()."/search?tag=$2]$2[/url]", $item["body"]);
2632
2633                         $item["tag"] = preg_replace("/#\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2634                                         "#[url=".DI::baseUrl()."/search?tag=$2]$2[/url]", $item["tag"]);
2635                 }
2636
2637                 // mask hashtags inside of url, bookmarks and attachments to avoid urls in urls
2638                 $item["body"] = preg_replace_callback("/\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2639                         function ($match) {
2640                                 return ("[url=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/url]");
2641                         }, $item["body"]);
2642
2643                 $item["body"] = preg_replace_callback("/\[bookmark\=([$URLSearchString]*)\](.*?)\[\/bookmark\]/ism",
2644                         function ($match) {
2645                                 return ("[bookmark=" . str_replace("#", "&num;", $match[1]) . "]" . str_replace("#", "&num;", $match[2]) . "[/bookmark]");
2646                         }, $item["body"]);
2647
2648                 $item["body"] = preg_replace_callback("/\[attachment (.*)\](.*?)\[\/attachment\]/ism",
2649                         function ($match) {
2650                                 return ("[attachment " . str_replace("#", "&num;", $match[1]) . "]" . $match[2] . "[/attachment]");
2651                         }, $item["body"]);
2652
2653                 // Repair recursive urls
2654                 $item["body"] = preg_replace("/&num;\[url\=([$URLSearchString]*)\](.*?)\[\/url\]/ism",
2655                                 "&num;$2", $item["body"]);
2656
2657                 foreach ($tags as $tag) {
2658                         if ((strpos($tag, '#') !== 0) || strpos($tag, '[url=') || strlen($tag) < 2 || $tag[1] == '#') {
2659                                 continue;
2660                         }
2661
2662                         $basetag = str_replace('_',' ',substr($tag,1));
2663                         $newtag = '#[url=' . DI::baseUrl() . '/search?tag=' . $basetag . ']' . $basetag . '[/url]';
2664
2665                         $item["body"] = str_replace($tag, $newtag, $item["body"]);
2666
2667                         if (!stristr($item["tag"], "/search?tag=" . $basetag . "]" . $basetag . "[/url]")) {
2668                                 if (strlen($item["tag"])) {
2669                                         $item["tag"] = ',' . $item["tag"];
2670                                 }
2671                                 $item["tag"] = $newtag . $item["tag"];
2672                         }
2673                 }
2674
2675                 // Convert back the masked hashtags
2676                 $item["body"] = str_replace("&num;", "#", $item["body"]);
2677
2678                 // Remember! What happens in [code], stays in [code]
2679                 // roleback the # and [
2680                 $item["body"] = preg_replace_callback("/\[code(.*?)\](.*?)\[\/code\]/ism",
2681                         function ($match) {
2682                                 // we truly unESCape all sharp and leftsquarebracket
2683                                 $find = [chr(27).'sharp', chr(27).'leftsquarebracket'];
2684                                 $replace = ['#', '['];
2685                                 return ("[code" . $match[1] . "]" . str_replace($find, $replace, $match[2]) . "[/code]");
2686                         }, $item["body"]);
2687         }
2688
2689         /**
2690          * look for mention tags and setup a second delivery chain for forum/community posts if appropriate
2691          *
2692          * @param int $uid
2693          * @param int $item_id
2694          * @return boolean true if item was deleted, else false
2695          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2696          * @throws \ImagickException
2697          */
2698         private static function tagDeliver($uid, $item_id)
2699         {
2700                 $mention = false;
2701
2702                 $user = DBA::selectFirst('user', [], ['uid' => $uid]);
2703                 if (!DBA::isResult($user)) {
2704                         return false;
2705                 }
2706
2707                 $community_page = (($user['page-flags'] == User::PAGE_FLAGS_COMMUNITY) ? true : false);
2708                 $prvgroup = (($user['page-flags'] == User::PAGE_FLAGS_PRVGROUP) ? true : false);
2709
2710                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['id' => $item_id]);
2711                 if (!DBA::isResult($item)) {
2712                         return false;
2713                 }
2714
2715                 $link = Strings::normaliseLink(DI::baseUrl() . '/profile/' . $user['nickname']);
2716
2717                 /*
2718                  * Diaspora uses their own hardwired link URL in @-tags
2719                  * instead of the one we supply with webfinger
2720                  */
2721                 $dlink = Strings::normaliseLink(DI::baseUrl() . '/u/' . $user['nickname']);
2722
2723                 $cnt = preg_match_all('/[\@\!]\[url\=(.*?)\](.*?)\[\/url\]/ism', $item['body'], $matches, PREG_SET_ORDER);
2724                 if ($cnt) {
2725                         foreach ($matches as $mtch) {
2726                                 if (Strings::compareLink($link, $mtch[1]) || Strings::compareLink($dlink, $mtch[1])) {
2727                                         $mention = true;
2728                                         Logger::log('mention found: ' . $mtch[2]);
2729                                 }
2730                         }
2731                 }
2732
2733                 if (!$mention) {
2734                         if (($community_page || $prvgroup) &&
2735                                   !$item['wall'] && !$item['origin'] && ($item['id'] == $item['parent'])) {
2736                                 Logger::info('Delete private group/communiy top-level item without mention', ['id' => $item_id, 'guid'=> $item['guid']]);
2737                                 DBA::delete('item', ['id' => $item_id]);
2738                                 return true;
2739                         }
2740                         return false;
2741                 }
2742
2743                 $arr = ['item' => $item, 'user' => $user];
2744
2745                 Hook::callAll('tagged', $arr);
2746
2747                 if (!$community_page && !$prvgroup) {
2748                         return false;
2749                 }
2750
2751                 /*
2752                  * tgroup delivery - setup a second delivery chain
2753                  * prevent delivery looping - only proceed
2754                  * if the message originated elsewhere and is a top-level post
2755                  */
2756                 if ($item['wall'] || $item['origin'] || ($item['id'] != $item['parent'])) {
2757                         return false;
2758                 }
2759
2760                 // now change this copy of the post to a forum head message and deliver to all the tgroup members
2761                 $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'], ['uid' => $uid, 'self' => true]);
2762                 if (!DBA::isResult($self)) {
2763                         return false;
2764                 }
2765
2766                 $owner_id = Contact::getIdForURL($self['url']);
2767
2768                 // also reset all the privacy bits to the forum default permissions
2769
2770                 $private = ($user['allow_cid'] || $user['allow_gid'] || $user['deny_cid'] || $user['deny_gid']) ? self::PRIVATE : self::PUBLIC;
2771
2772                 $psid = PermissionSet::getIdFromACL(
2773                         $user['uid'],
2774                         $user['allow_cid'],
2775                         $user['allow_gid'],
2776                         $user['deny_cid'],
2777                         $user['deny_gid']
2778                 );
2779
2780                 $forum_mode = ($prvgroup ? 2 : 1);
2781
2782                 $fields = ['wall' => true, 'origin' => true, 'forum_mode' => $forum_mode, 'contact-id' => $self['id'],
2783                         'owner-id' => $owner_id, 'private' => $private, 'psid' => $psid];
2784                 self::update($fields, ['id' => $item_id]);
2785
2786                 self::updateThread($item_id);
2787
2788                 Worker::add(['priority' => PRIORITY_HIGH, 'dont_fork' => true], 'Notifier', Delivery::POST, $item_id);
2789
2790                 return false;
2791         }
2792
2793         public static function isRemoteSelf($contact, &$datarray)
2794         {
2795                 if (!$contact['remote_self']) {
2796                         return false;
2797                 }
2798
2799                 // Prevent the forwarding of posts that are forwarded
2800                 if (!empty($datarray["extid"]) && ($datarray["extid"] == Protocol::DFRN)) {
2801                         Logger::log('Already forwarded', Logger::DEBUG);
2802                         return false;
2803                 }
2804
2805                 // Prevent to forward already forwarded posts
2806                 if ($datarray["app"] == DI::baseUrl()->getHostname()) {
2807                         Logger::log('Already forwarded (second test)', Logger::DEBUG);
2808                         return false;
2809                 }
2810
2811                 // Only forward posts
2812                 if ($datarray["verb"] != Activity::POST) {
2813                         Logger::log('No post', Logger::DEBUG);
2814                         return false;
2815                 }
2816
2817                 if (($contact['network'] != Protocol::FEED) && ($datarray['private'] == self::PRIVATE)) {
2818                         Logger::log('Not public', Logger::DEBUG);
2819                         return false;
2820                 }
2821
2822                 $datarray2 = $datarray;
2823                 Logger::log('remote-self start - Contact '.$contact['url'].' - '.$contact['remote_self'].' Item '.print_r($datarray, true), Logger::DEBUG);
2824                 if ($contact['remote_self'] == 2) {
2825                         $self = DBA::selectFirst('contact', ['id', 'name', 'url', 'thumb'],
2826                                         ['uid' => $contact['uid'], 'self' => true]);
2827                         if (DBA::isResult($self)) {
2828                                 $datarray['contact-id'] = $self["id"];
2829
2830                                 $datarray['owner-name'] = $self["name"];
2831                                 $datarray['owner-link'] = $self["url"];
2832                                 $datarray['owner-avatar'] = $self["thumb"];
2833
2834                                 $datarray['author-name']   = $datarray['owner-name'];
2835                                 $datarray['author-link']   = $datarray['owner-link'];
2836                                 $datarray['author-avatar'] = $datarray['owner-avatar'];
2837
2838                                 unset($datarray['edited']);
2839
2840                                 unset($datarray['network']);
2841                                 unset($datarray['owner-id']);
2842                                 unset($datarray['author-id']);
2843                         }
2844
2845                         if ($contact['network'] != Protocol::FEED) {
2846                                 $datarray["guid"] = System::createUUID();
2847                                 unset($datarray["plink"]);
2848                                 $datarray["uri"] = self::newURI($contact['uid'], $datarray["guid"]);
2849                                 $datarray["parent-uri"] = $datarray["uri"];
2850                                 $datarray["thr-parent"] = $datarray["uri"];
2851                                 $datarray["extid"] = Protocol::DFRN;
2852                                 $urlpart = parse_url($datarray2['author-link']);
2853                                 $datarray["app"] = $urlpart["host"];
2854                         } else {
2855                                 $datarray['private'] = self::PUBLIC;
2856                         }
2857                 }
2858
2859                 if ($contact['network'] != Protocol::FEED) {
2860                         // Store the original post
2861                         $result = self::insert($datarray2, false, false);
2862                         Logger::log('remote-self post original item - Contact '.$contact['url'].' return '.$result.' Item '.print_r($datarray2, true), Logger::DEBUG);
2863                 } else {
2864                         $datarray["app"] = "Feed";
2865                         $result = true;
2866                 }
2867
2868                 // Trigger automatic reactions for addons
2869                 $datarray['api_source'] = true;
2870
2871                 // We have to tell the hooks who we are - this really should be improved
2872                 $_SESSION["authenticated"] = true;
2873                 $_SESSION["uid"] = $contact['uid'];
2874
2875                 return $result;
2876         }
2877
2878         /**
2879          *
2880          * @param string $s
2881          * @param int    $uid
2882          * @param array  $item
2883          * @param int    $cid
2884          * @return string
2885          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
2886          * @throws \ImagickException
2887          */
2888         public static function fixPrivatePhotos($s, $uid, $item = null, $cid = 0)
2889         {
2890                 if (DI::config()->get('system', 'disable_embedded')) {
2891                         return $s;
2892                 }
2893
2894                 Logger::log('check for photos', Logger::DEBUG);
2895                 $site = substr(DI::baseUrl(), strpos(DI::baseUrl(), '://'));
2896
2897                 $orig_body = $s;
2898                 $new_body = '';
2899
2900                 $img_start = strpos($orig_body, '[img');
2901                 $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2902                 $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2903
2904                 while (($img_st_close !== false) && ($img_len !== false)) {
2905                         $img_st_close++; // make it point to AFTER the closing bracket
2906                         $image = substr($orig_body, $img_start + $img_st_close, $img_len);
2907
2908                         Logger::log('found photo ' . $image, Logger::DEBUG);
2909
2910                         if (stristr($image, $site . '/photo/')) {
2911                                 // Only embed locally hosted photos
2912                                 $replace = false;
2913                                 $i = basename($image);
2914                                 $i = str_replace(['.jpg', '.png', '.gif'], ['', '', ''], $i);
2915                                 $x = strpos($i, '-');
2916
2917                                 if ($x) {
2918                                         $res = substr($i, $x + 1);
2919                                         $i = substr($i, 0, $x);
2920                                         $photo = Photo::getPhotoForUser($uid, $i, $res);
2921                                         if (DBA::isResult($photo)) {
2922                                                 /*
2923                                                  * Check to see if we should replace this photo link with an embedded image
2924                                                  * 1. No need to do so if the photo is public
2925                                                  * 2. If there's a contact-id provided, see if they're in the access list
2926                                                  *    for the photo. If so, embed it.
2927                                                  * 3. Otherwise, if we have an item, see if the item permissions match the photo
2928                                                  *    permissions, regardless of order but first check to see if they're an exact
2929                                                  *    match to save some processing overhead.
2930                                                  */
2931                                                 if (self::hasPermissions($photo)) {
2932                                                         if ($cid) {
2933                                                                 $recips = self::enumeratePermissions($photo);
2934                                                                 if (in_array($cid, $recips)) {
2935                                                                         $replace = true;
2936                                                                 }
2937                                                         } elseif ($item) {
2938                                                                 if (self::samePermissions($uid, $item, $photo)) {
2939                                                                         $replace = true;
2940                                                                 }
2941                                                         }
2942                                                 }
2943                                                 if ($replace) {
2944                                                         $photo_img = Photo::getImageForPhoto($photo);
2945                                                         // If a custom width and height were specified, apply before embedding
2946                                                         if (preg_match("/\[img\=([0-9]*)x([0-9]*)\]/is", substr($orig_body, $img_start, $img_st_close), $match)) {
2947                                                                 Logger::log('scaling photo', Logger::DEBUG);
2948
2949                                                                 $width = intval($match[1]);
2950                                                                 $height = intval($match[2]);
2951
2952                                                                 $photo_img->scaleDown(max($width, $height));
2953                                                         }
2954
2955                                                         $data = $photo_img->asString();
2956                                                         $type = $photo_img->getType();
2957
2958                                                         Logger::log('replacing photo', Logger::DEBUG);
2959                                                         $image = 'data:' . $type . ';base64,' . base64_encode($data);
2960                                                         Logger::log('replaced: ' . $image, Logger::DATA);
2961                                                 }
2962                                         }
2963                                 }
2964                         }
2965
2966                         $new_body = $new_body . substr($orig_body, 0, $img_start + $img_st_close) . $image . '[/img]';
2967                         $orig_body = substr($orig_body, $img_start + $img_st_close + $img_len + strlen('[/img]'));
2968                         if ($orig_body === false) {
2969                                 $orig_body = '';
2970                         }
2971
2972                         $img_start = strpos($orig_body, '[img');
2973                         $img_st_close = ($img_start !== false ? strpos(substr($orig_body, $img_start), ']') : false);
2974                         $img_len = ($img_start !== false ? strpos(substr($orig_body, $img_start + $img_st_close + 1), '[/img]') : false);
2975                 }
2976
2977                 $new_body = $new_body . $orig_body;
2978
2979                 return $new_body;
2980         }
2981
2982         private static function hasPermissions($obj)
2983         {
2984                 return !empty($obj['allow_cid']) || !empty($obj['allow_gid']) ||
2985                         !empty($obj['deny_cid']) || !empty($obj['deny_gid']);
2986         }
2987
2988         private static function samePermissions($uid, $obj1, $obj2)
2989         {
2990                 // first part is easy. Check that these are exactly the same.
2991                 if (($obj1['allow_cid'] == $obj2['allow_cid'])
2992                         && ($obj1['allow_gid'] == $obj2['allow_gid'])
2993                         && ($obj1['deny_cid'] == $obj2['deny_cid'])
2994                         && ($obj1['deny_gid'] == $obj2['deny_gid'])) {
2995                         return true;
2996                 }
2997
2998                 // This is harder. Parse all the permissions and compare the resulting set.
2999                 $recipients1 = self::enumeratePermissions($obj1);
3000                 $recipients2 = self::enumeratePermissions($obj2);
3001                 sort($recipients1);
3002                 sort($recipients2);
3003
3004                 /// @TODO Comparison of arrays, maybe use array_diff_assoc() here?
3005                 return ($recipients1 == $recipients2);
3006         }
3007
3008         /**
3009          * Returns an array of contact-ids that are allowed to see this object
3010          *
3011          * @param array $obj        Item array with at least uid, allow_cid, allow_gid, deny_cid and deny_gid
3012          * @param bool  $check_dead Prunes unavailable contacts from the result
3013          * @return array
3014          * @throws \Exception
3015          */
3016         public static function enumeratePermissions(array $obj, bool $check_dead = false)
3017         {
3018                 $aclFormater = DI::aclFormatter();
3019
3020                 $allow_people = $aclFormater->expand($obj['allow_cid']);
3021                 $allow_groups = Group::expand($obj['uid'], $aclFormater->expand($obj['allow_gid']), $check_dead);
3022                 $deny_people  = $aclFormater->expand($obj['deny_cid']);
3023                 $deny_groups  = Group::expand($obj['uid'], $aclFormater->expand($obj['deny_gid']), $check_dead);
3024                 $recipients   = array_unique(array_merge($allow_people, $allow_groups));
3025                 $deny         = array_unique(array_merge($deny_people, $deny_groups));
3026                 $recipients   = array_diff($recipients, $deny);
3027                 return $recipients;
3028         }
3029
3030         public static function getFeedTags($item)
3031         {
3032                 $ret = [];
3033                 $matches = false;
3034                 $cnt = preg_match_all('|\#\[url\=(.*?)\](.*?)\[\/url\]|', $item['tag'], $matches);
3035                 if ($cnt) {
3036                         for ($x = 0; $x < $cnt; $x ++) {
3037                                 if ($matches[1][$x]) {
3038                                         $ret[$matches[2][$x]] = ['#', $matches[1][$x], $matches[2][$x]];
3039                                 }
3040                         }
3041                 }
3042                 $matches = false;
3043                 $cnt = preg_match_all('|\@\[url\=(.*?)\](.*?)\[\/url\]|', $item['tag'], $matches);
3044                 if ($cnt) {
3045                         for ($x = 0; $x < $cnt; $x ++) {
3046                                 if ($matches[1][$x]) {
3047                                         $ret[] = ['@', $matches[1][$x], $matches[2][$x]];
3048                                 }
3049                         }
3050                 }
3051                 return $ret;
3052         }
3053
3054         public static function expire($uid, $days, $network = "", $force = false)
3055         {
3056                 if (!$uid || ($days < 1)) {
3057                         return;
3058                 }
3059
3060                 $condition = ["`uid` = ? AND NOT `deleted` AND `id` = `parent` AND `gravity` = ?",
3061                         $uid, GRAVITY_PARENT];
3062
3063                 /*
3064                  * $expire_network_only = save your own wall posts
3065                  * and just expire conversations started by others
3066                  */
3067                 $expire_network_only = DI::pConfig()->get($uid, 'expire', 'network_only', false);
3068
3069                 if ($expire_network_only) {
3070                         $condition[0] .= " AND NOT `wall`";
3071                 }
3072
3073                 if ($network != "") {
3074                         $condition[0] .= " AND `network` = ?";
3075                         $condition[] = $network;
3076                 }
3077
3078                 $condition[0] .= " AND `received` < UTC_TIMESTAMP() - INTERVAL ? DAY";
3079                 $condition[] = $days;
3080
3081                 $items = self::select(['file', 'resource-id', 'starred', 'type', 'id', 'post-type'], $condition);
3082
3083                 if (!DBA::isResult($items)) {
3084                         return;
3085                 }
3086
3087                 $expire_items = DI::pConfig()->get($uid, 'expire', 'items', true);
3088
3089                 // Forcing expiring of items - but not notes and marked items
3090                 if ($force) {
3091                         $expire_items = true;
3092                 }
3093
3094                 $expire_notes = DI::pConfig()->get($uid, 'expire', 'notes', true);
3095                 $expire_starred = DI::pConfig()->get($uid, 'expire', 'starred', true);
3096                 $expire_photos = DI::pConfig()->get($uid, 'expire', 'photos', false);
3097
3098                 $expired = 0;
3099
3100                 while ($item = Item::fetch($items)) {
3101                         // don't expire filed items
3102
3103                         if (strpos($item['file'], '[') !== false) {
3104                                 continue;
3105                         }
3106
3107                         // Only expire posts, not photos and photo comments
3108
3109                         if (!$expire_photos && strlen($item['resource-id'])) {
3110                                 continue;
3111                         } elseif (!$expire_starred && intval($item['starred'])) {
3112                                 continue;
3113                         } elseif (!$expire_notes && (($item['type'] == 'note') || ($item['post-type'] == Item::PT_PERSONAL_NOTE))) {
3114                                 continue;
3115                         } elseif (!$expire_items && ($item['type'] != 'note') && ($item['post-type'] != Item::PT_PERSONAL_NOTE)) {
3116                                 continue;
3117                         }
3118
3119                         self::markForDeletionById($item['id'], PRIORITY_LOW);
3120
3121                         ++$expired;
3122                 }
3123                 DBA::close($items);
3124                 Logger::log('User ' . $uid . ": expired $expired items; expire items: $expire_items, expire notes: $expire_notes, expire starred: $expire_starred, expire photos: $expire_photos");
3125         }
3126
3127         public static function firstPostDate($uid, $wall = false)
3128         {
3129                 $condition = ['uid' => $uid, 'wall' => $wall, 'deleted' => false, 'visible' => true, 'moderated' => false];
3130                 $params = ['order' => ['received' => false]];
3131                 $thread = DBA::selectFirst('thread', ['received'], $condition, $params);
3132                 if (DBA::isResult($thread)) {
3133                         return substr(DateTimeFormat::local($thread['received']), 0, 10);
3134                 }
3135                 return false;
3136         }
3137
3138         /**
3139          * add/remove activity to an item
3140          *
3141          * Toggle activities as like,dislike,attend of an item
3142          *
3143          * @param string $item_id
3144          * @param string $verb
3145          *            Activity verb. One of
3146          *            like, unlike, dislike, undislike, attendyes, unattendyes,
3147          *            attendno, unattendno, attendmaybe, unattendmaybe
3148          * @return bool
3149          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3150          * @throws \ImagickException
3151          * @hook  'post_local_end'
3152          *            array $arr
3153          *            'post_id' => ID of posted item
3154          */
3155         public static function performActivity($item_id, $verb)
3156         {
3157                 if (!Session::isAuthenticated()) {
3158                         return false;
3159                 }
3160
3161                 switch ($verb) {
3162                         case 'like':
3163                         case 'unlike':
3164                                 $activity = Activity::LIKE;
3165                                 break;
3166                         case 'dislike':
3167                         case 'undislike':
3168                                 $activity = Activity::DISLIKE;
3169                                 break;
3170                         case 'attendyes':
3171                         case 'unattendyes':
3172                                 $activity = Activity::ATTEND;
3173                                 break;
3174                         case 'attendno':
3175                         case 'unattendno':
3176                                 $activity = Activity::ATTENDNO;
3177                                 break;
3178                         case 'attendmaybe':
3179                         case 'unattendmaybe':
3180                                 $activity = Activity::ATTENDMAYBE;
3181                                 break;
3182                         case 'follow':
3183                         case 'unfollow':
3184                                 $activity = Activity::FOLLOW;
3185                                 break;
3186                         default:
3187                                 Logger::log('like: unknown verb ' . $verb . ' for item ' . $item_id);
3188                                 return false;
3189                 }
3190
3191                 // Enable activity toggling instead of on/off
3192                 $event_verb_flag = $activity === Activity::ATTEND || $activity === Activity::ATTENDNO || $activity === Activity::ATTENDMAYBE;
3193
3194                 Logger::log('like: verb ' . $verb . ' item ' . $item_id);
3195
3196                 $item = self::selectFirst(self::ITEM_FIELDLIST, ['`id` = ? OR `uri` = ?', $item_id, $item_id]);
3197                 if (!DBA::isResult($item)) {
3198                         Logger::log('like: unknown item ' . $item_id);
3199                         return false;
3200                 }
3201
3202                 $item_uri = $item['uri'];
3203
3204                 $uid = $item['uid'];
3205                 if (($uid == 0) && local_user()) {
3206                         $uid = local_user();
3207                 }
3208
3209                 if (!Security::canWriteToUserWall($uid)) {
3210                         Logger::log('like: unable to write on wall ' . $uid);
3211                         return false;
3212                 }
3213
3214                 // Retrieves the local post owner
3215                 $owner_self_contact = DBA::selectFirst('contact', [], ['uid' => $uid, 'self' => true]);
3216                 if (!DBA::isResult($owner_self_contact)) {
3217                         Logger::log('like: unknown owner ' . $uid);
3218                         return false;
3219                 }
3220
3221                 // Retrieve the current logged in user's public contact
3222                 $author_id = public_contact();
3223
3224                 $author_contact = DBA::selectFirst('contact', ['url'], ['id' => $author_id]);
3225                 if (!DBA::isResult($author_contact)) {
3226                         Logger::log('like: unknown author ' . $author_id);
3227                         return false;
3228                 }
3229
3230                 // Contact-id is the uid-dependant author contact
3231                 if (local_user() == $uid) {
3232                         $item_contact_id = $owner_self_contact['id'];
3233                 } else {
3234                         $item_contact_id = Contact::getIdForURL($author_contact['url'], $uid, true);
3235                         $item_contact = DBA::selectFirst('contact', [], ['id' => $item_contact_id]);
3236                         if (!DBA::isResult($item_contact)) {
3237                                 Logger::log('like: unknown item contact ' . $item_contact_id);
3238                                 return false;
3239                         }
3240                 }
3241
3242                 // Look for an existing verb row
3243                 // event participation are essentially radio toggles. If you make a subsequent choice,
3244                 // we need to eradicate your first choice.
3245                 if ($event_verb_flag) {
3246                         $verbs = [Activity::ATTEND, Activity::ATTENDNO, Activity::ATTENDMAYBE];
3247
3248                         // Translate to the index based activity index
3249                         $activities = [];
3250                         foreach ($verbs as $verb) {
3251                                 $activities[] = self::activityToIndex($verb);
3252                         }
3253                 } else {
3254                         $activities = self::activityToIndex($activity);
3255                 }
3256
3257                 $condition = ['activity' => $activities, 'deleted' => false, 'gravity' => GRAVITY_ACTIVITY,
3258                         'author-id' => $author_id, 'uid' => $item['uid'], 'thr-parent' => $item_uri];
3259
3260                 $like_item = self::selectFirst(['id', 'guid', 'verb'], $condition);
3261
3262                 // If it exists, mark it as deleted
3263                 if (DBA::isResult($like_item)) {
3264                         self::markForDeletionById($like_item['id']);
3265
3266                         if (!$event_verb_flag || $like_item['verb'] == $activity) {
3267                                 return true;
3268                         }
3269                 }
3270
3271                 // Verb is "un-something", just trying to delete existing entries
3272                 if (strpos($verb, 'un') === 0) {
3273                         return true;
3274                 }
3275
3276                 $objtype = $item['resource-id'] ? Activity\ObjectType::IMAGE : Activity\ObjectType::NOTE;
3277
3278                 $new_item = [
3279                         'guid'          => System::createUUID(),
3280                         'uri'           => self::newURI($item['uid']),
3281                         'uid'           => $item['uid'],
3282                         'contact-id'    => $item_contact_id,
3283                         'wall'          => $item['wall'],
3284                         'origin'        => 1,
3285                         'network'       => Protocol::DFRN,
3286                         'gravity'       => GRAVITY_ACTIVITY,
3287                         'parent'        => $item['id'],
3288                         'parent-uri'    => $item['uri'],
3289                         'thr-parent'    => $item['uri'],
3290                         'owner-id'      => $author_id,
3291                         'author-id'     => $author_id,
3292                         'body'          => $activity,
3293                         'verb'          => $activity,
3294                         'object-type'   => $objtype,
3295                         'allow_cid'     => $item['allow_cid'],
3296                         'allow_gid'     => $item['allow_gid'],
3297                         'deny_cid'      => $item['deny_cid'],
3298                         'deny_gid'      => $item['deny_gid'],
3299                         'visible'       => 1,
3300                         'unseen'        => 1,
3301                 ];
3302
3303                 $signed = Diaspora::createLikeSignature($uid, $new_item);
3304                 if (!empty($signed)) {
3305                         $new_item['diaspora_signed_text'] = json_encode($signed);
3306                 }
3307
3308                 $new_item_id = self::insert($new_item);
3309
3310                 // If the parent item isn't visible then set it to visible
3311                 if (!$item['visible']) {
3312                         self::update(['visible' => true], ['id' => $item['id']]);
3313                 }
3314
3315                 $new_item['id'] = $new_item_id;
3316
3317                 Hook::callAll('post_local_end', $new_item);
3318
3319                 return true;
3320         }
3321
3322         private static function addThread($itemid, $onlyshadow = false)
3323         {
3324                 $fields = ['uid', 'created', 'edited', 'commented', 'received', 'changed', 'wall', 'private', 'pubmail',
3325                         'moderated', 'visible', 'starred', 'contact-id', 'post-type',
3326                         'deleted', 'origin', 'forum_mode', 'mention', 'network', 'author-id', 'owner-id'];
3327                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3328                 $item = self::selectFirst($fields, $condition);
3329
3330                 if (!DBA::isResult($item)) {
3331                         return;
3332                 }
3333
3334                 $item['iid'] = $itemid;
3335
3336                 if (!$onlyshadow) {
3337                         $result = DBA::insert('thread', $item);
3338
3339                         Logger::log("Add thread for item ".$itemid." - ".print_r($result, true), Logger::DEBUG);
3340                 }
3341         }
3342
3343         private static function updateThread($itemid, $setmention = false)
3344         {
3345                 $fields = ['uid', 'guid', 'created', 'edited', 'commented', 'received', 'changed', 'post-type',
3346                         'wall', 'private', 'pubmail', 'moderated', 'visible', 'starred', 'contact-id',
3347                         'deleted', 'origin', 'forum_mode', 'network', 'author-id', 'owner-id'];
3348                 $condition = ["`id` = ? AND (`parent` = ? OR `parent` = 0)", $itemid, $itemid];
3349
3350                 $item = self::selectFirst($fields, $condition);
3351                 if (!DBA::isResult($item)) {
3352                         return;
3353                 }
3354
3355                 if ($setmention) {
3356                         $item["mention"] = 1;
3357                 }
3358
3359                 $fields = [];
3360
3361                 foreach ($item as $field => $data) {
3362                         if (!in_array($field, ["guid"])) {
3363                                 $fields[$field] = $data;
3364                         }
3365                 }
3366
3367                 $result = DBA::update('thread', $fields, ['iid' => $itemid]);
3368
3369                 Logger::log("Update thread for item ".$itemid." - guid ".$item["guid"]." - ".(int)$result, Logger::DEBUG);
3370         }
3371
3372         private static function deleteThread($itemid, $itemuri = "")
3373         {
3374                 $item = DBA::selectFirst('thread', ['uid'], ['iid' => $itemid]);
3375                 if (!DBA::isResult($item)) {
3376                         Logger::log('No thread found for id '.$itemid, Logger::DEBUG);
3377                         return;
3378                 }
3379
3380                 $result = DBA::delete('thread', ['iid' => $itemid], ['cascade' => false]);
3381
3382                 Logger::log("deleteThread: Deleted thread for item ".$itemid." - ".print_r($result, true), Logger::DEBUG);
3383
3384                 if ($itemuri != "") {
3385                         $condition = ["`uri` = ? AND NOT `deleted` AND NOT (`uid` IN (?, 0))", $itemuri, $item["uid"]];
3386                         if (!self::exists($condition)) {
3387                                 DBA::delete('item', ['uri' => $itemuri, 'uid' => 0]);
3388                                 Logger::debug('Deleted shadow item', ['id' => $itemid, 'uri' => $itemuri]);
3389                         }
3390                 }
3391         }
3392
3393         public static function getPermissionsSQLByUserId($owner_id)
3394         {
3395                 $local_user = local_user();
3396                 $remote_user = Session::getRemoteContactID($owner_id);
3397
3398                 /*
3399                  * Construct permissions
3400                  *
3401                  * default permissions - anonymous user
3402                  */
3403                 $sql = sprintf(" AND `item`.`private` != %d", self::PRIVATE);
3404
3405                 // Profile owner - everything is visible
3406                 if ($local_user && ($local_user == $owner_id)) {
3407                         $sql = '';
3408                 } elseif ($remote_user) {
3409                         /*
3410                          * Authenticated visitor. Unless pre-verified,
3411                          * check that the contact belongs to this $owner_id
3412                          * and load the groups the visitor belongs to.
3413                          * If pre-verified, the caller is expected to have already
3414                          * done this and passed the groups into this function.
3415                          */
3416                         $set = PermissionSet::get($owner_id, $remote_user);
3417
3418                         if (!empty($set)) {
3419                                 $sql_set = sprintf(" OR (`item`.`private` = %d AND `item`.`wall` AND `item`.`psid` IN (", self::PRIVATE) . implode(',', $set) . "))";
3420                         } else {
3421                                 $sql_set = '';
3422                         }
3423
3424                         $sql = sprintf(" AND (`item`.`private` != %d", self::PRIVATE) . $sql_set . ")";
3425                 }
3426
3427                 return $sql;
3428         }
3429
3430         /**
3431          * get translated item type
3432          *
3433          * @param $item
3434          * @return string
3435          */
3436         public static function postType($item)
3437         {
3438                 if (!empty($item['event-id'])) {
3439                         return DI::l10n()->t('event');
3440                 } elseif (!empty($item['resource-id'])) {
3441                         return DI::l10n()->t('photo');
3442                 } elseif (!empty($item['verb']) && $item['verb'] !== Activity::POST) {
3443                         return DI::l10n()->t('activity');
3444                 } elseif ($item['id'] != $item['parent']) {
3445                         return DI::l10n()->t('comment');
3446                 }
3447
3448                 return DI::l10n()->t('post');
3449         }
3450
3451         /**
3452          * Sets the "rendered-html" field of the provided item
3453          *
3454          * Body is preserved to avoid side-effects as we modify it just-in-time for spoilers and private image links
3455          *
3456          * @param array $item
3457          * @param bool  $update
3458          *
3459          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3460          * @todo Remove reference, simply return "rendered-html" and "rendered-hash"
3461          */
3462         public static function putInCache(&$item, $update = false)
3463         {
3464                 $body = $item["body"];
3465
3466                 $rendered_hash = $item['rendered-hash'] ?? '';
3467                 $rendered_html = $item['rendered-html'] ?? '';
3468
3469                 if ($rendered_hash == ''
3470                         || $rendered_html == ""
3471                         || $rendered_hash != hash("md5", $item["body"])
3472                         || DI::config()->get("system", "ignore_cache")
3473                 ) {
3474                         self::addRedirToImageTags($item);
3475
3476                         $item["rendered-html"] = BBCode::convert($item["body"]);
3477                         $item["rendered-hash"] = hash("md5", $item["body"]);
3478
3479                         $hook_data = ['item' => $item, 'rendered-html' => $item['rendered-html'], 'rendered-hash' => $item['rendered-hash']];
3480                         Hook::callAll('put_item_in_cache', $hook_data);
3481                         $item['rendered-html'] = $hook_data['rendered-html'];
3482                         $item['rendered-hash'] = $hook_data['rendered-hash'];
3483                         unset($hook_data);
3484
3485                         // Force an update if the generated values differ from the existing ones
3486                         if ($rendered_hash != $item["rendered-hash"]) {
3487                                 $update = true;
3488                         }
3489
3490                         // Only compare the HTML when we forcefully ignore the cache
3491                         if (DI::config()->get("system", "ignore_cache") && ($rendered_html != $item["rendered-html"])) {
3492                                 $update = true;
3493                         }
3494
3495                         if ($update && !empty($item["id"])) {
3496                                 self::update(
3497                                         [
3498                                                 'rendered-html' => $item["rendered-html"],
3499                                                 'rendered-hash' => $item["rendered-hash"]
3500                                         ],
3501                                         ['id' => $item["id"]]
3502                                 );
3503                         }
3504                 }
3505
3506                 $item["body"] = $body;
3507         }
3508
3509         /**
3510          * Find any non-embedded images in private items and add redir links to them
3511          *
3512          * @param array &$item The field array of an item row
3513          */
3514         private static function addRedirToImageTags(array &$item)
3515         {
3516                 $app = DI::app();
3517
3518                 $matches = [];
3519                 $cnt = preg_match_all('|\[img\](http[^\[]*?/photo/[a-fA-F0-9]+?(-[0-9]\.[\w]+?)?)\[\/img\]|', $item['body'], $matches, PREG_SET_ORDER);
3520                 if ($cnt) {
3521                         foreach ($matches as $mtch) {
3522                                 if (strpos($mtch[1], '/redir') !== false) {
3523                                         continue;
3524                                 }
3525
3526                                 if ((local_user() == $item['uid']) && ($item['private'] == self::PRIVATE) && ($item['contact-id'] != $app->contact['id']) && ($item['network'] == Protocol::DFRN)) {
3527                                         $img_url = 'redir/' . $item['contact-id'] . '?url=' . urlencode($mtch[1]);
3528                                         $item['body'] = str_replace($mtch[0], '[img]' . $img_url . '[/img]', $item['body']);
3529                                 }
3530                         }
3531                 }
3532         }
3533
3534         /**
3535          * Given an item array, convert the body element from bbcode to html and add smilie icons.
3536          * If attach is true, also add icons for item attachments.
3537          *
3538          * @param array   $item
3539          * @param boolean $attach
3540          * @param boolean $is_preview
3541          * @return string item body html
3542          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
3543          * @throws \ImagickException
3544          * @hook  prepare_body_init item array before any work
3545          * @hook  prepare_body_content_filter ('item'=>item array, 'filter_reasons'=>string array) before first bbcode to html
3546          * @hook  prepare_body ('item'=>item array, 'html'=>body string, 'is_preview'=>boolean, 'filter_reasons'=>string array) after first bbcode to html
3547          * @hook  prepare_body_final ('item'=>item array, 'html'=>body string) after attach icons and blockquote special case handling (spoiler, author)
3548          */
3549         public static function prepareBody(array &$item, $attach = false, $is_preview = false)
3550         {
3551                 $a = DI::app();
3552                 Hook::callAll('prepare_body_init', $item);
3553
3554                 // In order to provide theme developers more possibilities, event items
3555                 // are treated differently.
3556                 if ($item['object-type'] === Activity\ObjectType::EVENT && isset($item['event-id'])) {
3557                         $ev = Event::getItemHTML($item);
3558                         return $ev;
3559                 }
3560
3561                 $tags = Term::populateTagsFromItem($item);
3562
3563                 $item['tags'] = $tags['tags'];
3564                 $item['hashtags'] = $tags['hashtags'];
3565                 $item['mentions'] = $tags['mentions'];
3566
3567                 // Compile eventual content filter reasons
3568                 $filter_reasons = [];
3569                 if (!$is_preview && public_contact() != $item['author-id']) {
3570                         if (!empty($item['content-warning']) && (!local_user() || !DI::pConfig()->get(local_user(), 'system', 'disable_cw', false))) {
3571                                 $filter_reasons[] = DI::l10n()->t('Content warning: %s', $item['content-warning']);
3572                         }
3573
3574                         $hook_data = [
3575                                 'item' => $item,
3576                                 'filter_reasons' => $filter_reasons
3577                         ];
3578                         Hook::callAll('prepare_body_content_filter', $hook_data);
3579                         $filter_reasons = $hook_data['filter_reasons'];
3580                         unset($hook_data);
3581                 }
3582
3583                 // Update the cached values if there is no "zrl=..." on the links.
3584                 $update = (!Session::isAuthenticated() && ($item["uid"] == 0));
3585
3586                 // Or update it if the current viewer is the intented viewer.
3587                 if (($item["uid"] == local_user()) && ($item["uid"] != 0)) {
3588                         $update = true;
3589                 }
3590
3591                 self::putInCache($item, $update);
3592                 $s = $item["rendered-html"];
3593
3594                 $hook_data = [
3595                         'item' => $item,
3596                         'html' => $s,
3597                         'preview' => $is_preview,
3598                         'filter_reasons' => $filter_reasons
3599                 ];
3600                 Hook::callAll('prepare_body', $hook_data);
3601                 $s = $hook_data['html'];
3602                 unset($hook_data);
3603
3604                 if (!$attach) {
3605                         // Replace the blockquotes with quotes that are used in mails.
3606                         $mailquote = '<blockquote type="cite" class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">';
3607                         $s = str_replace(['<blockquote>', '<blockquote class="spoiler">', '<blockquote class="author">'], [$mailquote, $mailquote, $mailquote], $s);
3608                         return $s;
3609                 }
3610
3611                 $as = '';
3612                 $vhead = false;
3613                 $matches = [];
3614                 preg_match_all('|\[attach\]href=\"(.*?)\" length=\"(.*?)\" type=\"(.*?)\"(?: title=\"(.*?)\")?|', $item['attach'], $matches, PREG_SET_ORDER);
3615                 foreach ($matches as $mtch) {
3616                         $mime = $mtch[3];
3617
3618                         $the_url = Contact::magicLinkById($item['author-id'], $mtch[1]);
3619
3620                         if (strpos($mime, 'video') !== false) {
3621                                 if (!$vhead) {
3622                                         $vhead = true;
3623                                         DI::page()['htmlhead'] .= Renderer::replaceMacros(Renderer::getMarkupTemplate('videos_head.tpl'));
3624                                 }
3625
3626                                 $url_parts = explode('/', $the_url);
3627                                 $id = end($url_parts);
3628                                 $as .= Renderer::replaceMacros(Renderer::getMarkupTemplate('video_top.tpl'), [
3629                                         '$video' => [
3630                                                 'id'     => $id,
3631                                                 'title'  => DI::l10n()->t('View Video'),
3632                                                 'src'    => $the_url,
3633                                                 'mime'   => $mime,
3634                                         ],
3635                                 ]);
3636                         }
3637
3638                         $filetype = strtolower(substr($mime, 0, strpos($mime, '/')));
3639                         if ($filetype) {
3640                                 $filesubtype = strtolower(substr($mime, strpos($mime, '/') + 1));
3641                                 $filesubtype = str_replace('.', '-', $filesubtype);
3642                         } else {
3643                                 $filetype = 'unkn';
3644                                 $filesubtype = 'unkn';
3645                         }
3646
3647                         $title = Strings::escapeHtml(trim(($mtch[4] ?? '') ?: $mtch[1]));
3648                         $title .= ' ' . $mtch[2] . ' ' . DI::l10n()->t('bytes');
3649
3650                         $icon = '<div class="attachtype icon s22 type-' . $filetype . ' subtype-' . $filesubtype . '"></div>';
3651                         $as .= '<a href="' . strip_tags($the_url) . '" title="' . $title . '" class="attachlink" target="_blank" rel="noopener noreferrer" >' . $icon . '</a>';
3652                 }
3653
3654                 if ($as != '') {
3655                         $s .= '<div class="body-attach">'.$as.'<div class="clear"></div></div>';
3656                 }
3657
3658                 // Map.
3659                 if (strpos($s, '<div class="map">') !== false && !empty($item['coord'])) {
3660                         $x = Map::byCoordinates(trim($item['coord']));
3661                         if ($x) {
3662                                 $s = preg_replace('/\<div class\=\"map\"\>/', '$0' . $x, $s);
3663                         }
3664                 }
3665
3666                 // Replace friendica image url size with theme preference.
3667                 if (!empty($a->theme_info['item_image_size'])) {
3668                         $ps = $a->theme_info['item_image_size'];
3669                         $s = preg_replace('|(<img[^>]+src="[^"]+/photo/[0-9a-f]+)-[0-9]|', "$1-" . $ps, $s);
3670                 }
3671
3672                 $s = HTML::applyContentFilter($s, $filter_reasons);
3673
3674                 $hook_data = ['item' => $item, 'html' => $s];
3675                 Hook::callAll('prepare_body_final', $hook_data);
3676
3677                 return $hook_data['html'];
3678         }
3679
3680         /**
3681          * get private link for item
3682          *
3683          * @param array $item
3684          * @return boolean|array False if item has not plink, otherwise array('href'=>plink url, 'title'=>translated title)
3685          * @throws \Exception
3686          */
3687         public static function getPlink($item)
3688         {
3689                 $a = DI::app();
3690
3691                 if ($a->user['nickname'] != "") {
3692                         $ret = [
3693                                 'href' => "display/" . $item['guid'],
3694                                 'orig' => "display/" . $item['guid'],
3695                                 'title' => DI::l10n()->t('View on separate page'),
3696                                 'orig_title' => DI::l10n()->t('view on separate page'),
3697                         ];
3698
3699                         if (!empty($item['plink'])) {
3700                                 $ret["href"] = DI::baseUrl()->remove($item['plink']);
3701                                 $ret["title"] = DI::l10n()->t('link to source');
3702                         }
3703
3704                 } elseif (!empty($item['plink']) && ($item['private'] != self::PRIVATE)) {
3705                         $ret = [
3706                                 'href' => $item['plink'],
3707                                 'orig' => $item['plink'],
3708                                 'title' => DI::l10n()->t('link to source'),
3709                         ];
3710                 } else {
3711                         $ret = [];
3712                 }
3713
3714                 return $ret;
3715         }
3716
3717         /**
3718          * Is the given item array a post that is sent as starting post to a forum?
3719          *
3720          * @param array $item
3721          * @param array $owner
3722          *
3723          * @return boolean "true" when it is a forum post
3724          */
3725         public static function isForumPost(array $item, array $owner = [])
3726         {
3727                 if (empty($owner)) {
3728                         $owner = User::getOwnerDataById($item['uid']);
3729                         if (empty($owner)) {
3730                                 return false;
3731                         }
3732                 }
3733
3734                 if (($item['author-id'] == $item['owner-id']) ||
3735                         ($owner['id'] == $item['contact-id']) ||
3736                         ($item['uri'] != $item['parent-uri']) ||
3737                         $item['origin']) {
3738                         return false;
3739                 }
3740
3741                 return Contact::isForum($item['contact-id']);
3742         }
3743
3744         /**
3745          * Search item id for given URI or plink
3746          *
3747          * @param string $uri
3748          * @param integer $uid
3749          *
3750          * @return integer item id
3751          */
3752         public static function searchByLink($uri, $uid = 0)
3753         {
3754                 $ssl_uri = str_replace('http://', 'https://', $uri);
3755                 $uris = [$uri, $ssl_uri, Strings::normaliseLink($uri)];
3756
3757                 $item = DBA::selectFirst('item', ['id'], ['uri' => $uris, 'uid' => $uid]);
3758                 if (DBA::isResult($item)) {
3759                         return $item['id'];
3760                 }
3761
3762                 $itemcontent = DBA::selectFirst('item-content', ['uri-id'], ['plink' => $uris]);
3763                 if (!DBA::isResult($itemcontent)) {
3764                         return 0;
3765                 }
3766
3767                 $itemuri = DBA::selectFirst('item-uri', ['uri'], ['id' => $itemcontent['uri-id']]);
3768                 if (!DBA::isResult($itemuri)) {
3769                         return 0;
3770                 }
3771
3772                 $item = DBA::selectFirst('item', ['id'], ['uri' => $itemuri['uri'], 'uid' => $uid]);
3773                 if (DBA::isResult($item)) {
3774                         return $item['id'];
3775                 }
3776
3777                 return 0;
3778         }
3779
3780         /**
3781          * Return the URI for a link to the post
3782          *
3783          * @param string $uri URI or link to post
3784          *
3785          * @return string URI
3786          */
3787         public static function getURIByLink(string $uri)
3788         {
3789                 $ssl_uri = str_replace('http://', 'https://', $uri);
3790                 $uris = [$uri, $ssl_uri, Strings::normaliseLink($uri)];
3791
3792                 $item = DBA::selectFirst('item', ['uri'], ['uri' => $uris]);
3793                 if (DBA::isResult($item)) {
3794                         return $item['uri'];
3795                 }
3796
3797                 $itemcontent = DBA::selectFirst('item-content', ['uri-id'], ['plink' => $uris]);
3798                 if (!DBA::isResult($itemcontent)) {
3799                         return '';
3800                 }
3801
3802                 $itemuri = DBA::selectFirst('item-uri', ['uri'], ['id' => $itemcontent['uri-id']]);
3803                 if (DBA::isResult($itemuri)) {
3804                         return $itemuri['uri'];
3805                 }
3806
3807                 return '';
3808         }
3809
3810         /**
3811          * Fetches item for given URI or plink
3812          *
3813          * @param string $uri
3814          * @param integer $uid
3815          *
3816          * @return integer item id
3817          */
3818         public static function fetchByLink($uri, $uid = 0)
3819         {
3820                 $item_id = self::searchByLink($uri, $uid);
3821                 if (!empty($item_id)) {
3822                         return $item_id;
3823                 }
3824
3825                 if ($fetched_uri = ActivityPub\Processor::fetchMissingActivity($uri)) {
3826                         $item_id = self::searchByLink($fetched_uri, $uid);
3827                 } else {
3828                         $item_id = Diaspora::fetchByURL($uri);
3829                 }
3830
3831                 if (!empty($item_id)) {
3832                         return $item_id;
3833                 }
3834
3835                 return 0;
3836         }
3837
3838         /**
3839          * Return share data from an item array (if the item is shared item)
3840          * We are providing the complete Item array, because at some time in the future
3841          * we hopefully will define these values not in the body anymore but in some item fields.
3842          * This function is meant to replace all similar functions in the system.
3843          *
3844          * @param array $item
3845          *
3846          * @return array with share information
3847          */
3848         public static function getShareArray($item)
3849         {
3850                 if (!preg_match("/(.*?)\[share(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism", $item['body'], $matches)) {
3851                         return [];
3852                 }
3853
3854                 $attribute_string = $matches[2];
3855                 $attributes = ['comment' => trim($matches[1]), 'shared' => trim($matches[3])];
3856                 foreach (['author', 'profile', 'avatar', 'guid', 'posted', 'link'] as $field) {
3857                         if (preg_match("/$field=(['\"])(.+?)\\1/ism", $attribute_string, $matches)) {
3858                                 $attributes[$field] = trim(html_entity_decode($matches[2] ?? '', ENT_QUOTES, 'UTF-8'));
3859                         }
3860                 }
3861                 return $attributes;
3862         }
3863
3864         /**
3865          * Fetch item information for shared items from the original items and adds it.
3866          *
3867          * @param array $item
3868          *
3869          * @return array item array with data from the original item
3870          */
3871         public static function addShareDataFromOriginal($item)
3872         {
3873                 $shared = self::getShareArray($item);
3874                 if (empty($shared)) {
3875                         return $item;
3876                 }
3877
3878                 // Real reshares always have got a GUID.
3879                 if (empty($shared['guid'])) {
3880                         return $item;
3881                 }
3882
3883                 $uid = $item['uid'] ?? 0;
3884
3885                 // first try to fetch the item via the GUID. This will work for all reshares that had been created on this system
3886                 $shared_item = self::selectFirst(['title', 'body', 'attach'], ['guid' => $shared['guid'], 'uid' => [0, $uid]]);
3887                 if (!DBA::isResult($shared_item)) {
3888                         if (empty($shared['link'])) {
3889                                 return $item;
3890                         }
3891
3892                         // Otherwhise try to find (and possibly fetch) the item via the link. This should work for Diaspora and ActivityPub posts
3893                         $id = self::fetchByLink($shared['link'], $uid);
3894                         if (empty($id)) {
3895                                 Logger::info('Original item not found', ['url' => $shared['link'], 'callstack' => System::callstack()]);
3896                                 return $item;
3897                         }
3898
3899                         $shared_item = self::selectFirst(['title', 'body', 'attach'], ['id' => $id]);
3900                         if (!DBA::isResult($shared_item)) {
3901                                 return $item;
3902                         }
3903                         Logger::info('Got shared data from url', ['url' => $shared['link'], 'callstack' => System::callstack()]);
3904                 } else {
3905                         Logger::info('Got shared data from guid', ['guid' => $shared['guid'], 'callstack' => System::callstack()]);
3906                 }
3907
3908                 if (!empty($shared_item['title'])) {
3909                         $body = '[h3]' . $shared_item['title'] . "[/h3]\n" . $shared_item['body'];
3910                         unset($shared_item['title']);
3911                 } else {
3912                         $body = $shared_item['body'];
3913                 }
3914
3915                 $item['body'] = preg_replace("/\[share ([^\[\]]*)\].*\[\/share\]/ism", '[share $1]' . $body . '[/share]', $item['body']);
3916                 unset($shared_item['body']);
3917
3918                 return array_merge($item, $shared_item);
3919         }
3920 }