src/Model/Profile.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2010-2022, the Friendica project
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 namespace Friendica\Model;
  23
  24 use Friendica\App;
  25 use Friendica\Content\Text\BBCode;
  26 use Friendica\Content\Widget\ContactBlock;
  27 use Friendica\Core\Cache\Enum\Duration;
  28 use Friendica\Core\Hook;
  29 use Friendica\Core\Logger;
  30 use Friendica\Core\Protocol;
  31 use Friendica\Core\Renderer;
  32 use Friendica\Core\Search;
  33 use Friendica\Core\Session;
  34 use Friendica\Core\System;
  35 use Friendica\Core\Worker;
  36 use Friendica\Database\DBA;
  37 use Friendica\DI;
  38 use Friendica\Network\HTTPException;
  39 use Friendica\Protocol\Activity;
  40 use Friendica\Protocol\Diaspora;
  41 use Friendica\Security\PermissionSet\Entity\PermissionSet;
  42 use Friendica\Util\DateTimeFormat;
  43 use Friendica\Util\HTTPSignature;
  44 use Friendica\Util\Network;
  45 use Friendica\Util\Proxy;
  46 use Friendica\Util\Strings;
  47
  48 class Profile
  49 {
  50         /**
  51          * Returns default profile for a given user id
  52          *
  53          * @param integer User ID
  54          *
  55          * @return array Profile data
  56          * @throws \Exception
  57          */
  58         public static function getByUID($uid)
  59         {
  60                 return DBA::selectFirst('profile', [], ['uid' => $uid]);
  61         }
  62
  63         /**
  64          * Returns default profile for a given user ID and ID
  65          *
  66          * @param int $uid The contact ID
  67          * @param int $id The contact owner ID
  68          * @param array $fields The selected fields
  69          *
  70          * @return array Profile data for the ID
  71          * @throws \Exception
  72          */
  73         public static function getById(int $uid, int $id, array $fields = [])
  74         {
  75                 return DBA::selectFirst('profile', $fields, ['uid' => $uid, 'id' => $id]);
  76         }
  77
  78         /**
  79          * Returns profile data for the contact owner
  80          *
  81          * @param int $uid The User ID
  82          * @param array $fields The fields to retrieve
  83          *
  84          * @return array Array of profile data
  85          * @throws \Exception
  86          */
  87         public static function getListByUser(int $uid, array $fields = [])
  88         {
  89                 return DBA::selectToArray('profile', $fields, ['uid' => $uid]);
  90         }
  91
  92         /**
  93          * Update a profile entry and distribute the changes if needed
  94          *
  95          * @param array $fields
  96          * @param integer $uid
  97          * @return boolean
  98          */
  99         public static function update(array $fields, int $uid): bool
 100         {
 101                 $old_owner = User::getOwnerDataById($uid);
 102                 if (empty($old_owner)) {
 103                         return false;
 104                 }
 105
 106                 if (!DBA::update('profile', $fields, ['uid' => $uid])) {
 107                         return false;
 108                 }
 109
 110                 $update = Contact::updateSelfFromUserID($uid);
 111
 112                 $owner = User::getOwnerDataById($uid);
 113                 if (empty($owner)) {
 114                         return false;
 115                 }
 116
 117                 if ($old_owner['name'] != $owner['name']) {
 118                         User::update(['username' => $owner['name']], $uid);
 119                 }
 120
 121                 $profile_fields = ['postal-code', 'dob', 'prv_keywords', 'homepage'];
 122                 foreach ($profile_fields as $field) {
 123                         if ($old_owner[$field] != $owner[$field]) {
 124                                 $update = true;
 125                         }
 126                 }
 127
 128                 if ($update) {
 129                         self::publishUpdate($uid, ($old_owner['net-publish'] != $owner['net-publish']));
 130                 }
 131
 132                 return true;
 133         }
 134
 135         /**
 136          * Publish a changed profile
 137          * @param int  $uid
 138          * @param bool $force Force publishing to the directory
 139          */
 140         public static function publishUpdate(int $uid, bool $force = false)
 141         {
 142                 $owner = User::getOwnerDataById($uid);
 143                 if (empty($owner)) {
 144                         return;
 145                 }
 146
 147                 if ($owner['net-publish'] || $force) {
 148                         // Update global directory in background
 149                         if (Search::getGlobalDirectory()) {
 150                                 Worker::add(PRIORITY_LOW, 'Directory', $owner['url']);
 151                         }
 152                 }
 153
 154                 Worker::add(PRIORITY_LOW, 'ProfileUpdate', $uid);
 155         }
 156
 157         /**
 158          * Returns a formatted location string from the given profile array
 159          *
 160          * @param array $profile Profile array (Generated from the "profile" table)
 161          *
 162          * @return string Location string
 163          */
 164         public static function formatLocation(array $profile)
 165         {
 166                 $location = '';
 167
 168                 if (!empty($profile['locality'])) {
 169                         $location .= $profile['locality'];
 170                 }
 171
 172                 if (!empty($profile['region']) && (($profile['locality'] ?? '') != $profile['region'])) {
 173                         if ($location) {
 174                                 $location .= ', ';
 175                         }
 176
 177                         $location .= $profile['region'];
 178                 }
 179
 180                 if (!empty($profile['country-name'])) {
 181                         if ($location) {
 182                                 $location .= ', ';
 183                         }
 184
 185                         $location .= $profile['country-name'];
 186                 }
 187
 188                 return $location;
 189         }
 190
 191         /**
 192          * Loads a profile into the page sidebar.
 193          *
 194          * The function requires a writeable copy of the main App structure, and the nickname
 195          * of a registered local account.
 196          *
 197          * If the viewer is an authenticated remote viewer, the profile displayed is the
 198          * one that has been configured for his/her viewing in the Contact manager.
 199          * Passing a non-zero profile ID can also allow a preview of a selected profile
 200          * by the owner.
 201          *
 202          * Profile information is placed in the App structure for later retrieval.
 203          * Honours the owner's chosen theme for display.
 204          *
 205          * @attention Should only be run in the _init() functions of a module. That ensures that
 206          *      the theme is chosen before the _init() function of a theme is run, which will usually
 207          *      load a lot of theme-specific content
 208          *
 209          * @param App    $a
 210          * @param string $nickname string
 211          * @param bool   $show_contacts
 212          * @return array Profile
 213          *
 214          * @throws HTTPException\NotFoundException
 215          * @throws HTTPException\InternalServerErrorException
 216          * @throws \ImagickException
 217          */
 218         public static function load(App $a, string $nickname, bool $show_contacts = true)
 219         {
 220                 $profile = User::getOwnerDataByNick($nickname);
 221                 if (empty($profile)) {
 222                         Logger::info('profile error: ' . DI::args()->getQueryString());
 223                         return [];
 224                 }
 225
 226                 // System user, aborting
 227                 if ($profile['uid'] === 0) {
 228                         DI::logger()->warning('System user found in Profile::load', ['nickname' => $nickname, 'callstack' => System::callstack(20)]);
 229                         throw new HTTPException\NotFoundException(DI::l10n()->t('User not found.'));
 230                 }
 231
 232                 $a->setProfileOwner($profile['uid']);
 233
 234                 DI::page()['title'] = $profile['name'] . ' @ ' . DI::config()->get('config', 'sitename');
 235
 236                 if (!DI::pConfig()->get(local_user(), 'system', 'always_my_theme')) {
 237                         $a->setCurrentTheme($profile['theme']);
 238                         $a->setCurrentMobileTheme(DI::pConfig()->get($a->getProfileOwner(), 'system', 'mobile_theme'));
 239                 }
 240
 241                 /*
 242                 * load/reload current theme info
 243                 */
 244
 245                 Renderer::setActiveTemplateEngine(); // reset the template engine to the default in case the user's theme doesn't specify one
 246
 247                 $theme_info_file = 'view/theme/' . $a->getCurrentTheme() . '/theme.php';
 248                 if (file_exists($theme_info_file)) {
 249                         require_once $theme_info_file;
 250                 }
 251
 252                 $block = (DI::config()->get('system', 'block_public') && !Session::isAuthenticated());
 253
 254                 /**
 255                  * @todo
 256                  * By now, the contact block isn't shown, when a different profile is given
 257                  * But: When this profile was on the same server, then we could display the contacts
 258                  */
 259                 DI::page()['aside'] .= self::getVCardHtml($profile, $block, $show_contacts);
 260
 261                 return $profile;
 262         }
 263
 264         /**
 265          * Formats a profile for display in the sidebar.
 266          *
 267          * It is very difficult to templatise the HTML completely
 268          * because of all the conditional logic.
 269          *
 270          * @param array $profile       Profile array
 271          * @param bool  $block         Block personal details
 272          * @param bool  $show_contacts Show contact block
 273          *
 274          * @return string HTML sidebar module
 275          *
 276          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 277          * @throws \ImagickException
 278          * @note  Returns empty string if passed $profile is wrong type or not populated
 279          *
 280          * @hooks 'profile_sidebar_enter'
 281          *      array $profile - profile data
 282          * @hooks 'profile_sidebar'
 283          *      array $arr
 284          */
 285         public static function getVCardHtml(array $profile, bool $block, bool $show_contacts)
 286         {
 287                 $o = '';
 288                 $location = false;
 289
 290                 $profile_contact = [];
 291
 292                 if (local_user() && ($profile['uid'] ?? 0) != local_user()) {
 293                         $profile_contact = Contact::getByURL($profile['nurl'], null, [], local_user());
 294                 }
 295                 if (!empty($profile['cid']) && self::getMyURL()) {
 296                         $profile_contact = Contact::selectFirst([], ['id' => $profile['cid']]);
 297                 }
 298
 299                 $profile['picdate'] = urlencode($profile['picdate']);
 300
 301                 $profile['network_link'] = '';
 302
 303                 Hook::callAll('profile_sidebar_enter', $profile);
 304
 305                 $profile_url = $profile['url'];
 306
 307                 $cid = $profile['id'];
 308
 309                 $follow_link = null;
 310                 $unfollow_link = null;
 311                 $wallmessage_link = null;
 312
 313                 // Who is the logged-in user to this profile?
 314                 $visitor_contact = [];
 315                 if (!empty($profile['uid']) && self::getMyURL()) {
 316                         $visitor_contact = Contact::selectFirst(['rel'], ['uid' => $profile['uid'], 'nurl' => Strings::normaliseLink(self::getMyURL())]);
 317                 }
 318
 319                 $local_user_is_self = self::getMyURL() && ($profile['url'] == self::getMyURL());
 320                 $visitor_is_authenticated = (bool)self::getMyURL();
 321                 $visitor_is_following =
 322                         in_array($visitor_contact['rel'] ?? 0, [Contact::FOLLOWER, Contact::FRIEND])
 323                         || in_array($profile_contact['rel'] ?? 0, [Contact::SHARING, Contact::FRIEND]);
 324                 $visitor_is_followed =
 325                         in_array($visitor_contact['rel'] ?? 0, [Contact::SHARING, Contact::FRIEND])
 326                         || in_array($profile_contact['rel'] ?? 0, [Contact::FOLLOWER, Contact::FRIEND]);
 327                 $visitor_base_path = self::getMyURL() ? preg_replace('=/profile/(.*)=ism', '', self::getMyURL()) : '';
 328
 329                 if (!$local_user_is_self) {
 330                         if (!$visitor_is_authenticated) {
 331                                 // Remote follow is only available for local profiles
 332                                 if (!empty($profile['nickname']) && strpos($profile_url, DI::baseUrl()->get()) === 0) {
 333                                         $follow_link = 'remote_follow/' . $profile['nickname'];
 334                                 }
 335                         } else {
 336                                 if ($visitor_is_following) {
 337                                         $unfollow_link = $visitor_base_path . '/unfollow?url=' . urlencode($profile_url) . '&auto=1';
 338                                 } else {
 339                                         $follow_link =  $visitor_base_path .'/follow?url=' . urlencode($profile_url) . '&auto=1';
 340                                 }
 341                         }
 342
 343                         if (Contact::canReceivePrivateMessages($profile_contact)) {
 344                                 if ($visitor_is_followed || $visitor_is_following) {
 345                                         $wallmessage_link = $visitor_base_path . '/message/new/' . $profile_contact['id'];
 346                                 } elseif ($visitor_is_authenticated && !empty($profile['unkmail'])) {
 347                                         $wallmessage_link = 'wallmessage/' . $profile['nickname'];
 348                                 }
 349                         }
 350                 }
 351
 352                 // show edit profile to yourself, but only if this is not meant to be
 353                 // rendered as a "contact". i.e., if 'self' (a "contact" table column) isn't
 354                 // set in $profile.
 355                 if (!isset($profile['self']) && $local_user_is_self) {
 356                         $profile['edit'] = [DI::baseUrl() . '/settings/profile', DI::l10n()->t('Edit profile'), '', DI::l10n()->t('Edit profile')];
 357                         $profile['menu'] = [
 358                                 'chg_photo' => DI::l10n()->t('Change profile photo'),
 359                                 'cr_new' => null,
 360                                 'entries' => [],
 361                         ];
 362                 }
 363
 364                 // Fetch the account type
 365                 $account_type = Contact::getAccountType($profile);
 366
 367                 if (!empty($profile['address']) || !empty($profile['location'])) {
 368                         $location = DI::l10n()->t('Location:');
 369                 }
 370
 371                 $homepage = !empty($profile['homepage']) ? DI::l10n()->t('Homepage:') : false;
 372                 $about    = !empty($profile['about'])    ? DI::l10n()->t('About:')    : false;
 373                 $xmpp     = !empty($profile['xmpp'])     ? DI::l10n()->t('XMPP:')     : false;
 374                 $matrix   = !empty($profile['matrix'])   ? DI::l10n()->t('Matrix:')   : false;
 375
 376                 if ((!empty($profile['hidewall']) || $block) && !Session::isAuthenticated()) {
 377                         $location = $homepage = $about = false;
 378                 }
 379
 380                 $split_name = Diaspora::splitName($profile['name']);
 381                 $firstname = $split_name['first'];
 382                 $lastname = $split_name['last'];
 383
 384                 if (!empty($profile['guid'])) {
 385                         $diaspora = [
 386                                 'guid' => $profile['guid'],
 387                                 'podloc' => DI::baseUrl(),
 388                                 'searchable' => ($profile['net-publish'] ? 'true' : 'false'),
 389                                 'nickname' => $profile['nickname'],
 390                                 'fullname' => $profile['name'],
 391                                 'firstname' => $firstname,
 392                                 'lastname' => $lastname,
 393                                 'photo300' => $profile['photo'] ?? '',
 394                                 'photo100' => $profile['thumb'] ?? '',
 395                                 'photo50' => $profile['micro'] ?? '',
 396                         ];
 397                 } else {
 398                         $diaspora = false;
 399                 }
 400
 401                 $contact_block = '';
 402                 $updated = '';
 403                 $contact_count = 0;
 404
 405                 if (!empty($profile['last-item'])) {
 406                         $updated = date('c', strtotime($profile['last-item']));
 407                 }
 408
 409                 if (!$block && $show_contacts) {
 410                         $contact_block = ContactBlock::getHTML($profile, local_user());
 411
 412                         if (is_array($profile) && !$profile['hide-friends']) {
 413                                 $contact_count = DBA::count('contact', [
 414                                         'uid' => $profile['uid'],
 415                                         'self' => false,
 416                                         'blocked' => false,
 417                                         'pending' => false,
 418                                         'hidden' => false,
 419                                         'archive' => false,
 420                                         'failed' => false,
 421                                         'network' => Protocol::FEDERATED,
 422                                 ]);
 423                         }
 424                 }
 425
 426                 // Expected profile/vcard.tpl profile.* template variables
 427                 $p = [
 428                         'address' => null,
 429                         'edit' => null,
 430                         'upubkey' => null,
 431                 ];
 432                 foreach ($profile as $k => $v) {
 433                         $k = str_replace('-', '_', $k);
 434                         $p[$k] = $v;
 435                 }
 436
 437                 if (isset($p['about'])) {
 438                         $p['about'] = BBCode::convertForUriId($profile['uri-id'] ?? 0, $p['about']);
 439                 }
 440
 441                 if (isset($p['address'])) {
 442                         $p['address'] = BBCode::convertForUriId($profile['uri-id'] ?? 0, $p['address']);
 443                 }
 444
 445                 $p['photo'] = Contact::getAvatarUrlForId($cid, Proxy::SIZE_SMALL);
 446
 447                 $p['url'] = Contact::magicLinkById($cid, $profile['url']);
 448
 449                 $tpl = Renderer::getMarkupTemplate('profile/vcard.tpl');
 450                 $o .= Renderer::replaceMacros($tpl, [
 451                         '$profile' => $p,
 452                         '$xmpp' => $xmpp,
 453                         '$matrix' => $matrix,
 454                         '$follow' => DI::l10n()->t('Follow'),
 455                         '$follow_link' => $follow_link,
 456                         '$unfollow' => DI::l10n()->t('Unfollow'),
 457                         '$unfollow_link' => $unfollow_link,
 458                         '$subscribe_feed' => DI::l10n()->t('Atom feed'),
 459                         '$subscribe_feed_link' => $profile['poll'],
 460                         '$wallmessage' => DI::l10n()->t('Message'),
 461                         '$wallmessage_link' => $wallmessage_link,
 462                         '$account_type' => $account_type,
 463                         '$location' => $location,
 464                         '$homepage' => $homepage,
 465                         '$about' => $about,
 466                         '$network' => DI::l10n()->t('Network:'),
 467                         '$contacts' => $contact_count,
 468                         '$updated' => $updated,
 469                         '$diaspora' => $diaspora,
 470                         '$contact_block' => $contact_block,
 471                 ]);
 472
 473                 $arr = ['profile' => &$profile, 'entry' => &$o];
 474
 475                 Hook::callAll('profile_sidebar', $arr);
 476
 477                 return $o;
 478         }
 479
 480         /**
 481          * Returns the upcoming birthdays of contacts of the current user as HTML content
 482          *
 483          * @return string The upcoming birthdays (HTML)
 484          *
 485          * @throws HTTPException\InternalServerErrorException
 486          * @throws HTTPException\ServiceUnavailableException
 487          * @throws \ImagickException
 488          */
 489         public static function getBirthdays(): string
 490         {
 491                 if (!local_user() || DI::mode()->isMobile() || DI::mode()->isMobile()) {
 492                         return '';
 493                 }
 494
 495                 /*
 496                 * $mobile_detect = new Mobile_Detect();
 497                 * $is_mobile = $mobile_detect->isMobile() || $mobile_detect->isTablet();
 498                 *               if ($is_mobile)
 499                 *                       return $o;
 500                 */
 501
 502                 $bd_short = DI::l10n()->t('F d');
 503
 504                 $cacheKey = 'get_birthdays:' . local_user();
 505                 $events   = DI::cache()->get($cacheKey);
 506                 if (is_null($events)) {
 507                         $result = DBA::p(
 508                                 "SELECT `event`.*, `event`.`id` AS `eid`, `contact`.* FROM `event`
 509                                 INNER JOIN `contact`
 510                                         ON `contact`.`id` = `event`.`cid`
 511                                         AND (`contact`.`rel` = ? OR `contact`.`rel` = ?)
 512                                         AND NOT `contact`.`pending`
 513                                         AND NOT `contact`.`hidden`
 514                                         AND NOT `contact`.`blocked`
 515                                         AND NOT `contact`.`archive`
 516                                         AND NOT `contact`.`deleted`
 517                                 WHERE `event`.`uid` = ? AND `type` = 'birthday' AND `start` < ? AND `finish` > ?
 518                                 ORDER BY `start`",
 519                                 Contact::SHARING,
 520                                 Contact::FRIEND,
 521                                 local_user(),
 522                                 DateTimeFormat::utc('now + 6 days'),
 523                                 DateTimeFormat::utcNow()
 524                         );
 525                         if (DBA::isResult($result)) {
 526                                 $events = DBA::toArray($result);
 527                                 DI::cache()->set($cacheKey, $events, Duration::HOUR);
 528                         }
 529                 }
 530
 531                 $total      = 0;
 532                 $classToday = '';
 533                 $tpl_events = [];
 534                 if (DBA::isResult($events)) {
 535                         $now  = strtotime('now');
 536                         $cids = [];
 537
 538                         $isToday = false;
 539                         foreach ($events as $event) {
 540                                 if (strlen($event['name'])) {
 541                                         $total++;
 542                                 }
 543                                 if ((strtotime($event['start'] . ' +00:00') < $now) && (strtotime($event['finish'] . ' +00:00') > $now)) {
 544                                         $isToday = true;
 545                                 }
 546                         }
 547                         $classToday = $isToday ? ' birthday-today ' : '';
 548                         if ($total) {
 549                                 foreach ($events as $event) {
 550                                         if (!strlen($event['name'])) {
 551                                                 continue;
 552                                         }
 553
 554                                         // avoid duplicates
 555                                         if (in_array($event['cid'], $cids)) {
 556                                                 continue;
 557                                         }
 558                                         $cids[] = $event['cid'];
 559
 560                                         $today = (strtotime($event['start'] . ' +00:00') < $now) && (strtotime($event['finish'] . ' +00:00') > $now);
 561
 562                                         $tpl_events[] = [
 563                                                 'id'    => $event['id'],
 564                                                 'link'  => Contact::magicLinkById($event['cid']),
 565                                                 'title' => $event['name'],
 566                                                 'date'  => DI::l10n()->getDay(DateTimeFormat::local($event['start'], $bd_short)) . (($today) ? ' ' . DI::l10n()->t('[today]') : '')
 567                                         ];
 568                                 }
 569                         }
 570                 }
 571                 $tpl = Renderer::getMarkupTemplate('birthdays_reminder.tpl');
 572                 return Renderer::replaceMacros($tpl, [
 573                         '$classtoday'      => $classToday,
 574                         '$count'           => $total,
 575                         '$event_reminders' => DI::l10n()->t('Birthday Reminders'),
 576                         '$event_title'     => DI::l10n()->t('Birthdays this week:'),
 577                         '$events'          => $tpl_events,
 578                         '$lbr'             => '{', // raw brackets mess up if/endif macro processing
 579                         '$rbr'             => '}'
 580                 ]);
 581         }
 582
 583         public static function getEventsReminderHTML()
 584         {
 585                 $a = DI::app();
 586                 $o = '';
 587
 588                 if (!local_user() || DI::mode()->isMobile() || DI::mode()->isMobile()) {
 589                         return $o;
 590                 }
 591
 592                 /*
 593                 *       $mobile_detect = new Mobile_Detect();
 594                 *               $is_mobile = $mobile_detect->isMobile() || $mobile_detect->isTablet();
 595                 *               if ($is_mobile)
 596                 *                       return $o;
 597                 */
 598
 599                 $bd_format = DI::l10n()->t('g A l F d'); // 8 AM Friday January 18
 600                 $classtoday = '';
 601
 602                 $condition = ["`uid` = ? AND `type` != 'birthday' AND `start` < ? AND `start` >= ?",
 603                         local_user(), DateTimeFormat::utc('now + 7 days'), DateTimeFormat::utc('now - 1 days')];
 604                 $s = DBA::select('event', [], $condition, ['order' => ['start']]);
 605
 606                 $r = [];
 607
 608                 if (DBA::isResult($s)) {
 609                         $istoday = false;
 610                         $total = 0;
 611
 612                         while ($rr = DBA::fetch($s)) {
 613                                 $condition = ['parent-uri' => $rr['uri'], 'uid' => $rr['uid'], 'author-id' => public_contact(),
 614                                         'vid' => [Verb::getID(Activity::ATTEND), Verb::getID(Activity::ATTENDMAYBE)],
 615                                         'visible' => true, 'deleted' => false];
 616                                 if (!Post::exists($condition)) {
 617                                         continue;
 618                                 }
 619
 620                                 if (strlen($rr['summary'])) {
 621                                         $total++;
 622                                 }
 623
 624                                 $strt = DateTimeFormat::local($rr['start'], 'Y-m-d');
 625                                 if ($strt === DateTimeFormat::localNow('Y-m-d')) {
 626                                         $istoday = true;
 627                                 }
 628
 629                                 $title = strip_tags(html_entity_decode(BBCode::convertForUriId($rr['uri-id'], $rr['summary']), ENT_QUOTES, 'UTF-8'));
 630
 631                                 if (strlen($title) > 35) {
 632                                         $title = substr($title, 0, 32) . '... ';
 633                                 }
 634
 635                                 $description = substr(strip_tags(BBCode::convertForUriId($rr['uri-id'], $rr['desc'])), 0, 32) . '... ';
 636                                 if (!$description) {
 637                                         $description = DI::l10n()->t('[No description]');
 638                                 }
 639
 640                                 $strt = DateTimeFormat::local($rr['start']);
 641
 642                                 if (substr($strt, 0, 10) < DateTimeFormat::localNow('Y-m-d')) {
 643                                         continue;
 644                                 }
 645
 646                                 $today = substr($strt, 0, 10) === DateTimeFormat::localNow('Y-m-d');
 647
 648                                 $rr['title'] = $title;
 649                                 $rr['description'] = $description;
 650                                 $rr['date'] = DI::l10n()->getDay(DateTimeFormat::local($rr['start'], $bd_format)) . (($today) ? ' ' . DI::l10n()->t('[today]') : '');
 651                                 $rr['startime'] = $strt;
 652                                 $rr['today'] = $today;
 653
 654                                 $r[] = $rr;
 655                         }
 656                         DBA::close($s);
 657                         $classtoday = (($istoday) ? 'event-today' : '');
 658                 }
 659                 $tpl = Renderer::getMarkupTemplate('events_reminder.tpl');
 660                 return Renderer::replaceMacros($tpl, [
 661                         '$classtoday' => $classtoday,
 662                         '$count' => count($r),
 663                         '$event_reminders' => DI::l10n()->t('Event Reminders'),
 664                         '$event_title' => DI::l10n()->t('Upcoming events the next 7 days:'),
 665                         '$events' => $r,
 666                 ]);
 667         }
 668
 669         /**
 670          * Retrieves the my_url session variable
 671          *
 672          * @return string
 673          */
 674         public static function getMyURL()
 675         {
 676                 return Session::get('my_url');
 677         }
 678
 679         /**
 680          * Process the 'zrl' parameter and initiate the remote authentication.
 681          *
 682          * This method checks if the visitor has a public contact entry and
 683          * redirects the visitor to his/her instance to start the magic auth (Authentication)
 684          * process.
 685          *
 686          * Ported from Hubzilla: https://framagit.org/hubzilla/core/blob/master/include/channel.php
 687          *
 688          * The implementation for Friendica sadly differs in some points from the one for Hubzilla:
 689          * - Hubzilla uses the "zid" parameter, while for Friendica it had been replaced with "zrl"
 690          * - There seem to be some reverse authentication (rmagic) that isn't implemented in Friendica at all
 691          *
 692          * It would be favourable to harmonize the two implementations.
 693          *
 694          * @param App $a Application instance.
 695          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 696          * @throws \ImagickException
 697          */
 698         public static function zrlInit(App $a)
 699         {
 700                 $my_url = self::getMyURL();
 701                 $my_url = Network::isUrlValid($my_url);
 702
 703                 if (empty($my_url) || local_user()) {
 704                         return;
 705                 }
 706
 707                 $addr = $_GET['addr'] ?? $my_url;
 708
 709                 $arr = ['zrl' => $my_url, 'url' => DI::args()->getCommand()];
 710                 Hook::callAll('zrl_init', $arr);
 711
 712                 // Try to find the public contact entry of the visitor.
 713                 $cid = Contact::getIdForURL($my_url);
 714                 if (!$cid) {
 715                         Logger::info('No contact record found for ' . $my_url);
 716                         return;
 717                 }
 718
 719                 $contact = DBA::selectFirst('contact',['id', 'url'], ['id' => $cid]);
 720
 721                 if (DBA::isResult($contact) && remote_user() && remote_user() == $contact['id']) {
 722                         Logger::info('The visitor ' . $my_url . ' is already authenticated');
 723                         return;
 724                 }
 725
 726                 // Avoid endless loops
 727                 $cachekey = 'zrlInit:' . $my_url;
 728                 if (DI::cache()->get($cachekey)) {
 729                         Logger::info('URL ' . $my_url . ' already tried to authenticate.');
 730                         return;
 731                 } else {
 732                         DI::cache()->set($cachekey, true, Duration::MINUTE);
 733                 }
 734
 735                 Logger::info('Not authenticated. Invoking reverse magic-auth for ' . $my_url);
 736
 737                 // Remove the "addr" parameter from the destination. It is later added as separate parameter again.
 738                 $addr_request = 'addr=' . urlencode($addr);
 739                 $query = rtrim(str_replace($addr_request, '', DI::args()->getQueryString()), '?&');
 740
 741                 // The other instance needs to know where to redirect.
 742                 $dest = urlencode(DI::baseUrl()->get() . '/' . $query);
 743
 744                 // We need to extract the basebath from the profile url
 745                 // to redirect the visitors '/magic' module.
 746                 $basepath = Contact::getBasepath($contact['url']);
 747
 748                 if ($basepath != DI::baseUrl()->get() && !strstr($dest, '/magic')) {
 749                         $magic_path = $basepath . '/magic' . '?owa=1&dest=' . $dest . '&' . $addr_request;
 750
 751                         // We have to check if the remote server does understand /magic without invoking something
 752                         $serverret = DI::httpClient()->get($basepath . '/magic');
 753                         if ($serverret->isSuccess()) {
 754                                 Logger::info('Doing magic auth for visitor ' . $my_url . ' to ' . $magic_path);
 755                                 System::externalRedirect($magic_path);
 756                         }
 757                 }
 758         }
 759
 760         /**
 761          * Set the visitor cookies (see remote_user()) for the given handle
 762          *
 763          * @param string $handle Visitor handle
 764          * @return array Visitor contact array
 765          */
 766         public static function addVisitorCookieForHandle($handle)
 767         {
 768                 $a = DI::app();
 769
 770                 // Try to find the public contact entry of the visitor.
 771                 $cid = Contact::getIdForURL($handle);
 772                 if (!$cid) {
 773                         Logger::info('Handle not found', ['handle' => $handle]);
 774                         return [];
 775                 }
 776
 777                 $visitor = Contact::getById($cid);
 778
 779                 // Authenticate the visitor.
 780                 $_SESSION['authenticated'] = 1;
 781                 $_SESSION['visitor_id'] = $visitor['id'];
 782                 $_SESSION['visitor_handle'] = $visitor['addr'];
 783                 $_SESSION['visitor_home'] = $visitor['url'];
 784                 $_SESSION['my_url'] = $visitor['url'];
 785                 $_SESSION['remote_comment'] = $visitor['subscribe'];
 786
 787                 Session::setVisitorsContacts();
 788
 789                 $a->setContactId($visitor['id']);
 790
 791                 Logger::info('Authenticated visitor', ['url' => $visitor['url']]);
 792
 793                 return $visitor;
 794         }
 795
 796         /**
 797          * Set the visitor cookies (see remote_user()) for signed HTTP requests
 798          * @return array Visitor contact array
 799          */
 800         public static function addVisitorCookieForHTTPSigner()
 801         {
 802                 $requester = HTTPSignature::getSigner('', $_SERVER);
 803                 if (empty($requester)) {
 804                         return [];
 805                 }
 806                 return Profile::addVisitorCookieForHandle($requester);
 807         }
 808
 809         /**
 810          * OpenWebAuth authentication.
 811          *
 812          * Ported from Hubzilla: https://framagit.org/hubzilla/core/blob/master/include/zid.php
 813          *
 814          * @param string $token
 815          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 816          * @throws \ImagickException
 817          */
 818         public static function openWebAuthInit($token)
 819         {
 820                 $a = DI::app();
 821
 822                 // Clean old OpenWebAuthToken entries.
 823                 OpenWebAuthToken::purge('owt', '3 MINUTE');
 824
 825                 // Check if the token we got is the same one
 826                 // we have stored in the database.
 827                 $visitor_handle = OpenWebAuthToken::getMeta('owt', 0, $token);
 828
 829                 if ($visitor_handle === false) {
 830                         return;
 831                 }
 832
 833                 $visitor = self::addVisitorCookieForHandle($visitor_handle);
 834                 if (empty($visitor)) {
 835                         return;
 836                 }
 837
 838                 $arr = [
 839                         'visitor' => $visitor,
 840                         'url' => DI::args()->getQueryString()
 841                 ];
 842                 /**
 843                  * @hooks magic_auth_success
 844                  *   Called when a magic-auth was successful.
 845                  *   * \e array \b visitor
 846                  *   * \e string \b url
 847                  */
 848                 Hook::callAll('magic_auth_success', $arr);
 849
 850                 $a->setContactId($arr['visitor']['id']);
 851
 852                 info(DI::l10n()->t('OpenWebAuth: %1$s welcomes %2$s', DI::baseUrl()->getHostname(), $visitor['name']));
 853
 854                 Logger::info('OpenWebAuth: auth success from ' . $visitor['addr']);
 855         }
 856
 857         public static function zrl($s, $force = false)
 858         {
 859                 if (!strlen($s)) {
 860                         return $s;
 861                 }
 862                 if (!strpos($s, '/profile/') && !$force) {
 863                         return $s;
 864                 }
 865                 if ($force && substr($s, -1, 1) !== '/') {
 866                         $s = $s . '/';
 867                 }
 868                 $achar = strpos($s, '?') ? '&' : '?';
 869                 $mine = self::getMyURL();
 870                 if ($mine && !Strings::compareLink($mine, $s)) {
 871                         return $s . $achar . 'zrl=' . urlencode($mine);
 872                 }
 873                 return $s;
 874         }
 875
 876         /**
 877          * Get the user ID of the page owner.
 878          *
 879          * Used from within PCSS themes to set theme parameters. If there's a
 880          * profile_uid variable set in App, that is the "page owner" and normally their theme
 881          * settings take precedence; unless a local user sets the "always_my_theme"
 882          * system pconfig, which means they don't want to see anybody else's theme
 883          * settings except their own while on this site.
 884          *
 885          * @return int user ID
 886          *
 887          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 888          * @note Returns local_user instead of user ID if "always_my_theme" is set to true
 889          */
 890         public static function getThemeUid(App $a)
 891         {
 892                 $uid = !empty($a->getProfileOwner()) ? intval($a->getProfileOwner()) : 0;
 893                 if (local_user() && (DI::pConfig()->get(local_user(), 'system', 'always_my_theme') || !$uid)) {
 894                         return local_user();
 895                 }
 896
 897                 return $uid;
 898         }
 899
 900         /**
 901          * search for Profiles
 902          *
 903          * @param int  $start
 904          * @param int  $count
 905          * @param null $search
 906          *
 907          * @return array [ 'total' => 123, 'entries' => [...] ];
 908          *
 909          * @throws \Exception
 910          */
 911         public static function searchProfiles($start = 0, $count = 100, $search = null)
 912         {
 913                 if (!empty($search)) {
 914                         $publish = (DI::config()->get('system', 'publish_all') ? '' : "AND `publish` ");
 915                         $searchTerm = '%' . $search . '%';
 916                         $condition = ["NOT `blocked` AND NOT `account_removed`
 917                                 $publish
 918                                 AND ((`name` LIKE ?) OR
 919                                 (`nickname` LIKE ?) OR
 920                                 (`about` LIKE ?) OR
 921                                 (`locality` LIKE ?) OR
 922                                 (`region` LIKE ?) OR
 923                                 (`country-name` LIKE ?) OR
 924                                 (`pub_keywords` LIKE ?) OR
 925                                 (`prv_keywords` LIKE ?))",
 926                                 $searchTerm, $searchTerm, $searchTerm, $searchTerm,
 927                                 $searchTerm, $searchTerm, $searchTerm, $searchTerm];
 928                 } else {
 929                         $condition = ['blocked' => false, 'account_removed' => false];
 930                         if (!DI::config()->get('system', 'publish_all')) {
 931                                 $condition['publish'] = true;
 932                         }
 933                 }
 934
 935                 $total = DBA::count('owner-view', $condition);
 936
 937                 // If nothing found, don't try to select details
 938                 if ($total > 0) {
 939                         $profiles = DBA::selectToArray('owner-view', [], $condition, ['order' => ['name'], 'limit' => [$start, $count]]);
 940                 } else {
 941                         $profiles = [];
 942                 }
 943
 944                 return ['total' => $total, 'entries' => $profiles];
 945         }
 946
 947         /**
 948          * Migrates a legacy profile to the new slimmer profile with extra custom fields.
 949          * Multi profiles are converted to ACl-protected custom fields and deleted.
 950          *
 951          * @param array $profile One profile array
 952          * @throws \Exception
 953          */
 954         public static function migrate(array $profile)
 955         {
 956                 // Already processed, aborting
 957                 if ($profile['is-default'] === null) {
 958                         return;
 959                 }
 960
 961                 $contacts = [];
 962
 963                 if (!$profile['is-default']) {
 964                         $contacts = Contact::selectToArray(['id'], [
 965                                 'uid'        => $profile['uid'],
 966                                 'profile-id' => $profile['id']
 967                         ]);
 968                         if (!count($contacts)) {
 969                                 // No contact visibility selected defaults to user-only permission
 970                                 $contacts = Contact::selectToArray(['id'], ['uid' => $profile['uid'], 'self' => true]);
 971                         }
 972                 }
 973
 974                 $permissionSet = DI::permissionSet()->selectOrCreate(
 975                         new PermissionSet(
 976                                 $profile['uid'],
 977                                 array_column($contacts, 'id') ?? []
 978                         )
 979                 );
 980
 981                 $order = 1;
 982
 983                 $custom_fields = [
 984                         'hometown'  => DI::l10n()->t('Hometown:'),
 985                         'marital'   => DI::l10n()->t('Marital Status:'),
 986                         'with'      => DI::l10n()->t('With:'),
 987                         'howlong'   => DI::l10n()->t('Since:'),
 988                         'sexual'    => DI::l10n()->t('Sexual Preference:'),
 989                         'politic'   => DI::l10n()->t('Political Views:'),
 990                         'religion'  => DI::l10n()->t('Religious Views:'),
 991                         'likes'     => DI::l10n()->t('Likes:'),
 992                         'dislikes'  => DI::l10n()->t('Dislikes:'),
 993                         'pdesc'     => DI::l10n()->t('Title/Description:'),
 994                         'summary'   => DI::l10n()->t('Summary'),
 995                         'music'     => DI::l10n()->t('Musical interests'),
 996                         'book'      => DI::l10n()->t('Books, literature'),
 997                         'tv'        => DI::l10n()->t('Television'),
 998                         'film'      => DI::l10n()->t('Film/dance/culture/entertainment'),
 999                         'interest'  => DI::l10n()->t('Hobbies/Interests'),
1000                         'romance'   => DI::l10n()->t('Love/romance'),
1001                         'work'      => DI::l10n()->t('Work/employment'),
1002                         'education' => DI::l10n()->t('School/education'),
1003                         'contact'   => DI::l10n()->t('Contact information and Social Networks'),
1004                 ];
1005
1006                 foreach ($custom_fields as $field => $label) {
1007                         if (!empty($profile[$field]) && $profile[$field] > DBA::NULL_DATE && $profile[$field] > DBA::NULL_DATETIME) {
1008                                 DI::profileField()->save(DI::profileFieldFactory()->createFromValues(
1009                                         $profile['uid'],
1010                                         $order,
1011                                         trim($label, ':'),
1012                                         $profile[$field],
1013                                         $permissionSet
1014                                 ));
1015                         }
1016
1017                         $profile[$field] = null;
1018                 }
1019
1020                 if ($profile['is-default']) {
1021                         $profile['profile-name'] = null;
1022                         $profile['is-default']   = null;
1023                         DBA::update('profile', $profile, ['id' => $profile['id']]);
1024                 } else if (!empty($profile['id'])) {
1025                         DBA::delete('profile', ['id' => $profile['id']]);
1026                 }
1027         }
1028 }