src/Model/Profile.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2020, Friendica
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 namespace Friendica\Model;
  23
  24 use Friendica\App;
  25 use Friendica\Content\Text\BBCode;
  26 use Friendica\Content\Widget\ContactBlock;
  27 use Friendica\Core\Cache\Duration;
  28 use Friendica\Core\Hook;
  29 use Friendica\Core\Logger;
  30 use Friendica\Network\Probe;
  31 use Friendica\Core\Protocol;
  32 use Friendica\Core\Renderer;
  33 use Friendica\Core\Session;
  34 use Friendica\Core\System;
  35 use Friendica\Database\DBA;
  36 use Friendica\DI;
  37 use Friendica\Protocol\Activity;
  38 use Friendica\Protocol\Diaspora;
  39 use Friendica\Util\DateTimeFormat;
  40 use Friendica\Util\Network;
  41 use Friendica\Util\Proxy as ProxyUtils;
  42 use Friendica\Util\Strings;
  43
  44 class Profile
  45 {
  46         /**
  47          * Returns default profile for a given user id
  48          *
  49          * @param integer User ID
  50          *
  51          * @return array Profile data
  52          * @throws \Exception
  53          */
  54         public static function getByUID($uid)
  55         {
  56                 return DBA::selectFirst('profile', [], ['uid' => $uid]);
  57         }
  58
  59         /**
  60          * Returns default profile for a given user ID and ID
  61          *
  62          * @param int $uid The contact ID
  63          * @param int $id The contact owner ID
  64          * @param array $fields The selected fields
  65          *
  66          * @return array Profile data for the ID
  67          * @throws \Exception
  68          */
  69         public static function getById(int $uid, int $id, array $fields = [])
  70         {
  71                 return DBA::selectFirst('profile', $fields, ['uid' => $uid, 'id' => $id]);
  72         }
  73
  74         /**
  75          * Returns profile data for the contact owner
  76          *
  77          * @param int $uid The User ID
  78          * @param array $fields The fields to retrieve
  79          *
  80          * @return array Array of profile data
  81          * @throws \Exception
  82          */
  83         public static function getListByUser(int $uid, array $fields = [])
  84         {
  85                 return DBA::selectToArray('profile', $fields, ['uid' => $uid]);
  86         }
  87
  88         /**
  89          * Returns a formatted location string from the given profile array
  90          *
  91          * @param array $profile Profile array (Generated from the "profile" table)
  92          *
  93          * @return string Location string
  94          */
  95         public static function formatLocation(array $profile)
  96         {
  97                 $location = '';
  98
  99                 if (!empty($profile['locality'])) {
 100                         $location .= $profile['locality'];
 101                 }
 102
 103                 if (!empty($profile['region']) && (($profile['locality'] ?? '') != $profile['region'])) {
 104                         if ($location) {
 105                                 $location .= ', ';
 106                         }
 107
 108                         $location .= $profile['region'];
 109                 }
 110
 111                 if (!empty($profile['country-name'])) {
 112                         if ($location) {
 113                                 $location .= ', ';
 114                         }
 115
 116                         $location .= $profile['country-name'];
 117                 }
 118
 119                 return $location;
 120         }
 121
 122         /**
 123          * Loads a profile into the page sidebar.
 124          *
 125          * The function requires a writeable copy of the main App structure, and the nickname
 126          * of a registered local account.
 127          *
 128          * If the viewer is an authenticated remote viewer, the profile displayed is the
 129          * one that has been configured for his/her viewing in the Contact manager.
 130          * Passing a non-zero profile ID can also allow a preview of a selected profile
 131          * by the owner.
 132          *
 133          * Profile information is placed in the App structure for later retrieval.
 134          * Honours the owner's chosen theme for display.
 135          *
 136          * @attention Should only be run in the _init() functions of a module. That ensures that
 137          *      the theme is chosen before the _init() function of a theme is run, which will usually
 138          *      load a lot of theme-specific content
 139          *
 140          * @param App     $a
 141          * @param string  $nickname     string
 142          * @param array   $profiledata  array
 143          * @param boolean $show_connect Show connect link
 144          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 145          * @throws \ImagickException
 146          */
 147         public static function load(App $a, $nickname, array $profiledata = [], $show_connect = true)
 148         {
 149                 $user = DBA::selectFirst('user', ['uid'], ['nickname' => $nickname, 'account_removed' => false]);
 150
 151                 if (!DBA::isResult($user) && empty($profiledata)) {
 152                         Logger::log('profile error: ' . DI::args()->getQueryString(), Logger::DEBUG);
 153                         return;
 154                 }
 155
 156                 if (count($profiledata) > 0) {
 157                         // Ensure to have a "nickname" field
 158                         if (empty($profiledata['nickname']) && !empty($profiledata['nick'])) {
 159                                 $profiledata['nickname'] = $profiledata['nick'];
 160                         }
 161
 162                         // Add profile data to sidebar
 163                         DI::page()['aside'] .= self::sidebar($a, $profiledata, true, $show_connect);
 164
 165                         if (!DBA::isResult($user)) {
 166                                 return;
 167                         }
 168                 }
 169
 170                 $profile = self::getByNickname($nickname, $user['uid']);
 171
 172                 if (empty($profile) && empty($profiledata)) {
 173                         Logger::log('profile error: ' . DI::args()->getQueryString(), Logger::DEBUG);
 174                         return;
 175                 }
 176
 177                 if (empty($profile)) {
 178                         $profile = ['uid' => 0, 'name' => $nickname];
 179                 }
 180
 181                 $a->profile = $profile;
 182                 $a->profile_uid = $profile['uid'];
 183
 184                 $a->profile['mobile-theme'] = DI::pConfig()->get($a->profile['uid'], 'system', 'mobile_theme');
 185                 $a->profile['network'] = Protocol::DFRN;
 186
 187                 DI::page()['title'] = $a->profile['name'] . ' @ ' . DI::config()->get('config', 'sitename');
 188
 189                 if (!$profiledata && !DI::pConfig()->get(local_user(), 'system', 'always_my_theme')) {
 190                         $a->setCurrentTheme($a->profile['theme']);
 191                         $a->setCurrentMobileTheme($a->profile['mobile-theme']);
 192                 }
 193
 194                 /*
 195                 * load/reload current theme info
 196                 */
 197
 198                 Renderer::setActiveTemplateEngine(); // reset the template engine to the default in case the user's theme doesn't specify one
 199
 200                 $theme_info_file = 'view/theme/' . $a->getCurrentTheme() . '/theme.php';
 201                 if (file_exists($theme_info_file)) {
 202                         require_once $theme_info_file;
 203                 }
 204
 205                 $block = ((DI::config()->get('system', 'block_public') && !Session::isAuthenticated()) ? true : false);
 206
 207                 /**
 208                  * @todo
 209                  * By now, the contact block isn't shown, when a different profile is given
 210                  * But: When this profile was on the same server, then we could display the contacts
 211                  */
 212                 if (!$profiledata) {
 213                         DI::page()['aside'] .= self::sidebar($a, $a->profile, $block, $show_connect);
 214                 }
 215
 216                 return;
 217         }
 218
 219         /**
 220          * Get all profile data of a local user
 221          *
 222          * If the viewer is an authenticated remote viewer, the profile displayed is the
 223          * one that has been configured for his/her viewing in the Contact manager.
 224          * Passing a non-zero profile ID can also allow a preview of a selected profile
 225          * by the owner
 226          *
 227          * Includes all available profile data
 228          *
 229          * @param string $nickname   nick
 230          * @param int    $uid        uid
 231          * @param int    $profile_id ID of the profile
 232          * @return array
 233          * @throws \Exception
 234          */
 235         public static function getByNickname($nickname, $uid = 0)
 236         {
 237                 $profile = DBA::fetchFirst(
 238                         "SELECT `contact`.`id` AS `contact_id`, `contact`.`photo` AS `contact_photo`,
 239                                 `contact`.`thumb` AS `contact_thumb`, `contact`.`micro` AS `contact_micro`,
 240                                 `profile`.*,
 241                                 `contact`.`avatar-date` AS picdate, `contact`.`addr`, `contact`.`url`, `user`.*
 242                         FROM `profile`
 243                         INNER JOIN `contact` on `contact`.`uid` = `profile`.`uid` AND `contact`.`self`
 244                         INNER JOIN `user` ON `profile`.`uid` = `user`.`uid`
 245                         WHERE `user`.`nickname` = ? AND `profile`.`uid` = ? LIMIT 1",
 246                         $nickname,
 247                         intval($uid)
 248                 );
 249
 250                 return $profile;
 251         }
 252
 253         /**
 254          * Formats a profile for display in the sidebar.
 255          *
 256          * It is very difficult to templatise the HTML completely
 257          * because of all the conditional logic.
 258          *
 259          * @param array   $profile
 260          * @param int     $block
 261          * @param boolean $show_connect Show connect link
 262          *
 263          * @return string HTML sidebar module
 264          *
 265          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 266          * @throws \ImagickException
 267          * @note  Returns empty string if passed $profile is wrong type or not populated
 268          *
 269          * @hooks 'profile_sidebar_enter'
 270          *      array $profile - profile data
 271          * @hooks 'profile_sidebar'
 272          *      array $arr
 273          */
 274         private static function sidebar(App $a, $profile, $block = 0, $show_connect = true)
 275         {
 276                 $o = '';
 277                 $location = false;
 278
 279                 // This function can also use contact information in $profile
 280                 $is_contact = !empty($profile['cid']);
 281
 282                 if (!is_array($profile) && !count($profile)) {
 283                         return $o;
 284                 }
 285
 286                 $profile['picdate'] = urlencode($profile['picdate'] ?? '');
 287
 288                 if (($profile['network'] != '') && ($profile['network'] != Protocol::DFRN)) {
 289                         $profile['network_link'] = Strings::formatNetworkName($profile['network'], $profile['url']);
 290                 } else {
 291                         $profile['network_link'] = '';
 292                 }
 293
 294                 Hook::callAll('profile_sidebar_enter', $profile);
 295
 296                 if (isset($profile['url'])) {
 297                         $profile_url = $profile['url'];
 298                 } else {
 299                         $profile_url = DI::baseUrl()->get() . '/profile/' . $profile['nickname'];
 300                 }
 301
 302                 $follow_link = null;
 303                 $unfollow_link = null;
 304                 $subscribe_feed_link = null;
 305                 $wallmessage_link = null;
 306
 307
 308
 309                 $visitor_contact = [];
 310                 if (!empty($profile['uid']) && self::getMyURL()) {
 311                         $visitor_contact = Contact::selectFirst(['rel'], ['uid' => $profile['uid'], 'nurl' => Strings::normaliseLink(self::getMyURL())]);
 312                 }
 313
 314                 $profile_contact = [];
 315                 if (!empty($profile['cid']) && self::getMyURL()) {
 316                         $profile_contact = Contact::selectFirst(['rel'], ['id' => $profile['cid']]);
 317                 }
 318
 319                 $profile_is_dfrn = $profile['network'] == Protocol::DFRN;
 320                 $profile_is_native = in_array($profile['network'], Protocol::NATIVE_SUPPORT);
 321                 $local_user_is_self = local_user() && local_user() == ($profile['uid'] ?? 0);
 322                 $visitor_is_authenticated = (bool)self::getMyURL();
 323                 $visitor_is_following =
 324                         in_array($visitor_contact['rel'] ?? 0, [Contact::FOLLOWER, Contact::FRIEND])
 325                         || in_array($profile_contact['rel'] ?? 0, [Contact::SHARING, Contact::FRIEND]);
 326                 $visitor_is_followed =
 327                         in_array($visitor_contact['rel'] ?? 0, [Contact::SHARING, Contact::FRIEND])
 328                         || in_array($profile_contact['rel'] ?? 0, [Contact::FOLLOWER, Contact::FRIEND]);
 329                 $visitor_base_path = self::getMyURL() ? preg_replace('=/profile/(.*)=ism', '', self::getMyURL()) : '';
 330
 331                 if (!$local_user_is_self && $show_connect) {
 332                         if (!$visitor_is_authenticated) {
 333                                 if (!empty($profile['nickname'])) {
 334                                         $follow_link = 'remote_follow/' . $profile['nickname'];
 335                                 }
 336                         } elseif ($profile_is_native) {
 337                                 if ($visitor_is_following) {
 338                                         $unfollow_link = $visitor_base_path . '/unfollow?url=' . urlencode($profile_url);
 339                                 } else {
 340                                         $follow_link =  $visitor_base_path .'/follow?url=' . urlencode($profile_url);
 341                                 }
 342                         }
 343
 344                         if ($profile_is_dfrn) {
 345                                 $subscribe_feed_link = 'dfrn_poll/' . $profile['nickname'];
 346                         }
 347
 348                         if (Contact::canReceivePrivateMessages($profile)) {
 349                                 if ($visitor_is_followed || $visitor_is_following) {
 350                                         $wallmessage_link = $visitor_base_path . '/message/new/' . base64_encode($profile['addr'] ?? '');
 351                                 } elseif ($visitor_is_authenticated && !empty($profile['unkmail'])) {
 352                                         $wallmessage_link = 'wallmessage/' . $profile['nickname'];
 353                                 }
 354                         }
 355                 }
 356
 357                 // show edit profile to yourself
 358                 if (!$is_contact && $local_user_is_self) {
 359                         $profile['edit'] = [DI::baseUrl() . '/settings/profile', DI::l10n()->t('Edit profile'), '', DI::l10n()->t('Edit profile')];
 360                         $profile['menu'] = [
 361                                 'chg_photo' => DI::l10n()->t('Change profile photo'),
 362                                 'cr_new' => null,
 363                                 'entries' => [],
 364                         ];
 365                 }
 366
 367                 // Fetch the account type
 368                 $account_type = Contact::getAccountType($profile);
 369
 370                 if (!empty($profile['address'])
 371                         || !empty($profile['location'])
 372                         || !empty($profile['locality'])
 373                         || !empty($profile['region'])
 374                         || !empty($profile['postal-code'])
 375                         || !empty($profile['country-name'])
 376                 ) {
 377                         $location = DI::l10n()->t('Location:');
 378                 }
 379
 380                 $homepage = !empty($profile['homepage']) ? DI::l10n()->t('Homepage:') : false;
 381                 $about    = !empty($profile['about'])    ? DI::l10n()->t('About:')    : false;
 382                 $xmpp     = !empty($profile['xmpp'])     ? DI::l10n()->t('XMPP:')     : false;
 383
 384                 if ((!empty($profile['hidewall']) || $block) && !Session::isAuthenticated()) {
 385                         $location = $homepage = $about = false;
 386                 }
 387
 388                 $split_name = Diaspora::splitName($profile['name']);
 389                 $firstname = $split_name['first'];
 390                 $lastname = $split_name['last'];
 391
 392                 if (!empty($profile['guid'])) {
 393                         $diaspora = [
 394                                 'guid' => $profile['guid'],
 395                                 'podloc' => DI::baseUrl(),
 396                                 'searchable' => ($profile['net-publish'] ? 'true' : 'false'),
 397                                 'nickname' => $profile['nickname'],
 398                                 'fullname' => $profile['name'],
 399                                 'firstname' => $firstname,
 400                                 'lastname' => $lastname,
 401                                 'photo300' => $profile['contact_photo'] ?? '',
 402                                 'photo100' => $profile['contact_thumb'] ?? '',
 403                                 'photo50' => $profile['contact_micro'] ?? '',
 404                         ];
 405                 } else {
 406                         $diaspora = false;
 407                 }
 408
 409                 $contact_block = '';
 410                 $updated = '';
 411                 $contact_count = 0;
 412                 if (!$block) {
 413                         $contact_block = ContactBlock::getHTML($a->profile);
 414
 415                         if (is_array($a->profile) && !$a->profile['hide-friends']) {
 416                                 $r = q(
 417                                         "SELECT `gcontact`.`updated` FROM `contact` INNER JOIN `gcontact` WHERE `gcontact`.`nurl` = `contact`.`nurl` AND `self` AND `uid` = %d LIMIT 1",
 418                                         intval($a->profile['uid'])
 419                                 );
 420                                 if (DBA::isResult($r)) {
 421                                         $updated = date('c', strtotime($r[0]['updated']));
 422                                 }
 423
 424                                 $contact_count = DBA::count('contact', [
 425                                         'uid' => $profile['uid'],
 426                                         'self' => false,
 427                                         'blocked' => false,
 428                                         'pending' => false,
 429                                         'hidden' => false,
 430                                         'archive' => false,
 431                                         'network' => Protocol::FEDERATED,
 432                                 ]);
 433                         }
 434                 }
 435
 436                 $p = [];
 437                 foreach ($profile as $k => $v) {
 438                         $k = str_replace('-', '_', $k);
 439                         $p[$k] = $v;
 440                 }
 441
 442                 if (isset($p['about'])) {
 443                         $p['about'] = BBCode::convert($p['about']);
 444                 }
 445
 446                 if (empty($p['address']) && !empty($p['location'])) {
 447                         $p['address'] = $p['location'];
 448                 }
 449
 450                 if (isset($p['address'])) {
 451                         $p['address'] = BBCode::convert($p['address']);
 452                 }
 453
 454                 if (isset($p['photo'])) {
 455                         $p['photo'] = ProxyUtils::proxifyUrl($p['photo'], false, ProxyUtils::SIZE_SMALL);
 456                 }
 457
 458                 $p['url'] = Contact::magicLink(($p['url'] ?? '') ?: $profile_url);
 459
 460                 $tpl = Renderer::getMarkupTemplate('profile/vcard.tpl');
 461                 $o .= Renderer::replaceMacros($tpl, [
 462                         '$profile' => $p,
 463                         '$xmpp' => $xmpp,
 464                         '$follow' => DI::l10n()->t('Follow'),
 465                         '$follow_link' => $follow_link,
 466                         '$unfollow' => DI::l10n()->t('Unfollow'),
 467                         '$unfollow_link' => $unfollow_link,
 468                         '$subscribe_feed' => DI::l10n()->t('Atom feed'),
 469                         '$subscribe_feed_link' => $subscribe_feed_link,
 470                         '$wallmessage' => DI::l10n()->t('Message'),
 471                         '$wallmessage_link' => $wallmessage_link,
 472                         '$account_type' => $account_type,
 473                         '$location' => $location,
 474                         '$homepage' => $homepage,
 475                         '$about' => $about,
 476                         '$network' => DI::l10n()->t('Network:'),
 477                         '$contacts' => $contact_count,
 478                         '$updated' => $updated,
 479                         '$diaspora' => $diaspora,
 480                         '$contact_block' => $contact_block,
 481                 ]);
 482
 483                 $arr = ['profile' => &$profile, 'entry' => &$o];
 484
 485                 Hook::callAll('profile_sidebar', $arr);
 486
 487                 return $o;
 488         }
 489
 490         public static function getBirthdays()
 491         {
 492                 $a = DI::app();
 493                 $o = '';
 494
 495                 if (!local_user() || DI::mode()->isMobile() || DI::mode()->isMobile()) {
 496                         return $o;
 497                 }
 498
 499                 /*
 500                 * $mobile_detect = new Mobile_Detect();
 501                 * $is_mobile = $mobile_detect->isMobile() || $mobile_detect->isTablet();
 502                 *               if ($is_mobile)
 503                 *                       return $o;
 504                 */
 505
 506                 $bd_format = DI::l10n()->t('g A l F d'); // 8 AM Friday January 18
 507                 $bd_short = DI::l10n()->t('F d');
 508
 509                 $cachekey = 'get_birthdays:' . local_user();
 510                 $r = DI::cache()->get($cachekey);
 511                 if (is_null($r)) {
 512                         $s = DBA::p(
 513                                 "SELECT `event`.*, `event`.`id` AS `eid`, `contact`.* FROM `event`
 514                                 INNER JOIN `contact`
 515                                         ON `contact`.`id` = `event`.`cid`
 516                                         AND (`contact`.`rel` = ? OR `contact`.`rel` = ?)
 517                                         AND NOT `contact`.`pending`
 518                                         AND NOT `contact`.`hidden`
 519                                         AND NOT `contact`.`blocked`
 520                                         AND NOT `contact`.`archive`
 521                                         AND NOT `contact`.`deleted`
 522                                 WHERE `event`.`uid` = ? AND `type` = 'birthday' AND `start` < ? AND `finish` > ?
 523                                 ORDER BY `start` ASC ",
 524                                 Contact::SHARING,
 525                                 Contact::FRIEND,
 526                                 local_user(),
 527                                 DateTimeFormat::utc('now + 6 days'),
 528                                 DateTimeFormat::utcNow()
 529                         );
 530                         if (DBA::isResult($s)) {
 531                                 $r = DBA::toArray($s);
 532                                 DI::cache()->set($cachekey, $r, Duration::HOUR);
 533                         }
 534                 }
 535
 536                 $total = 0;
 537                 $classtoday = '';
 538                 if (DBA::isResult($r)) {
 539                         $now = strtotime('now');
 540                         $cids = [];
 541
 542                         $istoday = false;
 543                         foreach ($r as $rr) {
 544                                 if (strlen($rr['name'])) {
 545                                         $total ++;
 546                                 }
 547                                 if ((strtotime($rr['start'] . ' +00:00') < $now) && (strtotime($rr['finish'] . ' +00:00') > $now)) {
 548                                         $istoday = true;
 549                                 }
 550                         }
 551                         $classtoday = $istoday ? ' birthday-today ' : '';
 552                         if ($total) {
 553                                 foreach ($r as &$rr) {
 554                                         if (!strlen($rr['name'])) {
 555                                                 continue;
 556                                         }
 557
 558                                         // avoid duplicates
 559
 560                                         if (in_array($rr['cid'], $cids)) {
 561                                                 continue;
 562                                         }
 563                                         $cids[] = $rr['cid'];
 564
 565                                         $today = (((strtotime($rr['start'] . ' +00:00') < $now) && (strtotime($rr['finish'] . ' +00:00') > $now)) ? true : false);
 566
 567                                         $rr['link'] = Contact::magicLink($rr['url']);
 568                                         $rr['title'] = $rr['name'];
 569                                         $rr['date'] = DI::l10n()->getDay(DateTimeFormat::convert($rr['start'], $a->timezone, 'UTC', $rr['adjust'] ? $bd_format : $bd_short)) . (($today) ? ' ' . DI::l10n()->t('[today]') : '');
 570                                         $rr['startime'] = null;
 571                                         $rr['today'] = $today;
 572                                 }
 573                         }
 574                 }
 575                 $tpl = Renderer::getMarkupTemplate('birthdays_reminder.tpl');
 576                 return Renderer::replaceMacros($tpl, [
 577                         '$classtoday' => $classtoday,
 578                         '$count' => $total,
 579                         '$event_reminders' => DI::l10n()->t('Birthday Reminders'),
 580                         '$event_title' => DI::l10n()->t('Birthdays this week:'),
 581                         '$events' => $r,
 582                         '$lbr' => '{', // raw brackets mess up if/endif macro processing
 583                         '$rbr' => '}'
 584                 ]);
 585         }
 586
 587         public static function getEventsReminderHTML()
 588         {
 589                 $a = DI::app();
 590                 $o = '';
 591
 592                 if (!local_user() || DI::mode()->isMobile() || DI::mode()->isMobile()) {
 593                         return $o;
 594                 }
 595
 596                 /*
 597                 *       $mobile_detect = new Mobile_Detect();
 598                 *               $is_mobile = $mobile_detect->isMobile() || $mobile_detect->isTablet();
 599                 *               if ($is_mobile)
 600                 *                       return $o;
 601                 */
 602
 603                 $bd_format = DI::l10n()->t('g A l F d'); // 8 AM Friday January 18
 604                 $classtoday = '';
 605
 606                 $condition = ["`uid` = ? AND `type` != 'birthday' AND `start` < ? AND `start` >= ?",
 607                         local_user(), DateTimeFormat::utc('now + 7 days'), DateTimeFormat::utc('now - 1 days')];
 608                 $s = DBA::select('event', [], $condition, ['order' => ['start']]);
 609
 610                 $r = [];
 611
 612                 if (DBA::isResult($s)) {
 613                         $istoday = false;
 614                         $total = 0;
 615
 616                         while ($rr = DBA::fetch($s)) {
 617                                 $condition = ['parent-uri' => $rr['uri'], 'uid' => $rr['uid'], 'author-id' => public_contact(),
 618                                         'activity' => [Item::activityToIndex( Activity::ATTEND), Item::activityToIndex(Activity::ATTENDMAYBE)],
 619                                         'visible' => true, 'deleted' => false];
 620                                 if (!Item::exists($condition)) {
 621                                         continue;
 622                                 }
 623
 624                                 if (strlen($rr['summary'])) {
 625                                         $total++;
 626                                 }
 627
 628                                 $strt = DateTimeFormat::convert($rr['start'], $rr['adjust'] ? $a->timezone : 'UTC', 'UTC', 'Y-m-d');
 629                                 if ($strt === DateTimeFormat::timezoneNow($a->timezone, 'Y-m-d')) {
 630                                         $istoday = true;
 631                                 }
 632
 633                                 $title = strip_tags(html_entity_decode(BBCode::convert($rr['summary']), ENT_QUOTES, 'UTF-8'));
 634
 635                                 if (strlen($title) > 35) {
 636                                         $title = substr($title, 0, 32) . '... ';
 637                                 }
 638
 639                                 $description = substr(strip_tags(BBCode::convert($rr['desc'])), 0, 32) . '... ';
 640                                 if (!$description) {
 641                                         $description = DI::l10n()->t('[No description]');
 642                                 }
 643
 644                                 $strt = DateTimeFormat::convert($rr['start'], $rr['adjust'] ? $a->timezone : 'UTC');
 645
 646                                 if (substr($strt, 0, 10) < DateTimeFormat::timezoneNow($a->timezone, 'Y-m-d')) {
 647                                         continue;
 648                                 }
 649
 650                                 $today = ((substr($strt, 0, 10) === DateTimeFormat::timezoneNow($a->timezone, 'Y-m-d')) ? true : false);
 651
 652                                 $rr['title'] = $title;
 653                                 $rr['description'] = $description;
 654                                 $rr['date'] = DI::l10n()->getDay(DateTimeFormat::convert($rr['start'], $rr['adjust'] ? $a->timezone : 'UTC', 'UTC', $bd_format)) . (($today) ? ' ' . DI::l10n()->t('[today]') : '');
 655                                 $rr['startime'] = $strt;
 656                                 $rr['today'] = $today;
 657
 658                                 $r[] = $rr;
 659                         }
 660                         DBA::close($s);
 661                         $classtoday = (($istoday) ? 'event-today' : '');
 662                 }
 663                 $tpl = Renderer::getMarkupTemplate('events_reminder.tpl');
 664                 return Renderer::replaceMacros($tpl, [
 665                         '$classtoday' => $classtoday,
 666                         '$count' => count($r),
 667                         '$event_reminders' => DI::l10n()->t('Event Reminders'),
 668                         '$event_title' => DI::l10n()->t('Upcoming events the next 7 days:'),
 669                         '$events' => $r,
 670                 ]);
 671         }
 672
 673         /**
 674          * Retrieves the my_url session variable
 675          *
 676          * @return string
 677          */
 678         public static function getMyURL()
 679         {
 680                 return Session::get('my_url');
 681         }
 682
 683         /**
 684          * Process the 'zrl' parameter and initiate the remote authentication.
 685          *
 686          * This method checks if the visitor has a public contact entry and
 687          * redirects the visitor to his/her instance to start the magic auth (Authentication)
 688          * process.
 689          *
 690          * Ported from Hubzilla: https://framagit.org/hubzilla/core/blob/master/include/channel.php
 691          *
 692          * The implementation for Friendica sadly differs in some points from the one for Hubzilla:
 693          * - Hubzilla uses the "zid" parameter, while for Friendica it had been replaced with "zrl"
 694          * - There seem to be some reverse authentication (rmagic) that isn't implemented in Friendica at all
 695          *
 696          * It would be favourable to harmonize the two implementations.
 697          *
 698          * @param App $a Application instance.
 699          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 700          * @throws \ImagickException
 701          */
 702         public static function zrlInit(App $a)
 703         {
 704                 $my_url = self::getMyURL();
 705                 $my_url = Network::isUrlValid($my_url);
 706
 707                 if (empty($my_url) || local_user()) {
 708                         return;
 709                 }
 710
 711                 $addr = $_GET['addr'] ?? $my_url;
 712
 713                 $arr = ['zrl' => $my_url, 'url' => DI::args()->getCommand()];
 714                 Hook::callAll('zrl_init', $arr);
 715
 716                 // Try to find the public contact entry of the visitor.
 717                 $cid = Contact::getIdForURL($my_url);
 718                 if (!$cid) {
 719                         Logger::log('No contact record found for ' . $my_url, Logger::DEBUG);
 720                         return;
 721                 }
 722
 723                 $contact = DBA::selectFirst('contact',['id', 'url'], ['id' => $cid]);
 724
 725                 if (DBA::isResult($contact) && remote_user() && remote_user() == $contact['id']) {
 726                         Logger::log('The visitor ' . $my_url . ' is already authenticated', Logger::DEBUG);
 727                         return;
 728                 }
 729
 730                 // Avoid endless loops
 731                 $cachekey = 'zrlInit:' . $my_url;
 732                 if (DI::cache()->get($cachekey)) {
 733                         Logger::log('URL ' . $my_url . ' already tried to authenticate.', Logger::DEBUG);
 734                         return;
 735                 } else {
 736                         DI::cache()->set($cachekey, true, Duration::MINUTE);
 737                 }
 738
 739                 Logger::log('Not authenticated. Invoking reverse magic-auth for ' . $my_url, Logger::DEBUG);
 740
 741                 // Remove the "addr" parameter from the destination. It is later added as separate parameter again.
 742                 $addr_request = 'addr=' . urlencode($addr);
 743                 $query = rtrim(str_replace($addr_request, '', DI::args()->getQueryString()), '?&');
 744
 745                 // The other instance needs to know where to redirect.
 746                 $dest = urlencode(DI::baseUrl()->get() . '/' . $query);
 747
 748                 // We need to extract the basebath from the profile url
 749                 // to redirect the visitors '/magic' module.
 750                 $basepath = Contact::getBasepath($contact['url']);
 751
 752                 if ($basepath != DI::baseUrl()->get() && !strstr($dest, '/magic')) {
 753                         $magic_path = $basepath . '/magic' . '?owa=1&dest=' . $dest . '&' . $addr_request;
 754
 755                         // We have to check if the remote server does understand /magic without invoking something
 756                         $serverret = Network::curl($basepath . '/magic');
 757                         if ($serverret->isSuccess()) {
 758                                 Logger::log('Doing magic auth for visitor ' . $my_url . ' to ' . $magic_path, Logger::DEBUG);
 759                                 System::externalRedirect($magic_path);
 760                         }
 761                 }
 762         }
 763
 764         /**
 765          * Set the visitor cookies (see remote_user()) for the given handle
 766          *
 767          * @param string $handle Visitor handle
 768          * @return array Visitor contact array
 769          */
 770         public static function addVisitorCookieForHandle($handle)
 771         {
 772                 $a = DI::app();
 773
 774                 // Try to find the public contact entry of the visitor.
 775                 $cid = Contact::getIdForURL($handle);
 776                 if (!$cid) {
 777                         Logger::log('unable to finger ' . $handle, Logger::DEBUG);
 778                         return [];
 779                 }
 780
 781                 $visitor = DBA::selectFirst('contact', [], ['id' => $cid]);
 782
 783                 // Authenticate the visitor.
 784                 $_SESSION['authenticated'] = 1;
 785                 $_SESSION['visitor_id'] = $visitor['id'];
 786                 $_SESSION['visitor_handle'] = $visitor['addr'];
 787                 $_SESSION['visitor_home'] = $visitor['url'];
 788                 $_SESSION['my_url'] = $visitor['url'];
 789                 $_SESSION['remote_comment'] = Probe::getRemoteFollowLink($visitor['url']);
 790
 791                 Session::setVisitorsContacts();
 792
 793                 $a->contact = $visitor;
 794
 795                 Logger::info('Authenticated visitor', ['url' => $visitor['url']]);
 796
 797                 return $visitor;
 798         }
 799
 800         /**
 801          * OpenWebAuth authentication.
 802          *
 803          * Ported from Hubzilla: https://framagit.org/hubzilla/core/blob/master/include/zid.php
 804          *
 805          * @param string $token
 806          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 807          * @throws \ImagickException
 808          */
 809         public static function openWebAuthInit($token)
 810         {
 811                 $a = DI::app();
 812
 813                 // Clean old OpenWebAuthToken entries.
 814                 OpenWebAuthToken::purge('owt', '3 MINUTE');
 815
 816                 // Check if the token we got is the same one
 817                 // we have stored in the database.
 818                 $visitor_handle = OpenWebAuthToken::getMeta('owt', 0, $token);
 819
 820                 if ($visitor_handle === false) {
 821                         return;
 822                 }
 823
 824                 $visitor = self::addVisitorCookieForHandle($visitor_handle);
 825                 if (empty($visitor)) {
 826                         return;
 827                 }
 828
 829                 $arr = [
 830                         'visitor' => $visitor,
 831                         'url' => DI::args()->getQueryString()
 832                 ];
 833                 /**
 834                  * @hooks magic_auth_success
 835                  *   Called when a magic-auth was successful.
 836                  *   * \e array \b visitor
 837                  *   * \e string \b url
 838                  */
 839                 Hook::callAll('magic_auth_success', $arr);
 840
 841                 $a->contact = $arr['visitor'];
 842
 843                 info(DI::l10n()->t('OpenWebAuth: %1$s welcomes %2$s', DI::baseUrl()->getHostname(), $visitor['name']));
 844
 845                 Logger::log('OpenWebAuth: auth success from ' . $visitor['addr'], Logger::DEBUG);
 846         }
 847
 848         public static function zrl($s, $force = false)
 849         {
 850                 if (!strlen($s)) {
 851                         return $s;
 852                 }
 853                 if (!strpos($s, '/profile/') && !$force) {
 854                         return $s;
 855                 }
 856                 if ($force && substr($s, -1, 1) !== '/') {
 857                         $s = $s . '/';
 858                 }
 859                 $achar = strpos($s, '?') ? '&' : '?';
 860                 $mine = self::getMyURL();
 861                 if ($mine && !Strings::compareLink($mine, $s)) {
 862                         return $s . $achar . 'zrl=' . urlencode($mine);
 863                 }
 864                 return $s;
 865         }
 866
 867         /**
 868          * Get the user ID of the page owner.
 869          *
 870          * Used from within PCSS themes to set theme parameters. If there's a
 871          * profile_uid variable set in App, that is the "page owner" and normally their theme
 872          * settings take precedence; unless a local user sets the "always_my_theme"
 873          * system pconfig, which means they don't want to see anybody else's theme
 874          * settings except their own while on this site.
 875          *
 876          * @return int user ID
 877          *
 878          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 879          * @note Returns local_user instead of user ID if "always_my_theme" is set to true
 880          */
 881         public static function getThemeUid(App $a)
 882         {
 883                 $uid = !empty($a->profile_uid) ? intval($a->profile_uid) : 0;
 884                 if (local_user() && (DI::pConfig()->get(local_user(), 'system', 'always_my_theme') || !$uid)) {
 885                         return local_user();
 886                 }
 887
 888                 return $uid;
 889         }
 890
 891         /**
 892          * search for Profiles
 893          *
 894          * @param int  $start
 895          * @param int  $count
 896          * @param null $search
 897          *
 898          * @return array [ 'total' => 123, 'entries' => [...] ];
 899          *
 900          * @throws \Exception
 901          */
 902         public static function searchProfiles($start = 0, $count = 100, $search = null)
 903         {
 904                 $publish = (DI::config()->get('system', 'publish_all') ? '' : "`publish` = 1");
 905                 $total = 0;
 906
 907                 if (!empty($search)) {
 908                         $searchTerm = '%' . $search . '%';
 909                         $cnt = DBA::fetchFirst("SELECT COUNT(*) AS `total`
 910                                 FROM `profile`
 911                                 LEFT JOIN `user` ON `user`.`uid` = `profile`.`uid`
 912                                 WHERE $publish AND NOT `user`.`blocked` AND NOT `user`.`account_removed`
 913                                 AND ((`profile`.`name` LIKE ?) OR
 914                                 (`user`.`nickname` LIKE ?) OR
 915                                 (`profile`.`about` LIKE ?) OR
 916                                 (`profile`.`locality` LIKE ?) OR
 917                                 (`profile`.`region` LIKE ?) OR
 918                                 (`profile`.`country-name` LIKE ?) OR
 919                                 (`profile`.`pub_keywords` LIKE ?) OR
 920                                 (`profile`.`prv_keywords` LIKE ?))",
 921                                 $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm,
 922                                 $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm);
 923                 } else {
 924                         $cnt = DBA::fetchFirst("SELECT COUNT(*) AS `total`
 925                                 FROM `profile`
 926                                 LEFT JOIN `user` ON `user`.`uid` = `profile`.`uid`
 927                                 WHERE $publish AND NOT `user`.`blocked` AND NOT `user`.`account_removed`");
 928                 }
 929
 930                 if (DBA::isResult($cnt)) {
 931                         $total = $cnt['total'];
 932                 }
 933
 934                 $order = " ORDER BY `name` ASC ";
 935                 $profiles = [];
 936
 937                 // If nothing found, don't try to select details
 938                 if ($total > 0) {
 939                         if (!empty($search)) {
 940                                 $searchTerm = '%' . $search . '%';
 941
 942                                 $profiles = DBA::p("SELECT `profile`.*, `profile`.`uid` AS `profile_uid`, `user`.`nickname`, `user`.`timezone` , `user`.`page-flags`,
 943                         `contact`.`addr`, `contact`.`url` AS `profile_url`
 944                         FROM `profile`
 945                         LEFT JOIN `user` ON `user`.`uid` = `profile`.`uid`
 946                         LEFT JOIN `contact` ON `contact`.`uid` = `user`.`uid`
 947                         WHERE $publish AND NOT `user`.`blocked` AND NOT `user`.`account_removed` AND `contact`.`self`
 948                         AND ((`profile`.`name` LIKE ?) OR
 949                                 (`user`.`nickname` LIKE ?) OR
 950                                 (`profile`.`about` LIKE ?) OR
 951                                 (`profile`.`locality` LIKE ?) OR
 952                                 (`profile`.`region` LIKE ?) OR
 953                                 (`profile`.`country-name` LIKE ?) OR
 954                                 (`profile`.`pub_keywords` LIKE ?) OR
 955                                 (`profile`.`prv_keywords` LIKE ?))
 956                         $order LIMIT ?,?",
 957                                         $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm,
 958                                         $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm, $searchTerm,
 959                                         $start, $count
 960                                 );
 961                         } else {
 962                                 $profiles = DBA::p("SELECT `profile`.*, `profile`.`uid` AS `profile_uid`, `user`.`nickname`, `user`.`timezone` , `user`.`page-flags`,
 963                         `contact`.`addr`, `contact`.`url` AS `profile_url`
 964                         FROM `profile`
 965                         LEFT JOIN `user` ON `user`.`uid` = `profile`.`uid`
 966                         LEFT JOIN `contact` ON `contact`.`uid` = `user`.`uid`
 967                         WHERE $publish AND NOT `user`.`blocked` AND NOT `user`.`account_removed` AND `contact`.`self`
 968                         $order LIMIT ?,?",
 969                                         $start, $count
 970                                 );
 971                         }
 972                 }
 973
 974                 if (DBA::isResult($profiles) && $total > 0) {
 975                         return [
 976                                 'total'   => $total,
 977                                 'entries' => DBA::toArray($profiles),
 978                         ];
 979
 980                 } else {
 981                         return [
 982                                 'total'   => $total,
 983                                 'entries' => [],
 984                         ];
 985                 }
 986         }
 987 }