3 * @copyright Copyright (C) 2010-2021, the Friendica project
5 * @license GNU AGPL version 3 or any later version
7 * This program is free software: you can redistribute it and/or modify
8 * it under the terms of the GNU Affero General Public License as
9 * published by the Free Software Foundation, either version 3 of the
10 * License, or (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU Affero General Public License for more details.
17 * You should have received a copy of the GNU Affero General Public License
18 * along with this program. If not, see <https://www.gnu.org/licenses/>.
22 namespace Friendica\Module\Search;
24 use Friendica\BaseModule;
25 use Friendica\Content\Widget;
26 use Friendica\Core\Hook;
27 use Friendica\Core\Logger;
28 use Friendica\Core\Protocol;
29 use Friendica\Core\Search;
30 use Friendica\Database\DBA;
32 use Friendica\Model\Contact;
33 use Friendica\Model\Post;
34 use Friendica\Network\HTTPException;
35 use Friendica\Util\Strings;
38 * ACL selector json backend
40 * @package Friendica\Module\Search
42 class Acl extends BaseModule
44 const TYPE_GLOBAL_CONTACT = 'x';
45 const TYPE_MENTION_CONTACT = 'c';
46 const TYPE_MENTION_GROUP = 'g';
47 const TYPE_MENTION_CONTACT_GROUP = '';
48 const TYPE_MENTION_FORUM = 'f';
49 const TYPE_PRIVATE_MESSAGE = 'm';
50 const TYPE_ANY_CONTACT = 'a';
52 public static function rawContent(array $parameters = [])
55 throw new HTTPException\UnauthorizedException(DI::l10n()->t('You must be logged in to use this module.'));
58 $type = $_REQUEST['type'] ?? self::TYPE_MENTION_CONTACT_GROUP;
59 if ($type === self::TYPE_GLOBAL_CONTACT) {
60 $o = self::globalContactSearch();
62 $o = self::regularContactSearch($type);
69 private static function globalContactSearch()
71 // autocomplete for global contact search (e.g. navbar search)
72 $search = Strings::escapeTags(trim($_REQUEST['search']));
73 $mode = $_REQUEST['smode'];
74 $page = $_REQUEST['page'] ?? 1;
76 $result = Search::searchContact($search, $mode, $page);
79 foreach ($result as $contact) {
81 'photo' => Contact::getMicro($contact, true),
82 'name' => htmlspecialchars($contact['name']),
83 'nick' => $contact['addr'] ?: $contact['url'],
84 'network' => $contact['network'],
85 'link' => $contact['url'],
86 'forum' => $contact['contact-type'] == Contact::TYPE_COMMUNITY,
91 'start' => ($page - 1) * 20,
99 private static function regularContactSearch(string $type)
101 $start = $_REQUEST['start'] ?? 0;
102 $count = $_REQUEST['count'] ?? 100;
103 $search = $_REQUEST['search'] ?? '';
104 $conv_id = $_REQUEST['conversation'] ?? null;
106 // For use with jquery.textcomplete for private mail completion
107 if (!empty($_REQUEST['query'])) {
109 $type = self::TYPE_PRIVATE_MESSAGE;
111 $search = $_REQUEST['query'];
114 Logger::info('ACL {action} - {subaction}', ['module' => 'acl', 'action' => 'content', 'subaction' => 'search', 'search' => $search, 'type' => $type, 'conversation' => $conv_id]);
117 $condition = ["`uid` = ? AND NOT `deleted` AND NOT `pending` AND NOT `archive`", local_user()];
118 $condition_group = ["`uid` = ? AND NOT `deleted`", local_user()];
121 $sql_extra = "AND `name` LIKE '%%" . DBA::escape($search) . "%%'";
122 $condition = DBA::mergeConditions($condition, ["(`attag` LIKE ? OR `name` LIKE ? OR `nick` LIKE ?)",
123 '%' . $search . '%', '%' . $search . '%', '%' . $search . '%']);
124 $condition_group = DBA::mergeConditions($condition_group, ["`name` LIKE ?", '%' . $search . '%']);
127 // count groups and contacts
129 if ($type == self::TYPE_MENTION_CONTACT_GROUP || $type == self::TYPE_MENTION_GROUP) {
130 $group_count = DBA::count('group', $condition_group);
133 $networks = Widget::unavailableNetworks();
134 $condition = DBA::mergeConditions($condition, array_merge(["NOT `network` IN (" . substr(str_repeat("?, ", count($networks)), 0, -2) . ")"], $networks));
137 case self::TYPE_MENTION_CONTACT_GROUP:
138 $condition = DBA::mergeConditions($condition,
139 ["NOT `self` AND NOT `blocked` AND `notify` != ? AND NOT `network` IN (?, ?)", '', Protocol::OSTATUS, Protocol::STATUSNET
141 case self::TYPE_MENTION_CONTACT:
142 $condition = DBA::mergeConditions($condition,
143 ["NOT `self` AND NOT `blocked` AND `notify` != ? AND `network` != ?", '', Protocol::STATUSNET
145 case self::TYPE_MENTION_FORUM:
146 $condition = DBA::mergeConditions($condition,
147 ["NOT `self` AND NOT `blocked` AND `notify` != ? AND `contact-type` = ?", '', Contact::TYPE_COMMUNITY
151 case self::TYPE_PRIVATE_MESSAGE:
152 $condition = DBA::mergeConditions($condition,
153 ["NOT `self` AND NOT `blocked` AND `notify` != ? AND `network` IN (?, ?, ?)", '', Protocol::ACTIVITYPUB, Protocol::DFRN, Protocol::DIASPORA
158 $contact_count = DBA::count('contact', $condition);
160 $tot = $group_count + $contact_count;
165 if ($type == self::TYPE_MENTION_CONTACT_GROUP || $type == self::TYPE_MENTION_GROUP) {
166 /// @todo We should cache this query.
167 // This can be done when we can delete cache entries via wildcard
168 $r = DBA::toArray(DBA::p("SELECT `group`.`id`, `group`.`name`, GROUP_CONCAT(DISTINCT `group_member`.`contact-id` SEPARATOR ',') AS uids
170 INNER JOIN `group_member` ON `group_member`.`gid`=`group`.`id`
171 WHERE NOT `group`.`deleted` AND `group`.`uid` = ?
173 GROUP BY `group`.`name`, `group`.`id`
174 ORDER BY `group`.`name`
184 'photo' => 'images/twopeople.png',
185 'name' => htmlspecialchars($g['name']),
186 'id' => intval($g['id']),
187 'uids' => array_map('intval', explode(',', $g['uids'])),
192 if ((count($groups) > 0) && ($search == '')) {
193 $groups[] = ['separator' => true];
198 if ($type != self::TYPE_MENTION_GROUP) {
199 $r = Contact::selectToArray([], $condition, ['order' => ['name']]);
202 if (DBA::isResult($r)) {
207 'photo' => Contact::getMicro($g),
208 'name' => htmlspecialchars($g['name']),
209 'id' => intval($g['id']),
210 'network' => $g['network'],
212 'nick' => htmlentities(($g['attag'] ?? '') ?: $g['nick']),
213 'addr' => htmlentities(($g['addr'] ?? '') ?: $g['url']),
214 'forum' => $g['contact-type'] == Contact::TYPE_COMMUNITY,
216 if ($entry['forum']) {
219 $contacts[] = $entry;
222 if (count($forums) > 0) {
224 $forums[] = ['separator' => true];
226 $contacts = array_merge($forums, $contacts);
230 $items = array_merge($groups, $contacts);
233 // In multi threaded posts the conv_id is not the parent of the whole thread
234 $parent_item = Post::selectFirst(['parent'], ['id' => $conv_id]);
235 if (DBA::isResult($parent_item)) {
236 $conv_id = $parent_item['parent'];
240 * if $conv_id is set, get unknown contacts in thread
241 * but first get known contacts url to filter them out
243 $known_contacts = array_map(function ($i) {
247 $unknown_contacts = [];
249 $condition = ["`parent` = ?", $conv_id];
250 $params = ['order' => ['author-name' => true]];
251 $authors = Post::selectForUser(local_user(), ['author-link'], $condition, $params);
253 while ($author = Post::fetch($authors)) {
254 $item_authors[$author['author-link']] = $author['author-link'];
256 DBA::close($authors);
258 foreach ($item_authors as $author) {
259 if (in_array($author, $known_contacts)) {
263 $contact = Contact::getByURL($author, false, ['micro', 'name', 'id', 'network', 'nick', 'addr', 'url', 'forum', 'avatar']);
265 if (count($contact) > 0) {
266 $unknown_contacts[] = [
268 'photo' => Contact::getMicro($contact),
269 'name' => htmlspecialchars($contact['name']),
270 'id' => intval($contact['id']),
271 'network' => $contact['network'],
272 'link' => $contact['url'],
273 'nick' => htmlentities(($contact['nick'] ?? '') ?: $contact['addr']),
274 'addr' => htmlentities(($contact['addr'] ?? '') ?: $contact['url']),
275 'forum' => $contact['forum']
280 $items = array_merge($items, $unknown_contacts);
281 $tot += count($unknown_contacts);
289 'contacts' => $contacts,
295 Hook::callAll('acl_lookup_end', $results);
298 'tot' => $results['tot'],
299 'start' => $results['start'],
300 'count' => $results['count'],
301 'items' => $results['items'],