src/Module/Search/Acl.php

   1 <?php
   2
   3 namespace Friendica\Module\Search;
   4
   5 use Friendica\BaseModule;
   6 use Friendica\Content\Widget;
   7 use Friendica\Core\Hook;
   8 use Friendica\Core\Logger;
   9 use Friendica\Core\Protocol;
  10 use Friendica\Core\Search;
  11 use Friendica\Database\DBA;
  12 use Friendica\Model\Contact;
  13 use Friendica\Model\Item;
  14 use Friendica\Network\HTTPException;
  15 use Friendica\Util\Proxy as ProxyUtils;
  16 use Friendica\Util\Strings;
  17
  18 /**
  19  * ACL selector json backend
  20  *
  21  * @package Friendica\Module\Search
  22  */
  23 class Acl extends BaseModule
  24 {
  25         const TYPE_GLOBAL_CONTACT        = 'x';
  26         const TYPE_MENTION_CONTACT       = 'c';
  27         const TYPE_MENTION_GROUP         = 'g';
  28         const TYPE_MENTION_CONTACT_GROUP = '';
  29         const TYPE_MENTION_FORUM         = 'f';
  30         const TYPE_PRIVATE_MESSAGE       = 'm';
  31         const TYPE_ANY_CONTACT           = 'a';
  32
  33         public static function rawContent(array $parameters = [])
  34         {
  35                 if (!local_user()) {
  36                         throw new HTTPException\UnauthorizedException(DI::l10n()->t('You must be logged in to use this module.'));
  37                 }
  38
  39                 $type = $_REQUEST['type'] ?? self::TYPE_MENTION_CONTACT_GROUP;
  40
  41                 if ($type === self::TYPE_GLOBAL_CONTACT) {
  42                         $o = self::globalContactSearch();
  43                 } else {
  44                         $o = self::regularContactSearch($type);
  45                 }
  46
  47                 echo json_encode($o);
  48                 exit;
  49         }
  50
  51         private static function globalContactSearch()
  52         {
  53                 // autocomplete for global contact search (e.g. navbar search)
  54                 $search = Strings::escapeTags(trim($_REQUEST['search']));
  55                 $mode = $_REQUEST['smode'];
  56                 $page = $_REQUEST['page'] ?? 1;
  57
  58                 $r = Search::searchGlobalContact($search, $mode, $page);
  59
  60                 $contacts = [];
  61                 foreach ($r as $g) {
  62                         $contacts[] = [
  63                                 'photo'   => ProxyUtils::proxifyUrl($g['photo'], false, ProxyUtils::SIZE_MICRO),
  64                                 'name'    => htmlspecialchars($g['name']),
  65                                 'nick'    => $g['addr'] ?: $g['url'],
  66                                 'network' => $g['network'],
  67                                 'link'    => $g['url'],
  68                                 'forum'   => !empty($g['community']) ? 1 : 0,
  69                         ];
  70                 }
  71
  72                 $o = [
  73                         'start' => ($page - 1) * 20,
  74                         'count' => 1000,
  75                         'items' => $contacts,
  76                 ];
  77
  78                 return $o;
  79         }
  80
  81         private static function regularContactSearch(string $type)
  82         {
  83                 $start   = $_REQUEST['start']        ?? 0;
  84                 $count   = $_REQUEST['count']        ?? 100;
  85                 $search  = $_REQUEST['search']       ?? '';
  86                 $conv_id = $_REQUEST['conversation'] ?? null;
  87
  88                 // For use with jquery.textcomplete for private mail completion
  89                 if (!empty($_REQUEST['query'])) {
  90                         if (!$type) {
  91                                 $type = self::TYPE_PRIVATE_MESSAGE;
  92                         }
  93                         $search = $_REQUEST['query'];
  94                 }
  95
  96                 Logger::info('ACL {action} - {subaction}', ['module' => 'acl', 'action' => 'content', 'subaction' => 'search', 'search' => $search, 'type' => $type, 'conversation' => $conv_id]);
  97
  98                 $sql_extra = '';
  99                 $sql_extra2 = '';
 100
 101                 if ($search != '') {
 102                         $sql_extra = "AND `name` LIKE '%%" . DBA::escape($search) . "%%'";
 103                         $sql_extra2 = "AND (`attag` LIKE '%%" . DBA::escape($search) . "%%' OR `name` LIKE '%%" . DBA::escape($search) . "%%' OR `nick` LIKE '%%" . DBA::escape($search) . "%%')";
 104                 }
 105
 106                 // count groups and contacts
 107                 $group_count = 0;
 108                 if ($type == self::TYPE_MENTION_CONTACT_GROUP || $type == self::TYPE_MENTION_GROUP) {
 109                         $r = q("SELECT COUNT(*) AS g FROM `group` WHERE NOT `deleted` AND `uid` = %d $sql_extra",
 110                                 intval(local_user())
 111                         );
 112                         $group_count = (int) $r[0]['g'];
 113                 }
 114
 115                 $sql_extra2 .= ' ' . Widget::unavailableNetworks();
 116
 117                 $contact_count = 0;
 118                 switch ($type) {
 119                         case self::TYPE_MENTION_CONTACT_GROUP:
 120                         case self::TYPE_MENTION_CONTACT:
 121                                 // autocomplete for editor mentions
 122                                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 123                                         WHERE `uid` = %d AND NOT `self` AND NOT `deleted`
 124                                         AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 125                                         AND `notify` != '' $sql_extra2",
 126                                         intval(local_user())
 127                                 );
 128                                 $contact_count = (int) $r[0]['c'];
 129                                 break;
 130
 131                         case self::TYPE_MENTION_FORUM:
 132                                 // autocomplete for editor mentions of forums
 133                                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 134                                         WHERE `uid` = %d AND NOT `self` AND NOT `deleted`
 135                                         AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 136                                         AND (`forum` OR `prv`)
 137                                         AND `notify` != '' $sql_extra2",
 138                                         intval(local_user())
 139                                 );
 140                                 $contact_count = (int) $r[0]['c'];
 141                                 break;
 142
 143                         case self::TYPE_PRIVATE_MESSAGE:
 144                                 // autocomplete for Private Messages
 145                                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 146                                         WHERE `uid` = %d AND NOT `self` AND NOT `deleted`
 147                                         AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 148                                         AND `network` IN ('%s', '%s', '%s') $sql_extra2",
 149                                         intval(local_user()),
 150                                         DBA::escape(Protocol::ACTIVITYPUB),
 151                                         DBA::escape(Protocol::DFRN),
 152                                         DBA::escape(Protocol::DIASPORA)
 153                                 );
 154                                 $contact_count = (int) $r[0]['c'];
 155                                 break;
 156
 157                         case self::TYPE_ANY_CONTACT:
 158                         default:
 159                                 // autocomplete for Contacts
 160                                 $r = q("SELECT COUNT(*) AS c FROM `contact`
 161                                         WHERE `uid` = %d AND NOT `self`
 162                                         AND NOT `pending` AND NOT `deleted` $sql_extra2",
 163                                         intval(local_user())
 164                                 );
 165                                 $contact_count = (int) $r[0]['c'];
 166                                 break;
 167                 }
 168
 169                 $tot = $group_count + $contact_count;
 170
 171                 $groups = [];
 172                 $contacts = [];
 173
 174                 if ($type == self::TYPE_MENTION_CONTACT_GROUP || $type == self::TYPE_MENTION_GROUP) {
 175                         /// @todo We should cache this query.
 176                         // This can be done when we can delete cache entries via wildcard
 177                         $r = q("SELECT `group`.`id`, `group`.`name`, GROUP_CONCAT(DISTINCT `group_member`.`contact-id` SEPARATOR ',') AS uids
 178                                 FROM `group`
 179                                 INNER JOIN `group_member` ON `group_member`.`gid`=`group`.`id`
 180                                 WHERE NOT `group`.`deleted` AND `group`.`uid` = %d
 181                                         $sql_extra
 182                                 GROUP BY `group`.`name`, `group`.`id`
 183                                 ORDER BY `group`.`name`
 184                                 LIMIT %d, %d",
 185                                 intval(local_user()),
 186                                 intval($start),
 187                                 intval($count)
 188                         );
 189
 190                         foreach ($r as $g) {
 191                                 $groups[] = [
 192                                         'type'  => 'g',
 193                                         'photo' => 'images/twopeople.png',
 194                                         'name'  => htmlspecialchars($g['name']),
 195                                         'id'    => intval($g['id']),
 196                                         'uids'  => array_map('intval', explode(',', $g['uids'])),
 197                                         'link'  => '',
 198                                         'forum' => '0'
 199                                 ];
 200                         }
 201                         if ((count($groups) > 0) && ($search == '')) {
 202                                 $groups[] = ['separator' => true];
 203                         }
 204                 }
 205
 206                 $r = [];
 207                 switch ($type) {
 208                         case self::TYPE_MENTION_CONTACT_GROUP:
 209                                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv`, (`prv` OR `forum`) AS `frm` FROM `contact`
 210                                         WHERE `uid` = %d AND NOT `self` AND NOT `deleted` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 211                                         AND NOT (`network` IN ('%s', '%s'))
 212                                         $sql_extra2
 213                                         ORDER BY `name`",
 214                                         intval(local_user()),
 215                                         DBA::escape(Protocol::OSTATUS),
 216                                         DBA::escape(Protocol::STATUSNET)
 217                                 );
 218                                 break;
 219
 220                         case self::TYPE_MENTION_CONTACT:
 221                                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 222                                         WHERE `uid` = %d AND NOT `self` AND NOT `deleted` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 223                                         AND NOT (`network` IN ('%s'))
 224                                         $sql_extra2
 225                                         ORDER BY `name`",
 226                                         intval(local_user()),
 227                                         DBA::escape(Protocol::STATUSNET)
 228                                 );
 229                                 break;
 230
 231                         case self::TYPE_MENTION_FORUM:
 232                                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 233                                         WHERE `uid` = %d AND NOT `self` AND NOT `deleted` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''
 234                                         AND NOT (`network` IN ('%s'))
 235                                         AND (`forum` OR `prv`)
 236                                         $sql_extra2
 237                                         ORDER BY `name`",
 238                                         intval(local_user()),
 239                                         DBA::escape(Protocol::STATUSNET)
 240                                 );
 241                                 break;
 242
 243                         case self::TYPE_PRIVATE_MESSAGE:
 244                                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr` FROM `contact`
 245                                         WHERE `uid` = %d AND NOT `self` AND NOT `deleted` AND NOT `blocked` AND NOT `pending` AND NOT `archive`
 246                                         AND `network` IN ('%s', '%s', '%s')
 247                                         $sql_extra2
 248                                         ORDER BY `name`",
 249                                         intval(local_user()),
 250                                         DBA::escape(Protocol::ACTIVITYPUB),
 251                                         DBA::escape(Protocol::DFRN),
 252                                         DBA::escape(Protocol::DIASPORA)
 253                                 );
 254                                 break;
 255
 256                         case self::TYPE_ANY_CONTACT:
 257                         default:
 258                                 $r = q("SELECT `id`, `name`, `nick`, `micro`, `network`, `url`, `attag`, `addr`, `forum`, `prv` FROM `contact`
 259                                         WHERE `uid` = %d AND NOT `deleted` AND NOT `pending` AND NOT `archive`
 260                                         $sql_extra2
 261                                         ORDER BY `name`",
 262                                         intval(local_user())
 263                                 );
 264                                 break;
 265                 }
 266
 267                 if (DBA::isResult($r)) {
 268                         $forums = [];
 269                         foreach ($r as $g) {
 270                                 $entry = [
 271                                         'type'    => 'c',
 272                                         'photo'   => ProxyUtils::proxifyUrl($g['micro'], false, ProxyUtils::SIZE_MICRO),
 273                                         'name'    => htmlspecialchars($g['name']),
 274                                         'id'      => intval($g['id']),
 275                                         'network' => $g['network'],
 276                                         'link'    => $g['url'],
 277                                         'nick'    => htmlentities(($g['attag'] ?? '') ?: $g['nick']),
 278                                         'addr'    => htmlentities(($g['addr'] ?? '') ?: $g['url']),
 279                                         'forum'   => !empty($g['forum']) || !empty($g['prv']) ? 1 : 0,
 280                                 ];
 281                                 if ($entry['forum']) {
 282                                         $forums[] = $entry;
 283                                 } else {
 284                                         $contacts[] = $entry;
 285                                 }
 286                         }
 287                         if (count($forums) > 0) {
 288                                 if ($search == '') {
 289                                         $forums[] = ['separator' => true];
 290                                 }
 291                                 $contacts = array_merge($forums, $contacts);
 292                         }
 293                 }
 294
 295                 $items = array_merge($groups, $contacts);
 296
 297                 if ($conv_id) {
 298                         // In multi threaded posts the conv_id is not the parent of the whole thread
 299                         $parent_item = Item::selectFirst(['parent'], ['id' => $conv_id]);
 300                         if (DBA::isResult($parent_item)) {
 301                                 $conv_id = $parent_item['parent'];
 302                         }
 303
 304                         /*
 305                          * if $conv_id is set, get unknown contacts in thread
 306                          * but first get known contacts url to filter them out
 307                          */
 308                         $known_contacts = array_map(function ($i) {
 309                                 return $i['link'];
 310                         }, $contacts);
 311
 312                         $unknown_contacts = [];
 313
 314                         $condition = ["`parent` = ?", $conv_id];
 315                         $params = ['order' => ['author-name' => true]];
 316                         $authors = Item::selectForUser(local_user(), ['author-link'], $condition, $params);
 317                         $item_authors = [];
 318                         while ($author = Item::fetch($authors)) {
 319                                 $item_authors[$author['author-link']] = $author['author-link'];
 320                         }
 321                         DBA::close($authors);
 322
 323                         foreach ($item_authors as $author) {
 324                                 if (in_array($author, $known_contacts)) {
 325                                         continue;
 326                                 }
 327
 328                                 $contact = Contact::getDetailsByURL($author);
 329
 330                                 if (count($contact) > 0) {
 331                                         $unknown_contacts[] = [
 332                                                 'type'    => 'c',
 333                                                 'photo'   => ProxyUtils::proxifyUrl($contact['micro'], false, ProxyUtils::SIZE_MICRO),
 334                                                 'name'    => htmlspecialchars($contact['name']),
 335                                                 'id'      => intval($contact['cid']),
 336                                                 'network' => $contact['network'],
 337                                                 'link'    => $contact['url'],
 338                                                 'nick'    => htmlentities(($contact['nick'] ?? '') ?: $contact['addr']),
 339                                                 'addr'    => htmlentities(($contact['addr'] ?? '') ?: $contact['url']),
 340                                                 'forum'   => $contact['forum']
 341                                         ];
 342                                 }
 343                         }
 344
 345                         $items = array_merge($items, $unknown_contacts);
 346                         $tot += count($unknown_contacts);
 347                 }
 348
 349                 $results = [
 350                         'tot'      => $tot,
 351                         'start'    => $start,
 352                         'count'    => $count,
 353                         'groups'   => $groups,
 354                         'contacts' => $contacts,
 355                         'items'    => $items,
 356                         'type'     => $type,
 357                         'search'   => $search,
 358                 ];
 359
 360                 Hook::callAll('acl_lookup_end', $results);
 361
 362                 $o = [
 363                         'tot'   => $results['tot'],
 364                         'start' => $results['start'],
 365                         'count' => $results['count'],
 366                         'items' => $results['items'],
 367                 ];
 368
 369                 return $o;
 370         }
 371 }