. */ class UnsubscribeAction extends Action { function handle($args) { parent::handle($args); if (!common_logged_in()) { common_user_error(_('Not logged in.')); return; } $user = common_current_user(); if ($_SERVER['REQUEST_METHOD'] != 'POST') { common_redirect(common_local_url('subscriptions', array('nickname' => $user->nickname))); return; } # CSRF protection $token = $this->trimmed('token'); if (!$token || $token != common_session_token()) { $this->client_error(_('There was a problem with your session token. Try again, please.')); return; } $other_nickname = $this->arg('unsubscribeto'); $other = User::staticGet('nickname', $other_nickname); if (!$other) { common_user_error(_('No such user.')); return; } if (!$user->isSubscribed($other)) { common_server_error(_('Not subscribed!.')); } $sub = DB_DataObject::factory('subscription'); $sub->subscriber = $user->id; $sub->subscribed = $other->id; $sub->find(true); // note we checked for existence above if (!$sub->delete()) { common_server_error(_('Couldn\'t delete subscription.')); return; } common_redirect(common_local_url('subscriptions', array('nickname' => $user->nickname))); } }