*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
if (!defined('LACONICA')) { exit(1); }
-class NewnoticeAction extends Action {
-
- function handle($args) {
- parent::handle($args);
- # XXX: Ajax!
-
- if (!common_logged_in()) {
- common_user_error(_t('Not logged in.'));
- } else if ($_SERVER['REQUEST_METHOD'] == 'POST') {
- $this->save_new_notice();
- } else {
- $this->show_form();
- }
- }
-
- function save_new_notice() {
-
- #remember the current notice
- $current_notice = DB_DataObject::factory('notice');
- $current_notice->limit(1);
- $current_notice->orderBy('created DESC');
- $current_notice->find(1);
-
- $user = common_current_user();
- assert($user); # XXX: maybe an error instead...
- $notice = DB_DataObject::factory('notice');
- assert($notice);
- $notice->profile_id = $user->id; # user id *is* profile id
- $notice->created = DB_DataObject_Cast::dateTime();
- # Default theme uses 'content' for something else
- $notice->content = $this->trimmed('status_textarea');
-
- if (!$notice->content) {
- $this->show_form(_t('No content!'));
- return;
- } else if (strlen($notice->content) > 140) {
- $this->show_form(_t('That\'s too long. Max notice size is 140 chars.'));
- return;
- }
-
- $id = $notice->insert();
-
- if (!$id) {
- common_server_error(_t('Problem saving notice.'));
- return;
- }
-
- $orig = clone($notice);
- $notice->uri = common_notice_uri($notice);
-
- if (!$notice->update($orig)) {
- common_server_error(_t('Problem saving notice.'));
- return;
- }
-
- common_save_replies($notice);
- common_broadcast_notice($notice);
-
- $returnto = $this->trimmed('returnto');
- if ($returnto) {
- $url = common_local_url($returnto,
- array('nickname' => $user->nickname));
- } else {
- $url = common_local_url('shownotice',
- array('notice' => $id));
- }
- common_redirect($url, 303);
- }
-
- function show_top($content=NULL) {
- common_notice_form(NULL, $content);
- }
-
- function show_form($msg=NULL) {
- $content = $this->trimmed('status_textarea');
- common_show_header(_t('New notice'), NULL, $content,
- array($this, 'show_top'));
- if ($msg) {
- common_element('p', 'error', $msg);
- }
- common_show_footer();
- }
+require_once INSTALLDIR . '/lib/noticelist.php';
+
+class NewnoticeAction extends Action
+{
+
+ function handle($args)
+ {
+ parent::handle($args);
+
+ if (!common_logged_in()) {
+ $this->clientError(_('Not logged in.'));
+ } else if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+
+ # CSRF protection - token set in common_notice_form()
+ $token = $this->trimmed('token');
+ if (!$token || $token != common_session_token()) {
+ $this->clientError(_('There was a problem with your session token. Try again, please.'));
+ return;
+ }
+
+ $this->save_new_notice();
+ } else {
+ $this->show_form();
+ }
+ }
+
+ function save_new_notice()
+ {
+
+ $user = common_current_user();
+ assert($user); # XXX: maybe an error instead...
+ $content = $this->trimmed('status_textarea');
+
+ if (!$content) {
+ $this->show_form(_('No content!'));
+ return;
+ } else {
+ $content_shortened = common_shorten_links($content);
+
+ if (mb_strlen($content_shortened) > 140) {
+ common_debug("Content = '$content_shortened'", __FILE__);
+ common_debug("mb_strlen(\$content) = " . mb_strlen($content_shortened), __FILE__);
+ $this->show_form(_('That\'s too long. Max notice size is 140 chars.'));
+ return;
+ }
+ }
+
+ $inter = new CommandInterpreter();
+
+ $cmd = $inter->handle_command($user, $content_shortened);
+
+ if ($cmd) {
+ if ($this->boolean('ajax')) {
+ $cmd->execute(new AjaxWebChannel());
+ } else {
+ $cmd->execute(new WebChannel());
+ }
+ return;
+ }
+
+ $replyto = $this->trimmed('inreplyto');
+
+ $notice = Notice::saveNew($user->id, $content, 'web', 1, ($replyto == 'false') ? null : $replyto);
+
+ if (is_string($notice)) {
+ $this->show_form($notice);
+ return;
+ }
+
+ common_broadcast_notice($notice);
+
+ if ($this->boolean('ajax')) {
+ $this->startHTML('text/xml;charset=utf-8', true);
+ $this->elementStart('head');
+ $this->element('title', null, _('Notice posted'));
+ $this->elementEnd('head');
+ $this->elementStart('body');
+ $this->show_notice($notice);
+ $this->elementEnd('body');
+ $this->elementEnd('html');
+ } else {
+ $returnto = $this->trimmed('returnto');
+
+ if ($returnto) {
+ $url = common_local_url($returnto,
+ array('nickname' => $user->nickname));
+ } else {
+ $url = common_local_url('shownotice',
+ array('notice' => $notice->id));
+ }
+ common_redirect($url, 303);
+ }
+ }
+
+ function ajax_error_msg($msg)
+ {
+ common_start_html('text/xml;charset=utf-8', true);
+ $this->elementStart('head');
+ $this->element('title', null, _('Ajax Error'));
+ $this->elementEnd('head');
+ $this->elementStart('body');
+ $this->element('p', array('id' => 'error'), $msg);
+ $this->elementEnd('body');
+ $this->elementEnd('html');
+ }
+
+ function show_top($content=null)
+ {
+ common_notice_form(null, $content);
+ }
+
+ function show_form($msg=null)
+ {
+ if ($msg && $this->boolean('ajax')) {
+ $this->ajax_error_msg($msg);
+ return;
+ }
+ $content = $this->trimmed('status_textarea');
+ if (!$content) {
+ $replyto = $this->trimmed('replyto');
+ $profile = Profile::staticGet('nickname', $replyto);
+ if ($profile) {
+ $content = '@' . $profile->nickname . ' ';
+ }
+ }
+ common_show_header(_('New notice'), null, $content,
+ array($this, 'show_top'));
+ if ($msg) {
+ $this->element('p', array('id' => 'error'), $msg);
+ }
+ common_show_footer();
+ }
+
+ function show_notice($notice)
+ {
+ $nli = new NoticeListItem($notice);
+ $nli->show();
+ }
+
}
projects / quix0rs-gnu-social.git / blobdiff