add Net Socket

[quix0rs-gnu-social.git] / actions / newnotice.php

diff --git a/actions/newnotice.php b/actions/newnotice.php
index bbfa3285d7f9178bf9905694ec4da342fab582d9..c8a321b91780ddf980265b8a6c92f2eb8091ab1d 100644 (file)
--- a/actions/newnotice.php
+++ b/actions/newnotice.php
@@ -1,48 +1,119 @@
 <?php
+/*
+ * Laconica - a distributed open-source microblogging tool
+ * Copyright (C) 2008, Controlez-Vous, Inc.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+if (!defined('LACONICA')) { exit(1); }
 
 class NewnoticeAction extends Action {
-       
+
        function handle($args) {
                parent::handle($args);
                # XXX: Ajax!
 
                if (!common_logged_in()) {
-                       common_user_error(_t('Not logged in.'));
-               } else if ($this->arg('METHOD') == 'POST') {
-                       if ($this->save_new_notice()) {
-                               # XXX: smarter redirects
-                               $user = common_current_user();
-                               assert(!is_null($user)); # see if... above
-                               # XXX: redirect to source
-                               # XXX: use Ajax instead of a redirect
-                               common_redirect(common_local_url('all',
-                                                                                                array('nickname' =>
-                                                                                                          $user->nickname)));
-                       } else {
-                               common_server_error(_t('Problem saving notice.'));
-                       }
+                       common_user_error(_('Not logged in.'));
+               } else if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+                       $this->save_new_notice();
                } else {
                        $this->show_form();
                }
        }
-       
+
        function save_new_notice() {
+
+               # CSRF protection - token set in common_notice_form()
+               $token = $this->trimmed('token');
+               if (!$token || $token != common_session_token()) {
+                       $this->client_error(_('There was a problem with your session token. Try again, please.'));
+                       return;
+               }
+
                $user = common_current_user();
                assert($user); # XXX: maybe an error instead...
-               $notice = DB_DataObject::factory('notice');
-               assert($notice);
-               $notice->profile_id = $user->id; # user id *is* profile id
-               $notice->content = $this->arg('content');
-               $notice->created = time();
-               return $notice->insert();
+               $content = $this->trimmed('status_textarea');
+
+               if (!$content) {
+                       $this->show_form(_('No content!'));
+                       return;
+//             } else if (mb_strlen($content) > 140) {
+               } else {
+                       $content = common_shorten_links($content);
+                       
+                       if (mb_strlen($content) > 140) {
+                               common_debug("Content = '$content'", __FILE__);
+                               common_debug("mb_strlen(\$content) = " . mb_strlen($content), __FILE__);
+                               $this->show_form(_('That\'s too long. Max notice size is 140 chars.'));
+                               return;
+                       }
+               }
+
+               $inter = new CommandInterpreter();
+
+               $cmd = $inter->handle_command($user, $content);
+
+               if ($cmd) {
+                       $cmd->execute(new WebChannel());
+                       return;
+               }
+
+               $replyto = $this->trimmed('inreplyto');
+
+               common_debug("Replyto = $replyto\n");
+
+               $notice = Notice::saveNew($user->id, $content, 'web', 1, ($replyto == 'false') ? NULL : $replyto);
+
+               if (is_string($notice)) {
+                       $this->show_form($notice);
+                       return;
+               }
+
+               common_broadcast_notice($notice);
+
+               $returnto = $this->trimmed('returnto');
+
+               if ($returnto) {
+                       $url = common_local_url($returnto,
+                                                                       array('nickname' => $user->nickname));
+               } else {
+                       $url = common_local_url('shownotice',
+                                                                       array('notice' => $notice->id));
+               }
+               common_redirect($url, 303);
+       }
+
+       function show_top($content=NULL) {
+               common_notice_form(NULL, $content);
        }
-       
-       function show_form() {
-               common_start_element('form', array('id' => 'newnotice', 'method' => 'POST',
-                                                                                  'action' => common_local_url('newnotice')));
-               common_element('span', 'nickname', $profile->nickname);
-               common_element('textarea', array('rows' => 4, 'cols' => 80, 'id' => 'content'));
-               common_element('input', array('type' => 'submit'), 'Send');
-               common_end_element('form');
+
+       function show_form($msg=NULL) {
+               $content = $this->trimmed('status_textarea');
+               if (!$content) {
+                       $replyto = $this->trimmed('replyto');
+                       $profile = Profile::staticGet('nickname', $replyto);
+                       if ($profile) {
+                               $content = '@' . $profile->nickname . ' ';
+                       }
+               }
+               common_show_header(_('New notice'), NULL, $content,
+                                  array($this, 'show_top'));
+               if ($msg) {
+                       common_element('p', 'error', $msg);
+               }
+               common_show_footer();
        }
-}
\ No newline at end of file
+}