if (!defined('LACONICA')) { exit(1); }
class SubscribeAction extends Action {
+
function handle($args) {
parent::handle($args);
if (!common_logged_in()) {
- common_user_error(_t('Not logged in.'));
+ common_user_error(_('Not logged in.'));
return;
}
- $other_nickname = $this->arg('subscribeto');
-
- $other = User::staticGet('nickname', $other_nickname);
+ $user = common_current_user();
- if (!$other) {
- common_user_error(_t('No such user.'));
+ if ($_SERVER['REQUEST_METHOD'] != 'POST') {
+ common_redirect(common_local_url('subscriptions', array('nickname' => $user->nickname)));
return;
}
- $user = common_current_user();
+ # CSRF protection
- if ($user->isSubscribed($other)) {
- common_user_error(_t('Already subscribed!.'));
+ $token = $this->trimmed('token');
+
+ if (!$token || $token != common_session_token()) {
+ $this->client_error(_('There was a problem with your session token. Try again, please.'));
return;
}
- $sub = new Subscription();
- $sub->subscriber = $user->id;
- $sub->subscribed = $other->id;
+ $other_nickname = $this->arg('subscribeto');
- $sub->created = DB_DataObject_Cast::dateTime(); # current time
+ $other = User::staticGet('nickname', $other_nickname);
- $val = $sub->validate();
+ if (!$other) {
+ common_user_error(_('No such user.'));
+ return;
+ }
- if ($val !== TRUE) {
- # XXX: give some error notice
- common_server_error(_t('Subscription did not validate.'));
+ if ($user->isSubscribed($other)) {
+ common_user_error(_('Already subscribed!.'));
return;
}
- if (!$sub->insert()) {
- common_server_error(_t('Couldn\'t create subscription.'));
+ if (!$user->subscribeTo($other)) {
+ $this->server_error(_('Could not subscribe.'));
return;
}
- common_redirect(common_local_url('all', array('nickname' =>
- $user->nickname)));
+ $this->notify($other, $user);
+
+ if ($other->autosubscribe && !$other->isSubscribed($user)) {
+ if (!$other->subscribeTo($user)) {
+ $this->server_error(_('Could not subscribe other to you.'));
+ return;
+ }
+ $this->notify($user, $other);
+ }
+
+ common_redirect(common_local_url('subscriptions', array('nickname' =>
+ $user->nickname)));
+ }
+
+ function notify($listenee, $listener) {
+ # XXX: add other notifications (Jabber, SMS) here
+ # XXX: queue this and handle it offline
+ # XXX: Whatever happens, do it in Twitter-like API, too
+ $this->notify_email($listenee, $listener);
+ }
+
+ function notify_email($listenee, $listener) {
+ mail_subscribe_notify($listenee, $listener);
}
}
\ No newline at end of file