]> git.mxchange.org Git - quix0rs-gnu-social.git/blobdiff - actions/twitapistatuses.php
correctly gc sessions
[quix0rs-gnu-social.git] / actions / twitapistatuses.php
index 96931fec634949caef800d55219a1d46ce25d31e..c9943698dc2bc06510c2d5bafdf506e7e6b6ba43 100644 (file)
@@ -1,7 +1,7 @@
 <?php
 /*
  * Laconica - a distributed open-source microblogging tool
- * Copyright (C) 2008, Controlez-Vous, Inc.
+ * Copyright (C) 2008, 2009, Control Yourself, Inc.
  *
  * This program is free software: you can redistribute it and/or modify
  * it under the terms of the GNU Affero General Public License as published by
  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  */
 
-if (!defined('LACONICA')) { exit(1); }
+if (!defined('LACONICA')) {
+    exit(1);
+}
 
 require_once(INSTALLDIR.'/lib/twitterapi.php');
 
-/* XXX: Please don't freak out about all the ugly comments in this file.
- * They are mostly in here for reference while I work on the
- * API. I'll fix things up later to make them look better later. -- Zach 
- */
-class TwitapistatusesAction extends TwitterapiAction {
-       
-       function public_timeline($args, $apidata) {
-               parent::handle($args);
-
-               $sitename = common_config('site', 'name');
-               $siteserver = common_config('site', 'server'); 
-               $title = sprintf(_("%s public timeline"), $sitename);
-               $id = "tag:$siteserver:Statuses";
-               $link = common_root_url();
-               $subtitle = sprintf(_("%s updates from everyone!"), $sitemap);
-
-               // Number of public statuses to return by default -- Twitter sends 20
-               $MAX_PUBSTATUSES = 20;
-
-               $notice = DB_DataObject::factory('notice');
-
-               // FIXME: To really live up to the spec we need to build a list
-               // of notices by users who have custom avatars, so fix this SQL -- Zach
-
-               # FIXME: bad performance
-               $notice->whereAdd('EXISTS (SELECT user.id from user where user.id = notice.profile_id)');
-               $notice->orderBy('created DESC, notice.id DESC');
-               $notice->limit($MAX_PUBSTATUSES);
-               $cnt = $notice->find();
-               
-               if ($cnt > 0) {
-                       
-                       switch($apidata['content-type']) {
-                               case 'xml': 
-                                       $this->show_xml_timeline($notice);
-                                       break;
-                               case 'rss':
-                                       $this->show_rss_timeline($notice, $title, $id, $link, $subtitle);
-                                       break;
-                               case 'atom': 
-                                       $this->show_atom_timeline($notice, $title, $id, $link, $subtitle);
-                                       break;
-                               case 'json':
-                                       $this->show_json_timeline($notice);
-                                       break;
-                               default:
-                                       common_user_error("API method not found!", $code = 404);
-                                       break;
-                       }
-                       
-               } else {
-                       common_server_error('Couldn\'t find any statuses.', $code = 503);
-               }
-               exit();
-       }       
-       
-       function show_xml_timeline($notice) {
-
-               header('Content-Type: application/xml; charset=utf-8');         
-               common_start_xml();
-               common_element_start('statuses', array('type' => 'array'));
-
-               if (is_array($notice)) {
-                       foreach ($notice as $n) {
-                               $twitter_status = $this->twitter_status_array($n);                                              
-                               $this->show_twitter_xml_status($twitter_status);        
-                       }
-               } else {
-                       while ($notice->fetch()) {
-                               $twitter_status = $this->twitter_status_array($notice);                                         
-                               $this->show_twitter_xml_status($twitter_status);
-                       }
-               }
-               
-               common_element_end('statuses');
-               common_end_xml();
-       }       
-       
-       function show_rss_timeline($notice, $title, $id, $link, $subtitle) {
-               
-               header("Content-Type: application/rss+xml; charset=utf-8");
-               
-               $this->init_twitter_rss();
-               
-               common_element_start('channel');
-               common_element('title', NULL, $title);
-               common_element('link', NULL, $link);
-               common_element('description', NULL, $subtitle);
-               common_element('language', NULL, 'en-us');
-               common_element('ttl', NULL, '40');
-       
-       
-               if (is_array($notice)) {
-                       foreach ($notice as $n) {
-                               $entry = $this->twitter_rss_entry_array($n);                                            
-                               $this->show_twitter_rss_item($entry);
-                       } 
-               } else {
-                       while ($notice->fetch()) {
-                               $entry = $this->twitter_rss_entry_array($notice);                                               
-                               $this->show_twitter_rss_item($entry);
-                       }
-               }
-
-               common_element_end('channel');                  
-               $this->end_twitter_rss();
-       }
-
-       function show_atom_timeline($notice, $title, $id, $link, $subtitle=NULL) {
-               
-               header('Content-Type: application/atom+xml; charset=utf-8');
-
-               $this->init_twitter_atom();
-
-               common_element('title', NULL, $title);
-               common_element('id', NULL, $id);
-               common_element('link', array('href' => $link, 'rel' => 'alternate', 'type' => 'text/html'), NULL);
-               common_element('subtitle', NULL, $subtitle);
-
-               if (is_array($notice)) {
-                       foreach ($notice as $n) {
-                               $entry = $this->twitter_rss_entry_array($n);                                            
-                               $this->show_twitter_atom_entry($entry);
-                       } 
-               } else {
-                       while ($notice->fetch()) {
-                               $entry = $this->twitter_rss_entry_array($notice);                                               
-                               $this->show_twitter_atom_entry($entry);
-                       }
-               }
-               
-               $this->end_twitter_atom();
-       }
-
-       function show_json_timeline($notice) {
-               
-               header('Content-Type: application/json; charset=utf-8');
-               
-               $statuses = array();
-               
-               if (is_array($notice)) {
-                       foreach ($notice as $n) {
-                               $twitter_status = $this->twitter_status_array($n);
-                               array_push($statuses, $twitter_status);
-                       } 
-               } else {
-                       while ($notice->fetch()) {
-                               $twitter_status = $this->twitter_status_array($notice);
-                               array_push($statuses, $twitter_status);
-                       }
-               }                       
-               
-               $this->show_twitter_json_statuses($statuses);                   
-       }
-               
-       /*
-       Returns the 20 most recent statuses posted by the authenticating user and that user's friends. 
-       This is the equivalent of /home on the Web. 
-       
-       URL: http://server/api/statuses/friends_timeline.format
-       
-       Parameters:
-
-           * since.  Optional.  Narrows the returned results to just those statuses created after the specified 
-                       HTTP-formatted date.  The same behavior is available by setting an If-Modified-Since header in 
-                       your HTTP request.  
-                       Ex: http://server/api/statuses/friends_timeline.rss?since=Tue%2C+27+Mar+2007+22%3A55%3A48+GMT
-           * since_id.  Optional.  Returns only statuses with an ID greater than (that is, more recent than) 
-                       the specified ID.  Ex: http://server/api/statuses/friends_timeline.xml?since_id=12345
-           * count.  Optional.  Specifies the number of statuses to retrieve. May not be greater than 200.
-                       Ex: http://server/api/statuses/friends_timeline.xml?count=5 
-           * page. Optional. Ex: http://server/api/statuses/friends_timeline.rss?page=3
-       
-       Formats: xml, json, rss, atom
-       */
-       function friends_timeline($args, $apidata) {
-               parent::handle($args);
-
-               $since = $this->arg('since');
-               $since_id = $this->arg('since_id');
-               $count = $this->arg('count');
-               $page = $this->arg('page');
-               
-               if (!$page) {
-                       $page = 1;
-               }
-
-               if (!$count) {
-                       $count = 20;
-               }
-
-               $user = $this->get_user($id, $apidata);
-               $profile = $user->getProfile();
-               
-               $sitename = common_config('site', 'name');
-               $siteserver = common_config('site', 'server'); 
-               
-               $title = sprintf(_("%s and friends"), $user->nickname);
-               $id = "tag:$siteserver:friends:".$user->id;
-               $link = common_local_url('all', array('nickname' => $user->nickname));
-               $subtitle = sprintf(_("Updates from %s and friends on %s!"), $user->nickname, $sitename);
-
-               $notice = new Notice();
-
-               # XXX: chokety and bad
-
-               $notice->whereAdd('EXISTS (SELECT subscribed from subscription where subscriber = '.$profile->id.' and subscribed = notice.profile_id)', 'OR');
-               $notice->whereAdd('profile_id = ' . $profile->id, 'OR');
-
-               # XXX: since
-               # XXX: since_id
-               
-               $notice->orderBy('created DESC, notice.id DESC');
-
-               $notice->limit((($page-1)*20), $count);
-
-               $cnt = $notice->find();
-               
-               switch($apidata['content-type']) {
-                case 'xml': 
-                       $this->show_xml_timeline($notice);
-                       break;
-                case 'rss':
-                       $this->show_rss_timeline($notice, $title, $id, $link, $subtitle);
-                       break;
-                case 'atom': 
-                       $this->show_atom_timeline($notice, $title, $id, $link, $subtitle);
-                       break;
-                case 'json':
-                       $this->show_json_timeline($notice);
-                       break;
-                default:
-                       common_user_error("API method not found!", $code = 404);
-               }
-               
-               exit();
-       }
-
-       /*
-               Returns the 20 most recent statuses posted from the authenticating user. It's also possible to
-        request another user's timeline via the id parameter below. This is the equivalent of the Web
-        /archive page for your own user, or the profile page for a third party.
-
-               URL: http://server/api/statuses/user_timeline.format
-
-               Formats: xml, json, rss, atom
-
-               Parameters:
-
-                   * id. Optional. Specifies the ID or screen name of the user for whom to return the
-            friends_timeline. Ex: http://server/api/statuses/user_timeline/12345.xml or
-            http://server/api/statuses/user_timeline/bob.json. 
-                       * count. Optional. Specifies the number of
-            statuses to retrieve. May not be greater than 200. Ex:
-            http://server/api/statuses/user_timeline.xml?count=5 
-                       * since. Optional. Narrows the returned
-            results to just those statuses created after the specified HTTP-formatted date. The same
-            behavior is available by setting an If-Modified-Since header in your HTTP request. Ex:
-            http://server/api/statuses/user_timeline.rss?since=Tue%2C+27+Mar+2007+22%3A55%3A48+GMT 
-                       * since_id. Optional. Returns only statuses with an ID greater than (that is, more recent than)
-            the specified ID. Ex: http://server/api/statuses/user_timeline.xml?since_id=12345 * page.
-            Optional. Ex: http://server/api/statuses/friends_timeline.rss?page=3
-       */
-       function user_timeline($args, $apidata) {
-               parent::handle($args);
-               
-               $user = null;
-               
-               // function was called with an argument /statuses/user_timeline/api_arg.format
-               if (isset($apidata['api_arg'])) {
-               
-                       if (is_numeric($apidata['api_arg'])) {
-                               $user = User::staticGet($apidata['api_arg']);
-                       } else {
-                               $nickname = common_canonical_nickname($apidata['api_arg']);
-                               $user = User::staticGet('nickname', $nickname);
-                       } 
-               } else {
-                       
-                       // if no user was specified, then we'll use the authenticated user
-                       $user = $apidata['user'];
-               }
-
-               if (!$user) {
-                       // Set the user to be the auth user if asked-for can't be found
-                       // honestly! This is what Twitter does, I swear --Zach
-                       $user = $apidata['user'];
-               }
-
-               $profile = $user->getProfile();
-
-               if (!$profile) {
-                       common_server_error(_('User has no profile.'));
-                       return;
-               }
-                               
-               $count = $this->arg('count');
-               $since = $this->arg('since');
-               $since_id = $this->arg('since_id');
-                               
-               if (!$page) {
-                       $page = 1;
-               }
-
-               if (!$count) {
-                       $count = 20;
-               }
-                               
-               $sitename = common_config('site', 'name');
-               $siteserver = common_config('site', 'server'); 
-               
-               $title = sprintf(_("%s timeline"), $user->nickname);
-               $id = "tag:$siteserver:user:".$user->id;
-               $link = common_local_url('showstream', array('nickname' => $user->nickname));
-               $subtitle = sprintf(_("Updates from %s on %s!"), $user->nickname, $sitename);
-
-               $notice = new Notice();
-
-               $notice->profile_id = $user->id;
-               
-               # XXX: since
-               # XXX: since_id
-               
-               $notice->orderBy('created DESC, notice.id DESC');
-
-               $notice->limit((($page-1)*20), $count);
-
-               $cnt = $notice->find();
-               
-               switch($apidata['content-type']) {
-                case 'xml': 
-                       $this->show_xml_timeline($notice);
-                       break;
-                case 'rss':
-                       $this->show_rss_timeline($notice, $title, $id, $link, $subtitle);
-                       break;
-                case 'atom': 
-                       $this->show_atom_timeline($notice, $title, $id, $link, $subtitle);
-                       break;
-                case 'json':
-                       $this->show_json_timeline($notice);
-                       break;
-                default:
-                       common_user_error("API method not found!", $code = 404);
-               }
-               
-               exit();
-       }
-
-       function show($args, $apidata) {
-               parent::handle($args);
-               
-               $id = $apidata['api_arg'];              
-               $notice = Notice::staticGet($id);
-
-               if ($notice) {
-
-                       if ($apidata['content-type'] == 'xml') { 
-                               $this->show_single_xml_status($notice);
-                       } elseif ($apidata['content-type'] == 'json') {
-                               $this->show_single_json_status($notice);
-                       }
-               } else {
-                       header('HTTP/1.1 404 Not Found');
-               }
-               
-               exit();
-       }
-               
-       function show_single_xml_status($notice) {
-               header('Content-Type: application/xml; charset=utf-8');         
-               common_start_xml();
-               $twitter_status = $this->twitter_status_array($notice);                                         
-               $this->show_twitter_xml_status($twitter_status);
-               common_end_xml();
-               exit();
-       }
-       
-       function show_single_json_status($notice) {
-               header('Content-Type: application/json; charset=utf-8');
-               $status = $this->twitter_status_array($notice);
-               $this->show_twitter_json_statuses($status);
-               exit();
-       }
-               
-       function update($args, $apidata) {
-               parent::handle($args);
-               
-               $user = $apidata['user'];
-                               
-               $notice = DB_DataObject::factory('notice');             
-               
-               $notice->profile_id = $user->id; # user id *is* profile id
-               $notice->created = DB_DataObject_Cast::dateTime();      
-               $notice->content = $this->trimmed('status');
-
-               if (!$notice->content) {
-                       
-                       // XXX: Note: In this case, Twitter simply returns '200 OK'
-                       // No error is given, but the status is not posted to the 
-                       // user's timeline.  Seems bad.  Shouldn't we throw an 
-                       // errror? -- Zach
-                       exit();
-                       
-               } else if (strlen($notice->content) > 140) {
-
-                       // XXX: Twitter truncates anything over 140, flags the status 
-                   // as "truncated."  Sending this error may screw up some clients
-                   // that assume Twitter will truncate for them.  Should we just
-                   // truncate too? -- Zach
-                       header('HTTP/1.1 406 Not Acceptable');                  
-                       print "That's too long. Max notice size is 140 chars.\n";
-                       exit();
-               }
-
-               $notice->rendered = common_render_content($notice->content, $notice);
-
-               $id = $notice->insert();
-
-               if (!$id) {
-                       common_server_error('Could not update status!', 500);
-                       exit();
-               }
-
-               $orig = clone($notice);
-               $notice->uri = common_notice_uri($notice);
-
-               if (!$notice->update($orig)) {
-                       common_server_error('Could not save status!', 500);
-                       exit();
-               }
-
-        common_save_replies($notice);
-               common_broadcast_notice($notice);
-
-               // FIXME: Bad Hack 
-               // I should be able to just sent this notice off for display,
-               // but $notice->created does not contain a string at this
-               // point and I don't know how to convert it to one here. So
-               // I'm forced to have DBObject pull the notice back out of the
-               // DB before printing. --Zach
-               $apidata['api_arg'] = $id;
-               $this->show($args, $apidata);
-
-               exit();
-       }
-       
-       /*
-               Returns the 20 most recent @replies (status updates prefixed with @username) for the authenticating user.
-               URL: http://server/api/statuses/replies.format
-               
-               Formats: xml, json, rss, atom
-
-               Parameters:
-
-               * page. Optional. Retrieves the 20 next most recent replies. Ex: http://server/api/statuses/replies.xml?page=3 
-               * since. Optional. Narrows the returned results to just those replies created after the specified HTTP-formatted date. The
-        same behavior is available by setting an If-Modified-Since header in your HTTP request. Ex:
-        http://server/api/statuses/replies.xml?since=Tue%2C+27+Mar+2007+22%3A55%3A48+GMT
-               * since_id. Optional. Returns only statuses with an ID greater than (that is, more recent than) the specified
-               ID. Ex: http://server/api/statuses/replies.xml?since_id=12345
-       */
-       function replies($args, $apidata) {
-               parent::handle($args);
-
-               $since = $this->arg('since');
-
-               $count = $this->arg('count');
-               $page = $this->arg('page');
-
-               $user = $apidata['user'];
-               $profile = $user->getProfile();
-
-               $sitename = common_config('site', 'name');
-               $siteserver = common_config('site', 'server'); 
-
-               $title = sprintf(_("%s / Updates replying to %s"), $sitename, $user->nickname);
-               $id = "tag:$siteserver:replies:".$user->id;
-               $link = common_local_url('replies', array('nickname' => $user->nickname));
-               $subtitle = "gar";
-               $subtitle = sprintf(_("%s updates that reply to updates from %s / %s."), $sitename, $user->nickname, $profile->getBestName());
-
-               if (!$page) {
-                       $page = 1;
-               }
-
-               if (!$count) {
-                       $count = 20;
-               }
-
-               $reply = new Reply();
-
-               $reply->profile_id = $user->id;
-
-               $reply->orderBy('modified DESC');
-
-               $page = ($this->arg('page')) ? ($this->arg('page')+0) : 1;
-
-               $reply->limit((($page-1)*20), $count);
-
-               $cnt = $reply->find();
-
-               $notices = array();
-       
-               if ($cnt) {
-                       while ($reply->fetch()) {
-                               $notice = new Notice();
-                               $notice->id = $reply->notice_id;
-                               $result = $notice->find(true);
-                               if (!$result) {
-                                       continue;
-                               }
-                               $notices[] = clone($notice);
-                       }
-               }
-
-               switch($apidata['content-type']) {
-                case 'xml': 
-                       $this->show_xml_timeline($notices);
-                       break;
-                case 'rss':
-                       $this->show_rss_timeline($notices, $title, $id, $link, $subtitle);
-                       break;
-                case 'atom': 
-                       $this->show_atom_timeline($notices, $title, $id, $link, $subtitle);
-                       break;
-                case 'json':
-                       $this->show_json_timeline($notices);
-                       break;
-                default:
-                       common_user_error("API method not found!", $code = 404);
-               }
-
-
-               exit();
-
-
-       }
-
-       
-       
-       /*
-               Destroys the status specified by the required ID parameter. The authenticating user must be
-        the author of the specified status.
-               
-                URL: http://server/api/statuses/destroy/id.format
-               
-                Formats: xml, json
-               
-                Parameters:
-               
-                * id. Required. The ID of the status to destroy. Ex:
-               http://server/api/statuses/destroy/12345.json or
-               http://server/api/statuses/destroy/23456.xml
-       
-       */
-       function destroy($args, $apidata) {
-               parent::handle($args);
-               common_server_error("API method under construction.", $code=501);
-       }
-       
-       # User Methods
-       
-       /*
-               Returns up to 100 of the authenticating user's friends who have most recently updated, each with current status inline.
-        It's also possible to request another user's recent friends list via the id parameter below.
-               
-                URL: http://server/api/statuses/friends.format
-               
-                Formats: xml, json
-               
-                Parameters:
-               
-                * id. Optional. The ID or screen name of the user for whom to request a list of friends. Ex:
-               http://server/api/statuses/friends/12345.json 
-                       or 
-                       http://server/api/statuses/friends/bob.xml
-                * page. Optional. Retrieves the next 100 friends. Ex: http://server/api/statuses/friends.xml?page=2
-                * lite. Optional. Prevents the inline inclusion of current status. Must be set to a value of true. Ex:
-               http://server/api/statuses/friends.xml?lite=true
-                * since. Optional. Narrows the returned results to just those friendships created after the specified
-                       HTTP-formatted date. The same behavior is available by setting an If-Modified-Since header in your HTTP
-                       request. Ex: http://server/api/statuses/friends.xml?since=Tue%2C+27+Mar+2007+22%3A55%3A48+GMT
-       */
-       function friends($args, $apidata) {
-               parent::handle($args);
-               return $this->subscriptions($apidata, 'subscribed', 'subscriber');
-       }
-       
-       /*
-               Returns the authenticating user's followers, each with current status inline. They are ordered by the
-               order in which they joined Twitter (this is going to be changed).
-               
-               URL: http://server/api/statuses/followers.format
-               Formats: xml, json
-
-               Parameters: 
-
-                   * id. Optional. The ID or screen name of the user for whom to request a list of followers. Ex:
-               http://server/api/statuses/followers/12345.json 
-                               or 
-                               http://server/api/statuses/followers/bob.xml
-                   * page. Optional. Retrieves the next 100 followers. Ex: http://server/api/statuses/followers.xml?page=2   
-                   * lite. Optional. Prevents the inline inclusion of current status. Must be set to a value of true.
-                               Ex: http://server/api/statuses/followers.xml?lite=true
-       */
-       function followers($args, $apidata) {
-               parent::handle($args);
-
-               return $this->subscriptions($apidata, 'subscriber', 'subscribed');
-       }
-
-       function subscriptions($apidata, $other_attr, $user_attr) {
-               
-               $user = $this->get_subs_user($apidata);
-               
-               # XXX: id
-               # XXX: lite
-               
-               $page = $this->trimmed('page');
-               
-               if (!$page || !is_numeric($page)) {
-                       $page = 1;
-               }
-               
-               $profile = $user->getProfile();
-               
-               if (!$profile) {
-                       common_server_error(_('User has no profile.'));
-                       return;
-               }
-                               
-               $sub = new Subscription();
-               $sub->$user_attr = $profile->id;
-               $sub->orderBy('created DESC');
-               $sub->limit(($page-1)*100, 100);
-               
-               $others = array();
-
-               if ($sub->find()) {
-                       while ($sub->fetch()) {
-                               $others[] = Profile::staticGet($sub->$other_attr);
-                       }
-               } else {
-                       // user has no followers
-               }
-               
-               $type = $apidata['content-type'];
-               
-               $this->init_document($type);
-               $this->show_profiles($others, $type);
-               $this->end_document($type);
-               exit();
-       }
-
-       function get_subs_user($apidata) {
-               
-               // function was called with an argument /statuses/user_timeline/api_arg.format
-               if (isset($apidata['api_arg'])) {
-               
-                       if (is_numeric($apidata['api_arg'])) {
-                               $user = User::staticGet($apidata['api_arg']);
-                       } else {
-                               $nickname = common_canonical_nickname($apidata['api_arg']);
-                               $user = User::staticGet('nickname', $nickname);
-                       } 
-               } else {
-                       
-                       // if no user was specified, then we'll use the authenticated user
-                       $user = $apidata['user'];
-               }
-
-               if (!$user) {
-                       // Set the user to be the auth user if asked-for can't be found
-                       // honestly! This is what Twitter does, I swear --Zach
-                       $user = $apidata['user'];
-               }
-               
-               return $user;
-       }
-       
-       function show_profiles($profiles, $type) {
-               switch ($type) {
-                case 'xml':
-                       common_element_start('users', array('type' => 'array'));
-                       foreach ($profiles as $profile) {
-                               $this->show_profile($profile);
-                       }
-                       common_element_end('users');
-                       break;
-                case 'json':
-                       $arrays = array();
-                       foreach ($profiles as $profile) {
-                               $arrays[] = $this->twitter_user_array($profile, true);
-                       }
-                       print json_encode($arrays);
-                       break;
-                default:
-                       $this->client_error(_('unsupported file type'));
-                       exit();
-               }
-       }
-       
-       /*
-       Returns a list of the users currently featured on the site with their current statuses inline. 
-       URL: http://server/api/statuses/featured.format 
-
-       Formats: xml, json
-       */
-       function featured($args, $apidata) {
-               parent::handle($args);
-               common_server_error("API method under construction.", $code=501);
-       }
-
-       function get_user($id, $apidata) {
-               if (!$id) {
-                       return $apidata['user'];
-               } else if (is_numeric($id)) {
-                       return User::staticGet($id);
-               } else {
-                       return User::staticGet('nickname', $id);
-               }
-       }
-}
-
+class TwitapistatusesAction extends TwitterapiAction
+{
+
+    function public_timeline($args, $apidata)
+    {
+        // XXX: To really live up to the spec we need to build a list
+        // of notices by users who have custom avatars, so fix this SQL -- Zach
+
+        parent::handle($args);
+
+        $sitename   = common_config('site', 'name');
+        $title      = sprintf(_("%s public timeline"), $sitename);
+        $taguribase = common_config('integration', 'taguri');
+        $id         = "tag:$taguribase:PublicTimeline";
+        $link       = common_root_url();
+        $subtitle   = sprintf(_("%s updates from everyone!"), $sitename);
+
+        $page     = (int)$this->arg('page', 1);
+        $count    = (int)$this->arg('count', 20);
+        $max_id   = (int)$this->arg('max_id', 0);
+        $since_id = (int)$this->arg('since_id', 0);
+        $since    = $this->arg('since');
+
+        $notice = Notice::publicStream(($page-1)*$count, $count, $since_id,
+            $max_id, $since);
+
+        switch($apidata['content-type']) {
+        case 'xml':
+            $this->show_xml_timeline($notice);
+            break;
+        case 'rss':
+            $this->show_rss_timeline($notice, $title, $link, $subtitle);
+            break;
+        case 'atom':
+            $selfuri = common_root_url() . 'api/statuses/public_timeline.atom';
+            $this->show_atom_timeline($notice, $title, $id, $link,
+                $subtitle, null, $selfuri);
+            break;
+        case 'json':
+            $this->show_json_timeline($notice);
+            break;
+        default:
+            $this->clientError(_('API method not found!'), $code = 404);
+            break;
+        }
+
+    }
+
+    function friends_timeline($args, $apidata)
+    {
+        parent::handle($args);
+
+        $this->auth_user = $apidata['user'];
+        $user = $this->get_user($apidata['api_arg'], $apidata);
+
+        if (empty($user)) {
+             $this->clientError(_('No such user!'), 404,
+             $apidata['content-type']);
+            return;
+        }
+
+        $profile    = $user->getProfile();
+        $sitename   = common_config('site', 'name');
+        $title      = sprintf(_("%s and friends"), $user->nickname);
+        $taguribase = common_config('integration', 'taguri');
+        $id         = "tag:$taguribase:FriendsTimeline:" . $user->id;
+        $link       = common_local_url('all',
+            array('nickname' => $user->nickname));
+        $subtitle   = sprintf(_('Updates from %1$s and friends on %2$s!'),
+            $user->nickname, $sitename);
+
+        $page     = (int)$this->arg('page', 1);
+        $count    = (int)$this->arg('count', 20);
+        $max_id   = (int)$this->arg('max_id', 0);
+        $since_id = (int)$this->arg('since_id', 0);
+        $since    = $this->arg('since');
+
+        if (!empty($this->auth_user) && $this->auth_user->id == $user->id) {
+            $notice = $user->noticeInbox(($page-1)*$count,
+                $count, $since_id, $max_id, $since);
+        } else {
+            $notice = $user->noticesWithFriends(($page-1)*$count,
+                $count, $since_id, $max_id, $since);
+        }
+
+        switch($apidata['content-type']) {
+        case 'xml':
+            $this->show_xml_timeline($notice);
+            break;
+        case 'rss':
+            $this->show_rss_timeline($notice, $title, $link, $subtitle);
+            break;
+        case 'atom':
+            if (isset($apidata['api_arg'])) {
+                $selfuri = common_root_url() .
+                    'api/statuses/friends_timeline/' .
+                        $apidata['api_arg'] . '.atom';
+            } else {
+                $selfuri = common_root_url() .
+                    'api/statuses/friends_timeline.atom';
+            }
+            $this->show_atom_timeline($notice, $title, $id, $link,
+                $subtitle, null, $selfuri);
+            break;
+        case 'json':
+            $this->show_json_timeline($notice);
+            break;
+        default:
+            $this->clientError(_('API method not found!'), $code = 404);
+        }
+
+    }
+
+    function user_timeline($args, $apidata)
+    {
+        parent::handle($args);
+
+        $this->auth_user = $apidata['user'];
+        $user = $this->get_user($apidata['api_arg'], $apidata);
+
+        if (empty($user)) {
+            $this->clientError('Not Found', 404, $apidata['content-type']);
+            return;
+        }
+
+        $profile = $user->getProfile();
+
+        $sitename   = common_config('site', 'name');
+        $title      = sprintf(_("%s timeline"), $user->nickname);
+        $taguribase = common_config('integration', 'taguri');
+        $id         = "tag:$taguribase:UserTimeline:".$user->id;
+        $link       = common_local_url('showstream',
+            array('nickname' => $user->nickname));
+        $subtitle   = sprintf(_('Updates from %1$s on %2$s!'),
+            $user->nickname, $sitename);
+
+        # FriendFeed's SUP protocol
+        # Also added RSS and Atom feeds
+
+        $suplink = common_local_url('sup', null, null, $user->id);
+        header('X-SUP-ID: '.$suplink);
+
+        $page     = (int)$this->arg('page', 1);
+        $count    = (int)$this->arg('count', 20);
+        $max_id   = (int)$this->arg('max_id', 0);
+        $since_id = (int)$this->arg('since_id', 0);
+        $since    = $this->arg('since');
+
+        $notice = $user->getNotices(($page-1)*$count,
+            $count, $since_id, $max_id, $since);
+
+        switch($apidata['content-type']) {
+         case 'xml':
+            $this->show_xml_timeline($notice);
+            break;
+         case 'rss':
+            $this->show_rss_timeline($notice, $title, $link,
+                $subtitle, $suplink);
+            break;
+         case 'atom':
+            if (isset($apidata['api_arg'])) {
+                $selfuri = common_root_url() .
+                    'api/statuses/user_timeline/' .
+                        $apidata['api_arg'] . '.atom';
+            } else {
+                $selfuri = common_root_url() .
+                 'api/statuses/user_timeline.atom';
+            }
+            $this->show_atom_timeline($notice, $title, $id, $link,
+                $subtitle, $suplink, $selfuri);
+            break;
+         case 'json':
+            $this->show_json_timeline($notice);
+            break;
+         default:
+            $this->clientError(_('API method not found!'), $code = 404);
+        }
+
+    }
+
+    function update($args, $apidata)
+    {
+        parent::handle($args);
+
+        if (!in_array($apidata['content-type'], array('xml', 'json'))) {
+            $this->clientError(_('API method not found!'), $code = 404);
+            return;
+        }
+
+        if ($_SERVER['REQUEST_METHOD'] != 'POST') {
+            $this->clientError(_('This method requires a POST.'),
+                400, $apidata['content-type']);
+            return;
+        }
+
+        $user = $apidata['user'];  // Always the auth user
+
+        $status = $this->trimmed('status');
+        $source = $this->trimmed('source');
+        $in_reply_to_status_id =
+            intval($this->trimmed('in_reply_to_status_id'));
+        $reserved_sources = array('web', 'omb', 'mail', 'xmpp', 'api');
+
+        if (empty($source) || in_array($source, $reserved_sources)) {
+            $source = 'api';
+        }
+
+        if (empty($status)) {
+
+            // XXX: Note: In this case, Twitter simply returns '200 OK'
+            // No error is given, but the status is not posted to the
+            // user's timeline.     Seems bad.     Shouldn't we throw an
+            // errror? -- Zach
+            return;
+
+        } else {
+
+            $status_shortened = common_shorten_links($status);
+
+            if (mb_strlen($status_shortened) > 140) {
+
+                // XXX: Twitter truncates anything over 140, flags the status
+                // as "truncated." Sending this error may screw up some clients
+                // that assume Twitter will truncate for them.    Should we just
+                // truncate too? -- Zach
+                $this->clientError(_('That\'s too long. Max notice size is 140 chars.'),
+                    $code = 406, $apidata['content-type']);
+                return;
+            }
+        }
+
+        // Check for commands
+        $inter = new CommandInterpreter();
+        $cmd = $inter->handle_command($user, $status_shortened);
+
+        if ($cmd) {
+
+            if ($this->supported($cmd)) {
+                $cmd->execute(new Channel());
+            }
+
+            // cmd not supported?  Twitter just returns your latest status.
+            // And, it returns your last status whether the cmd was successful
+            // or not!
+            $n = $user->getCurrentNotice();
+            $apidata['api_arg'] = $n->id;
+        } else {
+
+            $reply_to = null;
+
+            if ($in_reply_to_status_id) {
+
+                // check whether notice actually exists
+                $reply = Notice::staticGet($in_reply_to_status_id);
+
+                if ($reply) {
+                    $reply_to = $in_reply_to_status_id;
+                } else {
+                    $this->clientError(_('Not found'), $code = 404,
+                        $apidata['content-type']);
+                    return;
+                }
+            }
+
+            $notice = Notice::saveNew($user->id,
+                html_entity_decode($status, ENT_NOQUOTES, 'UTF-8'),
+                    $source, 1, $reply_to);
+
+            if (is_string($notice)) {
+                $this->serverError($notice);
+                return;
+            }
+
+            common_broadcast_notice($notice);
+            $apidata['api_arg'] = $notice->id;
+        }
+
+        $this->show($args, $apidata);
+    }
+
+    function mentions($args, $apidata)
+    {
+        parent::handle($args);
+
+        $user = $this->get_user($apidata['api_arg'], $apidata);
+        $this->auth_user = $apidata['user'];
+
+        if (empty($user)) {
+             $this->clientError(_('No such user!'), 404,
+                 $apidata['content-type']);
+            return;
+        }
+
+        $profile = $user->getProfile();
+
+        $sitename   = common_config('site', 'name');
+        $title      = sprintf(_('%1$s / Updates mentioning %2$s'),
+            $sitename, $user->nickname);
+        $taguribase = common_config('integration', 'taguri');
+        $id         = "tag:$taguribase:Mentions:".$user->id;
+        $link       = common_local_url('replies',
+            array('nickname' => $user->nickname));
+        $subtitle   = sprintf(_('%1$s updates that reply to updates from %2$s / %3$s.'),
+            $sitename, $user->nickname, $profile->getBestName());
+
+        $page     = (int)$this->arg('page', 1);
+        $count    = (int)$this->arg('count', 20);
+        $max_id   = (int)$this->arg('max_id', 0);
+        $since_id = (int)$this->arg('since_id', 0);
+        $since    = $this->arg('since');
+
+        $notice = $user->getReplies(($page-1)*$count,
+            $count, $since_id, $max_id, $since);
+
+        switch($apidata['content-type']) {
+        case 'xml':
+            $this->show_xml_timeline($notice);
+            break;
+        case 'rss':
+            $this->show_rss_timeline($notice, $title, $link, $subtitle);
+            break;
+        case 'atom':
+            $selfuri = common_root_url() .
+                ltrim($_SERVER['QUERY_STRING'], 'p=');
+            $this->show_atom_timeline($notice, $title, $id, $link, $subtitle,
+                null, $selfuri);
+            break;
+        case 'json':
+            $this->show_json_timeline($notice);
+            break;
+        default:
+            $this->clientError(_('API method not found!'), $code = 404);
+        }
+
+    }
+
+    function replies($args, $apidata)
+    {
+        call_user_func(array($this, 'mentions'), $args, $apidata);
+    }
+
+    function show($args, $apidata)
+    {
+        parent::handle($args);
+
+        if (!in_array($apidata['content-type'], array('xml', 'json'))) {
+            $this->clientError(_('API method not found!'), $code = 404);
+            return;
+        }
+
+        // 'id' is an undocumented parameter in Twitter's API. Several
+        // clients make use of it, so we support it too.
+
+        // show.json?id=12345 takes precedence over /show/12345.json
+
+        $this->auth_user = $apidata['user'];
+        $notice_id       = $this->trimmed('id');
+
+        if (empty($notice_id)) {
+            $notice_id   = $apidata['api_arg'];
+        }
+
+        $notice          = Notice::staticGet((int)$notice_id);
+
+        if ($notice) {
+            if ($apidata['content-type'] == 'xml') {
+                $this->show_single_xml_status($notice);
+            } elseif ($apidata['content-type'] == 'json') {
+                $this->show_single_json_status($notice);
+            }
+        } else {
+            // XXX: Twitter just sets a 404 header and doens't bother
+            // to return an err msg
+            $this->clientError(_('No status with that ID found.'),
+                404, $apidata['content-type']);
+        }
+    }
+
+    function destroy($args, $apidata)
+    {
+        parent::handle($args);
+
+        if (!in_array($apidata['content-type'], array('xml', 'json'))) {
+            $this->clientError(_('API method not found!'), $code = 404);
+            return;
+        }
+
+        // Check for RESTfulness
+        if (!in_array($_SERVER['REQUEST_METHOD'], array('POST', 'DELETE'))) {
+            // XXX: Twitter just prints the err msg, no XML / JSON.
+            $this->clientError(_('This method requires a POST or DELETE.'),
+                400, $apidata['content-type']);
+            return;
+        }
+
+        $user      = $apidata['user']; // Always the auth user
+        $notice_id = $apidata['api_arg'];
+        $notice    = Notice::staticGet($notice_id);
+
+        if (empty($notice)) {
+            $this->clientError(_('No status found with that ID.'),
+                404, $apidata['content-type']);
+            return;
+        }
+
+        if ($user->id == $notice->profile_id) {
+            $replies = new Reply;
+            $replies->get('notice_id', $notice_id);
+            $replies->delete();
+            $notice->delete();
+
+            if ($apidata['content-type'] == 'xml') {
+                $this->show_single_xml_status($notice);
+            } elseif ($apidata['content-type'] == 'json') {
+                $this->show_single_json_status($notice);
+            }
+        } else {
+            $this->clientError(_('You may not delete another user\'s status.'),
+                403, $apidata['content-type']);
+        }
+
+    }
+
+    function friends($args, $apidata)
+    {
+        parent::handle($args);
+        return $this->subscriptions($apidata, 'subscribed', 'subscriber');
+    }
+
+    function friendsIDs($args, $apidata)
+    {
+        parent::handle($args);
+        return $this->subscriptions($apidata, 'subscribed', 'subscriber', true);
+    }
+
+    function followers($args, $apidata)
+    {
+        parent::handle($args);
+        return $this->subscriptions($apidata, 'subscriber', 'subscribed');
+    }
+
+    function followersIDs($args, $apidata)
+    {
+        parent::handle($args);
+        return $this->subscriptions($apidata, 'subscriber', 'subscribed', true);
+    }
+
+    function subscriptions($apidata, $other_attr, $user_attr, $onlyIDs=false)
+    {
+        $this->auth_user = $apidata['user'];
+        $user = $this->get_user($apidata['api_arg'], $apidata);
+
+        if (empty($user)) {
+            $this->clientError('Not Found', 404, $apidata['content-type']);
+            return;
+        }
+
+        $profile = $user->getProfile();
+
+        $sub = new Subscription();
+        $sub->$user_attr = $profile->id;
+
+        $sub->orderBy('created DESC');
+
+        // Normally, page 100 friends at a time
+
+        if (!$onlyIDs) {
+            $page  = $this->arg('page', 1);
+            $count = $this->arg('count', 100);
+            $sub->limit(($page-1)*$count, $count);
+        } else {
+
+            // If we're just looking at IDs, return
+            // ALL of them, unless the user specifies a page,
+            // in which case, return 500 per page.
+
+            $page = $this->arg('page');
+            if (!empty($page)) {
+                if ($page < 1) {
+                    $page = 1;
+                }
+                $count = 500;
+                $sub->limit(($page-1)*$count, $count);
+            }
+        }
+
+        $others = array();
+
+        if ($sub->find()) {
+            while ($sub->fetch()) {
+                $others[] = Profile::staticGet($sub->$other_attr);
+            }
+        } else {
+            // user has no followers
+        }
+
+        $type = $apidata['content-type'];
+
+        $this->init_document($type);
+
+        if ($onlyIDs) {
+            $this->showIDs($others, $type);
+        } else {
+            $this->show_profiles($others, $type);
+        }
+
+        $this->end_document($type);
+    }
+
+    function show_profiles($profiles, $type)
+    {
+        switch ($type) {
+        case 'xml':
+            $this->elementStart('users', array('type' => 'array'));
+            foreach ($profiles as $profile) {
+                $this->show_profile($profile);
+            }
+            $this->elementEnd('users');
+            break;
+        case 'json':
+            $arrays = array();
+            foreach ($profiles as $profile) {
+                $arrays[] = $this->twitter_user_array($profile, true);
+            }
+            print json_encode($arrays);
+            break;
+        default:
+            $this->clientError(_('unsupported file type'));
+        }
+    }
+
+    function showIDs($profiles, $type)
+    {
+        switch ($type) {
+        case 'xml':
+            $this->elementStart('ids');
+            foreach ($profiles as $profile) {
+                $this->element('id', null, $profile->id);
+            }
+            $this->elementEnd('ids');
+            break;
+        case 'json':
+            $ids = array();
+            foreach ($profiles as $profile) {
+                $ids[] = (int)$profile->id;
+            }
+            print json_encode($ids);
+            break;
+        default:
+            $this->clientError(_('unsupported file type'));
+        }
+    }
+
+    function featured($args, $apidata)
+    {
+        parent::handle($args);
+        $this->serverError(_('API method under construction.'), $code=501);
+    }
+
+    function supported($cmd)
+    {
+        $cmdlist = array('MessageCommand', 'SubCommand', 'UnsubCommand',
+            'FavCommand', 'OnCommand', 'OffCommand');
+
+        if (in_array(get_class($cmd), $cmdlist)) {
+            return true;
+        }
+
+        return false;
+    }
 
+}