Public exposure warning on affected network group pages. config-able so a plugin...

[friendica.git] / include / Contact.php

diff --git a/include/Contact.php b/include/Contact.php
index 3c41f7650803174fd86ef5ab04bf01a3f92661f7..4ca77d065175c58bc0f02d3b2f7239cc20fadb73 100644 (file)
--- a/include/Contact.php
+++ b/include/Contact.php
@@ -1,6 +1,33 @@
 <?php
 
 
+// Included here for completeness, but this is a very dangerous operation.
+// It is the caller's responsibility to confirm the requestor's intent and
+// authorisation to do this.
+
+function user_remove($uid) {
+       if(! $uid)
+               return;
+       $a = get_app();
+       logger('Removing user: ' . $uid);
+       q("DELETE FROM `contact` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `group` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `group_member` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `intro` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `event` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `item` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `mail` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `photo` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `profile` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `profile_check` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `pconfig` WHERE `uid` = %d", intval($uid));
+       q("DELETE FROM `user` WHERE `uid` = %d", intval($uid));
+       if($uid == local_user()) {
+               unset($_SESSION['authenticated']);
+               unset($_SESSION['uid']);
+               goaway($a->get_baseurl());
+       }
+}
 
 
 function contact_remove($id) {
@@ -13,6 +40,12 @@ function contact_remove($id) {
        q("DELETE FROM `photo` WHERE `contact-id` = %d ",
                intval($id)
        );
+       q("DELETE FROM `mail` WHERE `contact-id` = %d ",
+               intval($id)
+       );
+       q("DELETE FROM `event` WHERE `cid` = %d ",
+               intval($id)
+       );
 }
 
 
@@ -46,7 +79,7 @@ function mark_for_death($contact) {
 if(! function_exists('unmark_for_death')) {
 function unmark_for_death($contact) {
        // It's a miracle. Our dead contact has inexplicably come back to life.
-       q("UPDATE `contact` SET `term-date = '%s' WHERE `id` = %d LIMIT 1",
+       q("UPDATE `contact` SET `term-date` = '%s' WHERE `id` = %d LIMIT 1",
                dbesc('0000-00-00 00:00:00'),
                intval($contact['id'])
        );