]> git.mxchange.org Git - quix0rs-gnu-social.git/blobdiff - lib/jabber.php
csrf protection in userauthorization
[quix0rs-gnu-social.git] / lib / jabber.php
index bd04edc63e8344aa29cad80e23e95e1dd22ab571..1202aa32227505f4d0682389063c695728f6fa73 100644 (file)
@@ -37,8 +37,11 @@ class Laconica_XMPP extends XMPPHP_XMPP {
        $out .= "<body>$body</body>";
        if($payload) $out .= $payload;
        $out .= "</message>";
-       
+
+               $cnt = strlen($out);
+               common_log(LOG_DEBUG, "Sending $cnt chars to $to");
        $this->send($out);
+               common_log(LOG_DEBUG, 'Done.');
     }
 }
 
@@ -51,7 +54,6 @@ function jabber_normalize_jid($jid) {
        if (preg_match("/(?:([^\@]+)\@)?([^\/]+)(?:\/(.*))?$/", $jid, $matches)) {
                $node = $matches[1];
                $server = $matches[2];
-               $resource = $matches[3];
                return strtolower($node.'@'.$server);
        } else {
                return NULL;
@@ -80,7 +82,8 @@ function jabber_connect($resource=NULL) {
                                                                XMPPHP_Log::LEVEL_VERBOSE :  NULL
                                                                );
                $conn->autoSubscribe();
-
+               $conn->useEncryption(common_config('xmpp', 'encryption'));
+               
                if (!$conn) {
                        return false;
                }
@@ -114,13 +117,14 @@ function jabber_send_notice($to, $notice) {
 # Extra stuff defined by Twitter, needed by twitter clients
 
 function jabber_format_entry($profile, $notice) {
+       
        $noticeurl = common_local_url('shownotice',
                                                                  array('notice' => $notice->id));
        $msg = jabber_format_notice($profile, $notice);
        $entry = "\n<entry xmlns='http://www.w3.org/2005/Atom'>\n";
        $entry .= "<source>\n";
        $entry .= "<title>" . $profile->nickname . " - " . common_config('site', 'name') . "</title>\n";
-       $entry .= "<link href='" . $profile->profileurl . "'/>\n";
+       $entry .= "<link href='" . htmlspecialchars($profile->profileurl) . "'/>\n";
        $entry .= "<link rel='self' type='application/rss+xml' href='" . common_local_url('userrss', array('nickname' => $profile->nickname)) . "'/>\n";
        $entry .= "<author><name>" . $profile->nickname . "</name></author>\n";
        $entry .= "<icon>" . common_profile_avatar_url($profile, AVATAR_PROFILE_SIZE) . "</icon>\n";
@@ -132,6 +136,13 @@ function jabber_format_entry($profile, $notice) {
        $entry .= "<published>".common_date_w3dtf($notice->created)."</published>\n";
        $entry .= "<updated>".common_date_w3dtf($notice->modified)."</updated>\n";
        $entry .= "</entry>\n";
+
+       $html = "\n<html xmlns='http://jabber.org/protocol/xhtml-im'>\n";
+       $html .= "<body xmlns='http://www.w3.org/1999/xhtml'>\n";
+       $html .= "<a href='".common_profile_url($profile->nickname)."'>".$profile->nickname."</a>: ";
+       $html .= ($notice->rendered) ? $notice->rendered : common_render_content($notice->content, $notice);
+       $html .= "\n</body>\n";
+       $html .= "\n</html>\n";
        
        $event = "<event xmlns='http://jabber.org/protocol/pubsub#event'>\n";
     $event .= "<items xmlns='http://jabber.org/protocol/pubsub' ";
@@ -140,7 +151,7 @@ function jabber_format_entry($profile, $notice) {
        $event .= "</items>\n";
        $event .= "</event>\n";
        # FIXME: include the pubsub event, too.
-       return $entry;
+       return $html . $entry;
 #      return $entry . "\n" . $event;
 }
 
@@ -194,8 +205,9 @@ function jabber_special_presence($type, $to=NULL, $show=NULL, $status=NULL) {
 }
 
 function jabber_broadcast_notice($notice) {
-       # First, get users subscribed to this profile
-       # XXX: use a join here rather than looping through results
+       if (!common_config('xmpp', 'enabled')) {
+               return true;
+       }
        $profile = Profile::staticGet($notice->profile_id);
        if (!$profile) {
                common_log(LOG_WARNING, 'Refusing to broadcast notice with ' .
@@ -203,23 +215,73 @@ function jabber_broadcast_notice($notice) {
                           __FILE__);
                return false;
        }
+       $sent_to = array();
+       # First, get users who this is a direct reply to
+       $reply = new Reply();
+       $reply->notice_id = $notice->id;
+       if ($reply->find()) {
+               while ($reply->fetch()) {
+                       $user = User::staticGet($reply->profile_id);
+                       if ($user && $user->jabber && $user->jabbernotify && $user->jabberreplies) {
+                               common_log(LOG_INFO,
+                                                  'Sending reply notice ' . $notice->id . ' to ' . $user->jabber,
+                                                  __FILE__);
+                               $success = jabber_send_notice($user->jabber, $notice);
+                               if ($success) {
+                                       # Remember so we don't send twice
+                                       $sent_to[$user->id] = true;
+                               } else {
+                                       # XXX: Not sure, but I think that's the right thing to do
+                                       common_log(LOG_WARNING,
+                                                          'Sending reply notice ' . $notice->id . ' to ' . $user->jabber . ' FAILED, cancelling.',
+                                                          __FILE__);
+                                       return false;
+                               }
+                       }
+               }
+       }
+    # Now, get users subscribed to this profile
+       # XXX: use a join here rather than looping through results
        $sub = new Subscription();
        $sub->subscribed = $notice->profile_id;
+        
        if ($sub->find()) {
                while ($sub->fetch()) {
                        $user = User::staticGet($sub->subscriber);
-                       if ($user && $user->jabber && $user->jabbernotify) {
+                       if ($user && $user->jabber && $user->jabbernotify && !array_key_exists($user->id,$sent_to)) {
                                common_log(LOG_INFO,
                                                   'Sending notice ' . $notice->id . ' to ' . $user->jabber,
                                                   __FILE__);
                                $success = jabber_send_notice($user->jabber, $notice);
-                               if (!$success) {
+                               if ($success) {
+                                       $sent_to[$user->id] = true;
+                               } else {
                                        # XXX: Not sure, but I think that's the right thing to do
+                                       common_log(LOG_WARNING,
+                                                          'Sending notice ' . $notice->id . ' to ' . $user->jabber . ' FAILED, cancelling.',
+                                                          __FILE__);
                                        return false;
                                }
                        }
                }
        }
+
+       # Now, users who want everything
+       
+       $public = common_config('xmpp', 'public');
+       
+       # FIXME PRIV don't send out private messages here
+       # XXX: should we send out non-local messages if public,localonly = false? I think not
+       
+       if ($public && $notice->is_local) {
+               foreach ($public as $address) {
+                               common_log(LOG_INFO,
+                                                  'Sending notice ' . $notice->id . ' to public listener ' . $address,
+                                                  __FILE__);
+                               jabber_send_notice($address, $notice);
+               }
+       }
+       
        return true;
 }