]> git.mxchange.org Git - friendica.git/blobdiff - mod/follow.php
Merge pull request #8850 from annando/fix-follow
[friendica.git] / mod / follow.php
index bb9bc0eb3b3ca80aefabcd2b58b3578146c1aa96..97bf9fcf9a50f89752e5b35d6e1c33e4c33449dc 100644 (file)
 <?php
 /**
- * @file mod/follow.php
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
  */
+
 use Friendica\App;
-use Friendica\Core\Config;
-use Friendica\Core\L10n;
-use Friendica\Core\System;
+use Friendica\Core\Protocol;
+use Friendica\Core\Renderer;
+use Friendica\DI;
 use Friendica\Model\Contact;
 use Friendica\Model\Profile;
+use Friendica\Model\Item;
 use Friendica\Network\Probe;
+use Friendica\Database\DBA;
+use Friendica\Model\User;
+use Friendica\Util\Strings;
 
-function follow_post(App $a) {
-
+function follow_post(App $a)
+{
        if (!local_user()) {
-               notice(L10n::t('Permission denied.') . EOL);
-               goaway($_SESSION['return_url']);
-               // NOTREACHED
+               throw new \Friendica\Network\HTTPException\ForbiddenException(DI::l10n()->t('Access denied.'));
        }
 
-       if ($_REQUEST['cancel']) {
-               goaway($_SESSION['return_url']);
+       if (isset($_REQUEST['cancel'])) {
+               DI::baseUrl()->redirect('contact');
        }
 
-       $uid = local_user();
-       $url = notags(trim($_REQUEST['url']));
-       $return_url = $_SESSION['return_url'];
+       $url = Probe::cleanURI($_REQUEST['url']);
+       $return_path = 'follow?url=' . urlencode($url);
 
        // Makes the connection request for friendica contacts easier
        // This is just a precaution if maybe this page is called somewhere directly via POST
-       $_SESSION["fastlane"] = $url;
+       $_SESSION['fastlane'] = $url;
 
-       $result = Contact::createFromProbe($uid, $url, true);
+       $result = Contact::createFromProbe($a->user, $url, true);
 
        if ($result['success'] == false) {
+               // Possibly it is a remote item and not an account
+               follow_remote_item($url);
+
                if ($result['message']) {
                        notice($result['message']);
                }
-               goaway($return_url);
+               DI::baseUrl()->redirect($return_path);
        } elseif ($result['cid']) {
-               goaway(System::baseUrl().'/contacts/'.$result['cid']);
+               DI::baseUrl()->redirect('contact/' . $result['cid']);
        }
 
-       info(L10n::t('The contact could not be added.').EOL);
+       info(DI::l10n()->t('The contact could not be added.'));
 
-       goaway($return_url);
+       DI::baseUrl()->redirect($return_path);
        // NOTREACHED
 }
 
-function follow_content(App $a) {
+function follow_content(App $a)
+{
+       $return_path = 'contact';
 
        if (!local_user()) {
-               notice(L10n::t('Permission denied.') . EOL);
-               goaway($_SESSION['return_url']);
+               notice(DI::l10n()->t('Permission denied.'));
+               DI::baseUrl()->redirect($return_path);
                // NOTREACHED
        }
 
        $uid = local_user();
-       $url = notags(trim($_REQUEST['url']));
-
-       $submit = L10n::t('Submit Request');
-
-       // There is a current issue. It seems as if you can't start following a Friendica that is following you
-       // With Diaspora this works - but Friendica is special, it seems ...
-       $r = q("SELECT `url` FROM `contact` WHERE `uid` = %d AND ((`rel` != %d) OR (`network` = '%s')) AND
-               (`nurl` = '%s' OR `alias` = '%s' OR `alias` = '%s') AND
-               `network` != '%s' LIMIT 1",
-               intval(local_user()), dbesc(CONTACT_IS_FOLLOWER), dbesc(NETWORK_DFRN), dbesc(normalise_link($url)),
-               dbesc(normalise_link($url)), dbesc($url), dbesc(NETWORK_STATUSNET));
-
-       if ($r) {
-               notice(L10n::t('You already added this contact.').EOL);
-               $submit = "";
-               //goaway($_SESSION['return_url']);
-               // NOTREACHED
+
+       // Issue 4815: Silently removing a prefixing @
+       $url = ltrim(Strings::escapeTags(trim($_REQUEST['url'] ?? '')), '@!');
+
+       // Issue 6874: Allow remote following from Peertube
+       if (strpos($url, 'acct:') === 0) {
+               $url = str_replace('acct:', '', $url);
        }
 
-       $ret = Probe::uri($url);
+       if (!$url) {
+               DI::baseUrl()->redirect($return_path);
+       }
 
-       if (($ret["network"] == NETWORK_DIASPORA) && !Config::get('system', 'diaspora_enabled')) {
-               notice(L10n::t("Diaspora support isn't enabled. Contact can't be added.") . EOL);
-               $submit = "";
-               //goaway($_SESSION['return_url']);
-               // NOTREACHED
+       $submit = DI::l10n()->t('Submit Request');
+
+       // Don't try to add a pending contact
+       $user_contact = DBA::selectFirst('contact', ['pending'], ["`uid` = ? AND ((`rel` != ?) OR (`network` = ?)) AND
+               (`nurl` = ? OR `alias` = ? OR `alias` = ?) AND `network` != ?", 
+               $uid, Contact::FOLLOWER, Protocol::DFRN, Strings::normaliseLink($url),
+               Strings::normaliseLink($url), $url, Protocol::STATUSNET]);
+
+       if (DBA::isResult($user_contact)) {
+               if ($user_contact['pending']) {
+                       notice(DI::l10n()->t('You already added this contact.'));
+                       $submit = '';
+               }
        }
 
-       if (($ret["network"] == NETWORK_OSTATUS) && Config::get('system', 'ostatus_disabled')) {
-               notice(L10n::t("OStatus support is disabled. Contact can't be added.") . EOL);
-               $submit = "";
-               //goaway($_SESSION['return_url']);
-               // NOTREACHED
+       $contact = Contact::getByURL($url, 0, [], true);
+       if (empty($contact)) {
+               // Possibly it is a remote item and not an account
+               follow_remote_item($url);
+
+               notice(DI::l10n()->t("The network type couldn't be detected. Contact can't be added."));
+               $submit = '';
+               $contact = ['url' => $url, 'network' => Protocol::PHANTOM, 'name' => $url, 'keywords' => ''];
        }
 
-       if ($ret["network"] == NETWORK_PHANTOM) {
-               notice(L10n::t("The network type couldn't be detected. Contact can't be added.") . EOL);
-               $submit = "";
-               //goaway($_SESSION['return_url']);
-               // NOTREACHED
+       $protocol = Contact::getProtocol($contact['url'], $contact['network']);
+
+       if (($protocol == Protocol::DIASPORA) && !DI::config()->get('system', 'diaspora_enabled')) {
+               notice(DI::l10n()->t("Diaspora support isn't enabled. Contact can't be added."));
+               $submit = '';
        }
 
-       if ($ret["network"] == NETWORK_MAIL) {
-               $ret["url"] = $ret["addr"];
+       if (($protocol == Protocol::OSTATUS) && DI::config()->get('system', 'ostatus_disabled')) {
+               notice(DI::l10n()->t("OStatus support is disabled. Contact can't be added."));
+               $submit = '';
        }
 
-       if ($ret['network'] === NETWORK_DFRN) {
-               $request = $ret["request"];
-               $tpl = get_markup_template('dfrn_request.tpl');
-       } else {
-               $request = System::baseUrl()."/follow";
-               $tpl = get_markup_template('auto_request.tpl');
+       if ($protocol == Protocol::MAIL) {
+               $contact['url'] = $contact['addr'];
        }
 
-       $r = q("SELECT `url` FROM `contact` WHERE `uid` = %d AND `self` LIMIT 1", intval($uid));
+       if (($protocol === Protocol::DFRN) && !DBA::isResult($contact)) {
+               $request = $contact['request'];
+               $tpl = Renderer::getMarkupTemplate('dfrn_request.tpl');
+       } else {
+               $request = DI::baseUrl() . '/follow';
+               $tpl = Renderer::getMarkupTemplate('auto_request.tpl');
+       }
 
-       if (!$r) {
-               notice(L10n::t('Permission denied.') . EOL);
-               goaway($_SESSION['return_url']);
+       $owner = User::getOwnerDataById($uid);
+       if (empty($owner)) {
+               notice(DI::l10n()->t('Permission denied.'));
+               DI::baseUrl()->redirect($return_path);
                // NOTREACHED
        }
 
-       $myaddr = $r[0]["url"];
-       $gcontact_id = 0;
+       $myaddr = $owner['url'];
 
        // Makes the connection request for friendica contacts easier
-       $_SESSION["fastlane"] = $ret["url"];
-
-       $r = q("SELECT `id`, `location`, `about`, `keywords` FROM `gcontact` WHERE `nurl` = '%s'",
-               normalise_link($ret["url"]));
-
-       if (!$r) {
-               $r = [["location" => "", "about" => "", "keywords" => ""]];
-       } else {
-               $gcontact_id = $r[0]["id"];
-       }
-
-       if ($ret['network'] === NETWORK_DIASPORA) {
-               $r[0]["location"] = "";
-               $r[0]["about"] = "";
-       }
-
-       $header = L10n::t("Connect/Follow");
-
-       $o  = replace_macros($tpl, [
-                       '$header' => htmlentities($header),
-                       //'$photo' => proxy_url($ret["photo"], false, PROXY_SIZE_SMALL),
-                       '$desc' => "",
-                       '$pls_answer' => L10n::t('Please answer the following:'),
-                       '$does_know_you' => ['knowyou', L10n::t('Does %s know you?', $ret["name"]), false, '', [L10n::t('No'), L10n::t('Yes')]],
-                       '$add_note' => L10n::t('Add a personal note:'),
-                       '$page_desc' => "",
-                       '$friendica' => "",
-                       '$statusnet' => "",
-                       '$diaspora' => "",
-                       '$diasnote' => "",
-                       '$your_address' => L10n::t('Your Identity Address:'),
-                       '$invite_desc' => "",
-                       '$emailnet' => "",
-                       '$submit' => $submit,
-                       '$cancel' => L10n::t('Cancel'),
-                       '$nickname' => "",
-                       '$name' => $ret["name"],
-                       '$url' => $ret["url"],
-                       '$zrl' => Profile::zrl($ret["url"]),
-                       '$url_label' => L10n::t("Profile URL"),
-                       '$myaddr' => $myaddr,
-                       '$request' => $request,
-                       /*'$location' => Friendica\Content\Text\BBCode::::convert($r[0]["location"]),
-                       '$location_label' => L10n::t("Location:"),
-                       '$about' => Friendica\Content\Text\BBCode::::convert($r[0]["about"], false, false),
-                       '$about_label' => L10n::t("About:"), */
-                       '$keywords' => $r[0]["keywords"],
-                       '$keywords_label' => L10n::t("Tags:")
+       $_SESSION['fastlane'] = $contact['url'];
+
+       $o = Renderer::replaceMacros($tpl, [
+               '$header'        => DI::l10n()->t('Connect/Follow'),
+               '$pls_answer'    => DI::l10n()->t('Please answer the following:'),
+               '$your_address'  => DI::l10n()->t('Your Identity Address:'),
+               '$url_label'     => DI::l10n()->t('Profile URL'),
+               '$keywords_label'=> DI::l10n()->t('Tags:'),
+               '$submit'        => $submit,
+               '$cancel'        => DI::l10n()->t('Cancel'),
+
+               '$request'       => $request,
+               '$name'          => $contact['name'],
+               '$url'           => $contact['url'],
+               '$zrl'           => Profile::zrl($contact['url']),
+               '$myaddr'        => $myaddr,
+               '$keywords'      => $contact['keywords'],
+
+               '$does_know_you' => ['knowyou', DI::l10n()->t('%s knows you', $contact['name'])],
+               '$addnote_field' => ['dfrn-request-message', DI::l10n()->t('Add a personal note:')],
        ]);
 
-       $a->page['aside'] = "";
+       DI::page()['aside'] = '';
 
-       Profile::load($a, "", 0, Contact::getDetailsByURL($ret["url"]), false);
+       if ($protocol != Protocol::PHANTOM) {
+               Profile::load($a, '', $contact, false);
 
-       if ($gcontact_id <> 0) {
-               $o .= replace_macros(get_markup_template('section_title.tpl'),
-                       ['$title' => L10n::t('Status Messages and Posts')]
+               $o .= Renderer::replaceMacros(Renderer::getMarkupTemplate('section_title.tpl'),
+                       ['$title' => DI::l10n()->t('Status Messages and Posts')]
                );
 
                // Show last public posts
-               $o .= Contact::getPostsFromUrl($ret["url"]);
+               $o .= Contact::getPostsFromUrl($contact['url']);
        }
 
        return $o;
 }
+
+function follow_remote_item($url)
+{
+       $item_id = Item::fetchByLink($url, local_user());
+       if (!$item_id) {
+               // If the user-specific search failed, we search and probe a public post
+               $item_id = Item::fetchByLink($url);
+       }
+
+       if (!empty($item_id)) {
+               $item = Item::selectFirst(['guid'], ['id' => $item_id]);
+               if (DBA::isResult($item)) {
+                       DI::baseUrl()->redirect('display/' . $item['guid']);
+               }
+       }
+}