Catch HTTPExceptions in App::runFrontend()

[friendica.git] / mod / like.php

diff --git a/mod/like.php b/mod/like.php
index 08e3febbbc1a0b4dfc729771d17547e410a60963..7ce7b1a1b912b9b1341db081e20aa6c67f766216 100644 (file)
--- a/mod/like.php
+++ b/mod/like.php
@@ -3,8 +3,7 @@
 use Friendica\App;
 use Friendica\Core\System;
 use Friendica\Model\Item;
-
-require_once 'include/items.php';
+use Friendica\Util\Strings;
 
 function like_content(App $a) {
        if (!local_user() && !remote_user()) {
@@ -12,13 +11,13 @@ function like_content(App $a) {
        }
 
 
-       $verb = notags(trim($_GET['verb']));
+       $verb = Strings::escapeTags(trim($_GET['verb']));
 
        if (!$verb) {
                $verb = 'like';
        }
 
-       $item_id = (($a->argc > 1) ? notags(trim($a->argv[1])) : 0);
+       $item_id = (($a->argc > 1) ? Strings::escapeTags(trim($a->argv[1])) : 0);
 
        $r = Item::performLike($item_id, $verb);
        if (!$r) {
@@ -26,9 +25,9 @@ function like_content(App $a) {
        }
 
        // See if we've been passed a return path to redirect to
-       $return_path = ((x($_REQUEST,'return')) ? $_REQUEST['return'] : '');
+       $return_path = defaults($_REQUEST, 'return', '');
 
-       like_content_return(System::baseUrl(), $return_path);
+       like_content_return($a, $return_path);
        killme(); // NOTREACHED
 }
 
@@ -36,7 +35,7 @@ function like_content(App $a) {
 // Decide how to return. If we were called with a 'return' argument,
 // then redirect back to the calling page. If not, just quietly end
 
-function like_content_return($baseurl, $return_path) {
+function like_content_return(App $a, $return_path) {
        if ($return_path) {
                $rand = '_=' . time();
                if (strpos($return_path, '?')) {
@@ -45,7 +44,7 @@ function like_content_return($baseurl, $return_path) {
                        $rand = "?$rand";
                }
 
-               goaway($baseurl . "/" . $return_path . $rand);
+               $a->internalRedirect($return_path . $rand);
        }
 
        killme();