general purpose callback landing page - e.g. for facebook plugin

[friendica.git] / mod / message.php

diff --git a/mod/message.php b/mod/message.php
index 782bed71b8b0deaeb0d3a810150f58d91e0d04c9..7615f22bec727ff4ec22b63ba3e8d83296f56221 100644 (file)
--- a/mod/message.php
+++ b/mod/message.php
@@ -1,6 +1,6 @@
 <?php
 
-require_once('view/acl_selectors.php');
+require_once('include/acl_selectors.php');
 
 function message_init(&$a) {
 
@@ -14,10 +14,10 @@ function message_post(&$a) {
                return;
        }
 
-       $replyto = notags(trim($_POST['replyto']));
-       $recipient = intval($_POST['messageto']);
-       $subject = notags(trim($_POST['subject']));
-       $body = escape_tags(trim($_POST['body']));
+       $replyto   = ((x($_POST,'replyto'))   ? notags(trim($_POST['replyto']))   : '');
+       $subject   = ((x($_POST,'subject'))   ? notags(trim($_POST['subject']))   : '');
+       $body      = ((x($_POST,'body'))      ? escape_tags(trim($_POST['body'])) : '');
+       $recipient = ((x($_POST,'messageto')) ? intval($_POST['messageto'])       : 0 );
 
        if(! $recipient) {
                notice( t('No recipient selected.') . EOL );
@@ -28,11 +28,11 @@ function message_post(&$a) {
                $subject = t('[no subject]');
 
        $me = q("SELECT * FROM `contact` WHERE `uid` = %d AND `self` = 1 LIMIT 1",
-               intval($_SESSION['uid'])
+               intval(local_user())
        );
        $contact = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1",
                        intval($recipient),
-                       intval($_SESSION['uid'])
+                       intval(local_user())
        );
 
        if(! (count($me) && (count($contact)))) {
@@ -41,22 +41,21 @@ function message_post(&$a) {
        }
 
        $hash = random_string();
-       $uri = 'urn:X-dfrn:' . $a->get_baseurl() . ':' . $_SESSION['uid'] . ':' . $hash ;
+       $uri = 'urn:X-dfrn:' . $a->get_baseurl() . ':' . local_user() . ':' . $hash ;
 
        if(! strlen($replyto))
                $replyto = $uri;
 
        $r = q("INSERT INTO `mail` ( `uid`, `from-name`, `from-photo`, `from-url`, 
-               `contact-id`, `title`, `body`, `delivered`, `seen`, `replied`, `uri`, `parent-uri`, `created`)
-               VALUES ( %d, '%s', '%s', '%s', %d, '%s', '%s', %d, %d, %d, '%s', '%s', '%s' )",
-               intval($_SESSION['uid']),
+               `contact-id`, `title`, `body`, `seen`, `replied`, `uri`, `parent-uri`, `created`)
+               VALUES ( %d, '%s', '%s', '%s', %d, '%s', '%s', %d, %d, '%s', '%s', '%s' )",
+               intval(local_user()),
                dbesc($me[0]['name']),
                dbesc($me[0]['thumb']),
                dbesc($me[0]['url']),
                intval($recipient),
                dbesc($subject),
                dbesc($body),
-               0,
                1,
                0,
                dbesc($uri),
@@ -65,7 +64,7 @@ function message_post(&$a) {
        );
        $r = q("SELECT * FROM `mail` WHERE `uri` = '%s' and `uid` = %d LIMIT 1",
                dbesc($uri),
-               intval($_SESSION['uid'])
+               intval(local_user())
        );
        if(count($r))
                $post_id = $r[0]['id'];
@@ -73,8 +72,8 @@ function message_post(&$a) {
        $php_path = ((strlen($a->config['php_path'])) ? $a->config['php_path'] : 'php');
        
        if($post_id) {
-               proc_close(proc_open("\"$php_path\" \"include/notifier.php\" \"mail\" \"$post_id\" &",
-                       array(),$foo));
+               //proc_close(proc_open("\"$php_path\" \"include/notifier.php\" \"mail\" \"$post_id\" &", array(),$foo));
+               proc_run($php_path,"include/notifier.php","mail","$post_id");
                notice( t('Message sent.') . EOL );
        }
        else {
@@ -113,7 +112,7 @@ function message_content(&$a) {
                if($cmd === 'drop') {
                        $r = q("DELETE FROM `mail` WHERE `id` = %d AND `uid` = %d LIMIT 1",
                                intval($a->argv[2]),
-                               intval($_SESSION['uid'])
+                               intval(local_user())
                        );
                        if($r) {
                                notice( t('Message deleted.') . EOL );
@@ -123,13 +122,13 @@ function message_content(&$a) {
                else {
                        $r = q("SELECT `parent-uri` FROM `mail` WHERE `id` = %d AND `uid` = %d LIMIT 1",
                                intval($a->argv[2]),
-                               intval($_SESSION['uid'])
+                               intval(local_user())
                        );
                        if(count($r)) {
                                $parent = $r[0]['parent-uri'];
                                $r = q("DELETE FROM `mail` WHERE `parent-uri` = '%s' AND `uid` = %d ",
                                        dbesc($parent),
-                                       intval($_SESSION['uid'])
+                                       intval(local_user())
                                );
                                if($r)
                                        notice( t('Conversation removed.') . EOL );
@@ -138,16 +137,6 @@ function message_content(&$a) {
                }       
        
        }
-       if(($a->argc > 2) && ($a->argv[1] === 'redeliver') && intval($a->argv[2])) {
-               $post_id = intval($a->argv[2]);
-               $php_path = ((strlen($a->config['php_path'])) ? $a->config['php_path'] : 'php');
-
-               proc_close(proc_open("\"$php_path\" \"include/notifier.php\" \"mail\" \"$post_id\" & ",
-                       array(),$foo));
-               goaway($a->get_baseurl() . '/message' );
-       }
-
-
 
        if(($a->argc > 1) && ($a->argv[1] === 'new')) {
                
@@ -186,7 +175,7 @@ function message_content(&$a) {
 
                $r = q("SELECT count(*) AS `total` FROM `mail` 
                        WHERE `mail`.`uid` = %d AND `from-url` $eq '%s' GROUP BY `parent-uri` ORDER BY `created` DESC",
-                       intval($_SESSION['uid']),
+                       intval(local_user()),
                        dbesc($myprofile)
                );
                if(count($r))
@@ -196,7 +185,7 @@ function message_content(&$a) {
                        `mail`.* , `contact`.`name`, `contact`.`url`, `contact`.`thumb` 
                        FROM `mail` LEFT JOIN `contact` ON `mail`.`contact-id` = `contact`.`id` 
                        WHERE `mail`.`uid` = %d AND `from-url` $eq '%s' GROUP BY `parent-uri` ORDER BY `created` DESC  LIMIT %d , %d ",
-                       intval($_SESSION['uid']),
+                       intval(local_user()),
                        dbesc($myprofile),
                        intval($a->pager['start']),
                        intval($a->pager['itemspage'])
@@ -213,7 +202,7 @@ function message_content(&$a) {
                                '$from_name' =>$rr['from-name'],
                                '$from_url' => $a->get_baseurl() . '/redir/' . $rr['contact-id'],
                                '$sparkle' => ' sparkle',
-                               '$from_photo' => $rr['from-photo'],
+                               '$from_photo' => $rr['thumb'],
                                '$subject' => (($rr['mailseen']) ? $rr['title'] : '<strong>' . $rr['title'] . '</strong>'),
                                '$delete' => t('Delete conversation'),
                                '$body' => $rr['body'],
@@ -232,7 +221,7 @@ function message_content(&$a) {
                $r = q("SELECT `mail`.*, `contact`.`name`, `contact`.`url`, `contact`.`thumb` 
                        FROM `mail` LEFT JOIN `contact` ON `mail`.`contact-id` = `contact`.`id` 
                        WHERE `mail`.`uid` = %d AND `mail`.`id` = %d LIMIT 1",
-                       intval($_SESSION['uid']),
+                       intval(local_user()),
                        intval($a->argv[1])
                );
                if(count($r)) { 
@@ -240,7 +229,7 @@ function message_content(&$a) {
                        $messages = q("SELECT `mail`.*, `contact`.`name`, `contact`.`url`, `contact`.`thumb` 
                                FROM `mail` LEFT JOIN `contact` ON `mail`.`contact-id` = `contact`.`id` 
                                WHERE `mail`.`uid` = %d AND `mail`.`parent-uri` = '%s' ORDER BY `mail`.`created` ASC",
-                               intval($_SESSION['uid']),
+                               intval(local_user()),
                                dbesc($r[0]['parent-uri'])
                        );
                }
@@ -251,14 +240,17 @@ function message_content(&$a) {
 
                $r = q("UPDATE `mail` SET `seen` = 1 WHERE `parent-uri` = '%s' AND `uid` = %d",
                        dbesc($r[0]['parent-uri']),
-                       intval($_SESSION['uid'])
+                       intval(local_user())
                );
 
                require_once("include/bbcode.php");
 
                $tpl = load_view_file('view/msg-header.tpl');
        
-               $a->page['htmlhead'] .= replace_macros($tpl, array('$baseurl' => $a->get_baseurl()));
+               $a->page['htmlhead'] .= replace_macros($tpl, array(
+                       '$nickname' => $a->user['nickname'],
+                       '$baseurl' => $a->get_baseurl()
+               ));
 
 
                $tpl = load_view_file('view/mail_conv.tpl');
@@ -278,7 +270,7 @@ function message_content(&$a) {
                                '$sparkle' => $sparkle,
                                '$from_photo' => $message['from-photo'],
                                '$subject' => $message['title'],
-                               '$body' => bbcode($message['body']),
+                               '$body' => smilies(bbcode($message['body'])),
                                '$delete' => t('Delete message'),
                                '$to_name' => $message['name'],
                                '$date' => datetime_convert('UTC',date_default_timezone_get(),$message['created'],'D, d M Y - g:i A')