]> git.mxchange.org Git - friendica.git/blobdiff - mod/photos.php
Bugfix: The "keywords" field in the gcontact table wasn't set correctly
[friendica.git] / mod / photos.php
index a6552994e5258c9aa1ef788ae98b8251e9fb3026..a9dade6a81c8e291f4451985f89d889118a47847 100644 (file)
 <?php
 require_once('include/Photo.php');
+require_once('include/photos.php');
 require_once('include/items.php');
 require_once('include/acl_selectors.php');
 require_once('include/bbcode.php');
 require_once('include/security.php');
-
+require_once('include/redir.php');
+require_once('include/tags.php');
+require_once('include/threads.php');
 
 function photos_init(&$a) {
 
+       if($a->argc > 1)
+               auto_redir($a, $a->argv[1]);
 
        if((get_config('system','block_public')) && (! local_user()) && (! remote_user())) {
                return;
        }
+
+       nav_set_selected('home');
+
        $o = '';
 
        if($a->argc > 1) {
                $nick = $a->argv[1];
-               $r = q("SELECT `user`.*, `contact`.`avatar-date` AS picdate FROM `user` LEFT JOIN `contact` on `contact`.`uid` = `user`.`uid` WHERE `user`.`nickname` = '%s' AND `user`.`blocked` = 0 LIMIT 1",
+               $user = q("SELECT * FROM `user` WHERE `nickname` = '%s' AND `blocked` = 0 LIMIT 1",
                        dbesc($nick)
                );
 
-               if(! count($r))
+               if(! count($user))
                        return;
 
-               $a->data['user'] = $r[0];
+               $a->data['user'] = $user[0];
+               $a->profile_uid = $user[0]['uid'];
+               $is_owner = (local_user() && (local_user() == $a->profile_uid));
+
+               $profile = get_profiledata_by_nick($nick, $a->profile_uid);
+
+               if((intval($profile['page-flags']) == PAGE_COMMUNITY) || (intval($profile['page-flags']) == PAGE_PRVGROUP))
+                       $account_type = t('Forum');
+               else
+                       $account_type = "";
+
+               $tpl = get_markup_template("vcard-widget.tpl");
+
+               $vcard_widget .= replace_macros($tpl, array(
+                       '$name' => $profile['name'],
+                       '$photo' => $profile['photo'],
+                       '$addr' => (($profile['addr'] != "") ? $profile['addr'] : ""),
+                       '$account_type' => $account_type,
+                       '$pdesc' => (($profile['pdesc'] != "") ? $profile['pdesc'] : ""),
+               ));
+
 
                $sql_extra = permissions_sql($a->data['user']['uid']);
 
-               $albums = q("SELECT distinct(`album`) AS `album` FROM `photo` WHERE `uid` = %d $sql_extra ",
-                       intval($a->data['user']['uid'])
+               $albums = q("SELECT count(distinct `resource-id`) AS `total`, `album` FROM `photo` WHERE `uid` = %d  AND `album` != '%s' AND `album` != '%s'
+                       $sql_extra group by album order by created desc",
+                       intval($a->data['user']['uid']),
+                       dbesc('Contact Photos'),
+                       dbesc( t('Contact Photos'))
                );
 
-               if(count($albums)) {
-                       $a->data['albums'] = $albums;
+               $albums_visible = ((intval($a->data['user']['hidewall']) && (! local_user()) && (! remote_user())) ? false : true);
 
-                       $o .= '<div class="vcard">';
-                       $o .= '<div class="fn">' . $a->data['user']['username'] . '</div>';
-                       $o .= '<div id="profile-photo-wrapper"><img class="photo" style="width: 175px; height: 175px;" src="' . $a->get_baseurl() . '/photo/profile/' . $a->data['user']['uid'] . '.jpg?rev=' . urlencode($a->data['user']['picdate']) . '" alt="' . $a->data['user']['username'] . '" /></div>';
-                       $o .= '</div>';
-                       
-                       if(! intval($a->data['user']['hidewall'])) {
-                               $o .= '<div id="side-bar-photos-albums" class="widget">';
-                               $o .= '<h3>' . '<a href="' . $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '">' . t('Photo Albums') . '</a></h3>';
-                                       
-                               $o .= '<ul>';
-                               foreach($albums as $album) {
+               // add various encodings to the array so we can just loop through and pick them out in a template
+               $ret = array('success' => false);
 
-                                       // don't show contact photos. We once translated this name, but then you could still access it under
-                                       // a different language setting. Now we store the name in English and check in English (and translated for legacy albums).
+               if($albums) {
+                       $a->data['albums'] = $albums;
+                       if ($albums_visible)
+                               $ret['success'] = true;
 
-                                       if((! strlen($album['album'])) || ($album['album'] === 'Contact Photos') || ($album['album'] === t('Contact Photos')))
-                                               continue;
-                                       $o .= '<li>' . '<a href="photos/' . $a->argv[1] . '/album/' . bin2hex($album['album']) . '" >' . $album['album'] . '</a></li>'; 
-                               }
-                               $o .= '</ul>';
-                       }
-                       if(local_user() && $a->data['user']['uid'] == local_user()) {
-                               $o .= '<div id="photo-albums-upload-link"><a href="' . $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/upload" >' .t('Upload New Photos') . '</a></div>';
+                       $ret['albums'] = array();
+                       foreach($albums as $k => $album) {
+                               //hide profile photos to others
+                               if((! $is_owner) && (! remote_user()) && ($album['album'] == t('Profile Photos')))
+                                       continue;
+                               $entry = array(
+                                       'text'      => $album['album'],
+                                       'total'     => $album['total'],
+                                       'url'       => z_root() . '/photos/' . $a->data['user']['nickname'] . '/album/' . bin2hex($album['album']),
+                                       'urlencode' => urlencode($album['album']),
+                                       'bin2hex'   => bin2hex($album['album'])
+                               );
+                               $ret['albums'][] = $entry;
                        }
-
-                       $o .= '</div>';
                }
 
-               if(! x($a->page,'aside'))
-                       $a->page['aside'] = '';
-               $a->page['aside'] .= $o;
+               $albums = $ret;
 
+               if(local_user() && $a->data['user']['uid'] == local_user())
+                       $can_post = true;
 
-               $a->page['htmlhead'] .= "<script> var ispublic = '" . t('everybody') . "';" ;
-
-               $a->page['htmlhead'] .= <<< EOT
+               if($albums['success']) {
+                       $photo_albums_widget = replace_macros(get_markup_template('photo_albums.tpl'),array(
+                               '$nick'     => $a->data['user']['nickname'],
+                               '$title'    => t('Photo Albums'),
+                               '$recent'    => t('Recent Photos'),
+                               '$albums'   => $albums['albums'],
+                               '$baseurl'  => z_root(),
+                               '$upload'   => array( t('Upload New Photos'), $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/upload'),
+                               '$can_post' => $can_post
+                       ));
+               }
 
-               $(document).ready(function() {
 
-                       $('#contact_allow, #contact_deny, #group_allow, #group_deny').change(function() {
-                               var selstr;
-                               $('#contact_allow option:selected, #contact_deny option:selected, #group_allow option:selected, #group_deny option:selected').each( function() {
-                                       selstr = $(this).text();
-                                       $('#jot-perms-icon').removeClass('unlock').addClass('lock');
-                                       $('#jot-public').hide();
-                               });
-                               if(selstr == null) { 
-                                       $('#jot-perms-icon').removeClass('lock').addClass('unlock');
-                                       $('#jot-public').show();
-                               }
+               if(! x($a->page,'aside'))
+                       $a->page['aside'] = '';
+               $a->page['aside'] .= $vcard_widget;
+               $a->page['aside'] .= $photo_albums_widget;
 
-                       }).trigger('change');
 
-               });
+               $tpl = get_markup_template("photos_head.tpl");
+               $a->page['htmlhead'] .= replace_macros($tpl,array(
+                       '$ispublic' => t('everybody')
+               ));
 
-               </script>
-EOT;
        }
 
        return;
@@ -118,13 +144,25 @@ function photos_post(&$a) {
                $can_post = true;
        else {
                if($community_page && remote_user()) {
-                       $r = q("SELECT `uid` FROM `contact` WHERE `blocked` = 0 AND `pending` = 0 AND `id` = %d AND `uid` = %d LIMIT 1",
-                               intval(remote_user()),
-                               intval($page_owner_uid)
-                       );
-                       if(count($r)) {
-                               $can_post = true;
-                               $visitor = remote_user();
+                       $cid = 0;
+                       if(is_array($_SESSION['remote'])) {
+                               foreach($_SESSION['remote'] as $v) {
+                                       if($v['uid'] == $page_owner_uid) {
+                                               $cid = $v['cid'];
+                                               break;
+                                       }
+                               }
+                       }
+                       if($cid) {
+
+                               $r = q("SELECT `uid` FROM `contact` WHERE `blocked` = 0 AND `pending` = 0 AND `id` = %d AND `uid` = %d LIMIT 1",
+                                       intval($cid),
+                                       intval($page_owner_uid)
+                               );
+                               if(count($r)) {
+                                       $can_post = true;
+                                       $visitor = $cid;
+                               }
                        }
                }
        }
@@ -134,7 +172,7 @@ function photos_post(&$a) {
                killme();
        }
 
-       $r = q("SELECT `contact`.*, `user`.`nickname` FROM `contact` LEFT JOIN `user` ON `user`.`uid` = `contact`.`uid` 
+       $r = q("SELECT `contact`.*, `user`.`nickname` FROM `contact` LEFT JOIN `user` ON `user`.`uid` = `contact`.`uid`
                WHERE `user`.`uid` = %d AND `self` = 1 LIMIT 1",
                intval($page_owner_uid)
        );
@@ -145,7 +183,7 @@ function photos_post(&$a) {
                killme();
        }
 
-       $owner_record = $r[0];  
+       $owner_record = $r[0];
 
 
        if(($a->argc > 3) && ($a->argv[2] === 'album')) {
@@ -166,6 +204,15 @@ function photos_post(&$a) {
                        return; // NOTREACHED
                }
 
+               // Check if the user has responded to a delete confirmation query
+               if($_REQUEST['canceled']) {
+                       goaway($a->get_baseurl() . '/' . $_SESSION['photo_return']);
+               }
+
+               /*
+                * RENAME photo album
+                */
+
                $newalbum = notags(trim($_POST['albumname']));
                if($newalbum != $album) {
                        q("UPDATE `photo` SET `album` = '%s' WHERE `album` = '%s' AND `uid` = %d",
@@ -178,9 +225,31 @@ function photos_post(&$a) {
                        return; // NOTREACHED
                }
 
+               /*
+                * DELETE photo album and all its photos
+                */
 
                if($_POST['dropalbum'] == t('Delete Album')) {
 
+                       // Check if we should do HTML-based delete confirmation
+                       if($_REQUEST['confirm']) {
+                               $drop_url = $a->query_string;
+                               $extra_inputs = array(
+                                       array('name' => 'albumname', 'value' => $_POST['albumname']),
+                               );
+                               $a->page['content'] = replace_macros(get_markup_template('confirm.tpl'), array(
+                                       '$method' => 'post',
+                                       '$message' => t('Do you really want to delete this photo album and all its photos?'),
+                                       '$extra_inputs' => $extra_inputs,
+                                       '$confirm' => t('Delete Album'),
+                                       '$confirm_url' => $drop_url,
+                                       '$confirm_name' => 'dropalbum', // Needed so that confirmation will bring us back into this if statement
+                                       '$cancel' => t('Cancel'),
+                               ));
+                               $a->error = 1; // Set $a->error so the other module functions don't execute
+                               return;
+                       }
+
                        $res = array();
 
                        // get the list of photos we are about to delete
@@ -228,6 +297,8 @@ function photos_post(&$a) {
                                                dbesc($rr['parent-uri']),
                                                intval($page_owner_uid)
                                        );
+                                       create_tags_from_itemuri($rr['parent-uri'], $page_owner_uid);
+                                       delete_thread_uri($rr['parent-uri'], $page_owner_uid);
 
                                        $drop_id = intval($rr['id']);
 
@@ -242,10 +313,32 @@ function photos_post(&$a) {
                return; // NOTREACHED
        }
 
+
+       // Check if the user has responded to a delete confirmation query for a single photo
+       if(($a->argc > 2) && $_REQUEST['canceled']) {
+               goaway($a->get_baseurl() . '/' . $_SESSION['photo_return']);
+       }
+
        if(($a->argc > 2) && (x($_POST,'delete')) && ($_POST['delete'] == t('Delete Photo'))) {
 
                // same as above but remove single photo
 
+               // Check if we should do HTML-based delete confirmation
+               if($_REQUEST['confirm']) {
+                       $drop_url = $a->query_string;
+                       $a->page['content'] = replace_macros(get_markup_template('confirm.tpl'), array(
+                               '$method' => 'post',
+                               '$message' => t('Do you really want to delete this photo?'),
+                               '$extra_inputs' => array(),
+                               '$confirm' => t('Delete Photo'),
+                               '$confirm_url' => $drop_url,
+                               '$confirm_name' => 'delete', // Needed so that confirmation will bring us back into this if statement
+                               '$cancel' => t('Cancel'),
+                       ));
+                       $a->error = 1; // Set $a->error so the other module functions don't execute
+                       return;
+               }
+
                if($visitor) {
                        $r = q("SELECT `id`, `resource-id` FROM `photo` WHERE `contact-id` = %d AND `uid` = %d AND `resource-id` = '%s' LIMIT 1",
                                intval($visitor),
@@ -275,6 +368,8 @@ function photos_post(&$a) {
                                        dbesc($i[0]['uri']),
                                        intval($page_owner_uid)
                                );
+                               create_tags_from_itemuri($i[0]['uri'], $page_owner_uid);
+                               delete_thread_uri($i[0]['uri'], $page_owner_uid);
 
                                $url = $a->get_baseurl();
                                $drop_id = intval($i[0]['id']);
@@ -284,13 +379,12 @@ function photos_post(&$a) {
                        }
                }
 
-               goaway($a->get_baseurl() . '/' . $_SESSION['photo_return']);
+               goaway($a->get_baseurl() . '/photos/' . $a->data['user']['nickname']);
                return; // NOTREACHED
        }
 
        if(($a->argc > 2) && ((x($_POST,'desc') !== false) || (x($_POST,'newtag') !== false)) || (x($_POST,'albname') !== false)) {
 
-
                $desc        = ((x($_POST,'desc'))    ? notags(trim($_POST['desc']))    : '');
                $rawtags     = ((x($_POST,'newtag'))  ? notags(trim($_POST['newtag']))  : '');
                $item_id     = ((x($_POST,'item_id')) ? intval($_POST['item_id'])       : 0);
@@ -306,7 +400,8 @@ function photos_post(&$a) {
                        $albname = datetime_convert('UTC',date_default_timezone_get(),'now', 'Y');
 
 
-               if((x($_POST,'rotate') !== false) && (intval($_POST['rotate']) == 1)) {
+               if((x($_POST,'rotate') !== false) &&
+                  ( (intval($_POST['rotate']) == 1) || (intval($_POST['rotate']) == 2) )) {
                        logger('rotate');
 
                        $r = q("select * from photo where `resource-id` = '%s' and uid = %d and scale = 0 limit 1",
@@ -316,30 +411,31 @@ function photos_post(&$a) {
                        if(count($r)) {
                                $ph = new Photo($r[0]['data'], $r[0]['type']);
                                if($ph->is_valid()) {
-                                       $ph->rotate(270);
+                                       $rotate_deg = ( (intval($_POST['rotate']) == 1) ? 270 : 90 );
+                                       $ph->rotate($rotate_deg);
 
                                        $width  = $ph->getWidth();
                                        $height = $ph->getHeight();
 
-                                       $x = q("update photo set data = '%s', height = %d, width = %d where `resource-id` = '%s' and uid = %d and scale = 0 limit 1",
+                                       $x = q("update photo set data = '%s', height = %d, width = %d where `resource-id` = '%s' and uid = %d and scale = 0",
                                                dbesc($ph->imageString()),
                                                intval($height),
                                                intval($width),
-                               dbesc($resource_id),
-                               intval($page_owner_uid)
+                                               dbesc($resource_id),
+                                               intval($page_owner_uid)
                                        );
 
                                        if($width > 640 || $height > 640) {
                                                $ph->scaleImage(640);
                                                $width  = $ph->getWidth();
                                                $height = $ph->getHeight();
-               
-                                               $x = q("update photo set data = '%s', height = %d, width = %d where `resource-id` = '%s' and uid = %d and scale = 1 limit 1",
+
+                                               $x = q("update photo set data = '%s', height = %d, width = %d where `resource-id` = '%s' and uid = %d and scale = 1",
                                                        dbesc($ph->imageString()),
                                                        intval($height),
                                                        intval($width),
-                               dbesc($resource_id),
-                               intval($page_owner_uid)
+                                                       dbesc($resource_id),
+                                                       intval($page_owner_uid)
                                                );
                                        }
 
@@ -348,14 +444,14 @@ function photos_post(&$a) {
                                                $width  = $ph->getWidth();
                                                $height = $ph->getHeight();
 
-                                               $x = q("update photo set data = '%s', height = %d, width = %d where `resource-id` = '%s' and uid = %d and scale = 2 limit 1",
+                                               $x = q("update photo set data = '%s', height = %d, width = %d where `resource-id` = '%s' and uid = %d and scale = 2",
                                                        dbesc($ph->imageString()),
                                                        intval($height),
                                                        intval($width),
-                               dbesc($resource_id),
-                               intval($page_owner_uid)
+                                                       dbesc($resource_id),
+                                                       intval($page_owner_uid)
                                                );
-                                       }       
+                                       }
                                }
                        }
                }
@@ -383,19 +479,19 @@ function photos_post(&$a) {
                $visibility = 0;
                if($p[0]['desc'] !== $desc || strlen($rawtags))
                        $visibility = 1;
-               
+
                if(! $item_id) {
 
                        // Create item container
 
                        $title = '';
                        $uri = item_new_uri($a->get_hostname(),$page_owner_uid);
-                       
+
                        $arr = array();
 
                        $arr['uid']           = $page_owner_uid;
                        $arr['uri']           = $uri;
-                       $arr['parent-uri']    = $uri; 
+                       $arr['parent-uri']    = $uri;
                        $arr['type']          = 'photo';
                        $arr['wall']          = 1;
                        $arr['resource-id']   = $p[0]['resource-id'];
@@ -414,11 +510,11 @@ function photos_post(&$a) {
                        $arr['last-child']    = 1;
                        $arr['visible']       = $visibility;
                        $arr['origin']        = 1;
-                       
-                       $arr['body']          = '[url=' . $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $p[0]['resource-id'] . ']' 
-                                               . '[img]' . $a->get_baseurl() . '/photo/' . $p[0]['resource-id'] . '-' . $p[0]['scale'] . '.'. $ext . '[/img]' 
+
+                       $arr['body']          = '[url=' . $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $p[0]['resource-id'] . ']'
+                                               . '[img]' . $a->get_baseurl() . '/photo/' . $p[0]['resource-id'] . '-' . $p[0]['scale'] . '.'. $ext . '[/img]'
                                                . '[/url]';
-               
+
                        $item_id = item_store($arr);
 
                }
@@ -460,12 +556,12 @@ function photos_post(&$a) {
                                                        if(count($links)) {
                                                                foreach($links as $link) {
                                                                        if($link['@attributes']['rel'] === 'http://webfinger.net/rel/profile-page')
-                                                       $profile = $link['@attributes']['href'];
+                                                                               $profile = $link['@attributes']['href'];
                                                                        if($link['@attributes']['rel'] === 'salmon') {
                                                                                $salmon = '$url:' . str_replace(',','%sc',$link['@attributes']['href']);
                                                                                if(strlen($inform))
                                                                                        $inform .= ',';
-                                                       $inform .= $salmon;
+                                                       $inform .= $salmon;
                                                                        }
                                                                }
                                                        }
@@ -484,7 +580,25 @@ function photos_post(&$a) {
                                                                        intval($profile_uid)
                                                                );
                                                        }
-                                                       elseif(strstr($name,'_') || strstr($name,' ')) {
+                                                       else {
+                                                               $newname = str_replace('_',' ',$name);
+
+                                                               //select someone from this user's contacts by name
+                                                               $r = q("SELECT * FROM `contact` WHERE `name` = '%s' AND `uid` = %d LIMIT 1",
+                                                                               dbesc($newname),
+                                                                               intval($page_owner_uid)
+                                                               );
+
+                                                               if(! $r) {
+                                                                       //select someone by attag or nick and the name passed in
+                                                                       $r = q("SELECT * FROM `contact` WHERE `attag` = '%s' OR `nick` = '%s' AND `uid` = %d ORDER BY `attag` DESC LIMIT 1",
+                                                                                       dbesc($name),
+                                                                                       dbesc($name),
+                                                                                       intval($page_owner_uid)
+                                                                       );
+                                                               }
+                                                       }
+/*                                                     elseif(strstr($name,'_') || strstr($name,' ')) {
                                                                $newname = str_replace('_',' ',$name);
                                                                $r = q("SELECT * FROM `contact` WHERE `name` = '%s' AND `uid` = %d LIMIT 1",
                                                                        dbesc($newname),
@@ -497,7 +611,7 @@ function photos_post(&$a) {
                                                                        dbesc($name),
                                                                        intval($page_owner_uid)
                                                                );
-                                                       }
+                                                       }*/
                                                        if(count($r)) {
                                                                $newname = $r[0]['name'];
                                                                $profile = $r[0]['url'];
@@ -515,14 +629,17 @@ function photos_post(&$a) {
                                                        if(strlen($str_tags))
                                                                $str_tags .= ',';
                                                        $profile = str_replace(',','%2c',$profile);
-                                                       $str_tags .= '@[url=' . $profile . ']' . $newname       . '[/url]';
+                                                       $str_tags .= '@[url='.$profile.']'.$newname.'[/url]';
                                                }
+                                       } elseif (strpos($tag,'#') === 0) {
+                                               $tagname = substr($tag, 1);
+                                               $str_tags .= '#[url='.$a->get_baseurl()."/search?tag=".$tagname.']'.$tagname.'[/url]';
                                        }
                                }
                        }
 
                        $newtag = $old_tag;
-                       if(strlen($newtag) && strlen($str_tags)) 
+                       if(strlen($newtag) && strlen($str_tags))
                                $newtag .= ',';
                        $newtag .= $str_tags;
 
@@ -531,7 +648,7 @@ function photos_post(&$a) {
                                $newinform .= ',';
                        $newinform .= $inform;
 
-                       $r = q("UPDATE `item` SET `tag` = '%s', `inform` = '%s', `edited` = '%s', `changed` = '%s' WHERE `id` = %d AND `uid` = %d LIMIT 1",
+                       $r = q("UPDATE `item` SET `tag` = '%s', `inform` = '%s', `edited` = '%s', `changed` = '%s' WHERE `id` = %d AND `uid` = %d",
                                dbesc($newtag),
                                dbesc($newinform),
                                dbesc(datetime_convert()),
@@ -539,6 +656,8 @@ function photos_post(&$a) {
                                intval($item_id),
                                intval($page_owner_uid)
                        );
+                       create_tags_from_item($item_id);
+                       update_thread($item_id);
 
                        $best = 0;
                        foreach($p as $scales) {
@@ -554,7 +673,7 @@ function photos_post(&$a) {
 
                        if(count($taginfo)) {
                                foreach($taginfo as $tagged) {
-               
+
                                        $uri = item_new_uri($a->get_hostname(),$page_owner_uid);
 
                                        $arr = array();
@@ -584,7 +703,7 @@ function photos_post(&$a) {
                                        $arr['tag']           = $tagged[4];
                                        $arr['inform']        = $tagged[2];
                                        $arr['origin']        = 1;
-                                       $arr['body']          = '[url=' . $tagged[1] . ']' . $tagged[0] . '[/url]' . ' ' . t('was tagged in a') . ' ' . '[url=' . $a->get_baseurl() . '/photos/' . $owner_record['nickname'] . '/image/' . $p[0]['resource-id'] . ']' . t('photo') . '[/url]' . ' ' . t('by') . ' ' . '[url=' . $owner_record['url'] . ']' . $owner_record['name'] . '[/url]' ;
+                                       $arr['body']          = sprintf( t('%1$s was tagged in %2$s by %3$s'), '[url=' . $tagged[1] . ']' . $tagged[0] . '[/url]', '[url=' . $a->get_baseurl() . '/photos/' . $owner_record['nickname'] . '/image/' . $p[0]['resource-id'] . ']' . t('a photo') . '[/url]', '[url=' . $owner_record['url'] . ']' . $owner_record['name'] . '[/url]') ;
                                        $arr['body'] .= "\n\n" . '[url=' . $a->get_baseurl() . '/photos/' . $owner_record['nickname'] . '/image/' . $p[0]['resource-id'] . ']' . '[img]' . $a->get_baseurl() . "/photo/" . $p[0]['resource-id'] . '-' . $best . '.' . $ext . '[/img][/url]' . "\n" ;
 
                                        $arr['object'] = '<object><type>' . ACTIVITY_OBJ_PERSON . '</type><title>' . $tagged[0] . '</title><id>' . $tagged[1] . '/' . $tagged[0] . '</id>';
@@ -599,11 +718,11 @@ function photos_post(&$a) {
 
                                        $item_id = item_store($arr);
                                        if($item_id) {
-                                               q("UPDATE `item` SET `plink` = '%s' WHERE `uid` = %d AND `id` = %d LIMIT 1",
-                                                       dbesc($a->get_baseurl() . '/display/' . $owner_record['nickname'] . '/' . $item_id),
-                                                       intval($page_owner_uid),
-                                                       intval($item_id)
-                                               );
+                                               //q("UPDATE `item` SET `plink` = '%s' WHERE `uid` = %d AND `id` = %d",
+                                               //      dbesc($a->get_baseurl() . '/display/' . $owner_record['nickname'] . '/' . $item_id),
+                                               //      intval($page_owner_uid),
+                                               //      intval($item_id)
+                                               //);
 
                                                proc_run('php',"include/notifier.php","tag","$item_id");
                                        }
@@ -645,7 +764,7 @@ function photos_post(&$a) {
         * overwhelm the data stream with a hundred newly uploaded photos.
         * So we will make the first photo uploaded to this album in the last several hours
         * visible by default, the rest will become visible over time when and if
-        * they acquire comments, likes, dislikes, and/or tags 
+        * they acquire comments, likes, dislikes, and/or tags
         *
         */
 
@@ -657,7 +776,7 @@ function photos_post(&$a) {
                $visible = 1;
        else
                $visible = 0;
-       
+
        if(intval($_REQUEST['not_visible']) || $_REQUEST['not_visible'] === 'true')
                $visible = 0;
 
@@ -689,7 +808,7 @@ function photos_post(&$a) {
        $maximagesize = get_config('system','maximagesize');
 
        if(($maximagesize) && ($filesize > $maximagesize)) {
-               notice( t('Image exceeds size limit of ') . $maximagesize . EOL);
+               notice( sprintf(t('Image exceeds size limit of %s'), formatBytes($maximagesize)) . EOL);
                @unlink($src);
                $foo = 0;
                call_hooks('photo_post_end',$foo);
@@ -707,6 +826,24 @@ function photos_post(&$a) {
        logger('mod/photos.php: photos_post(): loading the contents of ' . $src , LOGGER_DEBUG);
 
        $imagedata = @file_get_contents($src);
+
+
+
+       $r = q("select sum(octet_length(data)) as total from photo where uid = %d and scale = 0 and album != 'Contact Photos' ",
+               intval($a->data['user']['uid'])
+       );
+
+       $limit = service_class_fetch($a->data['user']['uid'],'photo_upload_limit');
+
+       if(($limit !== false) && (($r[0]['total'] + strlen($imagedata)) > $limit)) {
+               notice( upgrade_message() . EOL );
+               @unlink($src);
+               $foo = 0;
+               call_hooks('photo_post_end',$foo);
+               killme();
+       }
+
+
        $ph = new Photo($imagedata, $type);
 
        if(! $ph->is_valid()) {
@@ -718,8 +855,15 @@ function photos_post(&$a) {
                killme();
        }
 
+       $exif = $ph->orient($src);
        @unlink($src);
 
+       $max_length = get_config('system','max_image_length');
+       if(! $max_length)
+               $max_length = MAX_IMAGE_LENGTH;
+       if($max_length > 0)
+               $ph->scaleImage($max_length);
+
        $width  = $ph->getWidth();
        $height = $ph->getHeight();
 
@@ -746,14 +890,26 @@ function photos_post(&$a) {
                $ph->store($page_owner_uid, $visitor, $photo_hash, $filename, $album, 2, 0, $str_contact_allow, $str_group_allow, $str_contact_deny, $str_group_deny);
                $smallest = 2;
        }
-       
+
        $basename = basename($filename);
        $uri = item_new_uri($a->get_hostname(), $page_owner_uid);
 
        // Create item container
 
+       $lat = $lon = null;
+
+       if($exif && $exif['GPS']) {
+               if(feature_enabled($channel_id,'photo_location')) {
+                       $lat = getGps($exif['GPS']['GPSLatitude'], $exif['GPS']['GPSLatitudeRef']);
+                       $lon = getGps($exif['GPS']['GPSLongitude'], $exif['GPS']['GPSLongitudeRef']);
+               }
+       }
+
        $arr = array();
 
+       if($lat && $lon)
+               $arr['coord'] = $lat . ' ' . $lon;
+
        $arr['uid']           = $page_owner_uid;
        $arr['uri']           = $uri;
        $arr['parent-uri']    = $uri;
@@ -776,21 +932,21 @@ function photos_post(&$a) {
        $arr['visible']       = $visible;
        $arr['origin']        = 1;
 
-       $arr['body']          = '[url=' . $a->get_baseurl() . '/photos/' . $owner_record['nickname'] . '/image/' . $photo_hash . ']' 
-                               . '[img]' . $a->get_baseurl() . "/photo/{$photo_hash}-{$smallest}.".$ph->getExt() . '[/img]' 
+       $arr['body']          = '[url=' . $a->get_baseurl() . '/photos/' . $owner_record['nickname'] . '/image/' . $photo_hash . ']'
+                               . '[img]' . $a->get_baseurl() . "/photo/{$photo_hash}-{$smallest}.".$ph->getExt() . '[/img]'
                                . '[/url]';
 
        $item_id = item_store($arr);
 
-       if($item_id) {
-               q("UPDATE `item` SET `plink` = '%s' WHERE `uid` = %d AND `id` = %d LIMIT 1",
-                       dbesc($a->get_baseurl() . '/display/' . $owner_record['nickname'] . '/' . $item_id),
-                       intval($page_owner_uid),
-                       intval($item_id)
-               );
-       }
-       
-       if($visible) 
+       //if($item_id) {
+       //      q("UPDATE `item` SET `plink` = '%s' WHERE `uid` = %d AND `id` = %d",
+       //              dbesc($a->get_baseurl() . '/display/' . $owner_record['nickname'] . '/' . $item_id),
+       //              intval($page_owner_uid),
+       //              intval($item_id)
+       //      );
+       //}
+
+       if($visible)
                proc_run('php', "include/notifier.php", 'wall-new', $item_id);
 
        call_hooks('photo_post_end',intval($item_id));
@@ -820,8 +976,8 @@ function photos_content(&$a) {
                notice( t('Public access denied.') . EOL);
                return;
        }
-       
-       
+
+
        require_once('include/bbcode.php');
        require_once('include/security.php');
        require_once('include/conversation.php');
@@ -836,7 +992,7 @@ function photos_content(&$a) {
        $_SESSION['photo_return'] = $a->cmd;
 
        //
-       // Parse arguments 
+       // Parse arguments
        //
 
        if($a->argc > 3) {
@@ -861,6 +1017,7 @@ function photos_content(&$a) {
        $visitor        = 0;
        $contact        = null;
        $remote_contact = false;
+       $contact_id     = 0;
 
        $owner_uid = $a->data['user']['uid'];
 
@@ -870,15 +1027,26 @@ function photos_content(&$a) {
                $can_post = true;
        else {
                if($community_page && remote_user()) {
-                       $r = q("SELECT `uid` FROM `contact` WHERE `blocked` = 0 AND `pending` = 0 AND `id` = %d AND `uid` = %d LIMIT 1",
-                               intval(remote_user()),
-                               intval($owner_uid)
-                       );
-                       if(count($r)) {
-                               $can_post = true;
-                               $contact  = $r[0];
-                               $remote_contact = true;
-                               $visitor = remote_user();
+                       if(is_array($_SESSION['remote'])) {
+                               foreach($_SESSION['remote'] as $v) {
+                                       if($v['uid'] == $owner_uid) {
+                                               $contact_id = $v['cid'];
+                                               break;
+                                       }
+                               }
+                       }
+                       if($contact_id) {
+
+                               $r = q("SELECT `uid` FROM `contact` WHERE `blocked` = 0 AND `pending` = 0 AND `id` = %d AND `uid` = %d LIMIT 1",
+                                       intval($contact_id),
+                                       intval($owner_uid)
+                               );
+                               if(count($r)) {
+                                       $can_post = true;
+                                       $contact = $r[0];
+                                       $remote_contact = true;
+                                       $visitor = $cid;
+                               }
                        }
                }
        }
@@ -886,15 +1054,25 @@ function photos_content(&$a) {
        // perhaps they're visiting - but not a community page, so they wouldn't have write access
 
        if(remote_user() && (! $visitor)) {
-               $contact_id = $_SESSION['visitor_id'];
-               $groups = init_groups_visitor($contact_id);
-               $r = q("SELECT * FROM `contact` WHERE `blocked` = 0 AND `pending` = 0 AND `id` = %d AND `uid` = %d LIMIT 1",
-                       intval(remote_user()),
-                       intval($owner_uid)
-               );
-               if(count($r)) {
-                       $contact = $r[0];
-                       $remote_contact = true;
+               $contact_id = 0;
+               if(is_array($_SESSION['remote'])) {
+                       foreach($_SESSION['remote'] as $v) {
+                               if($v['uid'] == $owner_uid) {
+                                       $contact_id = $v['cid'];
+                                       break;
+                               }
+                       }
+               }
+               if($contact_id) {
+                       $groups = init_groups_visitor($contact_id);
+                       $r = q("SELECT * FROM `contact` WHERE `blocked` = 0 AND `pending` = 0 AND `id` = %d AND `uid` = %d LIMIT 1",
+                               intval($contact_id),
+                               intval($owner_uid)
+                       );
+                       if(count($r)) {
+                               $contact = $r[0];
+                               $remote_contact = true;
+                       }
                }
        }
 
@@ -915,13 +1093,12 @@ function photos_content(&$a) {
        $o = "";
 
        // tabs
-       $_is_owner = (local_user() && (local_user() == $owner_uid));
-       $o .= profile_tabs($a,$_is_owner, $a->data['user']['nickname']);        
-
-       //
-       // dispatch request
-       //
+       $is_owner = (local_user() && (local_user() == $owner_uid));
+       $o .= profile_tabs($a,$is_owner, $a->data['user']['nickname']);
 
+       /**
+        * Display upload form
+        */
 
        if($datatype === 'upload') {
                if(! ($can_post)) {
@@ -933,9 +1110,9 @@ function photos_content(&$a) {
                $selname = (($datum) ? hex2bin($datum) : '');
 
 
-               $albumselect = '<select id="photos-upload-album-select" name="album" size="4">';
+               $albumselect = '';
+
 
-               
                $albumselect .= '<option value="" ' . ((! $selname) ? ' selected="selected" ' : '') . '>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</option>';
                if(count($a->data['albums'])) {
                        foreach($a->data['albums'] as $album) {
@@ -946,10 +1123,6 @@ function photos_content(&$a) {
                        }
                }
 
-               $celeb = ((($a->user['page-flags'] == PAGE_SOAPBOX) || ($a->user['page-flags'] == PAGE_COMMUNITY)) ? true : false);
-
-               $albumselect .= '</select>';
-
                $uploader = '';
 
                $ret = array('post_url' => $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'],
@@ -959,37 +1132,92 @@ function photos_content(&$a) {
 
                call_hooks('photo_upload_form',$ret);
 
-               $default_upload = '<input type="file" name="userfile" />        <div class="photos-upload-submit-wrapper" >
-               <input type="submit" name="submit" value="' . t('Submit') . '" id="photos-upload-submit" /> </div>';
+               $default_upload_box = replace_macros(get_markup_template('photos_default_uploader_box.tpl'), array());
+               $default_upload_submit = replace_macros(get_markup_template('photos_default_uploader_submit.tpl'), array(
+                       '$submit' => t('Submit'),
+               ));
+
+               $usage_message = '';
+               $limit = service_class_fetch($a->data['user']['uid'],'photo_upload_limit');
+               if($limit !== false) {
+
+                       $r = q("select sum(datasize) as total from photo where uid = %d and scale = 0 and album != 'Contact Photos' ",
+                               intval($a->data['user']['uid'])
+                       );
+                       $usage_message = sprintf( t("You have used %1$.2f Mbytes of %2$.2f Mbytes photo storage."), $r[0]['total'] / 1024000, $limit / 1024000 );
+               }
+
+
+               // Private/public post links for the non-JS ACL form
+               $private_post = 1;
+               if($_REQUEST['public'])
+                       $private_post = 0;
+
+               $query_str = $a->query_string;
+               if(strpos($query_str, 'public=1') !== false)
+                       $query_str = str_replace(array('?public=1', '&public=1'), array('', ''), $query_str);
+
+               // I think $a->query_string may never have ? in it, but I could be wrong
+               // It looks like it's from the index.php?q=[etc] rewrite that the web
+               // server does, which converts any ? to &, e.g. suggest&ignore=61 for suggest?ignore=61
+               if(strpos($query_str, '?') === false)
+                       $public_post_link = '?public=1';
+               else
+                       $public_post_link = '&public=1';
 
 
 
                $tpl = get_markup_template('photos_upload.tpl');
+
+               if($a->theme['template_engine'] === 'internal') {
+                       $albumselect_e = template_escape($albumselect);
+                       $aclselect_e = (($visitor) ? '' : template_escape(populate_acl($a->user)));
+               }
+               else {
+                       $albumselect_e = $albumselect;
+                       $aclselect_e = (($visitor) ? '' : populate_acl($a->user));
+               }
+
                $o .= replace_macros($tpl,array(
                        '$pagename' => t('Upload Photos'),
                        '$sessid' => session_id(),
+                       '$usage' => $usage_message,
                        '$nickname' => $a->data['user']['nickname'],
                        '$newalbum' => t('New album name: '),
                        '$existalbumtext' => t('or existing album name: '),
                        '$nosharetext' => t('Do not show a status post for this upload'),
-                       '$albumselect' => template_escape($albumselect),
+                       '$albumselect' => $albumselect_e,
                        '$permissions' => t('Permissions'),
-                       '$aclselect' => (($visitor) ? '' : template_escape(populate_acl($a->user, $celeb))),
-                       '$uploader' => $ret['addon_text'],
-                       '$default' => (($ret['default_upload']) ? $default_upload : ''),
-                       '$uploadurl' => $ret['post_url']
+                       '$aclselect' => $aclselect_e,
+                       '$alt_uploader' => $ret['addon_text'],
+                       '$default_upload_box' => (($ret['default_upload']) ? $default_upload_box : ''),
+                       '$default_upload_submit' => (($ret['default_upload']) ? $default_upload_submit : ''),
+                       '$uploadurl' => $ret['post_url'],
+
+                       // ACL permissions box
+                       '$acl_data' => construct_acl_data($a, $a->user), // For non-Javascript ACL selector
+                       '$group_perms' => t('Show to Groups'),
+                       '$contact_perms' => t('Show to Contacts'),
+                       '$private' => t('Private Photo'),
+                       '$public' => t('Public Photo'),
+                       '$is_private' => $private_post,
+                       '$return_path' => $query_str,
+                       '$public_link' => $public_post_link,
 
                ));
 
-               return $o; 
+               return $o;
        }
 
+       /*
+        * Display a single photo album
+        */
+
        if($datatype === 'album') {
 
                $album = hex2bin($datum);
 
-               $r = q("SELECT `resource-id`, max(`scale`) AS `scale` FROM `photo` WHERE `uid` = %d AND `album` = '%s' 
+               $r = q("SELECT `resource-id`, max(`scale`) AS `scale` FROM `photo` WHERE `uid` = %d AND `album` = '%s'
                        AND `scale` <= 4 $sql_extra GROUP BY `resource-id`",
                        intval($owner_uid),
                        dbesc($album)
@@ -999,24 +1227,36 @@ function photos_content(&$a) {
                        $a->set_pager_itemspage(20);
                }
 
-               $r = q("SELECT `resource-id`, `id`, `filename`, type, max(`scale`) AS `scale`, `desc` FROM `photo` WHERE `uid` = %d AND `album` = '%s' 
-                       AND `scale` <= 4 $sql_extra GROUP BY `resource-id` ORDER BY `created` DESC LIMIT %d , %d",
+               if($_GET['order'] === 'posted')
+                       $order = 'ASC';
+               else
+                       $order = 'DESC';
+
+               $r = q("SELECT `resource-id`, `id`, `filename`, type, max(`scale`) AS `scale`, `desc` FROM `photo` WHERE `uid` = %d AND `album` = '%s'
+                       AND `scale` <= 4 $sql_extra GROUP BY `resource-id` ORDER BY `created` $order LIMIT %d , %d",
                        intval($owner_uid),
                        dbesc($album),
                        intval($a->pager['start']),
                        intval($a->pager['itemspage'])
                );
 
-               $o .= '<h3>' . $album . '</h3>';
-               
-               if($cmd === 'edit') {           
+               //edit album name
+               if($cmd === 'edit') {
                        if(($album !== t('Profile Photos')) && ($album !== 'Contact Photos') && ($album !== t('Contact Photos'))) {
                                if($can_post) {
                                        $edit_tpl = get_markup_template('album_edit.tpl');
+
+                                       if($a->theme['template_engine'] === 'internal') {
+                                               $album_e = template_escape($album);
+                                       }
+                                       else {
+                                               $album_e = $album;
+                                       }
+
                                        $o .= replace_macros($edit_tpl,array(
                                                '$nametext' => t('New album name: '),
                                                '$nickname' => $a->data['user']['nickname'],
-                                               '$album' => template_escape($album),
+                                               '$album' => $album_e,
                                                '$hexalbum' => bin2hex($album),
                                                '$submit' => t('Submit'),
                                                '$dropsubmit' => t('Delete Album')
@@ -1027,18 +1267,18 @@ function photos_content(&$a) {
                else {
                        if(($album !== t('Profile Photos')) && ($album !== 'Contact Photos') && ($album !== t('Contact Photos'))) {
                                if($can_post) {
-                                       $o .= '<div id="album-edit-link"><a href="'. $a->get_baseurl() . '/photos/' 
-                                               . $a->data['user']['nickname'] . '/album/' . bin2hex($album) . '/edit' . '">' 
-                                               . t('Edit Album') . '</a></div>';
+                                       $edit = array(t('Edit Album'), $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/album/' . bin2hex($album) . '/edit');
                                }
                        }
                }
 
-               if($can_post) {
-                       $o .= '<div class="photos-upload-link" ><a href="' . $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/upload/' . bin2hex($album) . '" >' . t('Upload New Photos') . '</a></div>';
-               }
+               if($_GET['order'] === 'posted')
+                       $order =  array(t('Show Newest First'), $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/album/' . bin2hex($album));
+               else
+                       $order = array(t('Show Oldest First'), $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/album/' . bin2hex($album) . '?f=&order=posted');
+
+               $photos = array();
 
-               $tpl = get_markup_template('photo_album.tpl');
                if(count($r))
                        $twist = 'rotright';
                        foreach($r as $rr) {
@@ -1046,48 +1286,70 @@ function photos_content(&$a) {
                                        $twist = 'rotleft';
                                else
                                        $twist = 'rotright';
-                               
+
                                $ext = $phototypes[$rr['type']];
 
-                               $o .= replace_macros($tpl,array(
-                                       '$id' => $rr['id'],
-                                       '$twist' => ' ' . $twist . rand(2,4),
-                                       '$photolink' => $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $rr['resource-id'],
-                                       '$phototitle' => t('View Photo'),
-                                       '$imgsrc' => $a->get_baseurl() . '/photo/' . $rr['resource-id'] . '-' . $rr['scale'] . '.' .$ext,
-                                       '$imgalt' => template_escape($rr['filename']),
-                                       '$desc'=> template_escape($rr['desc'])
-                               ));
+                               if($a->theme['template_engine'] === 'internal') {
+                                       $imgalt_e = template_escape($rr['filename']);
+                                       $desc_e = template_escape($rr['desc']);
+                               }
+                               else {
+                                       $imgalt_e = $rr['filename'];
+                                       $desc_e = $rr['desc'];
+                               }
 
+                               $photos[] = array(
+                                       'id' => $rr['id'],
+                                       'twist' => ' ' . $twist . rand(2,4),
+                                       'link' => $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $rr['resource-id']
+                                               . (($_GET['order'] === 'posted') ? '?f=&order=posted' : ''),
+                                       'title' => t('View Photo'),
+                                       'src' => $a->get_baseurl() . '/photo/' . $rr['resource-id'] . '-' . $rr['scale'] . '.' .$ext,
+                                       'alt' => $imgalt_e,
+                                       'desc'=> $desc_e,
+                                       'ext' => $ext,
+                                       'hash'=> $rr['resource_id'],
+                               );
                }
-               $o .= '<div id="photo-album-end"></div>';
+
+               $tpl = get_markup_template('photo_album.tpl');
+               $o .= replace_macros($tpl, array(
+                               '$photos' => $photos,
+                               '$album' => $album,
+                               '$can_post' => $can_post,
+                               '$upload' => array(t('Upload New Photos'), $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/upload/' . bin2hex($album)),
+                               '$order' => $order,
+                               '$edit' => $edit
+                       ));
+
                $o .= paginate($a);
 
                return $o;
 
-       }       
+       }
 
+       /** 
+        * Display one photo
+        */
 
        if($datatype === 'image') {
 
-
-
                //$o = '';
                // fetch image, item containing image, then comments
 
-               $ph = q("SELECT * FROM `photo` WHERE `uid` = %d AND `resource-id` = '%s' 
+               $ph = q("SELECT * FROM `photo` WHERE `uid` = %d AND `resource-id` = '%s'
                        $sql_extra ORDER BY `scale` ASC ",
                        intval($owner_uid),
                        dbesc($datum)
                );
 
                if(! count($ph)) {
-                       $ph = q("SELECT `id` FROM `photo` WHERE `uid` = %d AND `resource-id` = '%s' 
+                       $ph = q("SELECT `id` FROM `photo` WHERE `uid` = %d AND `resource-id` = '%s'
                                LIMIT 1",
                                intval($owner_uid),
                                dbesc($datum)
                        );
-                       if(count($ph)) 
+                       if(count($ph))
                                notice( t('Permission denied. Access to this item may be restricted.'));
                        else
                                notice( t('Photo not available') . EOL );
@@ -1097,11 +1359,17 @@ function photos_content(&$a) {
                $prevlink = '';
                $nextlink = '';
 
-               $prvnxt = q("SELECT `resource-id` FROM `photo` WHERE `album` = '%s' AND `uid` = %d AND `scale` = 0 
-                       $sql_extra ORDER BY `created` DESC ",
+               if($_GET['order'] === 'posted')
+                       $order = 'ASC';
+               else
+                       $order = 'DESC';
+
+
+               $prvnxt = q("SELECT `resource-id` FROM `photo` WHERE `album` = '%s' AND `uid` = %d AND `scale` = 0
+                       $sql_extra ORDER BY `created` $order ",
                        dbesc($ph[0]['album']),
                        intval($owner_uid)
-               ); 
+               );
 
                if(count($prvnxt)) {
                        for($z = 0; $z < count($prvnxt); $z++) {
@@ -1116,8 +1384,8 @@ function photos_content(&$a) {
                                }
                        }
                        $edit_suffix = ((($cmd === 'edit') && ($can_post)) ? '/edit' : '');
-                       $prevlink = $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $prvnxt[$prv]['resource-id'] . $edit_suffix;
-                       $nextlink = $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $prvnxt[$nxt]['resource-id'] . $edit_suffix;
+                       $prevlink = $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $prvnxt[$prv]['resource-id'] . $edit_suffix . (($_GET['order'] === 'posted') ? '?f=&order=posted' : '');
+                       $nextlink = $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $prvnxt[$nxt]['resource-id'] . $edit_suffix . (($_GET['order'] === 'posted') ? '?f=&order=posted' : '');
                }
 
 
@@ -1137,7 +1405,7 @@ function photos_content(&$a) {
                $album_link = $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/album/' . bin2hex($ph[0]['album']);
                $tools = Null;
                $lock = Null;
+
                if($can_post && ($ph[0]['uid'] == $owner_uid)) {
                        $tools = array(
                                'edit'  => array($a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $datum . (($cmd === 'edit') ? '' : '/edit'), (($cmd === 'edit') ? t('View photo') : t('Edit photo'))),
@@ -1145,23 +1413,20 @@ function photos_content(&$a) {
                        );
 
                        // lock
-                       $lock = ( ( ($ph[0]['uid'] == local_user()) && (strlen($ph[0]['allow_cid']) || strlen($ph[0]['allow_gid']) 
-                                       || strlen($ph[0]['deny_cid']) || strlen($ph[0]['deny_gid'])) ) 
+                       $lock = ( ( ($ph[0]['uid'] == local_user()) && (strlen($ph[0]['allow_cid']) || strlen($ph[0]['allow_gid'])
+                                       || strlen($ph[0]['deny_cid']) || strlen($ph[0]['deny_gid'])) )
                                        ? t('Private Message')
                                        : Null);
-                       
-                       
-               }
 
-               if(! $cmd !== 'edit') {
-                       $a->page['htmlhead'] .= '<script>
-                               $(document).keydown(function(event) {' . "\n";
 
-                       if($prevlink)
-                               $a->page['htmlhead'] .= 'if(event.ctrlKey && event.keyCode == 37) { event.preventDefault(); window.location.href = \'' . $prevlink . '\'; }' . "\n";
-                       if($nextlink)
-                               $a->page['htmlhead'] .= 'if(event.ctrlKey && event.keyCode == 39) { event.preventDefault(); window.location.href = \'' . $nextlink . '\'; }' . "\n";
-                       $a->page['htmlhead'] .= '});</script>';
+               }
+
+               if( $cmd === 'edit') {
+                       $tpl = get_markup_template('photo_edit_head.tpl');
+                       $a->page['htmlhead'] .= replace_macros($tpl,array(
+                               '$prevlink' => $prevlink,
+                               '$nextlink' => $nextlink
+                       ));
                }
 
                if($prevlink)
@@ -1170,7 +1435,11 @@ function photos_content(&$a) {
                $photo = array(
                        'href' => $a->get_baseurl() . '/photo/' . $hires['resource-id'] . '-' . $hires['scale'] . '.' . $phototypes[$hires['type']],
                        'title'=> t('View Full Size'),
-                       'src'  => $a->get_baseurl() . '/photo/' . $lores['resource-id'] . '-' . $lores['scale'] . '.' . $phototypes[$lores['type']] . '?f=&_u=' . datetime_convert('','','','ymdhis')
+                       'src'  => $a->get_baseurl() . '/photo/' . $lores['resource-id'] . '-' . $lores['scale'] . '.' . $phototypes[$lores['type']] . '?f=&_u=' . datetime_convert('','','','ymdhis'),
+                       'height' => $hires['height'],
+                       'width' => $hires['width'],
+                       'album' => $hires['album'],
+                       'filename' => $hires['filename'],
                );
 
                if($nextlink)
@@ -1179,16 +1448,25 @@ function photos_content(&$a) {
 
                // Do we have an item for this photo?
 
+               // FIXME! - replace following code to display the conversation with our normal
+               // conversation functions so that it works correctly and tracks changes
+               // in the evolving conversation code.
+               // The difference is that we won't be displaying the conversation head item
+               // as a "post" but displaying instead the photo it is linked to
+
                $linked_items = q("SELECT * FROM `item` WHERE `resource-id` = '%s' $sql_extra LIMIT 1",
                        dbesc($datum)
                );
+
+               $map = null;
+
                if(count($linked_items)) {
                        $link_item = $linked_items[0];
                        $r = q("SELECT COUNT(*) AS `total`
                                FROM `item` LEFT JOIN `contact` ON `contact`.`id` = `item`.`contact-id`
                                WHERE `parent-uri` = '%s' AND `uri` != '%s' AND `item`.`deleted` = 0 and `item`.`moderated` = 0
                                AND `contact`.`blocked` = 0 AND `contact`.`pending` = 0
-                               AND `item`.`uid` = %d 
+                               AND `item`.`uid` = %d
                                $sql_extra ",
                                dbesc($link_item['uri']),
                                dbesc($link_item['uri']),
@@ -1200,9 +1478,9 @@ function photos_content(&$a) {
                                $a->set_pager_total($r[0]['total']);
 
 
-                       $r = q("SELECT `item`.*, `item`.`id` AS `item_id`, 
-                               `contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`network`, 
-                               `contact`.`rel`, `contact`.`thumb`, `contact`.`self`, 
+                       $r = q("SELECT `item`.*, `item`.`id` AS `item_id`,
+                               `contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`network`,
+                               `contact`.`rel`, `contact`.`thumb`, `contact`.`self`,
                                `contact`.`id` AS `cid`, `contact`.`uid` AS `contact-uid`
                                FROM `item` LEFT JOIN `contact` ON `contact`.`id` = `item`.`contact-id`
                                WHERE `parent-uri` = '%s' AND `uri` != '%s' AND `item`.`deleted` = 0 and `item`.`moderated` = 0
@@ -1217,12 +1495,17 @@ function photos_content(&$a) {
                                intval($a->pager['itemspage'])
 
                        );
-               
+
                        if((local_user()) && (local_user() == $link_item['uid'])) {
                                q("UPDATE `item` SET `unseen` = 0 WHERE `parent` = %d and `uid` = %d",
                                        intval($link_item['parent']),
                                        intval(local_user())
                                );
+                               update_thread($link_item['parent']);
+                       }
+
+                       if($link_item['coord']) {
+                               $map = generate_map($link_item['coord']);
                        }
                }
 
@@ -1236,7 +1519,7 @@ function photos_content(&$a) {
                                if(strlen($tag_str))
                                        $tag_str .= ', ';
                                $tag_str .= bbcode($t);
-                       } 
+                       }
                        $tags = array(t('Tags: '), $tag_str);
                        if($cmd === 'edit') {
                                $tags[] = $a->get_baseurl() . '/tagrm/' . $link_item['id'];
@@ -1248,23 +1531,63 @@ function photos_content(&$a) {
                $edit = Null;
                if(($cmd === 'edit') && ($can_post)) {
                        $edit_tpl = get_markup_template('photo_edit.tpl');
+
+                       // Private/public post links for the non-JS ACL form
+                       $private_post = 1;
+                       if($_REQUEST['public'])
+                               $private_post = 0;
+
+                       $query_str = $a->query_string;
+                       if(strpos($query_str, 'public=1') !== false)
+                               $query_str = str_replace(array('?public=1', '&public=1'), array('', ''), $query_str);
+
+                       // I think $a->query_string may never have ? in it, but I could be wrong
+                       // It looks like it's from the index.php?q=[etc] rewrite that the web
+                       // server does, which converts any ? to &, e.g. suggest&ignore=61 for suggest?ignore=61
+                       if(strpos($query_str, '?') === false)
+                               $public_post_link = '?public=1';
+                       else
+                               $public_post_link = '&public=1';
+
+
+                       if($a->theme['template_engine'] === 'internal') {
+                               $album_e = template_escape($ph[0]['album']);
+                               $caption_e = template_escape($ph[0]['desc']);
+                               $aclselect_e = template_escape(populate_acl($ph[0]));
+                       }
+                       else {
+                               $album_e = $ph[0]['album'];
+                               $caption_e = $ph[0]['desc'];
+                               $aclselect_e = populate_acl($ph[0]);
+                       }
+
                        $edit = replace_macros($edit_tpl, array(
                                '$id' => $ph[0]['id'],
-                               '$rotate' => t('Rotate CW'),
-                               '$album' => template_escape($ph[0]['album']),
-                               '$newalbum' => t('New album name'), 
+                               '$album' => array('albname', t('New album name'), $album_e,''),
+                               '$caption' => array('desc', t('Caption'), $caption_e, ''),
+                               '$tags' => array('newtag', t('Add a Tag'), "", t('Example: @bob, @Barbara_Jensen, @jim@example.com, #California, #camping')),
+                               '$rotate_none' => array('rotate',t('Do not rotate'),0,'', true),
+                               '$rotate_cw' => array('rotate',t('Rotate CW (right)'),1,''),
+                               '$rotate_ccw' => array('rotate',t('Rotate CCW (left)'),2,''),
+
                                '$nickname' => $a->data['user']['nickname'],
                                '$resource_id' => $ph[0]['resource-id'],
-                               '$capt_label' => t('Caption'),
-                               '$caption' => template_escape($ph[0]['desc']),
-                               '$tag_label' => t('Add a Tag'),
-                               '$tags' => $link_item['tag'],
                                '$permissions' => t('Permissions'),
-                               '$aclselect' => template_escape(populate_acl($ph[0])),
-                               '$help_tags' => t('Example: @bob, @Barbara_Jensen, @jim@example.com, #California, #camping'),
+                               '$aclselect' => $aclselect_e,
+
                                '$item_id' => ((count($linked_items)) ? $link_item['id'] : 0),
                                '$submit' => t('Submit'),
-                               '$delete' => t('Delete Photo')
+                               '$delete' => t('Delete Photo'),
+
+                               // ACL permissions box
+                               '$acl_data' => construct_acl_data($a, $ph[0]), // For non-Javascript ACL selector
+                               '$group_perms' => t('Show to Groups'),
+                               '$contact_perms' => t('Show to Contacts'),
+                               '$private' => t('Private photo'),
+                               '$public' => t('Public photo'),
+                               '$is_private' => $private_post,
+                               '$return_path' => $query_str,
+                               '$public_link' => $public_post_link,
                        ));
                }
 
@@ -1282,9 +1605,10 @@ function photos_content(&$a) {
                                $likebuttons = replace_macros($like_tpl,array(
                                        '$id' => $link_item['id'],
                                        '$likethis' => t("I like this \x28toggle\x29"),
-                                       '$nolike' => t("I don't like this \x28toggle\x29"),
+                                       '$nolike' => (feature_enabled(local_user(), 'dislike') ? t("I don't like this \x28toggle\x29") : ''),
                                        '$share' => t('Share'),
-                                       '$wait' => t('Please wait')
+                                       '$wait' => t('Please wait'),
+                                       '$return_path' => $a->query_string,
                                ));
                        }
 
@@ -1293,7 +1617,7 @@ function photos_content(&$a) {
                                if($can_post || can_write_wall($a,$owner_uid)) {
                                        if($link_item['last-child']) {
                                                $comments .= replace_macros($cmnt_tpl,array(
-                                                       '$return_path' => '', 
+                                                       '$return_path' => '',
                                                        '$jsreload' => $return_url,
                                                        '$type' => 'wall-comment',
                                                        '$id' => $link_item['id'],
@@ -1305,7 +1629,9 @@ function photos_content(&$a) {
                                                        '$comment' => t('Comment'),
                                                        '$submit' => t('Submit'),
                                                        '$preview' => t('Preview'),
-                                                       '$ww' => ''
+                                                       '$sourceapp' => t($a->sourcename),
+                                                       '$ww' => '',
+                                                       '$rand_num' => random_digits(12)
                                                ));
                                        }
                                }
@@ -1313,20 +1639,26 @@ function photos_content(&$a) {
 
                        $alike = array();
                        $dlike = array();
-                       
+
                        $like = '';
                        $dislike = '';
 
+                       $conv_responses = array(
+                               'like' => array('title' => t('Likes','title')),'dislike' => array('title' => t('Dislikes','title')),
+                               'attendyes' => array('title' => t('Attending','title')), 'attendno' => array('title' => t('Not attending','title')), 'attendmaybe' => array('title' => t('Might attend','title'))
+                       );
+
+
+
                        // display comments
                        if(count($r)) {
 
                                foreach($r as $item) {
-                                       like_puller($a,$item,$alike,'like');
-                                       like_puller($a,$item,$dlike,'dislike');
+                                       builtin_activity_puller($item, $conv_responses);
                                }
 
-                               $like    = ((isset($alike[$link_item['id']])) ? format_like($alike[$link_item['id']],$alike[$link_item['id'] . '-l'],'like',$link_item['id']) : '');
-                               $dislike = ((isset($dlike[$link_item['id']])) ? format_like($dlike[$link_item['id']],$dlike[$link_item['id'] . '-l'],'dislike',$link_item['id']) : '');
+                               $like    = ((x($conv_responses['like'],$link_item['uri'])) ? format_like($conv_responses['like'][$link_item['uri']],$conv_responses['like'][$link_item['uri'] . '-l'],'like',$link_item['id']) : '');
+                               $dislike = ((x($conv_responses['dislike'],$link_item['uri'])) ? format_like($conv_responses['dislike'][$link_item['uri']],$conv_responses['dislike'][$link_item['uri'] . '-l'],'dislike',$link_item['id']) : '');
 
 
 
@@ -1344,7 +1676,10 @@ function photos_content(&$a) {
                                                        '$myphoto' => $contact['thumb'],
                                                        '$comment' => t('Comment'),
                                                        '$submit' => t('Submit'),
-                                                       '$ww' => ''
+                                                       '$preview' => t('Preview'),
+                                                       '$sourceapp' => t($a->sourcename),
+                                                       '$ww' => '',
+                                                       '$rand_num' => random_digits(12)
                                                ));
                                        }
                                }
@@ -1359,30 +1694,10 @@ function photos_content(&$a) {
                                                continue;
 
                                        $redirect_url = $a->get_baseurl() . '/redir/' . $item['cid'] ;
-                       
-                                       if($can_post || can_write_wall($a,$owner_uid)) {
-
-                                               if($item['last-child']) {
-                                                       $comments .= replace_macros($cmnt_tpl,array(
-                                                               '$return_path' => '',
-                                                               '$jsreload' => $return_url,
-                                                               '$type' => 'wall-comment',
-                                                               '$id' => $item['item_id'],
-                                                               '$parent' => $item['parent'],
-                                                               '$profile_uid' =>  $owner_uid,
-                                                               '$mylink' => $contact['url'],
-                                                               '$mytitle' => t('This is you'),
-                                                               '$myphoto' => $contact['thumb'],
-                                                               '$comment' => t('Comment'),
-                                                               '$submit' => t('Submit'),
-                                                               '$ww' => ''
-                                                       ));
-                                               }
-                                       }
 
 
-                                       if(local_user() && ($item['contact-uid'] == local_user()) 
-                                               && ($item['network'] == 'dfrn') && (! $item['self'] )) {
+                                       if(local_user() && ($item['contact-uid'] == local_user())
+                                               && ($item['network'] == NETWORK_DFRN) && (! $item['self'] )) {
                                                $profile_url = $redirect_url;
                                                $sparkle = ' sparkle';
                                        }
@@ -1390,7 +1705,7 @@ function photos_content(&$a) {
                                                $profile_url = $item['url'];
                                                $sparkle = '';
                                        }
+
                                        $diff_author = (($item['url'] !== $item['author-link']) ? true : false);
 
                                        $profile_name   = (((strlen($item['author-name']))   && $diff_author) ? $item['author-name']   : $item['name']);
@@ -1398,57 +1713,125 @@ function photos_content(&$a) {
 
                                        $profile_link = $profile_url;
 
-                                       $drop = '';
 
-                                       if(($item['contact-id'] == remote_user()) || ($item['uid'] == local_user()))
-                                               $drop = replace_macros(get_markup_template('photo_drop.tpl'), array('$id' => $item['id'], '$delete' => t('Delete')));
 
+                                       $dropping = (($item['contact-id'] == $contact_id) || ($item['uid'] == local_user()));
+                                       $drop = array(
+                                               'dropping' => $dropping,
+                                               'pagedrop' => false,
+                                               'select' => t('Select'),
+                                               'delete' => t('Delete'),
+                                       );
+
+
+                                       if($a->theme['template_engine'] === 'internal') {
+                                               $name_e = template_escape($profile_name);
+                                               $title_e = template_escape($item['title']);
+                                               $body_e = template_escape(bbcode($item['body']));
+                                       }
+                                       else {
+                                               $name_e = $profile_name;
+                                               $title_e = $item['title'];
+                                               $body_e = bbcode($item['body']);
+                                       }
 
                                        $comments .= replace_macros($template,array(
                                                '$id' => $item['item_id'],
                                                '$profile_url' => $profile_link,
-                                               '$name' => template_escape($profile_name),
+                                               '$name' => $name_e,
                                                '$thumb' => $profile_avatar,
                                                '$sparkle' => $sparkle,
-                                               '$title' => template_escape($item['title']),
-                                               '$body' => template_escape(bbcode($item['body'])),
+                                               '$title' => $title_e,
+                                               '$body' => $body_e,
                                                '$ago' => relative_date($item['created']),
                                                '$indent' => (($item['parent'] != $item['item_id']) ? ' comment' : ''),
                                                '$drop' => $drop,
                                                '$comment' => $comment
                                        ));
+
+                                       if($can_post || can_write_wall($a,$owner_uid)) {
+
+                                               if($item['last-child']) {
+                                                       $comments .= replace_macros($cmnt_tpl,array(
+                                                               '$return_path' => '',
+                                                               '$jsreload' => $return_url,
+                                                               '$type' => 'wall-comment',
+                                                               '$id' => $item['item_id'],
+                                                               '$parent' => $item['parent'],
+                                                               '$profile_uid' =>  $owner_uid,
+                                                               '$mylink' => $contact['url'],
+                                                               '$mytitle' => t('This is you'),
+                                                               '$myphoto' => $contact['thumb'],
+                                                               '$comment' => t('Comment'),
+                                                               '$submit' => t('Submit'),
+                                                               '$preview' => t('Preview'),
+                                                               '$sourceapp' => t($a->sourcename),
+                                                               '$ww' => '',
+                                                               '$rand_num' => random_digits(12)
+                                                       ));
+                                               }
+                                       }
                                }
                        }
 
                        $paginate = paginate($a);
                }
-               
+
+
+               $response_verbs = array('like');
+               if(feature_enabled($owner_uid,'dislike'))
+                       $response_verbs[] = 'dislike';
+               $responses = get_responses($conv_responses,$response_verbs,'',$link_item);
+
                $photo_tpl = get_markup_template('photo_view.tpl');
+
+               if($a->theme['template_engine'] === 'internal') {
+                       $album_e = array($album_link,template_escape($ph[0]['album']));
+                       $tags_e = template_escape($tags);
+                       $like_e = template_escape($like);
+                       $dislike_e = template_escape($dislike);
+               }
+               else {
+                       $album_e = array($album_link,$ph[0]['album']);
+                       $tags_e = $tags;
+                       $like_e = $like;
+                       $dislike_e = $dislike;
+               }
+
                $o .= replace_macros($photo_tpl, array(
                        '$id' => $ph[0]['id'],
-                       '$album' => array($album_link,template_escape($ph[0]['album'])),
+                       '$album' => $album_e,
                        '$tools' => $tools,
                        '$lock' => $lock,
                        '$photo' => $photo,
                        '$prevlink' => $prevlink,
                        '$nextlink' => $nextlink,
                        '$desc' => $ph[0]['desc'],
-                       '$tags' => template_escape($tags),
-                       '$edit' => $edit,       
+                       '$tags' => $tags_e,
+                       '$edit' => $edit,
+                       '$map' => $map,
+                       '$map_text' => t('Map'),
                        '$likebuttons' => $likebuttons,
-                       '$like' => template_escape($like),
-                       '$dislike' => template_escape($dislike),
+                       '$like' => $like_e,
+                       '$dislike' => $dikslike_e,
+                       'responses' => $responses,
                        '$comments' => $comments,
                        '$paginate' => $paginate,
                ));
-               
+
+               $a->page['htmlhead'] .= "\n".'<meta name="twitter:card" content="photo" />'."\n";
+               $a->page['htmlhead'] .= '<meta name="twitter:title" content="'.$photo["album"].'" />'."\n";
+               $a->page['htmlhead'] .= '<meta name="twitter:image" content="'.$photo["href"].'" />'."\n";
+               $a->page['htmlhead'] .= '<meta name="twitter:image:width" content="'.$photo["width"].'" />'."\n";
+               $a->page['htmlhead'] .= '<meta name="twitter:image:height" content="'.$photo["height"].'" />'."\n";
+
                return $o;
        }
 
        // Default - show recent photos with upload link (if applicable)
        //$o = '';
 
-       $r = q("SELECT `resource-id`, max(`scale`) AS `scale` FROM `photo` WHERE `uid` = %d AND `album` != '%s' AND `album` != '%s' 
+       $r = q("SELECT `resource-id`, max(`scale`) AS `scale` FROM `photo` WHERE `uid` = %d AND `album` != '%s' AND `album` != '%s'
                $sql_extra GROUP BY `resource-id`",
                intval($a->data['user']['uid']),
                dbesc('Contact Photos'),
@@ -1460,7 +1843,7 @@ function photos_content(&$a) {
        }
 
        $r = q("SELECT `resource-id`, `id`, `filename`, type, `album`, max(`scale`) AS `scale` FROM `photo`
-               WHERE `uid` = %d AND `album` != '%s' AND `album` != '%s'  
+               WHERE `uid` = %d AND `album` != '%s' AND `album` != '%s'
                $sql_extra GROUP BY `resource-id` ORDER BY `created` DESC LIMIT %d , %d",
                intval($a->data['user']['uid']),
                dbesc('Contact Photos'),
@@ -1475,38 +1858,51 @@ function photos_content(&$a) {
        if(count($r)) {
                $twist = 'rotright';
                foreach($r as $rr) {
+                       //hide profile photos to others
+                       if((! $is_owner) && (! remote_user()) && ($rr['album'] == t('Profile Photos')))
+                                       continue;
+                       
                        if($twist == 'rotright')
                                $twist = 'rotleft';
                        else
                                $twist = 'rotright';
                        $ext = $phototypes[$rr['type']];
-                       
+
+                       if($a->theme['template_engine'] === 'internal') {
+                               $alt_e = template_escape($rr['filename']);
+                               $name_e = template_escape($rr['album']);
+                       }
+                       else {
+                               $alt_e = $rr['filename'];
+                               $name_e = $rr['album'];
+                       }
+
                        $photos[] = array(
-                               'id'       => $rr['id'],
-                               'twist'    => ' ' . $twist . rand(2,4),
+                               'id'            => $rr['id'],
+                               'twist'         => ' ' . $twist . rand(2,4),
                                'link'          => $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/image/' . $rr['resource-id'],
                                'title'         => t('View Photo'),
                                'src'           => $a->get_baseurl() . '/photo/' . $rr['resource-id'] . '-' . ((($rr['scale']) == 6) ? 4 : $rr['scale']) . '.' . $ext,
-                               'alt'           => template_escape($rr['filename']),
+                               'alt'           => $alt_e,
                                'album' => array(
                                        'link'  => $a->get_baseurl() . '/photos/' . $a->data['user']['nickname'] . '/album/' . bin2hex($rr['album']),
-                                       'name'  => template_escape($rr['album']),
+                                       'name'  => $name_e,
                                        'alt'   => t('View Album'),
                                ),
-                               
+
                        );
                }
        }
-       
-       $tpl = get_markup_template('photos_recent.tpl'); 
-       $o .= replace_macros($tpl,array(
+
+       $tpl = get_markup_template('photos_recent.tpl');
+       $o .= replace_macros($tpl, array(
                '$title' => t('Recent Photos'),
                '$can_post' => $can_post,
                '$upload' => array(t('Upload New Photos'), $a->get_baseurl().'/photos/'.$a->data['user']['nickname'].'/upload'),
                '$photos' => $photos,
        ));
 
-       
+
        $o .= paginate($a);
        return $o;
 }