<?php
-// See here for a documentation for portable contacts:
-// https://web.archive.org/web/20160405005550/http://portablecontacts.net/draft-spec.html
+/**
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ *
+ * @see https://web.archive.org/web/20160405005550/http://portablecontacts.net/draft-spec.html
+ */
+
+use Friendica\App;
+use Friendica\Content\Text\BBCode;
+use Friendica\Core\Logger;
+use Friendica\Core\Protocol;
+use Friendica\Core\Renderer;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Protocol\PortableContact;
+use Friendica\Util\DateTimeFormat;
+use Friendica\Util\Strings;
+use Friendica\Util\XML;
function poco_init(App $a) {
- require_once("include/bbcode.php");
-
$system_mode = false;
- if (intval(get_config('system','block_public')) || (get_config('system','block_local_dir'))) {
- http_status_exit(401);
+ if (intval(DI::config()->get('system', 'block_public')) || (DI::config()->get('system', 'block_local_dir'))) {
+ throw new \Friendica\Network\HTTPException\ForbiddenException();
}
if ($a->argc > 1) {
- $user = notags(trim($a->argv[1]));
+ $nickname = Strings::escapeTags(trim($a->argv[1]));
}
- if (! x($user)) {
- $c = q("SELECT * FROM `pconfig` WHERE `cat` = 'system' AND `k` = 'suggestme' AND `v` = 1");
- if (! dbm::is_result($c)) {
- http_status_exit(401);
+ if (empty($nickname)) {
+ if (!DBA::exists('profile', ['net-publish' => true])) {
+ throw new \Friendica\Network\HTTPException\ForbiddenException();
}
$system_mode = true;
}
- $format = (($_GET['format']) ? $_GET['format'] : 'json');
+ $format = ($_GET['format'] ?? '') ?: 'json';
$justme = false;
$global = false;
if ($a->argc > 1 && $a->argv[1] === '@server') {
// List of all servers that this server knows
- $ret = poco_serverlist();
+ $ret = PortableContact::serverlist();
header('Content-type: application/json');
echo json_encode($ret);
- killme();
+ exit();
}
+
if ($a->argc > 1 && $a->argv[1] === '@global') {
// List of all profiles that this server recently had data from
$global = true;
- $update_limit = date("Y-m-d H:i:s", time() - 30 * 86400);
+ $update_limit = date(DateTimeFormat::MYSQL, time() - 30 * 86400);
}
if ($a->argc > 2 && $a->argv[2] === '@me') {
$justme = true;
$cid = intval($a->argv[4]);
}
- if (!$system_mode AND !$global) {
- $r = q("SELECT `user`.*,`profile`.`hide-friends` from user left join profile on `user`.`uid` = `profile`.`uid`
- where `user`.`nickname` = '%s' and `profile`.`is-default` = 1 limit 1",
- dbesc($user)
- );
- if (! dbm::is_result($r) || $r[0]['hidewall'] || $r[0]['hide-friends']) {
- http_status_exit(404);
+ if (!$system_mode && !$global) {
+ $user = DBA::selectFirst('owner-view', ['uid', 'nickname'], ['nickname' => $nickname, 'hide-friends' => false]);
+ if (!DBA::isResult($user)) {
+ throw new \Friendica\Network\HTTPException\NotFoundException();
}
-
- $user = $r[0];
}
if ($justme) {
$sql_extra = " AND `contact`.`self` = 1 ";
+ } else {
+ $sql_extra = "";
}
-// else
-// $sql_extra = " AND `contact`.`self` = 0 ";
- if ($cid) {
- $sql_extra = sprintf(" AND `contact`.`id` = %d ",intval($cid));
+ if (!empty($cid)) {
+ $sql_extra = sprintf(" AND `contact`.`id` = %d ", intval($cid));
}
- if (x($_GET,'updatedSince')) {
- $update_limit = date("Y-m-d H:i:s",strtotime($_GET['updatedSince']));
+ if (!empty($_GET['updatedSince'])) {
+ $update_limit = date(DateTimeFormat::MYSQL, strtotime($_GET['updatedSince']));
}
if ($global) {
- $r = q("SELECT count(*) AS `total` FROM `gcontact` WHERE `updated` >= '%s' AND `updated` >= `last_failure` AND NOT `hide` AND `network` IN ('%s', '%s', '%s')",
- dbesc($update_limit),
- dbesc(NETWORK_DFRN),
- dbesc(NETWORK_DIASPORA),
- dbesc(NETWORK_OSTATUS)
+ $contacts = q("SELECT count(*) AS `total` FROM `gcontact` WHERE `updated` >= '%s' AND `updated` >= `last_failure` AND NOT `hide` AND `network` IN ('%s', '%s', '%s')",
+ DBA::escape($update_limit),
+ DBA::escape(Protocol::DFRN),
+ DBA::escape(Protocol::DIASPORA),
+ DBA::escape(Protocol::OSTATUS)
);
} elseif ($system_mode) {
- $r = q("SELECT count(*) AS `total` FROM `contact` WHERE `self` = 1
- AND `uid` IN (SELECT `uid` FROM `pconfig` WHERE `cat` = 'system' AND `k` = 'suggestme' AND `v` = 1) ");
+ $totalResults = DBA::count('profile', ['net-publish' => true]);
} else {
- $r = q("SELECT count(*) AS `total` FROM `contact` WHERE `uid` = %d AND `blocked` = 0 AND `pending` = 0 AND `hidden` = 0 AND `archive` = 0
+ $contacts = q("SELECT count(*) AS `total` FROM `contact` WHERE `uid` = %d AND `blocked` = 0 AND `pending` = 0 AND `hidden` = 0 AND `archive` = 0
AND (`success_update` >= `failure_update` OR `last-item` >= `failure_update`)
AND `network` IN ('%s', '%s', '%s', '%s') $sql_extra",
intval($user['uid']),
- dbesc(NETWORK_DFRN),
- dbesc(NETWORK_DIASPORA),
- dbesc(NETWORK_OSTATUS),
- dbesc(NETWORK_STATUSNET)
+ DBA::escape(Protocol::DFRN),
+ DBA::escape(Protocol::DIASPORA),
+ DBA::escape(Protocol::OSTATUS),
+ DBA::escape(Protocol::STATUSNET)
);
}
- if (dbm::is_result($r)) {
- $totalResults = intval($r[0]['total']);
- } else {
+ if (empty($totalResults) && DBA::isResult($contacts)) {
+ $totalResults = intval($contacts[0]['total']);
+ } elseif (empty($totalResults)) {
$totalResults = 0;
}
- $startIndex = intval($_GET['startIndex']);
- if (! $startIndex) {
+ if (!empty($_GET['startIndex'])) {
+ $startIndex = intval($_GET['startIndex']);
+ } else {
$startIndex = 0;
}
- $itemsPerPage = ((x($_GET,'count') && intval($_GET['count'])) ? intval($_GET['count']) : $totalResults);
+ $itemsPerPage = ((!empty($_GET['count'])) ? intval($_GET['count']) : $totalResults);
if ($global) {
- logger("Start global query", LOGGER_DEBUG);
- $r = q("SELECT * FROM `gcontact` WHERE `updated` > '%s' AND NOT `hide` AND `network` IN ('%s', '%s', '%s') AND `updated` > `last_failure`
+ Logger::log("Start global query", Logger::DEBUG);
+ $contacts = q("SELECT * FROM `gcontact` WHERE `updated` > '%s' AND NOT `hide` AND `network` IN ('%s', '%s', '%s') AND `updated` > `last_failure`
ORDER BY `updated` DESC LIMIT %d, %d",
- dbesc($update_limit),
- dbesc(NETWORK_DFRN),
- dbesc(NETWORK_DIASPORA),
- dbesc(NETWORK_OSTATUS),
+ DBA::escape($update_limit),
+ DBA::escape(Protocol::DFRN),
+ DBA::escape(Protocol::DIASPORA),
+ DBA::escape(Protocol::OSTATUS),
intval($startIndex),
intval($itemsPerPage)
);
} elseif ($system_mode) {
- logger("Start system mode query", LOGGER_DEBUG);
- $r = q("SELECT `contact`.*, `profile`.`about` AS `pabout`, `profile`.`locality` AS `plocation`, `profile`.`pub_keywords`,
- `profile`.`gender` AS `pgender`, `profile`.`address` AS `paddress`, `profile`.`region` AS `pregion`,
- `profile`.`postal-code` AS `ppostalcode`, `profile`.`country-name` AS `pcountry`, `user`.`account-type`
- FROM `contact` INNER JOIN `profile` ON `profile`.`uid` = `contact`.`uid`
- INNER JOIN `user` ON `user`.`uid` = `contact`.`uid`
- WHERE `self` = 1 AND `profile`.`is-default`
- AND `contact`.`uid` IN (SELECT `uid` FROM `pconfig` WHERE `cat` = 'system' AND `k` = 'suggestme' AND `v` = 1) LIMIT %d, %d",
- intval($startIndex),
- intval($itemsPerPage)
- );
+ Logger::log("Start system mode query", Logger::DEBUG);
+ $contacts = DBA::selectToArray('owner-view', [], ['net-publish' => true], ['limit' => [$startIndex, $itemsPerPage]]);
} else {
- logger("Start query for user ".$user['nickname'], LOGGER_DEBUG);
- $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `blocked` = 0 AND `pending` = 0 AND `hidden` = 0 AND `archive` = 0
+ Logger::log("Start query for user " . $user['nickname'], Logger::DEBUG);
+ $contacts = q("SELECT * FROM `contact` WHERE `uid` = %d AND `blocked` = 0 AND `pending` = 0 AND `hidden` = 0 AND `archive` = 0
AND (`success_update` >= `failure_update` OR `last-item` >= `failure_update`)
AND `network` IN ('%s', '%s', '%s', '%s') $sql_extra LIMIT %d, %d",
intval($user['uid']),
- dbesc(NETWORK_DFRN),
- dbesc(NETWORK_DIASPORA),
- dbesc(NETWORK_OSTATUS),
- dbesc(NETWORK_STATUSNET),
+ DBA::escape(Protocol::DFRN),
+ DBA::escape(Protocol::DIASPORA),
+ DBA::escape(Protocol::OSTATUS),
+ DBA::escape(Protocol::STATUSNET),
intval($startIndex),
intval($itemsPerPage)
);
}
- logger("Query done", LOGGER_DEBUG);
+ Logger::log("Query done", Logger::DEBUG);
- $ret = array();
- if (x($_GET,'sorted')) {
+ $ret = [];
+ if (!empty($_GET['sorted'])) {
$ret['sorted'] = false;
}
- if (x($_GET,'filtered')) {
+ if (!empty($_GET['filtered'])) {
$ret['filtered'] = false;
}
- if (x($_GET,'updatedSince') AND !$global) {
+ if (!empty($_GET['updatedSince']) && ! $global) {
$ret['updatedSince'] = false;
}
-
$ret['startIndex'] = (int) $startIndex;
$ret['itemsPerPage'] = (int) $itemsPerPage;
$ret['totalResults'] = (int) $totalResults;
- $ret['entry'] = array();
+ $ret['entry'] = [];
- $fields_ret = array(
- 'id' => false,
- 'displayName' => false,
- 'urls' => false,
- 'updated' => false,
- 'preferredUsername' => false,
- 'photos' => false,
- 'aboutMe' => false,
- 'currentLocation' => false,
- 'network' => false,
- 'gender' => false,
- 'tags' => false,
- 'address' => false,
- 'contactType' => false,
- 'generation' => false
- );
- if ((! x($_GET,'fields')) || ($_GET['fields'] === '@all')) {
+ $fields_ret = [
+ 'id' => false,
+ 'displayName' => false,
+ 'urls' => false,
+ 'updated' => false,
+ 'preferredUsername' => false,
+ 'photos' => false,
+ 'aboutMe' => false,
+ 'currentLocation' => false,
+ 'network' => false,
+ 'tags' => false,
+ 'address' => false,
+ 'contactType' => false,
+ 'generation' => false
+ ];
+
+ if (empty($_GET['fields']) || ($_GET['fields'] === '@all')) {
foreach ($fields_ret as $k => $v) {
$fields_ret[$k] = true;
}
} else {
- $fields_req = explode(',',$_GET['fields']);
+ $fields_req = explode(',', $_GET['fields']);
foreach ($fields_req as $f) {
$fields_ret[trim($f)] = true;
}
}
- if (is_array($r)) {
- if (dbm::is_result($r)) {
- foreach ($r as $rr) {
- if (!isset($rr['generation'])) {
+ if (is_array($contacts)) {
+ if (DBA::isResult($contacts)) {
+ foreach ($contacts as $contact) {
+ if (!isset($contact['updated'])) {
+ $contact['updated'] = '';
+ }
+
+ if (! isset($contact['generation'])) {
if ($global) {
- $rr['generation'] = 3;
+ $contact['generation'] = 3;
} elseif ($system_mode) {
- $rr['generation'] = 1;
+ $contact['generation'] = 1;
} else {
- $rr['generation'] = 2;
- }
- }
-
- if (($rr['about'] == "") AND isset($rr['pabout'])) {
- $rr['about'] = $rr['pabout'];
- }
-
- if ($rr['location'] == "") {
- if (isset($rr['plocation'])) {
- $rr['location'] = $rr['plocation'];
- }
-
- if (isset($rr['pregion']) AND ($rr['pregion'] != "")) {
- if ($rr['location'] != "") {
- $rr['location'] .= ", ";
- }
-
- $rr['location'] .= $rr['pregion'];
- }
-
- if (isset($rr['pcountry']) AND ($rr['pcountry'] != "")) {
- if ($rr['location'] != "") {
- $rr['location'] .= ", ";
- }
- $rr['location'] .= $rr['pcountry'];
+ $contact['generation'] = 2;
}
}
- if (($rr['gender'] == "") AND isset($rr['pgender'])) {
- $rr['gender'] = $rr['pgender'];
- }
- if (($rr['keywords'] == "") AND isset($rr['pub_keywords'])) {
- $rr['keywords'] = $rr['pub_keywords'];
+ if (($contact['keywords'] == "") && isset($contact['pub_keywords'])) {
+ $contact['keywords'] = $contact['pub_keywords'];
}
- if (isset($rr['account-type'])) {
- $rr['contact-type'] = $rr['account-type'];
+ if (isset($contact['account-type'])) {
+ $contact['contact-type'] = $contact['account-type'];
}
- $about = Cache::get("about:".$rr['updated'].":".$rr['nurl']);
+ $about = DI::cache()->get("about:" . $contact['updated'] . ":" . $contact['nurl']);
if (is_null($about)) {
- $about = bbcode($rr['about'], false, false);
- Cache::set("about:".$rr['updated'].":".$rr['nurl'],$about);
+ $about = BBCode::convert($contact['about'], false);
+ DI::cache()->set("about:" . $contact['updated'] . ":" . $contact['nurl'], $about);
}
// Non connected persons can only see the keywords of a Diaspora account
- if ($rr['network'] == NETWORK_DIASPORA) {
- $rr['location'] = "";
+ if ($contact['network'] == Protocol::DIASPORA) {
+ $contact['location'] = "";
$about = "";
- $rr['gender'] = "";
}
- $entry = array();
+ $entry = [];
if ($fields_ret['id']) {
- $entry['id'] = (int)$rr['id'];
+ $entry['id'] = (int)$contact['id'];
}
if ($fields_ret['displayName']) {
- $entry['displayName'] = $rr['name'];
+ $entry['displayName'] = $contact['name'];
}
if ($fields_ret['aboutMe']) {
$entry['aboutMe'] = $about;
}
if ($fields_ret['currentLocation']) {
- $entry['currentLocation'] = $rr['location'];
- }
- if ($fields_ret['gender']) {
- $entry['gender'] = $rr['gender'];
+ $entry['currentLocation'] = $contact['location'];
}
if ($fields_ret['generation']) {
- $entry['generation'] = (int)$rr['generation'];
+ $entry['generation'] = (int)$contact['generation'];
}
if ($fields_ret['urls']) {
- $entry['urls'] = array(array('value' => $rr['url'], 'type' => 'profile'));
- if ($rr['addr'] && ($rr['network'] !== NETWORK_MAIL)) {
- $entry['urls'][] = array('value' => 'acct:' . $rr['addr'], 'type' => 'webfinger');
+ $entry['urls'] = [['value' => $contact['url'], 'type' => 'profile']];
+ if ($contact['addr'] && ($contact['network'] !== Protocol::MAIL)) {
+ $entry['urls'][] = ['value' => 'acct:' . $contact['addr'], 'type' => 'webfinger'];
}
}
if ($fields_ret['preferredUsername']) {
- $entry['preferredUsername'] = $rr['nick'];
+ $entry['preferredUsername'] = $contact['nick'];
}
if ($fields_ret['updated']) {
- if (!$global) {
- $entry['updated'] = $rr['success_update'];
+ if (! $global) {
+ $entry['updated'] = $contact['success_update'];
- if ($rr['name-date'] > $entry['updated']) {
- $entry['updated'] = $rr['name-date'];
+ if ($contact['name-date'] > $entry['updated']) {
+ $entry['updated'] = $contact['name-date'];
}
- if ($rr['uri-date'] > $entry['updated']) {
- $entry['updated'] = $rr['uri-date'];
+ if ($contact['uri-date'] > $entry['updated']) {
+ $entry['updated'] = $contact['uri-date'];
}
- if ($rr['avatar-date'] > $entry['updated']) {
- $entry['updated'] = $rr['avatar-date'];
+ if ($contact['avatar-date'] > $entry['updated']) {
+ $entry['updated'] = $contact['avatar-date'];
}
} else {
- $entry['updated'] = $rr['updated'];
+ $entry['updated'] = $contact['updated'];
}
-
$entry['updated'] = date("c", strtotime($entry['updated']));
}
if ($fields_ret['photos']) {
- $entry['photos'] = array(array('value' => $rr['photo'], 'type' => 'profile'));
+ $entry['photos'] = [['value' => $contact['photo'], 'type' => 'profile']];
}
if ($fields_ret['network']) {
- $entry['network'] = $rr['network'];
- if ($entry['network'] == NETWORK_STATUSNET) {
- $entry['network'] = NETWORK_OSTATUS;
+ $entry['network'] = $contact['network'];
+ if ($entry['network'] == Protocol::STATUSNET) {
+ $entry['network'] = Protocol::OSTATUS;
}
- if (($entry['network'] == "") AND ($rr['self'])) {
- $entry['network'] = NETWORK_DFRN;
+ if (($entry['network'] == "") && ($contact['self'])) {
+ $entry['network'] = Protocol::DFRN;
}
}
if ($fields_ret['tags']) {
- $tags = str_replace(","," ",$rr['keywords']);
+ $tags = str_replace(",", " ", $contact['keywords']);
$tags = explode(" ", $tags);
- $cleaned = array();
+ $cleaned = [];
foreach ($tags as $tag) {
$tag = trim(strtolower($tag));
if ($tag != "") {
}
}
- $entry['tags'] = array($cleaned);
+ $entry['tags'] = [$cleaned];
}
if ($fields_ret['address']) {
- $entry['address'] = array();
+ $entry['address'] = [];
// Deactivated. It just reveals too much data. (Although its from the default profile)
- //if (isset($rr['paddress']))
- // $entry['address']['streetAddress'] = $rr['paddress'];
+ //if (isset($rr['address']))
+ // $entry['address']['streetAddress'] = $rr['address'];
- if (isset($rr['plocation'])) {
- $entry['address']['locality'] = $rr['plocation'];
+ if (isset($contact['locality'])) {
+ $entry['address']['locality'] = $contact['locality'];
}
- if (isset($rr['pregion'])) {
- $entry['address']['region'] = $rr['pregion'];
+ if (isset($contact['region'])) {
+ $entry['address']['region'] = $contact['region'];
}
// See above
- //if (isset($rr['ppostalcode']))
- // $entry['address']['postalCode'] = $rr['ppostalcode'];
+ //if (isset($rr['postal-code']))
+ // $entry['address']['postalCode'] = $rr['postal-code'];
- if (isset($rr['pcountry'])) {
- $entry['address']['country'] = $rr['pcountry'];
+ if (isset($contact['country'])) {
+ $entry['address']['country'] = $contact['country'];
}
}
if ($fields_ret['contactType']) {
- $entry['contactType'] = intval($rr['contact-type']);
+ $entry['contactType'] = intval($contact['contact-type']);
}
-
$ret['entry'][] = $entry;
}
} else {
- $ret['entry'][] = array();
+ $ret['entry'][] = [];
}
} else {
- http_status_exit(500);
+ throw new \Friendica\Network\HTTPException\InternalServerErrorException();
}
- logger("End of poco", LOGGER_DEBUG);
+ Logger::log("End of poco", Logger::DEBUG);
if ($format === 'xml') {
header('Content-type: text/xml');
- echo replace_macros(get_markup_template('poco_xml.tpl'),array_xmlify(array('$response' => $ret)));
- killme();
+ echo Renderer::replaceMacros(Renderer::getMarkupTemplate('poco_xml.tpl'), XML::arrayEscape(['$response' => $ret]));
+ exit();
}
if ($format === 'json') {
header('Content-type: application/json');
echo json_encode($ret);
- killme();
+ exit();
} else {
- http_status_exit(500);
+ throw new \Friendica\Network\HTTPException\InternalServerErrorException();
}
-
}