]> git.mxchange.org Git - friendica.git/blobdiff - mod/profiles.php
Merge pull request #317 from CatoTH/master
[friendica.git] / mod / profiles.php
index 99812ed8806f859382c84d33ddc5f4b10797fb15..ca3890eb9466e39aa7be7354e450fd0e38662b76 100644 (file)
@@ -21,6 +21,9 @@ function profiles_post(&$a) {
                        notice( t('Profile not found.') . EOL);
                        return;
                }
+               
+               check_form_security_token_redirectOnErr('/profiles', 'profile_edit');
+               
                $is_default = (($orig[0]['is-default']) ? 1 : 0);
 
                $profile_name = notags(trim($_POST['profile_name']));
@@ -48,6 +51,7 @@ function profiles_post(&$a) {
                if($orig[0]['name'] != $name)
                        $namechanged = true;
 
+
                $pdesc = notags(trim($_POST['pdesc']));
                $gender = notags(trim($_POST['gender']));
                $address = notags(trim($_POST['address']));
@@ -58,15 +62,16 @@ function profiles_post(&$a) {
                $pub_keywords = notags(trim($_POST['pub_keywords']));
                $prv_keywords = notags(trim($_POST['prv_keywords']));
                $marital = notags(trim($_POST['marital']));
-               if($marital != $orig[0]['marital'])
-                       $maritalchanged = true;
 
                $with = ((x($_POST,'with')) ? notags(trim($_POST['with'])) : '');
 
                // linkify the relationship target if applicable
 
+               $withchanged = false;
+
                if(strlen($with)) {
                        if($with != strip_tags($orig[0]['with'])) {
+                               $withchanged = true;
                                $prf = '';
                                $lookup = $with;
                                if(strpos($lookup,'@') === 0)
@@ -118,19 +123,77 @@ function profiles_post(&$a) {
                $politic = notags(trim($_POST['politic']));
                $religion = notags(trim($_POST['religion']));
 
-               $about = escape_tags(trim($_POST['about']));
-               $interest = escape_tags(trim($_POST['interest']));
-               $contact = escape_tags(trim($_POST['contact']));
-               $music = escape_tags(trim($_POST['music']));
-               $book = escape_tags(trim($_POST['book']));
-               $tv = escape_tags(trim($_POST['tv']));
-               $film = escape_tags(trim($_POST['film']));
-               $romance = escape_tags(trim($_POST['romance']));
-               $work = escape_tags(trim($_POST['work']));
-               $education = escape_tags(trim($_POST['education']));
+               $about = fix_mce_lf(escape_tags(trim($_POST['about'])));
+               $interest = fix_mce_lf(escape_tags(trim($_POST['interest'])));
+               $contact = fix_mce_lf(escape_tags(trim($_POST['contact'])));
+               $music = fix_mce_lf(escape_tags(trim($_POST['music'])));
+               $book = fix_mce_lf(escape_tags(trim($_POST['book'])));
+               $tv = fix_mce_lf(escape_tags(trim($_POST['tv'])));
+               $film = fix_mce_lf(escape_tags(trim($_POST['film'])));
+               $romance = fix_mce_lf(escape_tags(trim($_POST['romance'])));
+               $work = fix_mce_lf(escape_tags(trim($_POST['work'])));
+               $education = fix_mce_lf(escape_tags(trim($_POST['education'])));
+
                $hide_friends = (($_POST['hide-friends'] == 1) ? 1: 0);
 
 
+
+               $changes = array();
+               $value = '';
+               if($is_default) {
+                       if($marital != $orig[0]['marital']) {
+                               $changes[] = '[color=#ff0000]♥[/color] ' . t('Marital Status');
+                               $value = $marital;
+                       }
+                       if($withchanged) {
+                               $changes[] = '[color=#ff0000]♥[/color] ' . t('Romantic Partner');
+                               $value = strip_tags($with);
+                       }                                                       
+                       if($work != $orig[0]['work']) {
+                               $changes[] = t('Work/Employment');
+                       }
+                       if($religion != $orig[0]['religion']) {
+                               $changes[] = t('Religion');
+                               $value = $religion;
+                       }
+                       if($politic != $orig[0]['politic']) {
+                               $changes[] = t('Political Views');
+                               $value = $politic;
+                       }
+                       if($gender != $orig[0]['gender']) {
+                               $changes[] = t('Gender');
+                               $value = $gender;
+                       }
+                       if($sexual != $orig[0]['sexual']) {
+                               $changes[] = t('Sexual Preference');
+                               $value = $sexual;
+                       }
+                       if($homepage != $orig[0]['homepage']) {
+                               $changes[] = t('Homepage');
+                               $value = $homepage;
+                       }
+                       if($interest != $orig[0]['interest']) {
+                               $changes[] = t('Interests');
+                               $value = $interest;
+                       }
+                       if($address != $orig[0]['address']) {
+                               $changes[] = t('Address');
+                               // New address not sent in notifications, potential privacy issues
+                               // in case this leaks to unintended recipients. Yes, it's in the public
+                               // profile but that doesn't mean we have to broadcast it to everybody.
+                       }
+                       if($locality != $orig[0]['locality'] || $region != $orig[0]['region']
+                               || $country_name != $orig[0]['country-name']) {
+                               $changes[] = t('Location');
+                               $comma1 = ((($locality) && ($region || $country_name)) ? ', ' : ' ');
+                               $comma2 = (($region && $country_name) ? ', ' : '');
+                               $value = $locality . $comma1 . $region . $comma2 . $country_name;
+                       }
+
+                       profile_activity($changes,$value);
+
+               }                       
+                       
                $r = q("UPDATE `profile` 
                        SET `profile-name` = '%s',
                        `name` = '%s',
@@ -192,11 +255,11 @@ function profiles_post(&$a) {
                        dbesc($education),
                        intval($hide_friends),
                        intval($a->argv[1]),
-                       intval($_SESSION['uid'])
+                       intval(local_user())
                );
 
                if($r)
-                       notice( t('Profile updated.') . EOL);
+                       info( t('Profile updated.') . EOL);
 
 
                if($namechanged && $is_default) {
@@ -211,17 +274,101 @@ function profiles_post(&$a) {
                        $url = $_SESSION['my_url'];
                        if($url && strlen(get_config('system','directory_submit_url')))
                                proc_run('php',"include/directory.php","$url");
+
+                       require_once('include/profile_update.php');
+                       profile_change();
                }
        }
 }
 
 
+function profile_activity($changed, $value) {
+       $a = get_app();
+
+       if(! local_user() || ! is_array($changed) || ! count($changed))
+               return;
+
+       if($a->user['hidewall'] || get_config('system','block_public'))
+               return;
+
+       if(! get_pconfig(local_user(),'system','post_profilechange'))
+               return;
+
+       require_once('include/items.php');
+
+       $self = q("SELECT * FROM `contact` WHERE `self` = 1 AND `uid` = %d LIMIT 1",
+               intval(local_user())
+       );
+
+       if(! count($self))
+               return;
+
+       $arr = array();
+       $arr['uri'] = $arr['parent-uri'] = item_new_uri($a->get_hostname(), local_user()); 
+       $arr['uid'] = local_user();
+       $arr['contact-id'] = $self[0]['id'];
+       $arr['wall'] = 1;
+       $arr['type'] = 'wall';
+       $arr['gravity'] = 0;
+       $arr['origin'] = 1;
+       $arr['author-name'] = $arr['owner-name'] = $self[0]['name'];
+       $arr['author-link'] = $arr['owner-link'] = $self[0]['url'];
+       $arr['author-avatar'] = $arr['owner-avatar'] = $self[0]['thumb'];
+       $arr['verb'] = ACTIVITY_UPDATE;
+       $arr['object-type'] = ACTIVITY_OBJ_PROFILE;
+                               
+       $A = '[url=' . $self[0]['url'] . ']' . $self[0]['name'] . '[/url]';
+
+
+       $changes = '';
+       $t = count($changed);
+       $z = 0;
+       foreach($changed as $ch) {
+               if(strlen($changes)) {
+                       if ($z == ($t - 1))
+                               $changes .= t(' and ');
+                       else
+                               $changes .= ', ';
+               }
+               $z ++;
+               $changes .= $ch;
+       }
+
+       $prof = '[url=' . $self[0]['url'] . '?tab=profile' . ']' . t('public profile') . '[/url]';      
+
+       if($t == 1 && strlen($value)) {
+               $message = sprintf( t('%1$s changed %2$s to “%3$s”'), $A, $changes, $value);
+               $message .= "\n\n" . sprintf( t(' - Visit %1$s\'s %2$s'), $A, $prof);
+       }
+       else
+               $message =      sprintf( t('%1$s has an updated %2$s, changing %3$s.'), $A, $prof, $changes);
+
+       $arr['body'] = $message;  
+
+       $arr['object'] = '<object><type>' . ACTIVITY_OBJ_PROFILE . '</type><title>' . $self[0]['name'] . '</title>'
+       . '<id>' . $self[0]['url'] . '/' . $self[0]['name'] . '</id>';
+       $arr['object'] .= '<link>' . xmlify('<link rel="alternate" type="text/html" href="' . $self[0]['url'] . '?tab=profile' . '" />' . "\n");
+       $arr['object'] .= xmlify('<link rel="photo" type="image/jpeg" href="' . $self[0]['thumb'] . '" />' . "\n");
+       $arr['object'] .= '</link></object>' . "\n";
+       $arr['last-child'] = 1;
+
+       $arr['allow_cid'] = $a->user['allow_cid'];
+       $arr['allow_gid'] = $a->user['allow_gid'];
+       $arr['deny_cid']  = $a->user['deny_cid'];
+       $arr['deny_gid']  = $a->user['deny_gid'];
+
+       $i = item_store($arr);
+       if($i)
+               proc_run('php',"include/notifier.php","activity","$i");
+
+}
 
 
 function profiles_content(&$a) {
 
        $o = '';
-       $o .= '<script> $(document).ready(function() { $(\'#nav-profiles-link\').addClass(\'nav-selected\'); });</script>';
+       nav_set_selected('profiles');
 
        if(! local_user()) {
                notice( t('Permission denied.') . EOL);
@@ -235,9 +382,11 @@ function profiles_content(&$a) {
                );
                if(! count($r)) {
                        notice( t('Profile not found.') . EOL);
-                       goaway($a->get_baseurl() . '/profiles');
+                       goaway($a->get_baseurl(true) . '/profiles');
                        return; // NOTREACHED
                }
+               
+               check_form_security_token_redirectOnErr('/profiles', 'profile_drop', 't');
 
                // move every contact using this profile as their default to the user default
 
@@ -251,9 +400,9 @@ function profiles_content(&$a) {
                        intval(local_user())
                );
                if($r)
-                       notice( t('Profile deleted.') . EOL);
+                       info( t('Profile deleted.') . EOL);
 
-               goaway($a->get_baseurl() . '/profiles');
+               goaway($a->get_baseurl(true) . '/profiles');
                return; // NOTREACHED
        }
 
@@ -262,6 +411,8 @@ function profiles_content(&$a) {
 
 
        if(($a->argc > 1) && ($a->argv[1] === 'new')) {
+               
+               check_form_security_token_redirectOnErr('/profiles', 'profile_new', 't');
 
                $r0 = q("SELECT `id` FROM `profile` WHERE `uid` = %d",
                        intval(local_user()));
@@ -286,13 +437,16 @@ function profiles_content(&$a) {
                        dbesc($name)
                );
 
-               notice( t('New profile created.') . EOL);
+               info( t('New profile created.') . EOL);
                if(count($r3) == 1)
-                       goaway($a->get_baseurl() . '/profiles/' . $r3[0]['id']);
-               goaway($a->get_baseurl() . '/profiles');
-       }                
+                       goaway($a->get_baseurl(true) . '/profiles/' . $r3[0]['id']);
+               
+               goaway($a->get_baseurl(true) . '/profiles');
+       } 
 
        if(($a->argc > 2) && ($a->argv[1] === 'clone')) {
+               
+               check_form_security_token_redirectOnErr('/profiles', 'profile_clone', 't');
 
                $r0 = q("SELECT `id` FROM `profile` WHERE `uid` = %d",
                        intval(local_user()));
@@ -325,12 +479,14 @@ function profiles_content(&$a) {
                        intval(local_user()),
                        dbesc($name)
                );
-               notice( t('New profile created.') . EOL);
+               info( t('New profile created.') . EOL);
                if(count($r3) == 1)
-                       goaway($a->get_baseurl() . '/profiles/' . $r3[0]['id']);
-       goaway($a->get_baseurl() . '/profiles');
-       return; // NOTREACHED
-       }                
+                       goaway($a->get_baseurl(true) . '/profiles/' . $r3[0]['id']);
+               
+               goaway($a->get_baseurl(true) . '/profiles');
+               
+               return; // NOTREACHED
+       }
 
 
        if(($a->argc > 1) && (intval($a->argv[1]))) {
@@ -347,27 +503,82 @@ function profiles_content(&$a) {
 
                require_once('include/profile_selectors.php');
 
-               $tpl = load_view_file('view/profed_head.tpl');
 
-               $opt_tpl = load_view_file("view/profile-hide-friends.tpl");
+               $editselect = 'textareas';
+               if(intval(get_pconfig(local_user(),'system','plaintext')))
+                       $editselect = 'none';
+
+               $a->page['htmlhead'] .= replace_macros(get_markup_template('profed_head.tpl'), array(
+                       '$baseurl' => $a->get_baseurl(true),
+                       '$editselect' => $editselect,
+               ));
+
+
+               $opt_tpl = get_markup_template("profile-hide-friends.tpl");
                $hide_friends = replace_macros($opt_tpl,array(
-                       '$desc' => t('Hide my contact/friend list from viewers of this profile?'),
+                       '$desc' => t('Hide your contact/friend list from viewers of this profile?'),
                        '$yes_str' => t('Yes'),
                        '$no_str' => t('No'),
                        '$yes_selected' => (($r[0]['hide-friends']) ? " checked=\"checked\" " : ""),
                        '$no_selected' => (($r[0]['hide-friends'] == 0) ? " checked=\"checked\" " : "")
                ));
 
+               $a->page['htmlhead'] .= "<script type=\"text/javascript\" src=\"js/country.js\" ></script>";
+
 
-               $a->page['htmlhead'] .= replace_macros($tpl, array('$baseurl' => $a->get_baseurl()));
-               $a->page['htmlhead'] .= "<script type=\"text/javascript\" src=\"include/country.js\" ></script>";
 
 
+
+               $f = get_config('system','birthday_input_format');
+               if(! $f)
+                       $f = 'ymd';
+
                $is_default = (($r[0]['is-default']) ? 1 : 0);
-               $tpl = load_view_file("view/profile_edit.tpl");
+               $tpl = get_markup_template("profile_edit.tpl");
                $o .= replace_macros($tpl,array(
+                       '$form_security_token' => get_form_security_token("profile_edit"),
+                       '$profile_clone_link' => 'profiles/clone/' . $r[0]['id'] . '?t=' . get_form_security_token("profile_clone"),
+                       '$profile_drop_link' => 'profiles/drop/' . $r[0]['id'] . '?t=' . get_form_security_token("profile_drop"),
+                       '$banner' => t('Edit Profile Details'),
+                       '$submit' => t('Submit'),
+                       '$viewprof' => t('View this profile'),
+                       '$cr_prof' => t('Create a new profile using these settings'),
+                       '$cl_prof' => t('Clone this profile'),
+                       '$del_prof' => t('Delete this profile'),
+                       '$lbl_profname' => t('Profile Name:'),
+                       '$lbl_fullname' => t('Your Full Name:'),
+                       '$lbl_title' => t('Title/Description:'),
+                       '$lbl_gender' => t('Your Gender:'),
+                       '$lbl_bd' => sprintf( t("Birthday \x28%s\x29:"),datesel_format($f)),
+                       '$lbl_address' => t('Street Address:'),
+                       '$lbl_city' => t('Locality/City:'),
+                       '$lbl_zip' => t('Postal/Zip Code:'),
+                       '$lbl_country' => t('Country:'),
+                       '$lbl_region' => t('Region/State:'),
+                       '$lbl_marital' => t('<span class="heart">&hearts;</span> Marital Status:'),
+                       '$lbl_with' => t("Who: \x28if applicable\x29"),
+                       '$lbl_ex1' => t('Examples: cathy123, Cathy Williams, cathy@example.com'),
+                       '$lbl_sexual' => t('Sexual Preference:'),
+                       '$lbl_homepage' => t('Homepage URL:'),
+                       '$lbl_politic' => t('Political Views:'),
+                       '$lbl_religion' => t('Religious Views:'),
+                       '$lbl_pubkey' => t('Public Keywords:'),
+                       '$lbl_prvkey' => t('Private Keywords:'),
+                       '$lbl_ex2' => t('Example: fishing photography software'),
+                       '$lbl_pubdsc' => t("\x28Used for suggesting potential friends, can be seen by others\x29"),
+                       '$lbl_prvdsc' => t("\x28Used for searching profiles, never shown to others\x29"),
+                       '$lbl_about' => t('Tell us about yourself...'),
+                       '$lbl_hobbies' => t('Hobbies/Interests'),
+                       '$lbl_social' => t('Contact information and Social Networks'),
+                       '$lbl_music' => t('Musical interests'),
+                       '$lbl_book' => t('Books, literature'),
+                       '$lbl_tv' => t('Television'),
+                       '$lbl_film' => t('Film/dance/culture/entertainment'),
+                       '$lbl_love' => t('Love/romance'),
+                       '$lbl_work' => t('Work/employment'),
+                       '$lbl_school' => t('School/education'),
                        '$disabled' => (($is_default) ? 'onclick="return false;" style="color: #BBBBFF;"' : ''),
-                       '$baseurl' => $a->get_baseurl(),
+                       '$baseurl' => $a->get_baseurl(true),
                        '$profile_id' => $r[0]['id'],
                        '$profile_name' => $r[0]['profile-name'],
                        '$default' => (($is_default) ? '<p id="profile-edit-default-desc">' . t('This is your <strong>public</strong> profile.<br />It <strong>may</strong> be visible to anybody using the internet.') . '</p>' : ""),
@@ -413,28 +624,29 @@ function profiles_content(&$a) {
                        local_user());
                if(count($r)) {
 
-                       $tpl_header = load_view_file('view/profile_listing_header.tpl');
+                       $tpl_header = get_markup_template('profile_listing_header.tpl');
                        $o .= replace_macros($tpl_header,array(
-                               '$header' => t('Profiles'),
+                               '$header' => t('Edit/Manage Profiles'),
                                '$chg_photo' => t('Change profile photo'),
-                               '$cr_new' => t('Create New Profile')
+                               '$cr_new' => t('Create New Profile'),
+                               '$cr_new_link' => 'profiles/new?t=' . get_form_security_token("profile_new")
                        ));
 
 
-                       $tpl_default = load_view_file('view/profile_entry_default.tpl');
-                       $tpl = load_view_file('view/profile_entry.tpl');
+                       $tpl = get_markup_template('profile_entry.tpl');
 
                        foreach($r as $rr) {
-                               $template = (($rr['is-default']) ? $tpl_default : $tpl);
-                               $o .= replace_macros($template, array(
+                               $o .= replace_macros($tpl, array(
                                        '$photo' => $rr['thumb'],
                                        '$id' => $rr['id'],
                                        '$alt' => t('Profile Image'),
-                                       '$profile_name' => $rr['profile-name']
+                                       '$profile_name' => $rr['profile-name'],
+                                       '$visible' => (($rr['is-default']) ? '<strong>' . t('visible to everybody') . '</strong>' 
+                                               : '<a href="' . $a->get_baseurl(true) . '/profperm/' . $rr['id'] . '" />' . t('Edit visibility') . '</a>')
                                ));
                        }
                }
                return $o;
        }
 
-}
\ No newline at end of file
+}