]> git.mxchange.org Git - friendica.git/blobdiff - mod/videos.php
Merge pull request #8253 from tobiasd/20200208-msg
[friendica.git] / mod / videos.php
index c4e5d0aaa410882caf4eb97430cf310c3fe60948..36ddef68147bcc1e30dbad6ff6053cd403077996 100644 (file)
 <?php
+/**
+ * @file mod/videos.php
+ */
 
 use Friendica\App;
-use Friendica\Core\Config;
-use Friendica\Core\System;
-use Friendica\Core\Worker;
-use Friendica\Database\DBM;
+use Friendica\Content\Nav;
+use Friendica\Content\Pager;
+use Friendica\Core\Renderer;
+use Friendica\Core\Session;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\Attach;
 use Friendica\Model\Contact;
-
-require_once 'include/items.php';
-require_once 'include/acl_selectors.php';
-require_once 'include/bbcode.php';
-require_once 'include/security.php';
-require_once 'include/redir.php';
-
-function videos_init(App $a) {
-
-       if($a->argc > 1)
-               auto_redir($a, $a->argv[1]);
-
-       if((Config::get('system','block_public')) && (! local_user()) && (! remote_user())) {
+use Friendica\Model\Item;
+use Friendica\Model\Profile;
+use Friendica\Model\User;
+use Friendica\Module\BaseProfile;
+use Friendica\Util\Security;
+
+function videos_init(App $a)
+{
+       if (DI::config()->get('system', 'block_public') && !Session::isAuthenticated()) {
                return;
        }
 
-       nav_set_selected('home');
+       Nav::setSelected('home');
 
-       $o = '';
-
-       if($a->argc > 1) {
+       if ($a->argc > 1) {
                $nick = $a->argv[1];
                $user = q("SELECT * FROM `user` WHERE `nickname` = '%s' AND `blocked` = 0 LIMIT 1",
-                       dbesc($nick)
+                       DBA::escape($nick)
                );
 
-               if(! count($user))
+               if (!DBA::isResult($user)) {
                        return;
+               }
 
                $a->data['user'] = $user[0];
                $a->profile_uid = $user[0]['uid'];
 
-               $profile = get_profiledata_by_nick($nick, $a->profile_uid);
+               $profile = Profile::getByNickname($nick, $a->profile_uid);
 
                $account_type = Contact::getAccountType($profile);
 
-               $tpl = get_markup_template("vcard-widget.tpl");
+               $tpl = Renderer::getMarkupTemplate("widget/vcard.tpl");
 
-               $vcard_widget = replace_macros($tpl, array(
+               $vcard_widget = Renderer::replaceMacros($tpl, [
                        '$name' => $profile['name'],
                        '$photo' => $profile['photo'],
-                       '$addr' => defaults($profile, 'addr', ''),
+                       '$addr' => $profile['addr'] ?? '',
                        '$account_type' => $account_type,
-                       '$pdesc' => defaults($profile, 'pdesc', ''),
-               ));
-
-
-               /*$sql_extra = permissions_sql($a->data['user']['uid']);
-
-               $albums = q("SELECT distinct(`album`) AS `album` FROM `photo` WHERE `uid` = %d $sql_extra order by created desc",
-                       intval($a->data['user']['uid'])
-               );
-
-               if(count($albums)) {
-                       $a->data['albums'] = $albums;
-
-                       $albums_visible = ((intval($a->data['user']['hidewall']) && (! local_user()) && (! remote_user())) ? false : true);
-
-                       if($albums_visible) {
-                               $o .= '<div id="sidebar-photos-albums" class="widget">';
-                               $o .= '<h3>' . '<a href="' . System::baseUrl() . '/photos/' . $a->data['user']['nickname'] . '">' . t('Photo Albums') . '</a></h3>';
-
-                               $o .= '<ul>';
-                               foreach($albums as $album) {
+                       '$pdesc' => $profile['pdesc'] ?? '',
+               ]);
 
-                                       // don't show contact photos. We once translated this name, but then you could still access it under
-                                       // a different language setting. Now we store the name in English and check in English (and translated for legacy albums).
-
-                                       if((! strlen($album['album'])) || ($album['album'] === 'Contact Photos') || ($album['album'] === t('Contact Photos')))
-                                               continue;
-                                       $o .= '<li>' . '<a href="photos/' . $a->argv[1] . '/album/' . bin2hex($album['album']) . '" >' . $album['album'] . '</a></li>';
-                               }
-                               $o .= '</ul>';
-                       }
-                       if(local_user() && $a->data['user']['uid'] == local_user()) {
-                               $o .= '<div id="photo-albums-upload-link"><a href="' . System::baseUrl() . '/photos/' . $a->data['user']['nickname'] . '/upload" >' .t('Upload New Photos') . '</a></div>';
-                       }
-
-                       $o .= '</div>';
-               }*/
-
-               if(! x($a->page,'aside'))
-                       $a->page['aside'] = '';
-               $a->page['aside'] .= $vcard_widget;
-
-
-               $tpl = get_markup_template("videos_head.tpl");
-               $a->page['htmlhead'] .= replace_macros($tpl,array(
-                       '$baseurl' => System::baseUrl(),
-               ));
+               // If not there, create 'aside' empty
+               if (!isset(DI::page()['aside'])) {
+                       DI::page()['aside'] = '';
+               }
 
-               $tpl = get_markup_template("videos_end.tpl");
-               $a->page['end'] .= replace_macros($tpl,array(
-                       '$baseurl' => System::baseUrl(),
-               ));
+               DI::page()['aside'] .= $vcard_widget;
 
+               $tpl = Renderer::getMarkupTemplate("videos_head.tpl");
+               DI::page()['htmlhead'] .= Renderer::replaceMacros($tpl);
        }
 
        return;
 }
 
-
-
-function videos_post(App $a) {
-
+function videos_post(App $a)
+{
        $owner_uid = $a->data['user']['uid'];
 
        if (local_user() != $owner_uid) {
-               goaway(System::baseUrl() . '/videos/' . $a->data['user']['nickname']);
+               DI::baseUrl()->redirect('videos/' . $a->data['user']['nickname']);
        }
 
-       if (($a->argc == 2) && x($_POST,'delete') && x($_POST, 'id')) {
-
-               // Check if we should do HTML-based delete confirmation
-               if (!x($_REQUEST,'confirm')) {
-                       if (x($_REQUEST,'canceled')) {
-                               goaway(System::baseUrl() . '/videos/' . $a->data['user']['nickname']);
-                       }
-
-                       $drop_url = $a->query_string;
-                       $a->page['content'] = replace_macros(get_markup_template('confirm.tpl'), array(
-                               '$method' => 'post',
-                               '$message' => t('Do you really want to delete this video?'),
-                               '$extra_inputs' => array(
-                                       array('name'=>'id', 'value'=> $_POST['id']),
-                                       array('name'=>'delete', 'value'=>'x')
-                               ),
-                               '$confirm' => t('Delete Video'),
-                               '$confirm_url' => $drop_url,
-                               '$confirm_name' => 'confirm', // Needed so that confirmation will bring us back into this if statement
-                               '$cancel' => t('Cancel'),
-
-                       ));
-                       $a->error = 1; // Set $a->error so the other module functions don't execute
-                       return;
-               }
-
+       if (($a->argc == 2) && !empty($_POST['delete']) && !empty($_POST['id'])) {
                $video_id = $_POST['id'];
 
-               $r = q("SELECT `id`  FROM `attach` WHERE `uid` = %d AND `id` = '%s' LIMIT 1",
-                       intval(local_user()),
-                       dbesc($video_id)
-               );
+               if (Attach::exists(['id' => $video_id, 'uid' => local_user()])) {
+                       // delete the attachment
+                       Attach::delete(['id' => $video_id, 'uid' => local_user()]);
 
-               if (DBM::is_result($r)) {
-                       q("DELETE FROM `attach` WHERE `uid` = %d AND `id` = '%s'",
-                               intval(local_user()),
-                               dbesc($video_id)
-                       );
-                       $i = q("SELECT * FROM `item` WHERE `attach` like '%%attach/%s%%' AND `uid` = %d LIMIT 1",
-                               dbesc($video_id),
-                               intval(local_user())
-                       );
-                       //echo "<pre>"; var_dump($i); killme();
-                       if (DBM::is_result($i)) {
-                               q("UPDATE `item` SET `deleted` = 1, `edited` = '%s', `changed` = '%s' WHERE `parent-uri` = '%s' AND `uid` = %d",
-                                       dbesc(datetime_convert()),
-                                       dbesc(datetime_convert()),
-                                       dbesc($i[0]['uri']),
-                                       intval(local_user())
-                               );
-                               create_tags_from_itemuri($i[0]['uri'], local_user());
-                               delete_thread_uri($i[0]['uri'], local_user());
-
-                               $url = System::baseUrl();
-                               $drop_id = intval($i[0]['id']);
-
-                               if ($i[0]['visible']) {
-                                       Worker::add(PRIORITY_HIGH, "Notifier", "drop", $drop_id);
-                               }
-                       }
+                       // delete items where the attach is used
+                       Item::deleteForUser(['`attach` LIKE ? AND `uid` = ?',
+                               '%attach/' . $video_id . '%',
+                               local_user()
+                       ], local_user());
                }
 
-               goaway(System::baseUrl() . '/videos/' . $a->data['user']['nickname']);
+               DI::baseUrl()->redirect('videos/' . $a->data['user']['nickname']);
                return; // NOTREACHED
        }
 
-       goaway(System::baseUrl() . '/videos/' . $a->data['user']['nickname']);
-
+       DI::baseUrl()->redirect('videos/' . $a->data['user']['nickname']);
 }
 
-
-
-function videos_content(App $a) {
-
+function videos_content(App $a)
+{
        // URLs (most aren't currently implemented):
        // videos/name
        // videos/name/upload
@@ -201,47 +108,34 @@ function videos_content(App $a) {
        // videos/name/video/xxxxx/edit
 
 
-       if((Config::get('system','block_public')) && (! local_user()) && (! remote_user())) {
-               notice( t('Public access denied.') . EOL);
+       if (DI::config()->get('system', 'block_public') && !Session::isAuthenticated()) {
+               notice(DI::l10n()->t('Public access denied.') . EOL);
                return;
        }
 
-
-       require_once('include/bbcode.php');
-       require_once('include/security.php');
-       require_once('include/conversation.php');
-
-       if(! x($a->data,'user')) {
-               notice( t('No videos selected') . EOL );
+       if (empty($a->data['user'])) {
+               notice(DI::l10n()->t('No videos selected') . EOL );
                return;
        }
 
        //$phototypes = Photo::supportedTypes();
 
-       $_SESSION['video_return'] = $a->cmd;
+       $_SESSION['video_return'] = DI::args()->getCommand();
 
        //
        // Parse arguments
        //
-
-       if($a->argc > 3) {
+       if ($a->argc > 3) {
                $datatype = $a->argv[2];
-               $datum = $a->argv[3];
-       }
-       elseif(($a->argc > 2) && ($a->argv[2] === 'upload'))
+       } elseif(($a->argc > 2) && ($a->argv[2] === 'upload')) {
                $datatype = 'upload';
-       else
+       } else {
                $datatype = 'summary';
-
-       if($a->argc > 4)
-               $cmd = $a->argv[4];
-       else
-               $cmd = 'view';
+       }
 
        //
        // Setup permissions structures
        //
-
        $can_post       = false;
        $visitor        = 0;
        $contact        = null;
@@ -250,103 +144,53 @@ function videos_content(App $a) {
 
        $owner_uid = $a->data['user']['uid'];
 
-       $community_page = (($a->data['user']['page-flags'] == PAGE_COMMUNITY) ? true : false);
+       $community_page = (($a->data['user']['page-flags'] == User::PAGE_FLAGS_COMMUNITY) ? true : false);
 
-       if((local_user()) && (local_user() == $owner_uid))
+       if ((local_user()) && (local_user() == $owner_uid)) {
                $can_post = true;
-       else {
-               if($community_page && remote_user()) {
-                       if(is_array($_SESSION['remote'])) {
-                               foreach($_SESSION['remote'] as $v) {
-                                       if($v['uid'] == $owner_uid) {
-                                               $contact_id = $v['cid'];
-                                               break;
-                                       }
-                               }
-                       }
-                       if($contact_id) {
-
-                               $r = q("SELECT `uid` FROM `contact` WHERE `blocked` = 0 AND `pending` = 0 AND `id` = %d AND `uid` = %d LIMIT 1",
-                                       intval($contact_id),
-                                       intval($owner_uid)
-                               );
-                               if (DBM::is_result($r)) {
-                                       $can_post = true;
-                                       $contact = $r[0];
-                                       $remote_contact = true;
-                                       $visitor = $contact_id;
-                               }
-                       }
-               }
+       } elseif ($community_page && !empty(Session::getRemoteContactID($owner_uid))) {
+               $contact_id = Session::getRemoteContactID($owner_uid);
+               $can_post = true;
+               $remote_contact = true;
+               $visitor = $contact_id;
        }
 
-       $groups = [];
-
        // perhaps they're visiting - but not a community page, so they wouldn't have write access
-       if(remote_user() && (! $visitor)) {
-               $contact_id = 0;
-               if(is_array($_SESSION['remote'])) {
-                       foreach($_SESSION['remote'] as $v) {
-                               if($v['uid'] == $owner_uid) {
-                                       $contact_id = $v['cid'];
-                                       break;
-                               }
-                       }
-               }
-               if($contact_id) {
-                       $groups = init_groups_visitor($contact_id);
-                       $r = q("SELECT * FROM `contact` WHERE `blocked` = 0 AND `pending` = 0 AND `id` = %d AND `uid` = %d LIMIT 1",
-                               intval($contact_id),
-                               intval($owner_uid)
-                       );
-                       if (DBM::is_result($r)) {
-                               $contact = $r[0];
-                               $remote_contact = true;
-                       }
-               }
+       if (!empty(Session::getRemoteContactID($owner_uid)) && !$visitor) {
+               $contact_id = Session::getRemoteContactID($owner_uid);
+               $remote_contact = true;
        }
 
-       if(! $remote_contact) {
-               if(local_user()) {
-                       $contact_id = $_SESSION['cid'];
-                       $contact = $a->contact;
-               }
-       }
-
-       if($a->data['user']['hidewall'] && (local_user() != $owner_uid) && (! $remote_contact)) {
-               notice( t('Access to this item is restricted.') . EOL);
+       if ($a->data['user']['hidewall'] && (local_user() != $owner_uid) && !$remote_contact) {
+               notice(DI::l10n()->t('Access to this item is restricted.') . EOL);
                return;
        }
 
-       $sql_extra = permissions_sql($owner_uid, $remote_contact, $groups);
+       $sql_extra = Security::getPermissionsSQLByUserId($owner_uid);
 
        $o = "";
 
        // tabs
        $_is_owner = (local_user() && (local_user() == $owner_uid));
-       $o .= profile_tabs($a,$_is_owner, $a->data['user']['nickname']);
+       $o .= BaseProfile::getTabsHTML($a, 'videos', $_is_owner, $a->data['user']['nickname']);
 
        //
        // dispatch request
        //
-
-
-       if($datatype === 'upload') {
+       if ($datatype === 'upload') {
                return; // no uploading for now
 
                // DELETED -- look at mod/photos.php if you want to implement
        }
 
-       if($datatype === 'album') {
-
+       if ($datatype === 'album') {
                return; // no albums for now
 
                // DELETED -- look at mod/photos.php if you want to implement
        }
 
 
-       if($datatype === 'video') {
-
+       if ($datatype === 'video') {
                return; // no single video view for now
 
                // DELETED -- look at mod/photos.php if you want to implement
@@ -355,60 +199,62 @@ function videos_content(App $a) {
        // Default - show recent videos (no upload link for now)
        //$o = '';
 
+       $total = 0;
        $r = q("SELECT hash FROM `attach` WHERE `uid` = %d AND filetype LIKE '%%video%%'
                $sql_extra GROUP BY hash",
                intval($a->data['user']['uid'])
        );
-       if (DBM::is_result($r)) {
-               $a->set_pager_total(count($r));
-               $a->set_pager_itemspage(20);
+       if (DBA::isResult($r)) {
+               $total = count($r);
        }
 
+       $pager = new Pager(DI::args()->getQueryString(), 20);
+
        $r = q("SELECT hash, ANY_VALUE(`id`) AS `id`, ANY_VALUE(`created`) AS `created`,
                ANY_VALUE(`filename`) AS `filename`, ANY_VALUE(`filetype`) as `filetype`
                FROM `attach`
                WHERE `uid` = %d AND filetype LIKE '%%video%%'
                $sql_extra GROUP BY hash ORDER BY `created` DESC LIMIT %d , %d",
                intval($a->data['user']['uid']),
-               intval($a->pager['start']),
-               intval($a->pager['itemspage'])
+               $pager->getStart(),
+               $pager->getItemsPerPage()
        );
 
+       $videos = [];
 
-
-       $videos = array();
-       if (DBM::is_result($r)) {
+       if (DBA::isResult($r)) {
                foreach ($r as $rr) {
                        $alt_e = $rr['filename'];
+                       /// @todo The album isn't part of the above query. This seems to be some unfinished code that needs to be reworked completely.
+                       $rr['album'] = '';
                        $name_e = $rr['album'];
 
-                       $videos[] = array(
+                       $videos[] = [
                                'id'       => $rr['id'],
-                               'link'     => System::baseUrl() . '/videos/' . $a->data['user']['nickname'] . '/video/' . $rr['resource-id'],
-                               'title'    => t('View Video'),
-                               'src'      => System::baseUrl() . '/attach/' . $rr['id'] . '?attachment=0',
+                               'link'     => DI::baseUrl() . '/videos/' . $a->data['user']['nickname'] . '/video/' . $rr['hash'],
+                               'title'    => DI::l10n()->t('View Video'),
+                               'src'      => DI::baseUrl() . '/attach/' . $rr['id'] . '?attachment=0',
                                'alt'      => $alt_e,
                                'mime'     => $rr['filetype'],
-                               'album' => array(
-                                       'link'  => System::baseUrl() . '/videos/' . $a->data['user']['nickname'] . '/album/' . bin2hex($rr['album']),
+                               'album' => [
+                                       'link'  => DI::baseUrl() . '/videos/' . $a->data['user']['nickname'] . '/album/' . bin2hex($rr['album']),
                                        'name'  => $name_e,
-                                       'alt'   => t('View Album'),
-                               ),
-
-                       );
+                                       'alt'   => DI::l10n()->t('View Album'),
+                               ],
+                       ];
                }
        }
 
-       $tpl = get_markup_template('videos_recent.tpl');
-       $o .= replace_macros($tpl, array(
-               '$title'      => t('Recent Videos'),
+       $tpl = Renderer::getMarkupTemplate('videos_recent.tpl');
+       $o .= Renderer::replaceMacros($tpl, [
+               '$title'      => DI::l10n()->t('Recent Videos'),
                '$can_post'   => $can_post,
-               '$upload'     => array(t('Upload New Videos'), System::baseUrl().'/videos/'.$a->data['user']['nickname'].'/upload'),
+               '$upload'     => [DI::l10n()->t('Upload New Videos'), DI::baseUrl() . '/videos/' . $a->data['user']['nickname'] . '/upload'],
                '$videos'     => $videos,
-               '$delete_url' => (($can_post)?System::baseUrl().'/videos/'.$a->data['user']['nickname']:False)
-       ));
+               '$delete_url' => (($can_post) ? DI::baseUrl() . '/videos/' . $a->data['user']['nickname'] : false)
+       ]);
 
+       $o .= $pager->renderFull($total);
 
-       $o .= paginate($a);
        return $o;
 }