Merge pull request #11145 from nupplaphil/feat/check_license

[friendica.git] / mod / wallmessage.php

diff --git a/mod/wallmessage.php b/mod/wallmessage.php
index cbf53b45d62c39548040409fe465cf3a0a4278f8..e8f7d24e31e37abc4b2e45d60537a389972bbbbc 100644 (file)
--- a/mod/wallmessage.php
+++ b/mod/wallmessage.php
@@ -1,6 +1,6 @@
 <?php
 /**
- * @copyright Copyright (C) 2020, Friendica
+ * @copyright Copyright (C) 2010-2022, the Friendica project
  *
  * @license GNU AGPL version 3 or any later version
  *
@@ -26,6 +26,8 @@ use Friendica\Database\DBA;
 use Friendica\DI;
 use Friendica\Model\Mail;
 use Friendica\Model\Profile;
+use Friendica\Model\User;
+use Friendica\Util\DateTimeFormat;
 use Friendica\Util\Strings;
 
 function wallmessage_post(App $a) {
@@ -36,35 +38,27 @@ function wallmessage_post(App $a) {
                return;
        }
 
-       $subject   = (!empty($_REQUEST['subject'])   ? Strings::escapeTags(trim($_REQUEST['subject']))   : '');
-       $body      = (!empty($_REQUEST['body'])      ? Strings::escapeHtml(trim($_REQUEST['body'])) : '');
+       $subject   = trim($_REQUEST['subject'] ?? '');
+       $body      = Strings::escapeHtml(trim($_REQUEST['body'] ?? ''));
 
-       $recipient = (($a->argc > 1) ? Strings::escapeTags($a->argv[1]) : '');
+       $recipient = ((DI::args()->getArgc() > 1) ? DI::args()->getArgv()[1] : '');
        if ((! $recipient) || (! $body)) {
                return;
        }
 
-       $r = q("select * from user where nickname = '%s' limit 1",
-               DBA::escape($recipient)
-       );
-
-       if (! DBA::isResult($r)) {
-               Logger::log('wallmessage: no recipient');
+       $user = User::getByNickname($recipient);
+       if (empty($r)) {
+               Logger::notice('wallmessage: no recipient');
                return;
        }
 
-       $user = $r[0];
-
-       if (! intval($user['unkmail'])) {
+       if (!$user['unkmail']) {
                notice(DI::l10n()->t('Permission denied.'));
                return;
        }
 
-       $r = q("select count(*) as total from mail where uid = %d and created > UTC_TIMESTAMP() - INTERVAL 1 day and unknown = 1",
-                       intval($user['uid'])
-       );
-
-       if ($r[0]['total'] > $user['cntunkmail']) {
+       $total = DBA::count('mail', ["`uid` = ? AND `created` > ? AND `unknown`", $user['uid'], DateTimeFormat::utc('now - 1 day')]);
+       if ($total > $user['cntunkmail']) {
                notice(DI::l10n()->t('Number of daily wall messages for %s exceeded. Message failed.', $user['username']));
                return;
        }
@@ -97,35 +91,28 @@ function wallmessage_content(App $a) {
                return;
        }
 
-       $recipient = (($a->argc > 1) ? $a->argv[1] : '');
+       $recipient = ((DI::args()->getArgc() > 1) ? DI::args()->getArgv()[1] : '');
 
        if (!$recipient) {
                notice(DI::l10n()->t('No recipient.'));
                return;
        }
 
-       $r = q("select * from user where nickname = '%s' limit 1",
-               DBA::escape($recipient)
-       );
+       $user = User::getByNickname($recipient);
 
-       if (! DBA::isResult($r)) {
+       if (empty($user)) {
                notice(DI::l10n()->t('No recipient.'));
-               Logger::log('wallmessage: no recipient');
+               Logger::notice('wallmessage: no recipient');
                return;
        }
 
-       $user = $r[0];
-
-       if (!intval($user['unkmail'])) {
+       if (!$user['unkmail']) {
                notice(DI::l10n()->t('Permission denied.'));
                return;
        }
 
-       $r = q("select count(*) as total from mail where uid = %d and created > UTC_TIMESTAMP() - INTERVAL 1 day and unknown = 1",
-                       intval($user['uid'])
-       );
-
-       if ($r[0]['total'] > $user['cntunkmail']) {
+       $total = DBA::count('mail', ["`uid` = ? AND `created` > ? AND `unknown`", $user['uid'], DateTimeFormat::utc('now - 1 day')]);
+       if ($total > $user['cntunkmail']) {
                notice(DI::l10n()->t('Number of daily wall messages for %s exceeded. Message failed.', $user['username']));
                return;
        }