Normalize base URL usage in admin templates

[friendica.git] / src / Module / Item / Pin.php

diff --git a/src/Module/Item/Pin.php b/src/Module/Item/Pin.php
index d99b1a345205ecddf1a72c20cbbadfe03334f125..d002e8bff1376266b7b06de607807be6e653af7d 100644 (file)
--- a/src/Module/Item/Pin.php
+++ b/src/Module/Item/Pin.php
@@ -1,6 +1,6 @@
 <?php
 /**
- * @copyright Copyright (C) 2020, Friendica
+ * @copyright Copyright (C) 2010-2022, the Friendica project
  *
  * @license GNU AGPL version 3 or any later version
  *
@@ -24,8 +24,9 @@ namespace Friendica\Module\Item;
 use Friendica\BaseModule;
 use Friendica\Core\Session;
 use Friendica\Core\System;
+use Friendica\Database\DBA;
 use Friendica\DI;
-use Friendica\Model\Item;
+use Friendica\Model\Post;
 use Friendica\Network\HTTPException;
 
 /**
@@ -33,7 +34,7 @@ use Friendica\Network\HTTPException;
  */
 class Pin extends BaseModule
 {
-       public static function rawContent(array $parameters = [])
+       protected function rawContent(array $request = [])
        {
                $l10n = DI::l10n();
 
@@ -41,15 +42,24 @@ class Pin extends BaseModule
                        throw new HttpException\ForbiddenException($l10n->t('Access denied.'));
                }
 
-               if (empty($parameters['id'])) {
+               if (empty($this->parameters['id'])) {
                        throw new HTTPException\BadRequestException();
                }
 
-               $itemId = intval($parameters['id']);
+               $itemId = intval($this->parameters['id']);
 
-               $pinned = !Item::getPinned($itemId, local_user());
+               $item = Post::selectFirst(['uri-id', 'uid'], ['id' => $itemId]);
+               if (!DBA::isResult($item)) {
+                       throw new HTTPException\NotFoundException();
+               }
+
+               if (!in_array($item['uid'], [0, local_user()])) {
+                       throw new HttpException\ForbiddenException($l10n->t('Access denied.'));
+               }
+
+               $pinned = !Post\ThreadUser::getPinned($item['uri-id'], local_user());
 
-               Item::setPinned($itemId, local_user(), $pinned);
+               Post\ThreadUser::setPinned($item['uri-id'], local_user(), $pinned);
 
                // See if we've been passed a return path to redirect to
                $return_path = $_REQUEST['return'] ?? '';