X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Fdfrn_notify.php;h=2f4edafc5d8f37858854a1922b39bea8cb4cd8ad;hb=f58d8f410885bb1895821cd0767bdf981629f0cd;hp=44e016599e486862c0d4493499ba10e331838e33;hpb=86cae070f2a048e553c545caec54be72c1c14da5;p=friendica.git diff --git a/mod/dfrn_notify.php b/mod/dfrn_notify.php index 44e016599e..2f4edafc5d 100644 --- a/mod/dfrn_notify.php +++ b/mod/dfrn_notify.php @@ -7,12 +7,14 @@ */ use Friendica\App; +use Friendica\Core\Config; +use Friendica\Core\System; +use Friendica\Database\DBM; +use Friendica\Model\Contact; +use Friendica\Protocol\DFRN; -require_once('include/items.php'); -require_once('include/dfrn.php'); -require_once('include/event.php'); - -require_once('library/defuse/php-encryption-1.2.1/Crypto.php'); +require_once 'include/items.php'; +require_once 'include/event.php'; function dfrn_notify_post(App $a) { logger(__function__, LOGGER_TRACE); @@ -45,9 +47,9 @@ function dfrn_notify_post(App $a) { dbesc($dfrn_id), dbesc($challenge) ); - if (! dbm::is_result($r)) { + if (! DBM::is_result($r)) { logger('dfrn_notify: could not match challenge to dfrn_id ' . $dfrn_id . ' challenge=' . $challenge); - xml_status(3); + System::xmlExit(3, 'Could not match challenge'); } $r = q("DELETE FROM `challenge` WHERE `dfrn-id` = '%s' AND `challenge` = '%s'", @@ -58,7 +60,7 @@ function dfrn_notify_post(App $a) { // find the local user who owns this relationship. $sql_extra = ''; - switch($direction) { + switch ($direction) { case (-1): $sql_extra = sprintf(" AND ( `issued-id` = '%s' OR `dfrn-id` = '%s' ) ", dbesc($dfrn_id), dbesc($dfrn_id)); break; @@ -69,7 +71,7 @@ function dfrn_notify_post(App $a) { $sql_extra = sprintf(" AND `dfrn-id` = '%s' AND `duplex` = 1 ", dbesc($dfrn_id)); break; default: - xml_status(3); + System::xmlExit(3, 'Invalid direction'); break; // NOTREACHED } @@ -93,9 +95,9 @@ function dfrn_notify_post(App $a) { dbesc($a->argv[1]) ); - if (! dbm::is_result($r)) { + if (! DBM::is_result($r)) { logger('dfrn_notify: contact not found for dfrn_id ' . $dfrn_id); - xml_status(3); + System::xmlExit(3, 'Contact not found'); //NOTREACHED } @@ -121,25 +123,19 @@ function dfrn_notify_post(App $a) { // if contact's ssl policy changed, update our links - fix_contact_ssl_policy($importer,$ssl_policy); + $importer = Contact::updateSslPolicy($importer, $ssl_policy); logger('dfrn_notify: received notify from ' . $importer['name'] . ' for ' . $importer['username']); logger('dfrn_notify: data: ' . $data, LOGGER_DATA); if ($dissolve == 1) { - - /* - * Relationship is dissolved permanently - */ - - require_once('include/Contact.php'); - contact_remove($importer['id']); + // Relationship is dissolved permanently + Contact::remove($importer['id']); logger('relationship dissolved : ' . $importer['name'] . ' dissolved ' . $importer['username']); - xml_status(0); - + System::xmlExit(0, 'relationship dissolved'); } - $rino = get_config('system', 'rino_encrypt'); + $rino = Config::get('system', 'rino_encrypt'); $rino = intval($rino); logger("Local rino version: " . $rino, LOGGER_DEBUG); @@ -148,9 +144,9 @@ function dfrn_notify_post(App $a) { // if local rino is lower than remote rino, abort: should not happen! // but only for $remote_rino > 1, because old code did't send rino version - if ($rino_remote_version > 1 && $rino < $rino_remote) { + if ($rino_remote > 1 && $rino < $rino_remote) { logger("rino version '$rino_remote' is lower than supported '$rino'"); - xml_status(0,"rino version '$rino_remote' is lower than supported '$rino'"); + System::xmlExit(0, "rino version '$rino_remote' is lower than supported '$rino'"); } $rawkey = hex2bin(trim($key)); @@ -171,49 +167,23 @@ function dfrn_notify_post(App $a) { } } - #logger('rino: received key : ' . $final_key); - switch($rino_remote) { case 0: case 1: - /* - *we got a key. old code send only the key, without RINO version. - * we assume RINO 1 if key and no RINO version - */ - $data = dfrn::aes_decrypt(hex2bin($data), $final_key); - break; - case 2: - try { - $data = Crypto::decrypt(hex2bin($data), $final_key); - } catch (InvalidCiphertext $ex) { // VERY IMPORTANT - /* - * Either: - * 1. The ciphertext was modified by the attacker, - * 2. The key is wrong, or - * 3. $ciphertext is not a valid ciphertext or was corrupted. - * Assume the worst. - */ - logger('The ciphertext has been tampered with!'); - xml_status(0, 'The ciphertext has been tampered with!'); - } catch (Ex\CryptoTestFailed $ex) { - logger('Cannot safely perform dencryption'); - xml_status(0, 'CryptoTestFailed'); - } catch (Ex\CannotPerformOperation $ex) { - logger('Cannot safely perform decryption'); - xml_status(0, 'Cannot safely perform decryption'); - } + // we got a key. old code send only the key, without RINO version. + // we assume RINO 1 if key and no RINO version + $data = DFRN::aesDecrypt(hex2bin($data), $final_key); break; default: - logger("rino: invalid sent verision '$rino_remote'"); - xml_status(0); + logger("rino: invalid sent version '$rino_remote'"); + System::xmlExit(0, "Invalid sent version '$rino_remote'"); } - logger('rino: decrypted data: ' . $data, LOGGER_DATA); } - $ret = dfrn::import($data, $importer); - xml_status($ret); + $ret = DFRN::import($data, $importer); + System::xmlExit($ret, 'Processed'); // NOTREACHED } @@ -284,7 +254,7 @@ function dfrn_notify_content(App $a) { dbesc($a->argv[1]) ); - if (! dbm::is_result($r)) { + if (! DBM::is_result($r)) { $status = 1; } @@ -313,7 +283,7 @@ function dfrn_notify_content(App $a) { $encrypted_id = bin2hex($encrypted_id); - $rino = get_config('system', 'rino_encrypt'); + $rino = Config::get('system', 'rino_encrypt'); $rino = intval($rino); logger("Local rino version: ". $rino, LOGGER_DEBUG);