X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Fdisplay.php;h=abb03b6d5bfaaf948e5ad7fff0ab48b1814a7233;hb=cce534d25b391d7602b980eb5eee96fed83cb983;hp=4f2e5ff9aa1ec7728457c3d203ec5bb76281bd51;hpb=1fae778421253b713c166f3e4d329997a9e214a3;p=friendica.git diff --git a/mod/display.php b/mod/display.php old mode 100755 new mode 100644 index 4f2e5ff9aa..abb03b6d5b --- a/mod/display.php +++ b/mod/display.php @@ -1,7 +1,180 @@ argc > 1) ? $a->argv[1] : ''); + $profiledata = array(); + + // If there is only one parameter, then check if this parameter could be a guid + if ($a->argc == 2) { + $nick = ""; + $itemuid = 0; + + // Does the local user have this item? + if (local_user()) { + $r = q("SELECT `id`, `parent`, `author-name`, `author-link`, `author-avatar`, `network`, `body` FROM `item` + WHERE `item`.`visible` = 1 AND `item`.`deleted` = 0 and `item`.`moderated` = 0 + AND `guid` = '%s' AND `uid` = %d", $a->argv[1], local_user()); + if (count($r)) { + $nick = $a->user["nickname"]; + $itemuid = local_user(); + } + } + + // Or is it anywhere on the server? + if ($nick == "") { + $r = q("SELECT `user`.`nickname`, `item`.`id`, `item`.`parent`, `item`.`author-name`, + `item`.`author-link`, `item`.`author-avatar`, `item`.`network`, `item`.`uid`, `item`.`body` + FROM `item` INNER JOIN `user` ON `user`.`uid` = `item`.`uid` + WHERE `item`.`visible` = 1 AND `item`.`deleted` = 0 and `item`.`moderated` = 0 + AND `item`.`allow_cid` = '' AND `item`.`allow_gid` = '' + AND `item`.`deny_cid` = '' AND `item`.`deny_gid` = '' + AND `item`.`private` = 0 AND NOT `user`.`hidewall` + AND `item`.`guid` = '%s'", $a->argv[1]); + // AND `item`.`private` = 0 AND `item`.`wall` = 1 + if (count($r)) { + $nick = $r[0]["nickname"]; + $itemuid = $r[0]["uid"]; + } + } + if (count($r)) { + if ($r[0]["id"] != $r[0]["parent"]) + $r = q("SELECT `id`, `author-name`, `author-link`, `author-avatar`, `network`, `body` FROM `item` + WHERE `item`.`visible` = 1 AND `item`.`deleted` = 0 and `item`.`moderated` = 0 + AND `id` = %d", $r[0]["parent"]); + + $profiledata = display_fetchauthor($a, $r[0]); + + if (strstr(normalise_link($profiledata["url"]), normalise_link($a->get_baseurl()))) { + $nickname = str_replace(normalise_link($a->get_baseurl())."/profile/", "", normalise_link($profiledata["url"])); + + if (($nickname != $a->user["nickname"])) { + $r = q("SELECT `profile`.`uid` AS `profile_uid`, `profile`.* , `contact`.`avatar-date` AS picdate, `user`.* FROM `profile` + INNER JOIN `contact` on `contact`.`uid` = `profile`.`uid` INNER JOIN `user` ON `profile`.`uid` = `user`.`uid` + WHERE `user`.`nickname` = '%s' AND `profile`.`is-default` = 1 and `contact`.`self` = 1 LIMIT 1", + dbesc($nickname) + ); + if (count($r)) + $profiledata = $r[0]; + + $profiledata["network"] = NETWORK_DFRN; + } else + $profiledata = array(); + } + } else { + $a->error = 404; + notice( t('Item not found.') . EOL); + return; + } + } + + profile_load($a, $nick, 0, $profiledata); + +} + +function display_fetchauthor($a, $item) { + require_once("mod/proxy.php"); + require_once("include/bbcode.php"); + + $profiledata = array(); + $profiledata["uid"] = -1; + $profiledata["nickname"] = $item["author-name"]; + $profiledata["name"] = $item["author-name"]; + $profiledata["picdate"] = ""; + $profiledata["photo"] = proxy_url($item["author-avatar"]); + $profiledata["url"] = $item["author-link"]; + $profiledata["network"] = $item["network"]; + + // Fetching profile data from unique contacts + // To-do: Extend "unique contacts" table for further contact data like location, ... + $r = q("SELECT `avatar`, `nick` FROM `unique_contacts` WHERE `url` = '%s'", normalise_link($profiledata["url"])); + if (count($r)) { + $profiledata["photo"] = proxy_url($r[0]["avatar"]); + if ($r[0]["nick"] != "") + $profiledata["nickname"] = $r[0]["nick"]; + } else { + // Is this case possible? + // Fetching further contact data from the contact table, when it isn't available in the "unique contacts" + $r = q("SELECT `photo`, `nick` FROM `contact` WHERE `nurl` = '%s' AND `uid` = %d", + normalise_link($profiledata["url"]), $itemuid); + if (count($r)) { + $profiledata["photo"] = proxy_url($r[0]["photo"]); + if ($r[0]["nick"] != "") + $profiledata["nickname"] = $r[0]["nick"]; + } + } + + // Check for a repeated message + $skip = false; + $body = trim($item["body"]); + + // Skip if it isn't a pure repeated messages + // Does it start with a share? + if (!$skip AND strpos($body, "[share") > 0) + $skip = true; + + // Does it end with a share? + if (!$skip AND (strlen($body) > (strrpos($body, "[/share]") + 8))) + $skip = true; + + if (!$skip) { + $attributes = preg_replace("/\[share(.*?)\]\s?(.*?)\s?\[\/share\]\s?/ism","$1",$body); + // Skip if there is no shared message in there + if ($body == $attributes) + $skip = true; + } + + if (!$skip) { + $author = ""; + preg_match("/author='(.*?)'/ism", $attributes, $matches); + if ($matches[1] != "") + $profiledata["name"] = html_entity_decode($matches[1],ENT_QUOTES,'UTF-8'); + + preg_match('/author="(.*?)"/ism', $attributes, $matches); + if ($matches[1] != "") + $profiledata["name"] = html_entity_decode($matches[1],ENT_QUOTES,'UTF-8'); + + $profile = ""; + preg_match("/profile='(.*?)'/ism", $attributes, $matches); + if ($matches[1] != "") + $profiledata["url"] = $matches[1]; + + preg_match('/profile="(.*?)"/ism', $attributes, $matches); + if ($matches[1] != "") + $profiledata["url"] = $matches[1]; + + $avatar = ""; + preg_match("/avatar='(.*?)'/ism", $attributes, $matches); + if ($matches[1] != "") + $profiledata["photo"] = $matches[1]; + + preg_match('/avatar="(.*?)"/ism', $attributes, $matches); + if ($matches[1] != "") + $profiledata["photo"] = $matches[1]; + + $profiledata["nickname"] = $profiledata["name"]; + $profiledata["network"] = GetProfileUsername($profiledata["url"], "", false, true); + } + + if (local_user()) { + if ($profiledata["network"] == NETWORK_DFRN) { + $connect = str_replace("/profile/", "/dfrn_request/", $profiledata["url"])."&addr=".bin2hex($a->get_baseurl()."/profile/".$a->user["nickname"]); + $profiledata["remoteconnect"] = $connect; + } elseif ($profiledata["network"] == NETWORK_DIASPORA) + $profiledata["remoteconnect"] = $a->get_baseurl()."/contacts?add=".GetProfileUsername($profiledata["url"], "", true); + } elseif ($profiledata["network"] == NETWORK_DFRN) { + $connect = str_replace("/profile/", "/dfrn_request/", $profiledata["url"]); + $profiledata["remoteconnect"] = $connect; + } + + return($profiledata); +} + +function display_content(&$a, $update = 0) { if((get_config('system','block_public')) && (! local_user()) && (! remote_user())) { notice( t('Public access denied.') . EOL); @@ -14,15 +187,53 @@ function display_content(&$a) { require_once('include/acl_selectors.php'); - $o = '
' . "\r\n"; + $o = ''; - $a->page['htmlhead'] .= ''; + $a->page['htmlhead'] .= replace_macros(get_markup_template('display-head.tpl'), array()); - $nick = (($a->argc > 1) ? $a->argv[1] : ''); - profile_load($a,$nick); + if($update) { + $nick = $_REQUEST['nick']; + } + else { + $nick = (($a->argc > 1) ? $a->argv[1] : ''); + } + + if($update) { + $item_id = $_REQUEST['item_id']; + $a->profile = array('uid' => intval($update), 'profile_uid' => intval($update)); + } + else { + $item_id = (($a->argc > 2) ? $a->argv[2] : 0); + + if ($a->argc == 2) { + $nick = ""; + + if (local_user()) { + $r = q("SELECT `id` FROM `item` + WHERE `item`.`visible` = 1 AND `item`.`deleted` = 0 and `item`.`moderated` = 0 + AND `guid` = '%s' AND `uid` = %d", $a->argv[1], local_user()); + if (count($r)) { + $item_id = $r[0]["id"]; + $nick = $a->user["nickname"]; + } + } - $item_id = (($a->argc > 2) ? intval($a->argv[2]) : 0); + if ($nick == "") { + $r = q("SELECT `user`.`nickname`, `item`.`id` FROM `item` INNER JOIN `user` ON `user`.`uid` = `item`.`uid` + WHERE `item`.`visible` = 1 AND `item`.`deleted` = 0 and `item`.`moderated` = 0 + AND `item`.`allow_cid` = '' AND `item`.`allow_gid` = '' + AND `item`.`deny_cid` = '' AND `item`.`deny_gid` = '' + AND `item`.`private` = 0 AND NOT `user`.`hidewall` + AND `item`.`guid` = '%s'", $a->argv[1]); + // AND `item`.`private` = 0 AND `item`.`wall` = 1 + if (count($r)) { + $item_id = $r[0]["id"]; + $nick = $r[0]["nickname"]; + } + } + } + } if(! $item_id) { $a->error = 404; @@ -34,9 +245,19 @@ function display_content(&$a) { $contact = null; $remote_contact = false; -dbg(1); - if(remote_user()) { - $contact_id = $_SESSION['visitor_id']; + + $contact_id = 0; + + if(is_array($_SESSION['remote'])) { + foreach($_SESSION['remote'] as $v) { + if($v['uid'] == $a->profile['uid']) { + $contact_id = $v['cid']; + break; + } + } + } + + if($contact_id) { $groups = init_groups_visitor($contact_id); $r = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1", intval($contact_id), @@ -67,8 +288,8 @@ dbg(1); notice( t('Access to this profile has been restricted.') . EOL); return; } - - if ($is_owner) + + if ($is_owner) { $celeb = ((($a->user['page-flags'] == PAGE_SOAPBOX) || ($a->user['page-flags'] == PAGE_COMMUNITY)) ? true : false); $x = array( @@ -80,65 +301,164 @@ dbg(1); 'acl' => populate_acl($a->user, $celeb), 'bang' => '', 'visitor' => 'block', - 'profile_uid' => local_user() - ); + 'profile_uid' => local_user(), + 'acl_data' => construct_acl_data($a, $a->user), // For non-Javascript ACL selector + ); $o .= status_editor($a,$x,0,true); + } + + $sql_extra = item_permissions_sql($a->profile['uid'],$remote_contact,$groups); + // AND `item`.`parent` = ( SELECT `parent` FROM `item` FORCE INDEX (PRIMARY, `uri`) WHERE ( `id` = '%s' OR `uri` = '%s' )) - $sql_extra = permissions_sql($a->profile['uid'],$remote_contact,$groups); + if($update) { - if(! local_user() && ! remote_user()) - $sql_extra .= " and `item`.`private` = 0 "; + $r = q("SELECT id FROM item WHERE item.uid = %d + AND `item`.`parent` = (SELECT `parent` FROM `item` WHERE (`id` = '%s' OR `uri` = '%s')) + $sql_extra AND unseen = 1", + intval($a->profile['uid']), + dbesc($item_id), + dbesc($item_id) + ); + + if(!$r) + return ''; + } + + // AND `item`.`parent` = ( SELECT `parent` FROM `item` FORCE INDEX (PRIMARY, `uri`) WHERE ( `id` = '%s' OR `uri` = '%s' ) - $r = q("SELECT `item`.*, `item`.`id` AS `item_id`, + $r = q("SELECT `item`.*, `item`.`id` AS `item_id`, `item`.`network` AS `item_network`, `contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`rel`, - `contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`, + `contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`, `contact`.`id` AS `cid`, `contact`.`uid` AS `contact-uid` - FROM `item` LEFT JOIN `contact` ON `contact`.`id` = `item`.`contact-id` + FROM `item` INNER JOIN `contact` ON `contact`.`id` = `item`.`contact-id` + AND `contact`.`blocked` = 0 AND `contact`.`pending` = 0 WHERE `item`.`uid` = %d AND `item`.`visible` = 1 AND `item`.`deleted` = 0 and `item`.`moderated` = 0 - AND `contact`.`blocked` = 0 AND `contact`.`pending` = 0 - AND `item`.`parent` = ( SELECT `parent` FROM `item` WHERE ( `id` = '%s' OR `uri` = '%s' )) + AND `item`.`parent` = (SELECT `parent` FROM `item` WHERE (`id` = '%s' OR `uri` = '%s') + AND uid = %d) $sql_extra - ORDER BY `parent` DESC, `gravity` ASC, `id` ASC ", + ORDER BY `parent` DESC, `gravity` ASC, `id` ASC", intval($a->profile['uid']), dbesc($item_id), - dbesc($item_id) + dbesc($item_id), + intval($a->profile['uid']) ); + if(!$r && local_user()) { + // Check if this is another person's link to a post that we have + $r = q("SELECT `item`.uri FROM `item` + WHERE (`item`.`id` = '%s' OR `item`.`uri` = '%s' ) + LIMIT 1", + dbesc($item_id), + dbesc($item_id) + ); + if($r) { + $item_uri = $r[0]['uri']; + // AND `item`.`parent` = ( SELECT `parent` FROM `item` FORCE INDEX (PRIMARY, `uri`) WHERE `uri` = '%s' AND uid = %d ) + + $r = q("SELECT `item`.*, `item`.`id` AS `item_id`, `item`.`network` AS `item_network`, + `contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`rel`, + `contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`, + `contact`.`id` AS `cid`, `contact`.`uid` AS `contact-uid` + FROM `item` INNER JOIN `contact` ON `contact`.`id` = `item`.`contact-id` + AND `contact`.`blocked` = 0 AND `contact`.`pending` = 0 + WHERE `item`.`uid` = %d AND `item`.`visible` = 1 AND `item`.`deleted` = 0 + and `item`.`moderated` = 0 + AND `item`.`parent` = (SELECT `parent` FROM `item` WHERE `uri` = '%s' AND uid = %d) + ORDER BY `parent` DESC, `gravity` ASC, `id` ASC ", + intval(local_user()), + dbesc($item_uri), + intval(local_user()) + ); + } + } - if(count($r)) { + + if($r) { if((local_user()) && (local_user() == $a->profile['uid'])) { - q("UPDATE `item` SET `unseen` = 0 + q("UPDATE `item` SET `unseen` = 0 WHERE `parent` = %d AND `unseen` = 1", intval($r[0]['parent']) ); } + $items = conv_sort($r,"`commented`"); + + if(!$update) + $o .= ""; + $o .= conversation($a,$items,'display', $update); + + // Preparing the meta header + require_once('include/bbcode.php'); + require_once("include/html2plain.php"); + $description = trim(html2plain(bbcode($r[0]["body"], false, false), 0, true)); + $title = trim(html2plain(bbcode($r[0]["title"], false, false), 0, true)); + $author_name = $r[0]["author-name"]; + + $image = ""; + if ($image == "") + $image = $r[0]["thumb"]; + + if ($title == "") + $title = $author_name; - $o .= conversation($a,$r,'display', false); + $description = htmlspecialchars($description, ENT_COMPAT, 'UTF-8', true); // allow double encoding here + $title = htmlspecialchars($title, ENT_COMPAT, 'UTF-8', true); // allow double encoding here + $author_name = htmlspecialchars($author_name, ENT_COMPAT, 'UTF-8', true); // allow double encoding here + // + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + + // Schema.org microdata + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + + // Twitter cards + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + + // Dublin Core + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + + // Open Graph + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + $a->page['htmlhead'] .= ''."\n"; + // article:tag + + return $o; } - else { - $r = q("SELECT `id` FROM `item` WHERE `id` = '%s' OR `uri` = '%s' LIMIT 1", - dbesc($item_id), - dbesc($item_id) - ); - if(count($r)) { - if($r[0]['deleted']) { - notice( t('Item has been removed.') . EOL ); - } - else { - notice( t('Permission denied.') . EOL ); - } + + $r = q("SELECT `id`,`deleted` FROM `item` WHERE `id` = '%s' OR `uri` = '%s' LIMIT 1", + dbesc($item_id), + dbesc($item_id) + ); + if($r) { + if($r[0]['deleted']) { + notice( t('Item has been removed.') . EOL ); } else { - notice( t('Item not found.') . EOL ); + notice( t('Permission denied.') . EOL ); } - } -dbg(0); + else { + notice( t('Item not found.') . EOL ); + } + return $o; }