X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Ffbrowser.php;h=d918021cf2d6e880c6151c337cdee6e2d58d4979;hb=98f55ddb2ba8888dfc75845ed5aaa4c663b90b64;hp=9a0e9244c1cbb617511187d7273f58f853e077db;hpb=45ebeba643a6d600e8778475f70f827f32bf3146;p=friendica.git

diff --git a/mod/fbrowser.php b/mod/fbrowser.php
index 9a0e9244c1..d918021cf2 100644
--- a/mod/fbrowser.php
+++ b/mod/fbrowser.php
@@ -1,152 +1,159 @@
 <?php
 /**
+ * @copyright Copyright (C) 2010-2022, the Friendica project
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
  * @package		Friendica\modules
  * @subpackage	FileBrowser
  * @author		Fabio Comuni <fabrixxm@kirgroup.com>
  */
 
-require_once('include/Photo.php');
+use Friendica\App;
+use Friendica\Core\Renderer;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\Photo;
+use Friendica\Util\Images;
+use Friendica\Util\Strings;
 
 /**
  * @param App $a
+ * @return string
+ * @throws \Friendica\Network\HTTPException\InternalServerErrorException
  */
-function fbrowser_content(App $a) {
-
+function fbrowser_content(App $a)
+{
 	if (!local_user()) {
-		killme();
+		exit();
 	}
 
-	if ($a->argc == 1) {
-		killme();
+	if (DI::args()->getArgc() == 1) {
+		exit();
 	}
 
-	$template_file = "filebrowser.tpl";
-	$mode = "";
-	if (x($_GET,'mode')) {
-		$mode  = "?mode=".$_GET['mode'];
+	// Needed to match the correct template in a module that uses a different theme than the user/site/default
+	$theme = Strings::sanitizeFilePathItem($_GET['theme'] ?? null);
+	if ($theme && is_file("view/theme/$theme/config.php")) {
+		$a->setCurrentTheme($theme);
 	}
 
-	switch ($a->argv[1]) {
+	$template_file = "filebrowser.tpl";
+
+	$o = '';
+
+	switch (DI::args()->getArgv()[1]) {
 		case "image":
-			$path = array(array("", t("Photos")));
+			$path = ['' => DI::l10n()->t('Photos')];
 			$albums = false;
 			$sql_extra = "";
 			$sql_extra2 = " ORDER BY created DESC LIMIT 0, 10";
 
-			if ($a->argc==2){
-				$albums = q("SELECT distinct(`album`) AS `album` FROM `photo` WHERE `uid` = %d AND `album` != '%s' AND `album` != '%s' ",
-					intval(local_user()),
-					dbesc('Contact Photos'),
-					dbesc( t('Contact Photos'))
-				);
-
-				function _map_folder1($el){return array(bin2hex($el['album']),$el['album']);};
-				$albums = array_map( "_map_folder1" , $albums);
+			if (DI::args()->getArgc() == 2) {
+				$photos = DBA::toArray(DBA::p("SELECT distinct(`album`) AS `album` FROM `photo` WHERE `uid` = ? AND NOT `photo-type` IN (?, ?)",
+					local_user(),
+					Photo::CONTACT_AVATAR,
+					Photo::CONTACT_BANNER
+				));
 
+				$albums = array_column($photos, 'album');
 			}
 
-			$album = "";
-			if ($a->argc==3){
-				$album = hex2bin($a->argv[2]);
-				$sql_extra = sprintf("AND `album` = '%s' ",dbesc($album));
+			if (DI::args()->getArgc() == 3) {
+				$album = DI::args()->getArgv()[2];
+				$sql_extra = sprintf("AND `album` = '%s' ", DBA::escape($album));
 				$sql_extra2 = "";
-				$path[]=array($a->argv[2], $album);
+				$path[$album] = $album;
 			}
 
-			$r = q("SELECT `resource-id`, `id`, `filename`, type, min(`scale`) AS `hiq`,max(`scale`) AS `loq`, `desc`
-					FROM `photo` WHERE `uid` = %d $sql_extra AND `album` != '%s' AND `album` != '%s'
+			$r = DBA::toArray(DBA::p("SELECT `resource-id`, ANY_VALUE(`id`) AS `id`, ANY_VALUE(`filename`) AS `filename`, ANY_VALUE(`type`) AS `type`,
+					min(`scale`) AS `hiq`, max(`scale`) AS `loq`, ANY_VALUE(`desc`) AS `desc`, ANY_VALUE(`created`) AS `created`
+					FROM `photo` WHERE `uid` = ? $sql_extra AND NOT `photo-type` IN (?, ?)
 					GROUP BY `resource-id` $sql_extra2",
-				intval(local_user()),
-				dbesc('Contact Photos'),
-				dbesc( t('Contact Photos'))
-			);
-
-			function _map_files1($rr){
-				$a = get_app();
-				$types = Photo::supportedTypes();
-				$ext = $types[$rr['type']];
+				local_user(),
+				Photo::CONTACT_AVATAR,
+				Photo::CONTACT_BANNER
+			));
 
-				if($a->theme['template_engine'] === 'internal') {
-					$filename_e = template_escape($rr['filename']);
-				}
-				else {
-					$filename_e = $rr['filename'];
-				}
+			function _map_files1($rr)
+			{
+				$a = DI::app();
+				$types = Images::supportedTypes();
+				$ext = $types[$rr['type']];
+				$filename_e = $rr['filename'];
 
 				// Take the largest picture that is smaller or equal 640 pixels
-				$p = q("SELECT `scale` FROM `photo` WHERE `resource-id` = '%s' AND `height` <= 640 AND `width` <= 640 ORDER BY `resource-id`, `scale` LIMIT 1",
-					dbesc($rr['resource-id']));
-				if ($p)
-					$scale = $p[0]["scale"];
-				else
-					$scale = $rr['loq'];
-
-				return array(
-					App::get_baseurl() . '/photos/' . $a->user['nickname'] . '/image/' . $rr['resource-id'],
+				$photo = Photo::selectFirst(['scale'], ["`resource-id` = ? AND `height` <= ? AND `width` <= ?", $rr['resource-id'], 640, 640], ['order' => ['scale']]);
+				$scale = $photo['scale'] ?? $rr['loq'];
+
+				return [
+					DI::baseUrl() . '/photos/' . $a->getLoggedInUserNickname() . '/image/' . $rr['resource-id'],
 					$filename_e,
-					App::get_baseurl() . '/photo/' . $rr['resource-id'] . '-' . $scale . '.'. $ext
-				);
+					DI::baseUrl() . '/photo/' . $rr['resource-id'] . '-' . $scale . '.'. $ext
+				];
 			}
 			$files = array_map("_map_files1", $r);
 
-			$tpl = get_markup_template($template_file);
+			$tpl = Renderer::getMarkupTemplate($template_file);
 
-			$o =  replace_macros($tpl, array(
+			$o =  Renderer::replaceMacros($tpl, [
 				'$type'     => 'image',
-				'$baseurl'  => App::get_baseurl(),
 				'$path'     => $path,
 				'$folders'  => $albums,
 				'$files'    => $files,
-				'$cancel'   => t('Cancel'),
-				'$nickname' => $a->user['nickname'],
-			));
-
+				'$cancel'   => DI::l10n()->t('Cancel'),
+				'$nickname' => $a->getLoggedInUserNickname(),
+				'$upload'   => DI::l10n()->t('Upload')
+			]);
 
 			break;
 		case "file":
-			if ($a->argc==2) {
-				$files = q("SELECT `id`, `filename`, `filetype` FROM `attach` WHERE `uid` = %d ",
-					intval(local_user())
-				);
-
-				function _map_files2($rr){
-					$a = get_app();
-					list($m1,$m2) = explode("/",$rr['filetype']);
-					$filetype = ( (file_exists("images/icons/$m1.png"))?$m1:"zip");
+			if (DI::args()->getArgc()==2) {
+				$files = DBA::selectToArray('attach', ['id', 'filename', 'filetype'], ['uid' => local_user()]);
 
-					if ($a->theme['template_engine'] === 'internal') {
-						$filename_e = template_escape($rr['filename']);
-					} else {
-						$filename_e = $rr['filename'];
-					}
+				function _map_files2($rr)
+				{
+					list($m1, $m2) = explode("/", $rr['filetype']);
+					$filetype = ( (file_exists("images/icons/$m1.png"))?$m1:"zip");
+					$filename_e = $rr['filename'];
 
-					return array( App::get_baseurl() . '/attach/' . $rr['id'], $filename_e, App::get_baseurl() . '/images/icons/16/' . $filetype . '.png');
+					return [DI::baseUrl() . '/attach/' . $rr['id'], $filename_e, DI::baseUrl() . '/images/icons/16/' . $filetype . '.png'];
 				}
 				$files = array_map("_map_files2", $files);
 
 
-				$tpl = get_markup_template($template_file);
-				$o = replace_macros($tpl, array(
+				$tpl = Renderer::getMarkupTemplate($template_file);
+				$o = Renderer::replaceMacros($tpl, [
 					'$type'     => 'file',
-					'$baseurl'  => App::get_baseurl(),
-					'$path'     => array( array( "", t("Files")) ),
+					'$path'     => ['' => DI::l10n()->t('Files')],
 					'$folders'  => false,
-					'$files'    =>$files,
-					'$cancel'   => t('Cancel'),
-					'$nickname' => $a->user['nickname'],
-				));
-
+					'$files'    => $files,
+					'$cancel'   => DI::l10n()->t('Cancel'),
+					'$nickname' => $a->getLoggedInUserNickname(),
+					'$upload'   => DI::l10n()->t('Upload')
+				]);
 			}
 
 			break;
 	}
 
-	if (x($_GET,'mode')) {
+	if (!empty($_GET['mode'])) {
 		return $o;
 	} else {
 		echo $o;
-		killme();
+		exit();
 	}
-
-
 }