X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Ffsuggest.php;h=2cede5685215abe6ad0bbf8bbddaa90b42efd86e;hb=f225752f8abd604e287c809d6dc9bed7c5c605f5;hp=efaf100efcaa1bf3b9535d4343bcfcf4265b8988;hpb=669dafcf22e5c4baf5c2248c967226f915cd4403;p=friendica.git diff --git a/mod/fsuggest.php b/mod/fsuggest.php index efaf100efc..2cede56852 100644 --- a/mod/fsuggest.php +++ b/mod/fsuggest.php @@ -1,11 +1,19 @@ argv[1]); - - $r = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1", - intval($contact_id), - intval(local_user()) - ); - if (! dbm::is_result($r)) { - notice( t('Contact not found.') . EOL); + if (empty($contact_id)) { return; } - $contact = $r[0]; - - $new_contact = intval($_POST['suggest']); - - $hash = random_string(); - - $note = escape_tags(trim($_POST['note'])); - - if($new_contact) { - $r = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1", - intval($new_contact), - intval(local_user()) - ); - if (dbm::is_result($r)) { - - $x = q("INSERT INTO `fsuggest` ( `uid`,`cid`,`name`,`url`,`request`,`photo`,`note`,`created`) - VALUES ( %d, %d, '%s','%s','%s','%s','%s','%s')", - intval(local_user()), - intval($contact_id), - dbesc($r[0]['name']), - dbesc($r[0]['url']), - dbesc($r[0]['request']), - dbesc($r[0]['photo']), - dbesc($hash), - dbesc(datetime_convert()) - ); - $r = q("SELECT `id` FROM `fsuggest` WHERE `note` = '%s' AND `uid` = %d LIMIT 1", - dbesc($hash), - intval(local_user()) - ); - if (dbm::is_result($r)) { - $fsuggest_id = $r[0]['id']; - q("UPDATE `fsuggest` SET `note` = '%s' WHERE `id` = %d AND `uid` = %d", - dbesc($note), - intval($fsuggest_id), - intval(local_user()) - ); - Worker::add(PRIORITY_HIGH, 'notifier', 'suggest', $fsuggest_id); - } - - info( t('Friend suggestion sent.') . EOL); - } + // We do query the "uid" as well to ensure that it is our contact + if (!DBA::exists('contact', ['id' => $contact_id, 'uid' => local_user()])) { + notice(L10n::t('Contact not found.') . EOL); + return; } + $suggest_contact_id = intval($_POST['suggest']); + if (empty($suggest_contact_id)) { + return; + } -} + // We do query the "uid" as well to ensure that it is our contact + $contact = DBA::selectFirst('contact', ['name', 'url', 'request', 'avatar'], ['id' => $suggest_contact_id, 'uid' => local_user()]); + if (!DBA::isResult($contact)) { + notice(L10n::t('Suggested contact not found.') . EOL); + return; + } + $note = Strings::escapeHtml(trim(defaults($_POST, 'note', ''))); + $fields = ['uid' => local_user(),'cid' => $contact_id, 'name' => $contact['name'], + 'url' => $contact['url'], 'request' => $contact['request'], + 'photo' => $contact['avatar'], 'note' => $note, 'created' => DateTimeFormat::utcNow()]; + DBA::insert('fsuggest', $fields); -function fsuggest_content(App $a) { + Worker::add(PRIORITY_HIGH, 'Notifier', 'suggest', DBA::lastInsertId()); - require_once('include/acl_selectors.php'); + info(L10n::t('Friend suggestion sent.') . EOL); +} +function fsuggest_content(App $a) +{ if (! local_user()) { - notice( t('Permission denied.') . EOL); + notice(L10n::t('Permission denied.') . EOL); return; } - if($a->argc != 2) + if ($a->argc != 2) { return; + } $contact_id = intval($a->argv[1]); - $r = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1", - intval($contact_id), - intval(local_user()) - ); - if (! dbm::is_result($r)) { - notice( t('Contact not found.') . EOL); + $contact = DBA::selectFirst('contact', [], ['id' => $contact_id, 'uid' => local_user()]); + if (! DBA::isResult($contact)) { + notice(L10n::t('Contact not found.') . EOL); return; } - $contact = $r[0]; - $o = '