X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Flockview.php;h=eede1b6a0dac4eca34d039a470b3d22f7e5dcdfa;hb=b2d685482928363ce86c3c0519c8ff39d0af43ca;hp=ead2269c7a98d0341a02cb26986fb38101ebbafe;hpb=610f017b28edc37212df6385126993f2dfc41f59;p=friendica.git

diff --git a/mod/lockview.php b/mod/lockview.php
index ead2269c7a..eede1b6a0d 100644
--- a/mod/lockview.php
+++ b/mod/lockview.php
@@ -1,94 +1,142 @@
 <?php
-
+/**
+ * @file mod/lockview.php
+ */
 use Friendica\App;
-use Friendica\Core\Addon;
-use Friendica\Database\DBM;
-
-function lockview_content(App $a) {
-
+use Friendica\Core\Hook;
+use Friendica\Core\L10n;
+use Friendica\Database\DBA;
+use Friendica\Model\Group;
+use Friendica\Model\Item;
+
+function lockview_content(App $a)
+{
 	$type = (($a->argc > 1) ? $a->argv[1] : 0);
 	if (is_numeric($type)) {
 		$item_id = intval($type);
-		$type='item';
+		$type = 'item';
 	} else {
 		$item_id = (($a->argc > 2) ? intval($a->argv[2]) : 0);
 	}
 
-	if(! $item_id)
-		killme();
-
-	if (!in_array($type, ['item','photo','event']))
-		killme();
+	if (!$item_id) {
+		exit();
+	}
 
-	$r = q("SELECT * FROM `%s` WHERE `id` = %d LIMIT 1",
-		dbesc($type),
-		intval($item_id)
-	);
-	if (! DBM::is_result($r)) {
-		killme();
+	if (!in_array($type, ['item','photo','event'])) {
+		exit();
 	}
-	$item = $r[0];
 
-	Addon::callHooks('lockview_content', $item);
+	$fields = ['uid', 'allow_cid', 'allow_gid', 'deny_cid', 'deny_gid'];
+	$condition = ['id' => $item_id];
 
-	if($item['uid'] != local_user()) {
-		echo t('Remote privacy information not available.') . '<br />';
-		killme();
+	if ($type != 'item') {
+		$item = DBA::selectFirst($type, $fields, $condition);
+	} else {
+		$fields[] = 'private';
+		$item = Item::selectFirst($fields, $condition);
+	}
+
+	if (!DBA::isResult($item)) {
+		exit();
 	}
 
+	Hook::callAll('lockview_content', $item);
 
-	if(($item['private'] == 1) && (! strlen($item['allow_cid'])) && (! strlen($item['allow_gid']))
-		&& (! strlen($item['deny_cid'])) && (! strlen($item['deny_gid']))) {
+	if ($item['uid'] != local_user()) {
+		echo L10n::t('Remote privacy information not available.') . '<br />';
+		exit();
+	}
 
-		echo t('Remote privacy information not available.') . '<br />';
-		killme();
+	if (isset($item['private'])
+		&& $item['private'] == 1
+		&& empty($item['allow_cid'])
+		&& empty($item['allow_gid'])
+		&& empty($item['deny_cid'])
+		&& empty($item['deny_gid']))
+	{
+		echo L10n::t('Remote privacy information not available.') . '<br />';
+		exit();
 	}
 
-	$allowed_users = expand_acl($item['allow_cid']);
+	$allowed_users  = expand_acl($item['allow_cid']);
 	$allowed_groups = expand_acl($item['allow_gid']);
-	$deny_users = expand_acl($item['deny_cid']);
-	$deny_groups = expand_acl($item['deny_gid']);
+	$deny_users     = expand_acl($item['deny_cid']);
+	$deny_groups    = expand_acl($item['deny_gid']);
 
-	$o = t('Visible to:') . '<br />';
+	$o = L10n::t('Visible to:') . '<br />';
 	$l = [];
 
-	if(count($allowed_groups)) {
+	if (count($allowed_groups)) {
+		$key = array_search(Group::FOLLOWERS, $allowed_groups);
+		if ($key !== false) {
+			$l[] = '<b>' . L10n::t('Followers') . '</b>';
+			unset($allowed_groups[$key]);
+		}
+
+		$key = array_search(Group::MUTUALS, $allowed_groups);
+		if ($key !== false) {
+			$l[] = '<b>' . L10n::t('Mutuals') . '</b>';
+			unset($allowed_groups[$key]);
+		}
+
+
 		$r = q("SELECT `name` FROM `group` WHERE `id` IN ( %s )",
-			dbesc(implode(', ', $allowed_groups))
+			DBA::escape(implode(', ', $allowed_groups))
 		);
-		if (DBM::is_result($r))
-			foreach($r as $rr)
+		if (DBA::isResult($r)) {
+			foreach ($r as $rr) {
 				$l[] = '<b>' . $rr['name'] . '</b>';
+			}
+		}
 	}
-	if(count($allowed_users)) {
+
+	if (count($allowed_users)) {
 		$r = q("SELECT `name` FROM `contact` WHERE `id` IN ( %s )",
-			dbesc(implode(', ',$allowed_users))
+			DBA::escape(implode(', ', $allowed_users))
 		);
-		if (DBM::is_result($r))
-			foreach($r as $rr)
+		if (DBA::isResult($r)) {
+			foreach ($r as $rr) {
 				$l[] = $rr['name'];
-
+			}
+		}
 	}
 
-	if(count($deny_groups)) {
+	if (count($deny_groups)) {
+		$key = array_search(Group::FOLLOWERS, $deny_groups);
+		if ($key !== false) {
+			$l[] = '<b><strike>' . L10n::t('Followers') . '</strike></b>';
+			unset($deny_groups[$key]);
+		}
+
+		$key = array_search(Group::MUTUALS, $deny_groups);
+		if ($key !== false) {
+			$l[] = '<b><strike>' . L10n::t('Mutuals') . '</strike></b>';
+			unset($deny_groups[$key]);
+		}
+
 		$r = q("SELECT `name` FROM `group` WHERE `id` IN ( %s )",
-			dbesc(implode(', ', $deny_groups))
+			DBA::escape(implode(', ', $deny_groups))
 		);
-		if (DBM::is_result($r))
-			foreach($r as $rr)
+		if (DBA::isResult($r)) {
+			foreach ($r as $rr) {
 				$l[] = '<b><strike>' . $rr['name'] . '</strike></b>';
+			}
+		}
 	}
-	if(count($deny_users)) {
+
+	if (count($deny_users)) {
 		$r = q("SELECT `name` FROM `contact` WHERE `id` IN ( %s )",
-			dbesc(implode(', ',$deny_users))
+			DBA::escape(implode(', ', $deny_users))
 		);
-		if (DBM::is_result($r))
-			foreach($r as $rr)
+		if (DBA::isResult($r)) {
+			foreach ($r as $rr) {
 				$l[] = '<strike>' . $rr['name'] . '</strike>';
-
+			}
+		}
 	}
 
 	echo $o . implode(', ', $l);
-	killme();
+	exit();
 
 }