X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Fprofile.php;h=5efb28ea752a769e5a1adfa9ca83f213bf70eee4;hb=4eb1c1eb1a9d830151aa6437fefb4e7a590064e8;hp=b37d6487ccbd26b97d0d702894e887aa742152ef;hpb=6348e70daa113e8b3203de8fbc919d08c90d972e;p=friendica.git diff --git a/mod/profile.php b/mod/profile.php index b37d6487cc..5efb28ea75 100644 --- a/mod/profile.php +++ b/mod/profile.php @@ -1,11 +1,7 @@ error = 404; return; } @@ -37,100 +34,326 @@ function profile_load(&$a,$uid,$profile = 0) { $a->page['template'] = 'profile'; $a->page['title'] = $a->profile['name']; + $_SESSION['theme'] = $a->profile['theme']; return; }} function profile_init(&$a) { - if($_SESSION['authenticated']) { - - // choose which page to show (could be remote auth) - - } - if($a->argc > 1) $which = $a->argv[1]; else { - $_SESSION['sysmsg'] .= "No profile" . EOL ; + notice( t('No profile') . EOL ); $a->error = 404; return; } - profile_load($a,$which); + $profile = 0; + if((local_user()) && ($a->argc > 2) && ($a->argv[2] == 'view')) { + $which = $a->user['nickname']; + $profile = $a->argv[1]; + } + profile_load($a,$which,$profile); + $a->page['htmlhead'] .= '' . "\r\n" ; + + $a->page['htmlhead'] .= '' . "\r\n" ; + $a->page['htmlhead'] .= '' . "\r\n" ; + $dfrn_pages = array('request', 'confirm', 'notify', 'poll'); foreach($dfrn_pages as $dfrn) $a->page['htmlhead'] .= "get_baseurl()."/dfrn_{$dfrn}/{$which}\" />\r\n"; + } -function item_display($item,$template) { - $o .= replace_macros($template,array( - '$id' => $item['item_id'], - '$profile_url' => $item['url'], - '$name' => $item['name'], - '$thumb' => $item['thumb'], - '$body' => bbcode($item['body']), - '$ago' => relative_date($item['created']) - )); +function profile_content(&$a, $update = false) { + + require_once("include/bbcode.php"); + require_once('include/security.php'); + $groups = array(); - return $o; -} + $tab = 'posts'; + if($update) { + // Ensure we've got a profile owner if updating. + $a->profile['profile_uid'] = $_SESSION['profile_uid']; + } + else { + // set the uid so we can pick it up during update + $_SESSION['profile_uid'] = $a->profile['uid']; + } -function profile_content(&$a) { + $contact = null; + $remote_contact = false; - require_once("include/bbcode.php"); - require_once('include/security.php'); + if(remote_user()) { + $contact_id = $_SESSION['visitor_id']; + $groups = init_groups_visitor($contact_id); + $r = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1", + intval($contact_id), + intval($a->profile['profile_uid']) + ); + if(count($r)) { + $contact = $r[0]; + $remote_contact = true; + } + } -// $tpl = file_get_contents('view/profile_tabs.tpl'); + if(! $remote_contact) { + if(local_user()) { + $contact_id = $_SESSION['cid']; + $contact = $a->contact; + } + } + if(! $update) { + if(x($_GET,'tab')) + $tab = notags(trim($_GET['tab'])); - if(can_write_wall($a,$a->profile['profile_uid'])) { - $tpl = file_get_contents('view/jot-header.tpl'); - - $a->page['htmlhead'] .= replace_macros($tpl, array('$baseurl' => $a->get_baseurl())); + $tpl = file_get_contents('view/profile_tabs.tpl'); - $tpl = file_get_contents("view/jot.tpl"); $o .= replace_macros($tpl,array( - '$baseurl' => $a->get_baseurl(), - '$profile_uid' => $a->profile['profile_uid'] + '$url' => $a->get_baseurl() . '/' . $a->cmd, + '$phototab' => $a->get_baseurl() . '/photos/' . $a->profile['nickname'] )); + + + if($tab == 'profile') { + require_once('view/profile_advanced.php'); + return $o; + } + + if(can_write_wall($a,$a->profile['profile_uid'])) { + $tpl = file_get_contents('view/jot-header.tpl'); + + $a->page['htmlhead'] .= replace_macros($tpl, array('$baseurl' => $a->get_baseurl())); + require_once('view/acl_selectors.php'); + + $tpl = file_get_contents("view/jot.tpl"); + if(is_array($a->user) && ((strlen($a->user['allow_cid'])) || (strlen($a->user['allow_gid'])) || (strlen($a->user['deny_cid'])) || (strlen($a->user['deny_gid'])))) + $lockstate = 'lock'; + else + $lockstate = 'unlock'; + $o .= replace_macros($tpl,array( + '$baseurl' => $a->get_baseurl(), + '$defloc' => (($_SESSION['uid'] == $a->profile['profile_uid']) ? $a->user['default-location'] : ''), + '$return_path' => $a->cmd, + '$visitor' => (($_SESSION['uid'] == $a->profile['profile_uid']) ? 'block' : 'none'), + '$lockstate' => $lockstate, + '$bang' => '', + '$acl' => (($_SESSION['uid'] == $a->profile['profile_uid']) ? populate_acl($a->user) : ''), + '$profile_uid' => $a->profile['profile_uid'] + )); + } + + if($tab == 'posts' && (! $a->pager['start'])) + $o .= '
' . "\r\n"; } + // TODO alter registration and settings and profile to update contact table when names and photos change. + + // default permissions - anonymous user + + $sql_extra = " AND `allow_cid` = '' AND `allow_gid` = '' AND `deny_cid` = '' AND `deny_gid` = '' "; + - if($a->profile['is-default']) { - // TODO left join with contact which will carry names and photos. (done)Store local users in contact as well as user.(done) - // Alter registration and settings - // and profile to update contact table when names and photos change. - // work on item_display and can_write_wall - // Add comments. + // Profile owner - everything is visible - $r = q("SELECT `item`.*, `contact`.`name`, `contact`.`photo`, `contact`.`thumb`, `contact`.`id` AS `cid` - FROM `item` LEFT JOIN `contact` ON `contact`.`id` = `item`.`contact-id` - WHERE `item`.`uid` = %d AND `item`.`visible` = 1 - AND `contact`.`blocked` = 0 - AND `allow_uid` = '' AND `allow_gid` = '' AND `deny_uid` = '' AND `deny_gid` = '' - GROUP BY `item`.`parent`, `item`.`id` - ORDER BY `created` DESC LIMIT 0,30 ", - intval($a->profile['uid']) + if(local_user() && ($_SESSION['uid'] == $a->profile['profile_uid'])) { + $sql_extra = ''; + + // Oh - while we're here... reset the Unseen messages + + $r = q("UPDATE `item` SET `unseen` = 0 + WHERE `type` != 'remote' AND `unseen` = 1 AND `uid` = %d", + intval($_SESSION['uid']) ); - $tpl = file_get_contents('view/wall_item.tpl'); + } - if(count($r)) { - foreach($r as $rr) { - $o .= item_display($rr,$tpl); + // authenticated visitor - here lie dragons + // If $remotecontact is true, we know that not only is this a remotely authenticated + // person, but that it is *our* contact, which is important in multi-user mode. + + elseif($remote_contact) { + $gs = '<<>>'; // should be impossible to match + if(count($groups)) { + foreach($groups as $g) + $gs .= '|<' . intval($g) . '>'; + } + $sql_extra = sprintf( + " AND ( `allow_cid` = '' OR `allow_cid` REGEXP '<%d>' ) + AND ( `deny_cid` = '' OR NOT `deny_cid` REGEXP '<%d>' ) + AND ( `allow_gid` = '' OR `allow_gid` REGEXP '%s' ) + AND ( `deny_gid` = '' OR NOT `deny_gid` REGEXP '%s') ", + + intval($_SESSION['visitor_id']), + intval($_SESSION['visitor_id']), + dbesc($gs), + dbesc($gs) + ); + } + + $r = q("SELECT COUNT(*) AS `total` + FROM `item` LEFT JOIN `contact` ON `contact`.`id` = `item`.`contact-id` + WHERE `item`.`uid` = %d AND `item`.`visible` = 1 AND `item`.`deleted` = 0 + AND `contact`.`blocked` = 0 AND `contact`.`pending` = 0 + AND `item`.`parent` IN ( SELECT `parent` FROM `item` WHERE `id` = `parent` AND `wall` = 1 ) + $sql_extra ", + intval($a->profile['profile_uid']) + + ); + + if(count($r)) + $a->set_pager_total($r[0]['total']); + + $r = q("SELECT `item`.*, `item`.`id` AS `item_id`, + `contact`.`name`, `contact`.`photo`, `contact`.`url`, + `contact`.`thumb`, `contact`.`dfrn-id`, `contact`.`self`, + `contact`.`id` AS `cid`, `contact`.`uid` AS `contact-uid` + FROM `item` LEFT JOIN `contact` ON `contact`.`id` = `item`.`contact-id` + WHERE `item`.`uid` = %d AND `item`.`visible` = 1 AND `item`.`deleted` = 0 + AND `contact`.`blocked` = 0 AND `contact`.`pending` = 0 + AND `item`.`parent` IN ( SELECT `parent` FROM `item` WHERE `id` = `parent` AND `wall` = 1 ) + $sql_extra + ORDER BY `parent` DESC, `gravity` ASC, `id` ASC LIMIT %d ,%d ", + intval($a->profile['profile_uid']), + intval($a->pager['start']), + intval($a->pager['itemspage']) + + ); + + + $cmnt_tpl = file_get_contents('view/comment_item.tpl'); + + $like_tpl = file_get_contents('view/like.tpl'); + + $tpl = file_get_contents('view/wall_item.tpl'); + + if($update) + $return_url = $_SESSION['return_url']; + else + $return_url = $_SESSION['return_url'] = $a->cmd; + + $alike = array(); + $dlike = array(); + + if(count($r)) { + + foreach($r as $item) { + + if(($item['verb'] == ACTIVITY_LIKE) && ($item['id'] != $item['parent'])) { + $url = $item['url']; + if(($item['rel'] == REL_VIP || $item['rel'] == REL_BUD) && (! $item['self'])) + $url = $a->get_baseurl() . '/redir/' . $item['contact-id']; + if(! is_array($alike[$item['parent'] . '-l'])) + $alike[$item['parent'] . '-l'] = array(); + $alike[$item['parent']] ++; + $alike[$item['parent'] . '-l'][] = '' . $item['name'] . ''; + } + if(($item['verb'] == ACTIVITY_DISLIKE) && ($item['id'] != $item['parent'])) { + $url = $item['url']; + if(($item['rel'] == REL_VIP || $item['rel'] == REL_BUD) && (! $item['self'])) + $url = $a->get_baseurl() . '/redir/' . $item['contact-id']; + if(! is_array($dlike[$item['parent'] . '-l'])) + $dlike[$item['parent'] . '-l'] = array(); + $dlike[$item['parent']] ++; + $dlike[$item['parent'] . '-l'][] = '' . $item['name'] . ''; } } - } - return $o; + foreach($r as $item) { + + + $comment = ''; + $likebuttons = ''; + + $template = $tpl; + + $redirect_url = $a->get_baseurl() . '/redir/' . $item['cid'] ; + + if((($item['verb'] == ACTIVITY_LIKE) || ($item['verb'] == ACTIVITY_DISLIKE)) && ($item['id'] != $item['parent'])) + continue; + + if(can_write_wall($a,$a->profile['profile_uid'])) { + if($item['id'] == $item['parent']) { + $likebuttons = replace_macros($like_tpl,array('$id' => $item['id'])); + } + if($item['last-child']) { + $comment = replace_macros($cmnt_tpl,array( + '$return_path' => $_SESSION['return_url'], + '$type' => 'wall-comment', + '$id' => $item['item_id'], + '$parent' => $item['parent'], + '$profile_uid' => $a->profile['profile_uid'], + '$mylink' => $contact['url'], + '$mytitle' => t('Me'), + '$myphoto' => $contact['thumb'], + '$ww' => '' + )); + } + } + + + $profile_url = $item['url']; + // This is my profile but I'm not the author of this post/comment. If it's somebody that's a fan or mutual friend, + // I can go directly to their profile as an authenticated guest. + if(local_user() && ($item['contact-uid'] == $_SESSION['uid']) + && ($item['rel'] == DIRECTION_IN || $item['rel'] == DIRECTION_BOTH) && (! $item['self'] )) + $profile_url = $redirect_url; + + + // We received this post via a remote feed. It's either a wall-to-wall or a remote comment. The author is + // known to us and is reflected in the contact-id for this item. We can use the contact url or redirect rather than + // use the link in the feed. This is different than on the network page where we may not know the author. + + $profile_name = ((strlen($item['author-name'])) ? $item['author-name'] : $item['name']); + $profile_avatar = ((strlen($item['author-avatar'])) ? $item['author-avatar'] : $item['thumb']); + $profile_link = $profile_url; + + $drop = ''; + + if(($item['contact-id'] == $_SESSION['visitor_id']) || ($item['uid'] == $_SESSION['uid'])) + $drop = replace_macros(file_get_contents('view/wall_item_drop.tpl'), array('$id' => $item['id'])); + + + $like = (($alike[$item['id']]) ? format_like($alike[$item['id']],$alike[$item['id'] . '-l'],'like',$item['id']) : ''); + $dislike = (($dlike[$item['id']]) ? format_like($dlike[$item['id']],$dlike[$item['id'] . '-l'],'dislike',$item['id']) : ''); + + + $o .= replace_macros($template,array( + '$id' => $item['item_id'], + '$profile_url' => $profile_link, + '$name' => $profile_name, + '$thumb' => $profile_avatar, + '$title' => $item['title'], + '$body' => bbcode($item['body']), + '$ago' => relative_date($item['created']), + '$location' => (($item['location']) ? '' . $item['location'] . '' : ''), + '$indent' => (($item['parent'] != $item['item_id']) ? ' comment' : ''), + '$drop' => $drop, + '$like' => $like, + '$vote' => $likebuttons, + '$dislike' => $dislike, + '$comment' => $comment + )); + + } + } + + if($update) { + return $o; + } + + $o .= paginate($a); + + return $o; } \ No newline at end of file