X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Ftagger.php;h=7cb43e330c951989b94e61cb7375dfe9836e20f0;hb=6c341962648b73c935c2de26996b07332b776a1f;hp=738d56e40d8b7a5f0290de956c8b38df3cf63f82;hpb=ecea7425f8ad11ace4af39d476919e3203bff44f;p=friendica.git diff --git a/mod/tagger.php b/mod/tagger.php index 738d56e40d..7cb43e330c 100644 --- a/mod/tagger.php +++ b/mod/tagger.php @@ -3,15 +3,15 @@ * @file mod/tagger.php */ use Friendica\App; -use Friendica\Core\Addon; +use Friendica\Core\Hook; use Friendica\Core\L10n; +use Friendica\Core\Logger; use Friendica\Core\System; use Friendica\Core\Worker; use Friendica\Database\DBA; use Friendica\Model\Item; - -require_once 'include/security.php'; -require_once 'include/items.php'; +use Friendica\Util\Strings; +use Friendica\Util\XML; function tagger_content(App $a) { @@ -19,7 +19,7 @@ function tagger_content(App $a) { return; } - $term = notags(trim($_GET['term'])); + $term = Strings::escapeTags(trim($_GET['term'])); // no commas allowed $term = str_replace([',',' '],['','_'],$term); @@ -27,15 +27,15 @@ function tagger_content(App $a) { return; } - $item_id = (($a->argc > 1) ? notags(trim($a->argv[1])) : 0); + $item_id = (($a->argc > 1) ? Strings::escapeTags(trim($a->argv[1])) : 0); - logger('tagger: tag ' . $term . ' item ' . $item_id); + Logger::log('tagger: tag ' . $term . ' item ' . $item_id); $item = Item::selectFirst([], ['id' => $item_id]); if (!$item_id || !DBA::isResult($item)) { - logger('tagger: no item ' . $item_id); + Logger::log('tagger: no item ' . $item_id); return; } @@ -61,12 +61,12 @@ function tagger_content(App $a) { if (DBA::isResult($r)) { $contact = $r[0]; } else { - logger('tagger: no contact_id'); + Logger::log('tagger: no contact_id'); return; } $uri = Item::newURI($owner_uid); - $xterm = xmlify($term); + $xterm = XML::escape($term); $post_type = (($item['resource-id']) ? L10n::t('photo') : L10n::t('status')); $targettype = (($item['resource-id']) ? ACTIVITY_OBJ_IMAGE : ACTIVITY_OBJ_NOTE ); @@ -76,9 +76,9 @@ function tagger_content(App $a) { $href = System::baseUrl() . '/display/' . $item['guid']; } - $link = xmlify('' . "\n") ; + $link = XML::escape('' . "\n"); - $body = xmlify($item['body']); + $body = XML::escape($item['body']); $target = <<< EOT @@ -91,7 +91,7 @@ function tagger_content(App $a) { EOT; - $tagid = System::baseUrl() . '/search?tag=' . $term; + $tagid = System::baseUrl() . '/search?tag=' . $xterm; $objtype = ACTIVITY_OBJ_TAGTERM; $obj = <<< EOT @@ -111,11 +111,11 @@ EOT; return; } - $termlink = html_entity_decode('⌗') . '[url=' . System::baseUrl() . '/search?tag=' . urlencode($term) . ']'. $term . '[/url]'; + $termlink = html_entity_decode('⌗') . '[url=' . System::baseUrl() . '/search?tag=' . $term . ']'. $term . '[/url]'; $arr = []; - $arr['guid'] = System::createGUID(32); + $arr['guid'] = System::createUUID(); $arr['uri'] = $uri; $arr['uid'] = $owner_uid; $arr['contact-id'] = $contact['id']; @@ -159,7 +159,7 @@ EOT; $t = q("SELECT count(tid) as tcount FROM term WHERE oid=%d AND term='%s'", intval($item['id']), - dbesc($term) + DBA::escape($term) ); if (!$blocktags && $t[0]['tcount'] == 0) { @@ -167,8 +167,8 @@ EOT; intval($item['id']), $term_objtype, TERM_HASHTAG, - dbesc($term), - dbesc(System::baseUrl() . '/search?tag=' . $term), + DBA::escape($term), + '', intval($owner_uid) ); } @@ -181,7 +181,7 @@ EOT; ); $t = q("SELECT COUNT(`tid`) AS `tcount` FROM `term` WHERE `oid`=%d AND `term`='%s'", intval($original_item['id']), - dbesc($term) + DBA::escape($term) ); if (DBA::isResult($x) && !$x[0]['blocktags'] && $t[0]['tcount'] == 0){ @@ -189,8 +189,8 @@ EOT; intval($original_item['id']), $term_objtype, TERM_HASHTAG, - dbesc($term), - dbesc(System::baseUrl() . '/search?tag=' . $term), + DBA::escape($term), + '', intval($owner_uid) ); } @@ -199,11 +199,9 @@ EOT; $arr['id'] = $post_id; - Addon::callHooks('post_local_end', $arr); + Hook::callAll('post_local_end', $arr); Worker::add(PRIORITY_HIGH, "Notifier", "tag", $post_id); - killme(); - - return; // NOTREACHED + exit(); }