fbpost/fbpost.php

   1 <?php
   2 /**
   3  * Name: Facebook Post Connector
   4  * Version: 1.3
   5  * Author: Mike Macgirvin <http://macgirvin.com/profile/mike>
   6  * Author: Tobias Hößl <https://github.com/CatoTH/>
   7  *
   8  */
   9
  10 /**
  11  * Installing the Friendica/Facebook connector
  12  *
  13  * Detailed instructions how to use this plugin can be found at
  14  * https://github.com/friendica/friendica/wiki/How-to:-Friendica%E2%80%99s-Facebook-connector
  15  *
  16  * Vidoes and embeds will not be posted if there is no other content. Links
  17  * and images will be converted to a format suitable for the Facebook API and
  18  * long posts truncated - with a link to view the full post.
  19  *
  20  * Facebook contacts will not be able to view private photos, as they are not able to
  21  * authenticate to your site to establish identity. We will address this
  22  * in a future release.
  23  */
  24
  25
  26 require_once('include/security.php');
  27
  28 function fbpost_install() {
  29         register_hook('post_local',       'addon/fbpost/fbpost.php', 'fbpost_post_local');
  30         register_hook('notifier_normal',  'addon/fbpost/fbpost.php', 'fbpost_post_hook');
  31         register_hook('jot_networks',     'addon/fbpost/fbpost.php', 'fbpost_jot_nets');
  32         register_hook('connector_settings',  'addon/fbpost/fbpost.php', 'fbpost_plugin_settings');
  33         register_hook('enotify',          'addon/fbpost/fbpost.php', 'fbpost_enotify');
  34         register_hook('queue_predeliver', 'addon/fbpost/fbpost.php', 'fbpost_queue_hook');
  35 }
  36
  37
  38 function fbpost_uninstall() {
  39         unregister_hook('post_local',       'addon/fbpost/fbpost.php', 'fbpost_post_local');
  40         unregister_hook('notifier_normal',  'addon/fbpost/fbpost.php', 'fbpost_post_hook');
  41         unregister_hook('jot_networks',     'addon/fbpost/fbpost.php', 'fbpost_jot_nets');
  42         unregister_hook('connector_settings',  'addon/fbpost/fbpost.php', 'fbpost_plugin_settings');
  43         unregister_hook('enotify',          'addon/fbpost/fbpost.php', 'fbpost_enotify');
  44         unregister_hook('queue_predeliver', 'addon/fbpost/fbpost.php', 'fbpost_queue_hook');
  45
  46
  47 }
  48
  49
  50 /* declare the fbpost_module function so that /fbpost url requests will land here */
  51
  52 function fbpost_module() {}
  53
  54
  55
  56 // If a->argv[1] is a nickname, this is a callback from Facebook oauth requests.
  57 // If $_REQUEST["realtime_cb"] is set, this is a callback from the Real-Time Updates API
  58
  59 /**
  60  * @param App $a
  61  */
  62 function fbpost_init(&$a) {
  63
  64         if($a->argc != 2)
  65                 return;
  66
  67         $nick = $a->argv[1];
  68
  69         if(strlen($nick))
  70                 $r = q("SELECT `uid` FROM `user` WHERE `nickname` = '%s' LIMIT 1",
  71                                 dbesc($nick)
  72                 );
  73         if(!(isset($r) && count($r)))
  74                 return;
  75
  76         $uid           = $r[0]['uid'];
  77         $auth_code     = (x($_GET, 'code') ? $_GET['code'] : '');
  78         $error         = (x($_GET, 'error_description') ? $_GET['error_description'] : '');
  79
  80
  81         if($error)
  82                 logger('fbpost_init: Error: ' . $error);
  83
  84         if($auth_code && $uid) {
  85
  86                 $appid = get_config('facebook','appid');
  87                 $appsecret = get_config('facebook', 'appsecret');
  88
  89                 $x = fetch_url('https://graph.facebook.com/oauth/access_token?client_id='
  90                         . $appid . '&client_secret=' . $appsecret . '&redirect_uri='
  91                         . urlencode($a->get_baseurl() . '/fbpost/' . $nick)
  92                         . '&code=' . $auth_code);
  93
  94                 logger('fbpost_init: returned access token: ' . $x, LOGGER_DATA);
  95
  96                 if(strpos($x,'access_token=') !== false) {
  97                         $token = str_replace('access_token=', '', $x);
  98                         if(strpos($token,'&') !== false)
  99                                 $token = substr($token,0,strpos($token,'&'));
 100                         set_pconfig($uid,'facebook','access_token',$token);
 101                         set_pconfig($uid,'facebook','post','1');
 102                         fbpost_get_self($uid);
 103                 }
 104
 105         }
 106
 107 }
 108
 109
 110 /**
 111  * @param int $uid
 112  */
 113 function fbpost_get_self($uid) {
 114         $access_token = get_pconfig($uid,'facebook','access_token');
 115         if(! $access_token)
 116                 return;
 117         $s = fetch_url('https://graph.facebook.com/me/?access_token=' . $access_token);
 118         if($s) {
 119                 $j = json_decode($s);
 120                 set_pconfig($uid,'facebook','self_id',(string) $j->id);
 121         }
 122 }
 123
 124
 125 // This is the POST method to the facebook settings page
 126 // Content is posted to Facebook in the function facebook_post_hook()
 127
 128 /**
 129  * @param App $a
 130  */
 131 function fbpost_post(&$a) {
 132
 133         $uid = local_user();
 134         if($uid){
 135
 136
 137                 $fb_limited = get_config('facebook','crestrict');
 138
 139
 140                 $value = ((x($_POST,'post_by_default')) ? intval($_POST['post_by_default']) : 0);
 141                 set_pconfig($uid,'facebook','post_by_default', $value);
 142
 143                 $value = ((x($_POST,'suppress_view_on_friendica')) ? intval($_POST['suppress_view_on_friendica']) : 0);
 144                 set_pconfig($uid,'facebook','suppress_view_on_friendica', $value);
 145
 146                 $value = ((x($_POST,'post_to_page')) ? $_POST['post_to_page'] : "0-0");
 147                 $values = explode("-", $value);
 148                 set_pconfig($uid,'facebook','post_to_page', $values[0]);
 149                 set_pconfig($uid,'facebook','page_access_token', $values[1]);
 150
 151                 info( t('Settings updated.') . EOL);
 152         }
 153
 154         return;
 155 }
 156
 157 // Facebook settings form
 158
 159 /**
 160  * @param App $a
 161  * @return string
 162  */
 163 function fbpost_content(&$a) {
 164
 165         if(! local_user()) {
 166                 notice( t('Permission denied.') . EOL);
 167                 return '';
 168         }
 169
 170
 171         if(! service_class_allows(local_user(),'facebook_connect')) {
 172                 notice( t('Permission denied.') . EOL);
 173                 return upgrade_bool_message();
 174         }
 175
 176
 177         if($a->argc > 1 && $a->argv[1] === 'remove') {
 178                 del_pconfig(local_user(),'facebook','post');
 179                 info( t('Facebook Post disabled') . EOL);
 180         }
 181
 182         $o = '';
 183
 184         $fb_installed = false;
 185         if (get_pconfig(local_user(),'facebook','post')) {
 186                 $access_token = get_pconfig(local_user(),'facebook','access_token');
 187                 if ($access_token) {
 188                         $s = fetch_url('https://graph.facebook.com/me/feed?access_token=' . $access_token);
 189                         if($s) {
 190                                 $j = json_decode($s);
 191                                 if (isset($j->data)) $fb_installed = true;
 192                         }
 193                 }
 194         }
 195
 196         $appid = get_config('facebook','appid');
 197
 198         if(! $appid) {
 199                 notice( t('Facebook API key is missing.') . EOL);
 200                 return '';
 201         }
 202
 203         $a->page['htmlhead'] .= '<link rel="stylesheet" type="text/css" href="'
 204                 . $a->get_baseurl() . '/addon/fbpost/fbpost.css' . '" media="all" />' . "\r\n";
 205
 206         $o .= '<h3>' . t('Facebook Post') . '</h3>';
 207
 208         if(! $fb_installed) {
 209                 $o .= '<div id="fbpost-enable-wrapper">';
 210
 211                 $o .= '<a href="https://www.facebook.com/dialog/oauth?client_id=' . $appid . '&redirect_uri='
 212                         . $a->get_baseurl() . '/fbpost/' . $a->user['nickname'] . '&scope=publish_stream,manage_pages,photo_upload,user_groups,offline_access">' . t('Install Facebook Post connector for this account.') . '</a>';
 213                 $o .= '</div>';
 214         }
 215
 216         if($fb_installed) {
 217                 $o .= '<div id="fbpost-disable-wrapper">';
 218
 219                 $o .= '<a href="' . $a->get_baseurl() . '/fbpost/remove' . '">' . t('Remove Facebook Post connector') . '</a></div>';
 220
 221                 $o .= '<div id="fbpost-enable-wrapper">';
 222
 223                 $o .= '<a href="https://www.facebook.com/dialog/oauth?client_id=' . $appid . '&redirect_uri='
 224                         . $a->get_baseurl() . '/fbpost/' . $a->user['nickname'] . '&scope=publish_stream,manage_pages,photo_upload,user_groups,offline_access">' . t('Re-authenticate [This is necessary whenever your Facebook password is changed.]') . '</a>';
 225                 $o .= '</div>';
 226
 227                 $o .= '<div id="fbpost-post-default-form">';
 228                 $o .= '<form action="fbpost" method="post" >';
 229                 $post_by_default = get_pconfig(local_user(),'facebook','post_by_default');
 230                 $checked = (($post_by_default) ? ' checked="checked" ' : '');
 231                 $o .= '<input type="checkbox" name="post_by_default" value="1"' . $checked . '/>' . ' ' . t('Post to Facebook by default') . EOL;
 232
 233                 $suppress_view_on_friendica = get_pconfig(local_user(),'facebook','suppress_view_on_friendica');
 234                 $checked = (($suppress_view_on_friendica) ? ' checked="checked" ' : '');
 235                 $o .= '<input type="checkbox" name="suppress_view_on_friendica" value="1"' . $checked . '/>' . ' ' . t('Suppress "View on friendica"') . EOL;
 236
 237                 // List all pages
 238                 $post_to_page = get_pconfig(local_user(),'facebook','post_to_page');
 239                 $page_access_token = get_pconfig(local_user(),'facebook','page_access_token');
 240                 $fb_token  = get_pconfig($a->user['uid'],'facebook','access_token');
 241                 $url = 'https://graph.facebook.com/me/accounts';
 242                 $x = file_get_contents($url."?access_token=".$fb_token);
 243                 $accounts = json_decode($x);
 244
 245                 $o .= t("Post to page/group:")."<select name='post_to_page'>";
 246                 if (intval($post_to_page) == 0)
 247                         $o .= "<option value='0-0' selected>".t('None')."</option>";
 248                 else
 249                         $o .= "<option value='0-0'>".t('None')."</option>";
 250
 251                 foreach($accounts->data as $account) {
 252                         if (is_array($account->perms))
 253                                 if ($post_to_page == $account->id)
 254                                         $o .= "<option value='".$account->id."-".$account->access_token."' selected>".$account->name."</option>";
 255                                 else
 256                                         $o .= "<option value='".$account->id."-".$account->access_token."'>".$account->name."</option>";
 257                 }
 258
 259                 $url = 'https://graph.facebook.com/me/groups';
 260                 $x = file_get_contents($url."?access_token=".$fb_token);
 261                 $groups = json_decode($x);
 262
 263                 foreach($groups->data as $group) {
 264                         if ($post_to_page == $group->id)
 265                                 $o .= "<option value='".$group->id."-0' selected>".$group->name."</option>";
 266                         else
 267                                 $o .= "<option value='".$group->id."-0'>".$group->name."</option>";
 268                 }
 269
 270                 $o .= "</select>";
 271
 272                 $o .= '<p><input type="submit" name="submit" value="' . t('Submit') . '" /></form></div>';
 273
 274         }
 275
 276         return $o;
 277 }
 278
 279 /**
 280  * @param App $a
 281  * @param null|object $b
 282  */
 283 function fbpost_plugin_settings(&$a,&$b) {
 284
 285         $b .= '<div class="settings-block">';
 286         $b .= '<h3>' . t('Facebook') . '</h3>';
 287         $b .= '<a href="fbpost">' . t('Facebook Post Settings') . '</a><br />';
 288         $b .= '</div>';
 289
 290 }
 291
 292
 293 /**
 294  * @param App $a
 295  * @param null|object $o
 296  */
 297 function fbpost_plugin_admin(&$a, &$o){
 298
 299
 300         $o = '<input type="hidden" name="form_security_token" value="' . get_form_security_token("fbsave") . '">';
 301
 302         $o .= '<h4>' . t('Facebook API Key') . '</h4>';
 303
 304         $appid  = get_config('facebook', 'appid'  );
 305         $appsecret = get_config('facebook', 'appsecret' );
 306
 307         $ret1 = q("SELECT `v` FROM `config` WHERE `cat` = 'facebook' AND `k` = 'appid' LIMIT 1");
 308         $ret2 = q("SELECT `v` FROM `config` WHERE `cat` = 'facebook' AND `k` = 'appsecret' LIMIT 1");
 309         if ((count($ret1) > 0 && $ret1[0]['v'] != $appid) || (count($ret2) > 0 && $ret2[0]['v'] != $appsecret)) $o .= t('Error: it appears that you have specified the App-ID and -Secret in your .htconfig.php file. As long as they are specified there, they cannot be set using this form.<br><br>');
 310
 311         $o .= '<label for="fb_appid">' . t('App-ID / API-Key') . '</label><input id="fb_appid" name="appid" type="text" value="' . escape_tags($appid ? $appid : "") . '"><br style="clear: both;">';
 312         $o .= '<label for="fb_appsecret">' . t('Application secret') . '</label><input id="fb_appsecret" name="appsecret" type="text" value="' . escape_tags($appsecret ? $appsecret : "") . '"><br style="clear: both;">';
 313
 314         $o .= '<input type="submit" name="fb_save_keys" value="' . t('Save') . '">';
 315
 316 }
 317
 318 /**
 319  * @param App $a
 320  */
 321
 322 function fbpost_plugin_admin_post(&$a){
 323         check_form_security_token_redirectOnErr('/admin/plugins/fbpost', 'fbsave');
 324
 325         if (x($_REQUEST,'fb_save_keys')) {
 326                 set_config('facebook', 'appid', $_REQUEST['appid']);
 327                 set_config('facebook', 'appsecret', $_REQUEST['appsecret']);
 328
 329                 info(t('The new values have been saved.'));
 330         }
 331
 332 }
 333
 334 /**
 335  * @param App $a
 336  * @param object $b
 337  * @return mixed
 338  */
 339 function fbpost_jot_nets(&$a,&$b) {
 340         if(! local_user())
 341                 return;
 342
 343         $fb_post = get_pconfig(local_user(),'facebook','post');
 344         if(intval($fb_post) == 1) {
 345                 $fb_defpost = get_pconfig(local_user(),'facebook','post_by_default');
 346                 $selected = ((intval($fb_defpost) == 1) ? ' checked="checked" ' : '');
 347                 $b .= '<div class="profile-jot-net"><input type="checkbox" name="facebook_enable"' . $selected . ' value="1" /> '
 348                         . t('Post to Facebook') . '</div>';
 349         }
 350 }
 351
 352 function fbpost_ShareAttributes($match) {
 353
 354         $attributes = $match[1];
 355
 356         $author = "";
 357         preg_match("/author='(.*?)'/ism", $attributes, $matches);
 358         if ($matches[1] != "")
 359                 $author = $matches[1];
 360
 361         preg_match('/author="(.*?)"/ism', $attributes, $matches);
 362         if ($matches[1] != "")
 363                 $author = $matches[1];
 364
 365         $headline = '<div class="shared_header">';
 366
 367         $headline .= sprintf(t('%s:'), $author);
 368
 369         $headline .= "</div>";
 370
 371         //$text = "<br />".$headline."</strong><blockquote>".$match[2]."</blockquote>";
 372         $text = "\n\t".$match[2].":\t";
 373
 374         return($text);
 375 }
 376
 377
 378 /**
 379  * @param App $a
 380  * @param object $b
 381  * @return mixed
 382  */
 383 function fbpost_post_hook(&$a,&$b) {
 384
 385
 386         if($b['deleted'] || ($b['created'] !== $b['edited']))
 387                 return;
 388
 389         /**
 390          * Post to Facebook stream
 391          */
 392
 393         require_once('include/group.php');
 394         require_once('include/html2plain.php');
 395
 396         logger('Facebook post');
 397
 398         $reply = false;
 399         $likes = false;
 400
 401         $deny_arr = array();
 402         $allow_arr = array();
 403
 404         $toplevel = (($b['id'] == $b['parent']) ? true : false);
 405
 406
 407         $linking = ((get_pconfig($b['uid'],'facebook','no_linking')) ? 0 : 1);
 408
 409         if((! $toplevel) && ($linking)) {
 410                 $r = q("SELECT * FROM `item` WHERE `id` = %d AND `uid` = %d LIMIT 1",
 411                         intval($b['parent']),
 412                         intval($b['uid'])
 413                 );
 414                 if(count($r) && substr($r[0]['uri'],0,4) === 'fb::')
 415                         $reply = substr($r[0]['uri'],4);
 416                 elseif(count($r) && substr($r[0]['extid'],0,4) === 'fb::')
 417                         $reply = substr($r[0]['extid'],4);
 418                 else
 419                         return;
 420
 421                 $u = q("SELECT * FROM user where uid = %d limit 1",
 422                         intval($b['uid'])
 423                 );
 424                 if(! count($u))
 425                         return;
 426
 427                 // only accept comments from the item owner. Other contacts are unknown to FB.
 428
 429                 if(! link_compare($b['author-link'], $a->get_baseurl() . '/profile/' . $u[0]['nickname']))
 430                         return;
 431
 432
 433                 logger('facebook reply id=' . $reply);
 434         }
 435
 436         if(strstr($b['postopts'],'facebook') || ($b['private']) || ($reply)) {
 437
 438                 if($b['private'] && $reply === false) {
 439                         $allow_people = expand_acl($b['allow_cid']);
 440                         $allow_groups = expand_groups(expand_acl($b['allow_gid']));
 441                         $deny_people  = expand_acl($b['deny_cid']);
 442                         $deny_groups  = expand_groups(expand_acl($b['deny_gid']));
 443
 444                         $recipients = array_unique(array_merge($allow_people,$allow_groups));
 445                         $deny = array_unique(array_merge($deny_people,$deny_groups));
 446
 447                         $allow_str = dbesc(implode(', ',$recipients));
 448                         if($allow_str) {
 449                                 $r = q("SELECT `notify` FROM `contact` WHERE `id` IN ( $allow_str ) AND `network` = 'face'");
 450                                 if(count($r))
 451                                         foreach($r as $rr)
 452                                                 $allow_arr[] = $rr['notify'];
 453                         }
 454
 455                         $deny_str = dbesc(implode(', ',$deny));
 456                         if($deny_str) {
 457                                 $r = q("SELECT `notify` FROM `contact` WHERE `id` IN ( $deny_str ) AND `network` = 'face'");
 458                                 if(count($r))
 459                                         foreach($r as $rr)
 460                                                 $deny_arr[] = $rr['notify'];
 461                         }
 462
 463                         if(count($deny_arr) && (! count($allow_arr))) {
 464
 465                                 // One or more FB folks were denied access but nobody on FB was specifically allowed access.
 466                                 // This might cause the post to be open to public on Facebook, but only to selected members
 467                                 // on another network. Since this could potentially leak a post to somebody who was denied,
 468                                 // we will skip posting it to Facebook with a slightly vague but relevant message that will
 469                                 // hopefully lead somebody to this code comment for a better explanation of what went wrong.
 470
 471                                 notice( t('Post to Facebook cancelled because of multi-network access permission conflict.') . EOL);
 472                                 return;
 473                         }
 474
 475
 476                         // if it's a private message but no Facebook members are allowed or denied, skip Facebook post
 477
 478                         if((! count($allow_arr)) && (! count($deny_arr)))
 479                                 return;
 480                 }
 481
 482                 if($b['verb'] == ACTIVITY_LIKE)
 483                         $likes = true;
 484
 485
 486                 $appid  = get_config('facebook', 'appid'  );
 487                 $secret = get_config('facebook', 'appsecret' );
 488
 489                 if($appid && $secret) {
 490
 491                         logger('facebook: have appid+secret');
 492
 493                         $fb_token  = get_pconfig($b['uid'],'facebook','access_token');
 494
 495
 496                         // post to facebook if it's a public post and we've ticked the 'post to Facebook' box,
 497                         // or it's a private message with facebook participants
 498                         // or it's a reply or likes action to an existing facebook post
 499
 500                         if($fb_token && ($toplevel || $b['private'] || $reply)) {
 501                                 logger('facebook: able to post');
 502                                 require_once('library/facebook.php');
 503                                 require_once('include/bbcode.php');
 504
 505                                 $msg = $b['body'];
 506
 507                                 logger('Facebook post: original msg=' . $msg, LOGGER_DATA);
 508
 509                                 // make links readable before we strip the code
 510
 511                                 // unless it's a dislike - just send the text as a comment
 512
 513                                 // if($b['verb'] == ACTIVITY_DISLIKE)
 514                                 //      $msg = trim(strip_tags(bbcode($msg)));
 515
 516                                 // Old code
 517                                 /*$search_str = $a->get_baseurl() . '/search';
 518
 519                                 if(preg_match("/\[url=(.*?)\](.*?)\[\/url\]/is",$msg,$matches)) {
 520
 521                                         // don't use hashtags for message link
 522
 523                                         if(strpos($matches[2],$search_str) === false) {
 524                                                 $link = $matches[1];
 525                                                 if(substr($matches[2],0,5) != '[img]')
 526                                                         $linkname = $matches[2];
 527                                         }
 528                                 }
 529
 530                                 // strip tag links to avoid link clutter, this really should be
 531                                 // configurable because we're losing information
 532
 533                                 $msg = preg_replace("/\#\[url=(.*?)\](.*?)\[\/url\]/is",'#$2',$msg);
 534
 535                                 // provide the link separately for normal links
 536                                 $msg = preg_replace("/\[url=(.*?)\](.*?)\[\/url\]/is",'$2 $1',$msg);
 537
 538                                 if(preg_match("/\[img\](.*?)\[\/img\]/is",$msg,$matches))
 539                                         $image = $matches[1];
 540
 541                                 $msg = preg_replace("/\[img\](.*?)\[\/img\]/is", t('Image: ') . '$1', $msg);
 542
 543                                 if((strpos($link,z_root()) !== false) && (! $image))
 544                                         $image = $a->get_baseurl() . '/images/friendica-64.jpg';
 545
 546                                 $msg = trim(strip_tags(bbcode($msg)));*/
 547
 548                                 // New code
 549
 550                                 // Looking for the first image
 551                                 $image = '';
 552                                 if(preg_match("/\[img\=([0-9]*)x([0-9]*)\](.*?)\[\/img\]/is",$b['body'],$matches))
 553                                         $image = $matches[3];
 554
 555                                 if ($image == '')
 556                                         if(preg_match("/\[img\](.*?)\[\/img\]/is",$b['body'],$matches))
 557                                                 $image = $matches[1];
 558
 559                                 // When saved into the database the content is sent through htmlspecialchars
 560                                 // That means that we have to decode all image-urls
 561                                 $image = htmlspecialchars_decode($image);
 562
 563                                 // Checking for a bookmark element
 564                                 $body = $b['body'];
 565                                 if (strpos($body, "[bookmark") !== false) {
 566                                         // splitting the text in two parts:
 567                                         // before and after the bookmark
 568                                         $pos = strpos($body, "[bookmark");
 569                                         $body1 = substr($body, 0, $pos);
 570                                         $body2 = substr($body, $pos);
 571
 572                                         // Removing the bookmark and all quotes after the bookmark
 573                                         // they are mostly only the content after the bookmark.
 574                                         $body2 = preg_replace("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/ism",'',$body2);
 575                                         $body2 = preg_replace("/\[quote\=([^\]]*)\](.*?)\[\/quote\]/ism",'',$body2);
 576                                         $body2 = preg_replace("/\[quote\](.*?)\[\/quote\]/ism",'',$body2);
 577
 578                                         $body = $body1.$body2;
 579                                 }
 580
 581                                 // Convert recycle signs
 582                                 $body = str_replace("\t", " ", $body);
 583                                 // recycle 1
 584                                 $recycle = html_entity_decode("&#x2672; ", ENT_QUOTES, 'UTF-8');
 585                                 $body = preg_replace( '/'.$recycle.'\[url\=(\w+.*?)\](\w+.*?)\[\/url\]/i', "\n\t$2:\t", $body);
 586                                 // recycle 2 (Test)
 587                                 $recycle = html_entity_decode("&#x25CC; ", ENT_QUOTES, 'UTF-8');
 588                                 $body = preg_replace( '/'.$recycle.'\[url\=(\w+.*?)\](\w+.*?)\[\/url\]/i', "\n\t$2:\t", $body);
 589
 590                                 // share element
 591                                 $body = preg_replace_callback("/\[share(.*?)\]\s?(.*?)\s?\[\/share\]/ism","fbpost_ShareAttributes", $body);
 592
 593                                 $bodyparts = explode("\t", $body);
 594                                 // Doesn't help with multiple repeats - the problem has to be solved later
 595                                 if (sizeof($bodyparts) == 3) {
 596                                         $html = bbcode($bodyparts[2], false, false);
 597                                         $test = trim(html2plain($html, 0, true));
 598
 599                                         if (trim($bodyparts[0]) == "")
 600                                                 $body = trim($bodyparts[2]);
 601                                         else if (trim($test) == "")
 602                                                 $body = trim($bodyparts[0]);
 603                                         else
 604                                                 $body = trim($bodyparts[0])."\n\n".trim($bodyparts[1])."[quote]".trim($bodyparts[2])."[/quote]";
 605                                 } else
 606                                         $body = str_replace("\t", "", $body);
 607
 608                                 // At first convert the text to html
 609                                 $html = bbcode($body, false, false);
 610
 611                                 // Then convert it to plain text
 612                                 $msg = trim($b['title']." \n\n".html2plain($html, 0, true));
 613
 614                                 // Removing useless spaces
 615                                 if (substr($msg, -2) == "«")
 616                                         $msg = trim(substr($msg, 0, -2))."«";
 617
 618                                 $msg = html_entity_decode($msg,ENT_QUOTES,'UTF-8');
 619
 620                                 // Removing multiple newlines
 621                                 while (strpos($msg, "\n\n\n") !== false)
 622                                         $msg = str_replace("\n\n\n", "\n\n", $msg);
 623
 624                                 // add any attachments as text urls
 625                                 $arr = explode(',',$b['attach']);
 626
 627                                 if(count($arr)) {
 628                                         $msg .= "\n";
 629                                         foreach($arr as $r) {
 630                                                 $matches = false;
 631                                                 $cnt = preg_match('|\[attach\]href=\"(.*?)\" size=\"(.*?)\" type=\"(.*?)\" title=\"(.*?)\"\[\/attach\]|',$r,$matches);
 632                                                 if($cnt) {
 633                                                         $msg .= "\n".$matches[1];
 634                                                 }
 635                                         }
 636                                 }
 637
 638                                 $link = '';
 639                                 $linkname = '';
 640                                 // look for bookmark-bbcode and handle it with priority
 641                                 if(preg_match("/\[bookmark\=([^\]]*)\](.*?)\[\/bookmark\]/is",$b['body'],$matches)) {
 642                                         $link = $matches[1];
 643                                         $linkname = $matches[2];
 644                                 }
 645
 646                                 // If there is no bookmark element then take the first link
 647                                 if ($link == '') {
 648                                         $links = collecturls($html);
 649                                         if (sizeof($links) > 0) {
 650                                                 reset($links);
 651                                                 $link = current($links);
 652                                         }
 653                                 }
 654
 655                                 // Remove trailing and leading spaces
 656                                 $msg = trim($msg);
 657
 658
 659                                 // Fallback - if message is empty
 660                                 if(!strlen($msg))
 661                                         $msg = $linkname;
 662
 663                                 if(!strlen($msg))
 664                                         $msg = $link;
 665
 666                                 if(!strlen($msg))
 667                                         $msg = $image;
 668
 669                                 // If there is nothing to post then exit
 670                                 if(!strlen($msg))
 671                                         return;
 672
 673                                 logger('Facebook post: msg=' . $msg, LOGGER_DATA);
 674
 675                                 $video = "";
 676
 677                                 if($likes) {
 678                                         $postvars = array('access_token' => $fb_token);
 679                                 } else {
 680                                         // message, picture, link, name, caption, description, source, place, tags
 681                                         if(trim($link) != "")
 682                                                 if (@exif_imagetype($link) != 0) {
 683                                                         $image = $link;
 684                                                         $link = "";
 685                                                 }
 686
 687                                         $postvars = array(
 688                                                 'access_token' => $fb_token,
 689                                                 'message' => $msg
 690                                         );
 691                                         if(trim($image) != "")
 692                                                 $postvars['picture'] = $image;
 693
 694                                         if(trim($link) != "") {
 695                                                 $postvars['link'] = $link;
 696
 697                                                 if ((stristr($link,'youtube')) || (stristr($link,'youtu.be')) || (stristr($link,'vimeo'))) {
 698                                                         $video = $link;
 699                                                 }
 700                                         }
 701                                         if(trim($linkname) != "")
 702                                                 $postvars['name'] = $linkname;
 703                                 }
 704
 705                                 if(($b['private']) && ($toplevel)) {
 706                                         $postvars['privacy'] = '{"value": "CUSTOM", "friends": "SOME_FRIENDS"';
 707                                         if(count($allow_arr))
 708                                                 $postvars['privacy'] .= ',"allow": "' . implode(',',$allow_arr) . '"';
 709                                         if(count($deny_arr))
 710                                                 $postvars['privacy'] .= ',"deny": "' . implode(',',$deny_arr) . '"';
 711                                         $postvars['privacy'] .= '}';
 712
 713                                 }
 714
 715                                 $post_to_page = get_pconfig($b['uid'],'facebook','post_to_page');
 716                                 $page_access_token = get_pconfig($b['uid'],'facebook','page_access_token');
 717                                 if ((intval($post_to_page) != 0) and ($page_access_token != ""))
 718                                         $target = $post_to_page;
 719                                 else
 720                                         $target = "me";
 721
 722                                 if($reply) {
 723                                         $url = 'https://graph.facebook.com/' . $reply . '/' . (($likes) ? 'likes' : 'comments');
 724                                 } else if (($video != "") or (($image == "") and ($link != ""))) {
 725                                         // If it is a link to a video or a link without a preview picture then post it as a link
 726                                         if ($video != "")
 727                                                 $link = $video;
 728
 729                                         $postvars = array(
 730                                                 'access_token' => $fb_token,
 731                                                 'link' => $link,
 732                                         );
 733                                         if ($msg != $video)
 734                                                 $postvars['message'] = $msg;
 735
 736                                         $url = 'https://graph.facebook.com/'.$target.'/links';
 737                                 } else if (($link == "") and ($image != "")) {
 738                                         // If it is only an image without a page link then post this image as a photo
 739                                         $postvars = array(
 740                                                 'access_token' => $fb_token,
 741                                                 'url' => $image,
 742                                         );
 743                                         if ($msg != $image)
 744                                                 $postvars['message'] = $msg;
 745
 746                                         $url = 'https://graph.facebook.com/'.$target.'/photos';
 747                                 } else if (($link != "") or ($image != "") or ($b['title'] == '') or (strlen($msg) < 500)) {
 748                                         $url = 'https://graph.facebook.com/'.$target.'/feed';
 749                                         if (!get_pconfig($b['uid'],'facebook','suppress_view_on_friendica') and $b['plink'])
 750                                                 $postvars['actions'] = '{"name": "' . t('View on Friendica') . '", "link": "' .  $b['plink'] . '"}';
 751                                 } else {
 752                                         // if its only a message and a subject and the message is larger than 500 characters then post it as note
 753                                         $postvars = array(
 754                                                 'access_token' => $fb_token,
 755                                                 'message' => bbcode($b['body'], false, false),
 756                                                 'subject' => $b['title'],
 757                                         );
 758                                         $url = 'https://graph.facebook.com/'.$target.'/notes';
 759                                 }
 760
 761                                 // Post to page?
 762                                 if (!$reply and ($target != "me") and $page_access_token)
 763                                         $postvars['access_token'] = $page_access_token;
 764
 765                                 logger('facebook: post to ' . $url);
 766                                 logger('facebook: postvars: ' . print_r($postvars,true));
 767
 768                                 // "test_mode" prevents anything from actually being posted.
 769                                 // Otherwise, let's do it.
 770
 771                                 if(! get_config('facebook','test_mode')) {
 772                                         $x = post_url($url, $postvars);
 773                                         logger('Facebook post returns: ' . $x, LOGGER_DEBUG);
 774
 775                                         $retj = json_decode($x);
 776                                         if($retj->id) {
 777                                                 q("UPDATE `item` SET `extid` = '%s' WHERE `id` = %d LIMIT 1",
 778                                                         dbesc('fb::' . $retj->id),
 779                                                         intval($b['id'])
 780                                                 );
 781                                         }
 782                                         else {
 783                                                 if(! $likes) {
 784                                                         $s = serialize(array('url' => $url, 'item' => $b['id'], 'post' => $postvars));
 785                                                         require_once('include/queue_fn.php');
 786                                                         add_to_queue($a->contact,NETWORK_FACEBOOK,$s);
 787                                                         notice( t('Facebook post failed. Queued for retry.') . EOL);
 788                                                 }
 789
 790                                                 if (isset($retj->error) && $retj->error->type == "OAuthException" && $retj->error->code == 190) {
 791                                                         logger('Facebook session has expired due to changed password.', LOGGER_DEBUG);
 792
 793                                                         $last_notification = get_pconfig($b['uid'], 'facebook', 'session_expired_mailsent');
 794                                                         if (!$last_notification || $last_notification < (time() - FACEBOOK_SESSION_ERR_NOTIFICATION_INTERVAL)) {
 795                                                                 require_once('include/enotify.php');
 796
 797                                                                 $r = q("SELECT * FROM `user` WHERE `uid` = %d LIMIT 1", intval($b['uid']) );
 798                                                                 notification(array(
 799                                                                         'uid' => $b['uid'],
 800                                                                         'type' => NOTIFY_SYSTEM,
 801                                                                         'system_type' => 'facebook_connection_invalid',
 802                                                                         'language'     => $r[0]['language'],
 803                                                                         'to_name'      => $r[0]['username'],
 804                                                                         'to_email'     => $r[0]['email'],
 805                                                                         'source_name'  => t('Administrator'),
 806                                                                         'source_link'  => $a->config["system"]["url"],
 807                                                                         'source_photo' => $a->config["system"]["url"] . '/images/person-80.jpg',
 808                                                                 ));
 809
 810                                                                 set_pconfig($b['uid'], 'facebook', 'session_expired_mailsent', time());
 811                                                         } else logger('Facebook: No notification, as the last one was sent on ' . $last_notification, LOGGER_DEBUG);
 812                                                 }
 813                                         }
 814                                 }
 815                         }
 816                 }
 817         }
 818 }
 819
 820 /**
 821  * @param App $app
 822  * @param object $data
 823  */
 824 function fbpost_enotify(&$app, &$data) {
 825         if (x($data, 'params') && $data['params']['type'] == NOTIFY_SYSTEM && x($data['params'], 'system_type') && $data['params']['system_type'] == 'facebook_connection_invalid') {
 826                 $data['itemlink'] = '/facebook';
 827                 $data['epreamble'] = $data['preamble'] = t('Your Facebook connection became invalid. Please Re-authenticate.');
 828                 $data['subject'] = t('Facebook connection became invalid');
 829                 $data['body'] = sprintf( t("Hi %1\$s,\n\nThe connection between your accounts on %2\$s and Facebook became invalid. This usually happens after you change your Facebook-password. To enable the connection again, you have to %3\$sre-authenticate the Facebook-connector%4\$s."), $data['params']['to_name'], "[url=" . $app->config["system"]["url"] . "]" . $app->config["sitename"] . "[/url]", "[url=" . $app->config["system"]["url"] . "/facebook]", "[/url]");
 830         }
 831 }
 832
 833 /**
 834  * @param App $a
 835  * @param object $b
 836  */
 837 function fbpost_post_local(&$a,&$b) {
 838
 839         // Figure out if Facebook posting is enabled for this post and file it in 'postopts'
 840         // where we will discover it during background delivery.
 841
 842         // This can only be triggered by a local user posting to their own wall.
 843
 844         if((local_user()) && (local_user() == $b['uid'])) {
 845
 846                 $fb_post   = intval(get_pconfig(local_user(),'facebook','post'));
 847                 $fb_enable = (($fb_post && x($_REQUEST,'facebook_enable')) ? intval($_REQUEST['facebook_enable']) : 0);
 848
 849                 // if API is used, default to the chosen settings
 850                 // but allow a specific override
 851
 852                 if($_REQUEST['api_source'] && intval(get_pconfig(local_user(),'facebook','post_by_default'))) {
 853                         if(! x($_REQUEST,'facebook_enable'))
 854                                 $fb_enable = 1;
 855                 }
 856
 857                 if(! $fb_enable)
 858                         return;
 859
 860                 if(strlen($b['postopts']))
 861                         $b['postopts'] .= ',';
 862                 $b['postopts'] .= 'facebook';
 863         }
 864 }
 865
 866
 867 /**
 868  * @param App $a
 869  * @param object $b
 870  */
 871 function fbpost_queue_hook(&$a,&$b) {
 872
 873         $qi = q("SELECT * FROM `queue` WHERE `network` = '%s'",
 874                 dbesc(NETWORK_FACEBOOK)
 875         );
 876         if(! count($qi))
 877                 return;
 878
 879         require_once('include/queue_fn.php');
 880
 881         foreach($qi as $x) {
 882                 if($x['network'] !== NETWORK_FACEBOOK)
 883                         continue;
 884
 885                 logger('facebook_queue: run');
 886
 887                 $r = q("SELECT `user`.* FROM `user` LEFT JOIN `contact` on `contact`.`uid` = `user`.`uid`
 888                         WHERE `contact`.`self` = 1 AND `contact`.`id` = %d LIMIT 1",
 889                         intval($x['cid'])
 890                 );
 891                 if(! count($r))
 892                         continue;
 893
 894                 $user = $r[0];
 895
 896                 $appid  = get_config('facebook', 'appid'  );
 897                 $secret = get_config('facebook', 'appsecret' );
 898
 899                 if($appid && $secret) {
 900                         $fb_post   = intval(get_pconfig($user['uid'],'facebook','post'));
 901                         $fb_token  = get_pconfig($user['uid'],'facebook','access_token');
 902
 903                         if($fb_post && $fb_token) {
 904                                 logger('facebook_queue: able to post');
 905                                 require_once('library/facebook.php');
 906
 907                                 $z = unserialize($x['content']);
 908                                 $item = $z['item'];
 909                                 $j = post_url($z['url'],$z['post']);
 910
 911                                 $retj = json_decode($j);
 912                                 if($retj->id) {
 913                                         q("UPDATE `item` SET `extid` = '%s' WHERE `id` = %d LIMIT 1",
 914                                                 dbesc('fb::' . $retj->id),
 915                                                 intval($item)
 916                                         );
 917                                         logger('facebook_queue: success: ' . $j);
 918                                         remove_queue_item($x['id']);
 919                                 }
 920                                 else {
 921                                         logger('facebook_queue: failed: ' . $j);
 922                                         update_queue_time($x['id']);
 923                                 }
 924                         }
 925                 }
 926         }
 927 }
 928
 929
 930 /**
 931  * @return bool|string
 932  */
 933 function fbpost_get_app_access_token() {
 934
 935         $acc_token = get_config('facebook','app_access_token');
 936
 937         if ($acc_token !== false) return $acc_token;
 938
 939         $appid = get_config('facebook','appid');
 940         $appsecret = get_config('facebook', 'appsecret');
 941
 942         if ($appid === false || $appsecret === false) {
 943                 logger('fb_get_app_access_token: appid and/or appsecret not set', LOGGER_DEBUG);
 944                 return false;
 945         }
 946         logger('https://graph.facebook.com/oauth/access_token?client_id=' . $appid . '&client_secret=' . $appsecret . '&grant_type=client_credentials', LOGGER_DATA);
 947         $x = fetch_url('https://graph.facebook.com/oauth/access_token?client_id=' . $appid . '&client_secret=' . $appsecret . '&grant_type=client_credentials');
 948
 949         if(strpos($x,'access_token=') !== false) {
 950                 logger('fb_get_app_access_token: returned access token: ' . $x, LOGGER_DATA);
 951
 952                 $token = str_replace('access_token=', '', $x);
 953                 if(strpos($token,'&') !== false)
 954                         $token = substr($token,0,strpos($token,'&'));
 955
 956                 if ($token == "") {
 957                         logger('fb_get_app_access_token: empty token: ' . $x, LOGGER_DEBUG);
 958                         return false;
 959                 }
 960                 set_config('facebook','app_access_token',$token);
 961                 return $token;
 962         } else {
 963                 logger('fb_get_app_access_token: response did not contain an access_token: ' . $x, LOGGER_DATA);
 964                 return false;
 965         }
 966 }
 967