friendica-github/include/diaspora2.php

<?php
/**
 * @file include/diaspora.php
 * @brief The implementation of the diaspora protocol
 */

require_once("include/diaspora.php");
require_once("include/Scrape.php");

function array_to_xml($array, &$xml) {

	if (!is_object($xml)) {
		foreach($array as $key => $value) {
			$root = new SimpleXMLElement('<'.$key.'/>');
			array_to_xml($value, $root);

			$dom = dom_import_simplexml($root)->ownerDocument;
			$dom->formatOutput = true;
			return $dom->saveXML();
		}
	}

	foreach($array as $key => $value) {
		if (!is_array($value) AND !is_numeric($key))
			$xml->addChild($key, $value);
		elseif (is_array($value))
			array_to_xml($value, $xml->addChild($key));
	}
}

/**
 * @brief This class contain functions to create and send DFRN XML files
 *
 */
class diaspora {

	public static function dispatch_public($msg) {

		$enabled = intval(get_config("system", "diaspora_enabled"));
		if (!$enabled) {
			logger('diaspora is disabled');
			return false;
		}

		// Use a dummy importer to import the data for the public copy
		$importer = array("uid" => 0, "page-flags" => PAGE_FREELOVE);
		self::dispatch($importer,$msg);

		// Now distribute it to the followers
		$r = q("SELECT `user`.* FROM `user` WHERE `user`.`uid` IN
			(SELECT `contact`.`uid` FROM `contact` WHERE `contact`.`network` = '%s' AND `contact`.`addr` = '%s')
			AND NOT `account_expired` AND NOT `account_removed`",
			dbesc(NETWORK_DIASPORA),
			dbesc($msg["author"])
		);
		if(count($r)) {
			foreach($r as $rr) {
				logger("delivering to: ".$rr["username"]);
				self::dispatch($rr,$msg);
			}
		} else
			logger("No subscribers for ".$msg["author"]." ".print_r($msg, true));
	}

	public static function dispatch($importer, $msg) {

		// The sender is the handle of the contact that sent the message.
		// This will often be different with relayed messages (for example "like" and "comment")
		$sender = $msg->author;

		if (!diaspora::valid_posting($msg, $fields)) {
			logger("Invalid posting");
			return false;
		}

		$type = $fields->getName();

		switch ($type) {
			case "account_deletion":
				return self::import_account_deletion($importer, $fields);

			case "comment":
				return self::import_comment($importer, $sender, $fields);

			case "conversation":
				return self::import_conversation($importer, $fields);

			case "like":
				return self::import_like($importer, $sender, $fields);

			case "message":
				return self::import_message($importer, $fields);

			case "participation":
				return self::import_participation($importer, $fields);

			case "photo":
				return self::import_photo($importer, $fields);

			case "poll_participation":
				return self::import_poll_participation($importer, $fields);

			case "profile":
				return self::import_profile($importer, $fields);

			case "request":
				return self::import_request($importer, $fields);

			case "reshare":
				return self::import_reshare($importer, $fields);

			case "retraction":
				return self::import_retraction($importer, $fields);

			case "status_message":
				return self::import_status_message($importer, $fields);

			default:
				logger("Unknown message type ".$type);
				return false;
		}

		return true;
	}

	/**
	 * @brief Checks if a posting is valid and fetches the data fields.
	 *
	 * This function does not only check the signature.
	 * It also does the conversion between the old and the new diaspora format.
	 *
	 * @param array $msg Array with the XML, the sender handle and the sender signature
	 * @param object $fields SimpleXML object that contains the posting
	 *
	 * @return bool Is the posting valid?
	 */
	private function valid_posting($msg, &$fields) {

		$data = parse_xml_string($msg->message, false);

		$first_child = $data->getName();

		if ($data->getName() == "XML") {
			$oldXML = true;
			foreach ($data->post->children() as $child)
				$element = $child;
		} else {
			$oldXML = false;
			$element = $data;
		}

		$type = $element->getName();

		if (in_array($type, array("signed_retraction", "relayable_retraction")))
			$type = "retraction";

		$fields = new SimpleXMLElement("<".$type."/>");

		$signed_data = "";

		foreach ($element->children() AS $fieldname => $data) {

			if ($oldXML) {
				// Translation for the old XML structure
				if ($fieldname == "diaspora_handle")
					$fieldname = "author";

				if ($fieldname == "participant_handles")
					$fieldname = "participants";

				if (in_array($type, array("like", "participation"))) {
					if ($fieldname == "target_type")
						$fieldname = "parent_type";
				}

				if ($fieldname == "sender_handle")
					$fieldname = "author";

				if ($fieldname == "recipient_handle")
					$fieldname = "recipient";

				if ($fieldname == "root_diaspora_id")
					$fieldname = "root_author";

				if ($type == "retraction") {
					if ($fieldname == "post_guid")
						$fieldname = "target_guid";

					if ($fieldname == "type")
						$fieldname = "target_type";
				}
			}

			if ($fieldname == "author_signature")
				$author_signature = base64_decode($data);
			elseif ($fieldname == "parent_author_signature")
				$parent_author_signature = base64_decode($data);
			elseif ($fieldname != "target_author_signature") {
				if ($signed_data != "") {
					$signed_data .= ";";
					$signed_data_parent .= ";";
				}

				$signed_data .= $data;
				$fields->$fieldname = $data;
			}
		}

		if (in_array($type, array("status_message", "reshare")))
			if ($msg->author != $fields->author) {
				logger("Message handle is not the same as envelope sender. Quitting this message.");
				return false;
			}

		if (!in_array($type, array("comment", "conversation", "message", "like")))
			return true;

		if (!isset($author_signature))
			return false;

		if (isset($parent_author_signature)) {
			$key = self::get_key($msg->author);

			if (!rsa_verify($signed_data, $parent_author_signature, $key, "sha256"))
				return false;
		}

		$key = self::get_key($fields->author);

		return rsa_verify($signed_data, $author_signature, $key, "sha256");
	}

	private function get_key($handle) {
		logger("Fetching diaspora key for: ".$handle);

		$r = self::get_person_by_handle($handle);
		if($r)
			return $r["pubkey"];

		return "";
	}

	private function get_person_by_handle($handle) {

		$r = q("SELECT * FROM `fcontact` WHERE `network` = '%s' AND `addr` = '%s' LIMIT 1",
			dbesc(NETWORK_DIASPORA),
			dbesc($handle)
		);
		if (count($r)) {
			$person = $r[0];
			logger("In cache ".print_r($r,true), LOGGER_DEBUG);

			// update record occasionally so it doesn't get stale
			$d = strtotime($person["updated"]." +00:00");
			if ($d < strtotime("now - 14 days"))
				$update = true;
		}

		if (!$person OR $update) {
			logger("create or refresh", LOGGER_DEBUG);
			$r = probe_url($handle, PROBE_DIASPORA);

			// Note that Friendica contacts will return a "Diaspora person"
			// if Diaspora connectivity is enabled on their server
			if (count($r) AND ($r["network"] === NETWORK_DIASPORA)) {
				self::add_fcontact($r, $update);
				$person = $r;
			}
		}
		return $person;
	}

	private function add_fcontact($arr, $update = false) {
		/// @todo Remove this function from include/network.php

		if($update) {
			$r = q("UPDATE `fcontact` SET
					`name` = '%s',
					`photo` = '%s',
					`request` = '%s',
					`nick` = '%s',
					`addr` = '%s',
					`batch` = '%s',
					`notify` = '%s',
					`poll` = '%s',
					`confirm` = '%s',
					`alias` = '%s',
					`pubkey` = '%s',
					`updated` = '%s'
				WHERE `url` = '%s' AND `network` = '%s'",
					dbesc($arr["name"]),
					dbesc($arr["photo"]),
					dbesc($arr["request"]),
					dbesc($arr["nick"]),
					dbesc($arr["addr"]),
					dbesc($arr["batch"]),
					dbesc($arr["notify"]),
					dbesc($arr["poll"]),
					dbesc($arr["confirm"]),
					dbesc($arr["alias"]),
					dbesc($arr["pubkey"]),
					dbesc(datetime_convert()),
					dbesc($arr["url"]),
					dbesc($arr["network"])
				);
		} else {
			$r = q("INSERT INTO `fcontact` (`url`,`name`,`photo`,`request`,`nick`,`addr`,
					`batch`, `notify`,`poll`,`confirm`,`network`,`alias`,`pubkey`,`updated`)
				VALUES ('%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s')",
					dbesc($arr["url"]),
					dbesc($arr["name"]),
					dbesc($arr["photo"]),
					dbesc($arr["request"]),
					dbesc($arr["nick"]),
					dbesc($arr["addr"]),
					dbesc($arr["batch"]),
					dbesc($arr["notify"]),
					dbesc($arr["poll"]),
					dbesc($arr["confirm"]),
					dbesc($arr["network"]),
					dbesc($arr["alias"]),
					dbesc($arr["pubkey"]),
					dbesc(datetime_convert())
				);
		}

		return $r;
	}

	private function get_contact_by_handle($uid, $handle) {
		$r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `addr` = '%s' LIMIT 1",
			intval($uid),
			dbesc($handle)
		);

		if ($r AND count($r))
			return $r[0];

		$handle_parts = explode("@", $handle);
		$nurl_sql = '%%://' . $handle_parts[1] . '%%/profile/' . $handle_parts[0];
		$r = q("SELECT * FROM `contact` WHERE `network` = '%s' AND `uid` = %d AND `nurl` LIKE '%s' LIMIT 1",
			dbesc(NETWORK_DFRN),
			intval($uid),
			dbesc($nurl_sql)
		);
		if($r AND count($r))
			return $r[0];

		return false;
	}

/*
function DiasporaFetchGuid($item) {
        preg_replace_callback("&\[url=/posts/([^\[\]]*)\](.*)\[\/url\]&Usi",
                function ($match) use ($item){
                        return(DiasporaFetchGuidSub($match, $item));
                },$item["body"]);
}

function DiasporaFetchGuidSub($match, $item) {
        $a = get_app();

        if (!diaspora_store_by_guid($match[1], $item["author-link"]))
                diaspora_store_by_guid($match[1], $item["owner-link"]);
}

function diaspora_store_by_guid($guid, $server, $uid = 0) {
        require_once("include/Contact.php");

        $serverparts = parse_url($server);
        $server = $serverparts["scheme"]."://".$serverparts["host"];

        logger("Trying to fetch item ".$guid." from ".$server, LOGGER_DEBUG);

        $item = diaspora_fetch_message($guid, $server);

        if (!$item)
                return false;

        logger("Successfully fetched item ".$guid." from ".$server, LOGGER_DEBUG);

        $body = $item["body"];
        $str_tags = $item["tag"];
        $app = $item["app"];
        $created = $item["created"];
        $author = $item["author"];
        $guid = $item["guid"];
        $private = $item["private"];
        $object = $item["object"];
        $objecttype = $item["object-type"];

        $message_id = $author.':'.$guid;
        $r = q("SELECT `id` FROM `item` WHERE `uid` = %d AND `guid` = '%s' LIMIT 1",
                intval($uid),
                dbesc($guid)
        );
        if(count($r))
                return $r[0]["id"];

        $person = find_diaspora_person_by_handle($author);

        $contact_id = get_contact($person['url'], $uid);

        $contacts = q("SELECT * FROM `contact` WHERE `id` = %d", intval($contact_id));
        $importers = q("SELECT * FROM `user` WHERE `uid` = %d", intval($uid));

        if ($contacts AND $importers)
                if(!diaspora_post_allow($importers[0],$contacts[0], false)) {
                        logger('Ignoring author '.$person['url'].' for uid '.$uid);
                        return false;
                } else
                        logger('Author '.$person['url'].' is allowed for uid '.$uid);

        $datarray = array();
        $datarray['uid'] = $uid;
        $datarray['contact-id'] = $contact_id;
        $datarray['wall'] = 0;
        $datarray['network'] = NETWORK_DIASPORA;
        $datarray['guid'] = $guid;
        $datarray['uri'] = $datarray['parent-uri'] = $message_id;
        $datarray['changed'] = $datarray['created'] = $datarray['edited'] = datetime_convert('UTC','UTC',$created);
        $datarray['private'] = $private;
        $datarray['parent'] = 0;
        $datarray['plink'] = diaspora_plink($author, $guid);
        $datarray['author-name'] = $person['name'];
        $datarray['author-link'] = $person['url'];
        $datarray['author-avatar'] = ((x($person,'thumb')) ? $person['thumb'] : $person['photo']);
        $datarray['owner-name'] = $datarray['author-name'];
        $datarray['owner-link'] = $datarray['author-link'];
        $datarray['owner-avatar'] = $datarray['author-avatar'];
        $datarray['body'] = $body;
        $datarray['tag'] = $str_tags;
        $datarray['app']  = $app;
        $datarray['visible'] = ((strlen($body)) ? 1 : 0);
        $datarray['object'] = $object;
        $datarray['object-type'] = $objecttype;

        if ($datarray['contact-id'] == 0)
                return false;

        DiasporaFetchGuid($datarray);
        $message_id = item_store($datarray);

        /// @TODO
        /// Looking if there is some subscribe mechanism in Diaspora to get all comments for this post

        return $message_id;
}
*/

	private function import_account_deletion($importer, $data) {
		return true;
	}

	private function import_comment($importer, $sender, $data) {
		$guid = notags(unxmlify($data->guid));
		$parent_guid = notags(unxmlify($data->parent_guid));
		$text = unxmlify($data->text);
		$author = notags(unxmlify($data->author));

		$contact = self::get_contact_by_handle($importer["uid"], $sender);
		if (!$contact) {
			logger("cannot find contact for sender: ".$sender);
			return false;
		}
/*
        if(! diaspora_post_allow($importer,$contact, true)) {
                logger('diaspora_comment: Ignoring this author.');
                return 202;
        }

        $r = q("SELECT * FROM `item` WHERE `uid` = %d AND `guid` = '%s' LIMIT 1",
                intval($importer['uid']),
                dbesc($guid)
        );
        if(count($r)) {
                logger('diaspora_comment: our comment just got relayed back to us (or there was a guid collision) : ' . $guid);
                return;
        }

        $r = q("SELECT * FROM `item` WHERE `uid` = %d AND `guid` = '%s' LIMIT 1",
                intval($importer['uid']),
                dbesc($parent_guid)
        );

        if(!count($r)) {
                $result = diaspora_store_by_guid($parent_guid, $contact['url'], $importer['uid']);

                if (!$result) {
                        $person = find_diaspora_person_by_handle($diaspora_handle);
                        $result = diaspora_store_by_guid($parent_guid, $person['url'], $importer['uid']);
                }

                if ($result) {
                        logger("Fetched missing item ".$parent_guid." - result: ".$result, LOGGER_DEBUG);

                        $r = q("SELECT * FROM `item` WHERE `uid` = %d AND `guid` = '%s' LIMIT 1",
                                intval($importer['uid']),
                                dbesc($parent_guid)
                        );
                }
        }

        if(! count($r)) {
                logger('diaspora_comment: parent item not found: parent: ' . $parent_guid . ' item: ' . $guid);
                return;
        }
        $parent_item = $r[0];

        // Find the original comment author information.
        // We need this to make sure we display the comment author
        // information (name and avatar) correctly.
        if(strcasecmp($diaspora_handle,$msg['author']) == 0)
                $person = $contact;
        else {
                $person = find_diaspora_person_by_handle($diaspora_handle);

                if(! is_array($person)) {
                        logger('diaspora_comment: unable to find author details');
                        return;
                }
        }

        // Fetch the contact id - if we know this contact
        $r = q("SELECT `id`, `network` FROM `contact` WHERE `nurl` = '%s' AND `uid` = %d LIMIT 1",
                dbesc(normalise_link($person['url'])), intval($importer['uid']));
        if ($r) {
                $cid = $r[0]['id'];
                $network = $r[0]['network'];
        } else {
                $cid = $contact['id'];
                $network = NETWORK_DIASPORA;
        }

        $body = diaspora2bb($text);
        $message_id = $diaspora_handle . ':' . $guid;

        $datarray = array();

        $datarray['uid'] = $importer['uid'];
        $datarray['contact-id'] = $cid;
        $datarray['type'] = 'remote-comment';
        $datarray['wall'] = $parent_item['wall'];
        $datarray['network']  = $network;
        $datarray['verb'] = ACTIVITY_POST;
        $datarray['gravity'] = GRAVITY_COMMENT;
        $datarray['guid'] = $guid;
        $datarray['uri'] = $message_id;
        $datarray['parent-uri'] = $parent_item['uri'];

        // No timestamps for comments? OK, we'll the use current time.
        $datarray['changed'] = $datarray['created'] = $datarray['edited'] = datetime_convert();
        $datarray['private'] = $parent_item['private'];

        $datarray['owner-name'] = $parent_item['owner-name'];
        $datarray['owner-link'] = $parent_item['owner-link'];
        $datarray['owner-avatar'] = $parent_item['owner-avatar'];

        $datarray['author-name'] = $person['name'];
        $datarray['author-link'] = $person['url'];
        $datarray['author-avatar'] = ((x($person,'thumb')) ? $person['thumb'] : $person['photo']);
        $datarray['body'] = $body;
        $datarray["object"] = json_encode($xml);
        $datarray["object-type"] = ACTIVITY_OBJ_COMMENT;

        // We can't be certain what the original app is if the message is relayed.
        if(($parent_item['origin']) && (! $parent_author_signature))
                $datarray['app']  = 'Diaspora';

        DiasporaFetchGuid($datarray);
        $message_id = item_store($datarray);

        $datarray['id'] = $message_id;

        // If we are the origin of the parent we store the original signature and notify our followers
        if($parent_item['origin']) {
                $author_signature_base64 = base64_encode($author_signature);
                $author_signature_base64 = diaspora_repair_signature($author_signature_base64, $diaspora_handle);

                q("insert into sign (`iid`,`signed_text`,`signature`,`signer`) values (%d,'%s','%s','%s') ",
                        intval($message_id),
                        dbesc($signed_data),
                        dbesc($author_signature_base64),
                        dbesc($diaspora_handle)
                );

                // notify others
                proc_run('php','include/notifier.php','comment-import',$message_id);
        }
*/
		return true;
	}

	private function import_conversation($importer, $data) {
		return true;
	}

	private function import_like($importer, $sender, $data) {
		return true;
	}

	private function import_message($importer, $data) {
		return true;
	}

	private function import_participation($importer, $data) {
		return true;
	}

	private function import_photo($importer, $data) {
		return true;
	}

	private function import_poll_participation($importer, $data) {
		return true;
	}

	private function import_profile($importer, $data) {
		return true;
	}

	private function import_request($importer, $data) {
		return true;
	}

	private function import_reshare($importer, $data) {
		return true;
	}

	private function import_retraction($importer, $data) {
		return true;
	}

	private function import_status_message($importer, $data) {
		return true;
	}
}
?>