streams/mod/page.php

<?php

require_once('include/items.php');
require_once('include/conversation.php');
require_once('include/page_widgets.php');

function page_init(&$a) {
	// We need this to make sure the channel theme is always loaded.

	$which = argv(1);
	$profile = 0;
	profile_load($a,$which,$profile);

	if($a->profile['profile_uid'])
		head_set_icon($a->profile['thumb']);


	// load the item here in the init function because we need to extract
	// the page layout and initialise the correct theme.


	$observer = $a->get_observer();
	$ob_hash = (($observer) ? $observer['xchan_hash'] : '');

	$perms = get_all_perms($a->profile['profile_uid'],$ob_hash);

	if(! $perms['view_pages']) {
		notice( t('Permission denied.') . EOL);
		return;
	}

	if(argc() < 3) {
		notice( t('Invalid item.') . EOL);
		return;
	}

	$channel_address = argv(1);

	// The page link title was stored in a urlencoded format
	// php or the browser may/will have decoded it, so re-encode it for our search

	$page_id = urlencode(argv(2));

	$u = q("select channel_id from channel where channel_address = '%s' limit 1",
		dbesc($channel_address)
	);

	if(! $u) {
		notice( t('Channel not found.') . EOL);
		return;
	}

	if($_REQUEST['rev'])
		$revision = " and revision = " . intval($_REQUEST['rev']) . " ";
	else
		$revision = " order by revision desc ";

	require_once('include/security.php');
	$sql_options = item_permissions_sql($u[0]['channel_id']);

	$r = q("select item.* from item left join item_id on item.id = item_id.iid
		where item.uid = %d and sid = '%s' and (( service = 'WEBPAGE' and item_type = %d ) 
		OR ( service = 'PDL' AND item_type = %d )) $sql_options $revision limit 1",
		intval($u[0]['channel_id']),
		dbesc($page_id),
		intval(ITEM_TYPE_WEBPAGE),
		intval(ITEM_PDL)
	);
	if(! $r) {

		// Check again with no permissions clause to see if it is a permissions issue

		$x = q("select item.* from item left join item_id on item.id = item_id.iid
		where item.uid = %d and sid = '%s' and service = 'WEBPAGE' and 
		item_type = %d $revision limit 1",
			intval($u[0]['channel_id']),
			dbesc($page_id),
			intval(ITEM_TYPE_WEBPAGE)
		);
		if($x) {
			// Yes, it's there. You just aren't allowed to see it.
			notice( t('Permission denied.') . EOL);
		}
		else {
			notice( t('Page not found.') . EOL);
		}
		return;
	}

	if($r[0]['item_restrict'] == ITEM_PDL) {
		require_once('include/comanche.php');
		comanche_parser(get_app(),$r[0]['body']);
			get_app()->pdl = $r[0]['body'];
	}
	elseif($r[0]['layout_mid']) {
		$l = q("select body from item where mid = '%s' and uid = %d limit 1",
			dbesc($r[0]['layout_mid']),
			intval($u[0]['channel_id'])
		);

		if($l) {
			require_once('include/comanche.php');
			comanche_parser(get_app(),$l[0]['body']);
			get_app()->pdl = $l[0]['body'];
		}
	}

	$a->data['webpage'] = $r;

}




function page_content(&$a) {

	$r = $a->data['webpage'];
	if(! $r)
		return;

	if($r[0]['item_restrict'] == ITEM_PDL) {
		$r[0]['body'] = t('Ipsum Lorem');
		$r[0]['mimetype'] = 'text/plain';
		$r[0]['title'] = '';
		
	}

	xchan_query($r);
	$r = fetch_post_tags($r,true);
	$o .= prepare_page($r[0]);
	return $o;

}