mirror of
https://codeberg.org/streams/streams.git
synced 2024-09-20 10:35:15 +00:00
438 lines
11 KiB
PHP
Executable file
438 lines
11 KiB
PHP
Executable file
<?php
|
|
|
|
require_once('include/security.php');
|
|
require_once('include/bbcode.php');
|
|
require_once('include/items.php');
|
|
|
|
|
|
function like_content(&$a) {
|
|
|
|
$o = '';
|
|
|
|
$observer = $a->get_observer();
|
|
$interactive = $_REQUEST['interactive'];
|
|
if($interactive) {
|
|
$o .= '<h1>' . t('Like/Dislike') . '</h1>';
|
|
$o .= EOL . EOL;
|
|
|
|
if(! $observer) {
|
|
$_SESSION['return_url'] = $a->query_string;
|
|
$o .= t('This action is restricted to members.') . EOL;
|
|
$o .= t('Please <a href="rmagic">login with your RedMatrix ID</a> or <a href="register">register as a new RedMatrix member</a> to continue.') . EOL;
|
|
return $o;
|
|
}
|
|
}
|
|
|
|
$verb = notags(trim($_GET['verb']));
|
|
|
|
if(! $verb)
|
|
$verb = 'like';
|
|
|
|
switch($verb) {
|
|
case 'like':
|
|
case 'unlike':
|
|
$activity = ACTIVITY_LIKE;
|
|
break;
|
|
case 'dislike':
|
|
case 'undislike':
|
|
$activity = ACTIVITY_DISLIKE;
|
|
break;
|
|
default:
|
|
return;
|
|
break;
|
|
}
|
|
|
|
$extended_like = false;
|
|
$object = $target = null;
|
|
$post_type = '';
|
|
$objtype = '';
|
|
|
|
if(argc() == 3) {
|
|
|
|
if(! $observer)
|
|
killme();
|
|
|
|
$extended_like = true;
|
|
$obj_type = argv(1);
|
|
$obj_id = argv(2);
|
|
$public = true;
|
|
|
|
if($obj_type == 'profile') {
|
|
$r = q("select * from profile where profile_guid = '%s' limit 1",
|
|
dbesc(argv(2))
|
|
);
|
|
if(! $r)
|
|
killme();
|
|
$owner_uid = $r[0]['uid'];
|
|
if($r[0]['is_default'])
|
|
$public = true;
|
|
if(! $public) {
|
|
$d = q("select abook_xchan from abook where abook_profile = '%s' and abook_channel = %d",
|
|
dbesc($r[0]['profile_guid']),
|
|
intval($owner_uid)
|
|
);
|
|
if(! $d) {
|
|
// forgery - illegal
|
|
if($interactive) {
|
|
notice( t('Invalid request.') . EOL);
|
|
return $o;
|
|
}
|
|
killme();
|
|
}
|
|
// $d now contains a list of those who can see this profile - only send the status notification
|
|
// to them.
|
|
$allow_cid = $allow_gid = $deny_cid = $deny_gid = '';
|
|
foreach($d as $dd) {
|
|
$allow_gid .= '<' . $dd['abook_xchan'] . '>';
|
|
}
|
|
}
|
|
$post_type = t('channel');
|
|
$objtype = ACTIVITY_OBJ_PROFILE;
|
|
|
|
|
|
}
|
|
elseif($obj_type == 'thing') {
|
|
|
|
$r = q("select * from obj left join term on obj_obj = term_hash where term_hash != ''
|
|
and obj_type = %d and term_hash = '%s' limit 1",
|
|
intval(TERM_OBJ_THING),
|
|
dbesc(argv(2))
|
|
);
|
|
|
|
if(! $r) {
|
|
if($interactive) {
|
|
notice( t('Invalid request.') . EOL);
|
|
return $o;
|
|
}
|
|
killme();
|
|
}
|
|
|
|
$owner_uid = $r[0]['obj_channel'];
|
|
|
|
$allow_cid = $r[0]['allow_cid'];
|
|
$allow_gid = $r[0]['allow_gid'];
|
|
$deny_cid = $r[0]['deny_cid'];
|
|
$deny_gid = $r[0]['deny_gid'];
|
|
if($allow_cid || $allow_gid || $deny_cid || $deny_gid)
|
|
$public = false;
|
|
|
|
$post_type = t('thing');
|
|
$objtype = ACTIVITY_OBJ_PROFILE;
|
|
$tgttype = ACTIVITY_OBJ_THING;
|
|
|
|
$links = array();
|
|
$links[] = array('rel' => 'alternate', 'type' => 'text/html',
|
|
'href' => z_root() . '/thing/' . $r[0]['term_hash']);
|
|
if($r[0]['imgurl'])
|
|
$links[] = array('rel' => 'photo', 'href' => $r[0]['imgurl']);
|
|
|
|
$target = json_encode(array(
|
|
'type' => $tgttype,
|
|
'title' => $r[0]['term'],
|
|
'id' => z_root() . '/thing/' . $r[0]['term_hash'],
|
|
'link' => $links
|
|
));
|
|
|
|
$plink = '[zrl=' . z_root() . '/thing/' . $r[0]['term_hash'] . ']' . $r[0]['term'] . '[/zrl]';
|
|
|
|
}
|
|
|
|
if(! ($owner_uid && $r)) {
|
|
if($interactive) {
|
|
notice( t('Invalid request.') . EOL);
|
|
return $o;
|
|
}
|
|
killme();
|
|
}
|
|
|
|
// The resultant activity is going to be a wall-to-wall post, so make sure this is allowed
|
|
|
|
$perms = get_all_perms($owner_uid,$observer['xchan_hash']);
|
|
|
|
if(! ($perms['post_like'] && $perms['view_profile'])) {
|
|
if($interactive) {
|
|
notice( t('Permission denied.') . EOL);
|
|
return $o;
|
|
}
|
|
killme();
|
|
}
|
|
|
|
$ch = q("select * from channel left join xchan on channel_hash = xchan_hash where channel_id = %d limit 1",
|
|
intval($owner_uid)
|
|
);
|
|
if(! $ch) {
|
|
if($interactive) {
|
|
notice( t('Channel unavailable.') . EOL);
|
|
return $o;
|
|
}
|
|
killme();
|
|
}
|
|
|
|
if(! $plink)
|
|
$plink = '[zrl=' . z_root() . '/profile/' . $ch[0]['channel_address'] . ']' . $post_type . '[/zrl]';
|
|
|
|
$links = array();
|
|
$links[] = array('rel' => 'alternate', 'type' => 'text/html',
|
|
'href' => z_root() . '/profile/' . $ch[0]['channel_address']);
|
|
$links[] = array('rel' => 'photo', 'type' => $ch[0]['xchan_photo_mimetype'],
|
|
'href' => $ch[0]['xchan_photo_l']);
|
|
|
|
$object = json_encode(array(
|
|
'type' => ACTIVITY_OBJ_PROFILE,
|
|
'title' => $ch[0]['channel_name'],
|
|
'id' => $ch[0]['xchan_url'] . '/' . $ch[0]['xchan_hash'],
|
|
'link' => $links
|
|
));
|
|
|
|
|
|
// second like of the same thing is "undo" for the first like
|
|
|
|
$z = q("select * from likes where channel_id = %d and liker = '%s' and verb = '%s' and target_type = '%s' and target_id = '%s' limit 1",
|
|
intval($ch[0]['channel_id']),
|
|
dbesc($observer['xchan_hash']),
|
|
dbesc($activity),
|
|
dbesc(($tgttype)?$tgttype:$objtype),
|
|
dbesc($obj_id)
|
|
);
|
|
|
|
if($z) {
|
|
q("delete from likes where id = %d limit 1",
|
|
intval($z[0]['id'])
|
|
);
|
|
drop_item($z[0]['iid'],false);
|
|
if($interactive) {
|
|
notice( t('Previous action reversed.') . EOL);
|
|
return $o;
|
|
}
|
|
killme();
|
|
}
|
|
}
|
|
else {
|
|
|
|
// this is used to like an item or comment
|
|
|
|
$item_id = ((argc() == 2) ? notags(trim(argv(1))) : 0);
|
|
|
|
logger('like: verb ' . $verb . ' item ' . $item_id, LOGGER_DEBUG);
|
|
|
|
// get the item. Allow linked photos (which are normally hidden) to be liked
|
|
|
|
$r = q("SELECT * FROM item WHERE id = %d and (item_restrict = 0 or item_restrict = %d) LIMIT 1",
|
|
intval($item_id),
|
|
intval(ITEM_HIDDEN)
|
|
);
|
|
|
|
if(! $item_id || (! $r)) {
|
|
logger('like: no item ' . $item_id);
|
|
killme();
|
|
}
|
|
|
|
|
|
$item = $r[0];
|
|
$owner_uid = $item['uid'];
|
|
$owner_aid = $item['aid'];
|
|
|
|
|
|
$sys = get_sys_channel();
|
|
|
|
|
|
// if this is a "discover" item, (item['uid'] is the sys channel),
|
|
// fallback to the item comment policy, which should've been
|
|
// respected when generating the conversation thread.
|
|
// Even if the activity is rejected by the item owner, it should still get attached
|
|
// to the local discover conversation on this site.
|
|
|
|
if(($owner_uid != $sys['channel_id']) && (! perm_is_allowed($owner_uid,$observer['xchan_hash'],'post_comments'))) {
|
|
notice( t('Permission denied') . EOL);
|
|
killme();
|
|
}
|
|
|
|
$r = q("select * from xchan where xchan_hash = '%s' limit 1",
|
|
dbesc($item['owner_xchan'])
|
|
);
|
|
if($r)
|
|
$thread_owner = $r[0];
|
|
else
|
|
killme();
|
|
|
|
$r = q("select * from xchan where xchan_hash = '%s' limit 1",
|
|
dbesc($item['author_xchan'])
|
|
);
|
|
if($r)
|
|
$item_author = $r[0];
|
|
else
|
|
killme();
|
|
|
|
|
|
$r = q("SELECT * FROM item WHERE verb = '%s' AND item_restrict = 0
|
|
AND author_xchan = '%s' AND ( parent = %d OR thr_parent = '%s') LIMIT 1",
|
|
dbesc($activity),
|
|
dbesc($observer['xchan_hash']),
|
|
intval($item_id),
|
|
dbesc($item['mid'])
|
|
);
|
|
if($r) {
|
|
$like_item = $r[0];
|
|
|
|
// Already liked/disliked it, delete it
|
|
|
|
$r = q("UPDATE item SET item_restrict = ( item_restrict ^ %d ), changed = '%s' WHERE id = %d LIMIT 1",
|
|
intval(ITEM_DELETED),
|
|
dbesc(datetime_convert()),
|
|
intval($like_item['id'])
|
|
);
|
|
|
|
proc_run('php',"include/notifier.php","like",$like_item['id']);
|
|
return;
|
|
}
|
|
|
|
}
|
|
|
|
$mid = item_message_id();
|
|
|
|
if($extended_like) {
|
|
$item_flags = ITEM_THREAD_TOP|ITEM_ORIGIN|ITEM_WALL;
|
|
|
|
}
|
|
else {
|
|
$post_type = (($item['resource_type'] === 'photo') ? t('photo') : t('status'));
|
|
|
|
$links = array(array('rel' => 'alternate','type' => 'text/html', 'href' => $item['plink']));
|
|
$objtype = (($item['resource_type'] === 'photo') ? ACTIVITY_OBJ_PHOTO : ACTIVITY_OBJ_NOTE );
|
|
|
|
$body = $item['body'];
|
|
|
|
$object = json_encode(array(
|
|
'type' => $objtype,
|
|
'id' => $item['mid'],
|
|
'parent' => (($item['thr_parent']) ? $item['thr_parent'] : $item['parent_mid']),
|
|
'link' => $links,
|
|
'title' => $item['title'],
|
|
'content' => $item['body'],
|
|
'created' => $item['created'],
|
|
'edited' => $item['edited'],
|
|
'author' => array(
|
|
'name' => $item_author['xchan_name'],
|
|
'address' => $item_author['xchan_addr'],
|
|
'guid' => $item_author['xchan_guid'],
|
|
'guid_sig' => $item_author['xchan_guid_sig'],
|
|
'link' => array(
|
|
array('rel' => 'alternate', 'type' => 'text/html', 'href' => $item_author['xchan_url']),
|
|
array('rel' => 'photo', 'type' => $item_author['xchan_photo_mimetype'], 'href' => $item_author['xchan_photo_m'])),
|
|
),
|
|
));
|
|
|
|
if(! ($item['item_flags'] & ITEM_THREAD_TOP))
|
|
$post_type = 'comment';
|
|
|
|
$item_flags = ITEM_ORIGIN | ITEM_NOTSHOWN;
|
|
if($item['item_flags'] & ITEM_WALL)
|
|
$item_flags |= ITEM_WALL;
|
|
|
|
// if this was a linked photo and was hidden, unhide it.
|
|
|
|
if($item['item_restrict'] & ITEM_HIDDEN) {
|
|
$r = q("update item set item_restrict = (item_restrict ^ %d) where id = %d limit 1",
|
|
intval(ITEM_HIDDEN),
|
|
intval($item['id'])
|
|
);
|
|
}
|
|
|
|
}
|
|
|
|
if($verb === 'like')
|
|
$bodyverb = t('%1$s likes %2$s\'s %3$s');
|
|
if($verb === 'dislike')
|
|
$bodyverb = t('%1$s doesn\'t like %2$s\'s %3$s');
|
|
|
|
if(! isset($bodyverb))
|
|
killme();
|
|
|
|
|
|
$arr = array();
|
|
|
|
if($extended_like) {
|
|
$ulink = '[zrl=' . $ch[0]['xchan_url'] . ']' . $ch[0]['xchan_name'] . '[/zrl]';
|
|
$alink = '[zrl=' . $observer['xchan_url'] . ']' . $observer['xchan_name'] . '[/zrl]';
|
|
$private = (($public) ? 0 : 1);
|
|
}
|
|
else {
|
|
$arr['parent'] = $item['id'];
|
|
$arr['thr_parent'] = $item['mid'];
|
|
$ulink = '[zrl=' . $item_author['xchan_url'] . ']' . $item_author['xchan_name'] . '[/zrl]';
|
|
$alink = '[zrl=' . $observer['xchan_url'] . ']' . $observer['xchan_name'] . '[/zrl]';
|
|
$plink = '[zrl=' . $a->get_baseurl() . '/display/' . $item['mid'] . ']' . $post_type . '[/zrl]';
|
|
$allow_cid = $item['allow_cid'];
|
|
$allow_gid = $item['allow_gid'];
|
|
$deny_cid = $item['deny_cid'];
|
|
$deny_gid = $item['deny_gid'];
|
|
$private = $item['private'];
|
|
|
|
}
|
|
|
|
|
|
$arr['mid'] = $mid;
|
|
$arr['aid'] = (($extended_like) ? $ch[0]['channel_account_id'] : $owner_aid);
|
|
$arr['uid'] = $owner_uid;
|
|
$arr['item_flags'] = $item_flags;
|
|
$arr['parent_mid'] = (($extended_like) ? $mid : $item['mid']);
|
|
$arr['owner_xchan'] = (($extended_like) ? $ch[0]['xchan_hash'] : $thread_owner['xchan_hash']);
|
|
$arr['author_xchan'] = $observer['xchan_hash'];
|
|
|
|
|
|
$arr['body'] = sprintf( $bodyverb, $alink, $ulink, $plink );
|
|
if($obj_type === 'thing' && $r[0]['imgurl']) {
|
|
$arr['body'] .= "\n\n[zmg=80x80]" . $r[0]['imgurl'] . '[/zmg]';
|
|
}
|
|
|
|
|
|
$arr['verb'] = $activity;
|
|
$arr['obj_type'] = $objtype;
|
|
$arr['object'] = $object;
|
|
|
|
if($target) {
|
|
$arr['tgt_type'] = $tgttype;
|
|
$arr['target'] = $target;
|
|
}
|
|
|
|
$arr['allow_cid'] = $allow_cid;
|
|
$arr['allow_gid'] = $allow_gid;
|
|
$arr['deny_cid'] = $deny_cid;
|
|
$arr['deny_gid'] = $deny_gid;
|
|
$arr['item_private'] = $private;
|
|
|
|
|
|
$post = item_store($arr);
|
|
$post_id = $post['item_id'];
|
|
|
|
$arr['id'] = $post_id;
|
|
|
|
call_hooks('post_local_end', $arr);
|
|
|
|
|
|
if($extended_like) {
|
|
$r = q("insert into likes (channel_id,liker,likee,iid,verb,target_type,target_id,target) values (%d,'%s','%s',%d,'%s','%s','%s','%s')",
|
|
intval($ch[0]['channel_id']),
|
|
dbesc($observer['xchan_hash']),
|
|
dbesc($ch[0]['channel_hash']),
|
|
intval($post_id),
|
|
dbesc($activity),
|
|
dbesc(($tgttype)?$tgttype:$objtype),
|
|
dbesc($obj_id),
|
|
dbesc(json_encode(($target)?$target:$object))
|
|
);
|
|
};
|
|
|
|
|
|
proc_run('php',"include/notifier.php","like","$post_id");
|
|
|
|
if($interactive) {
|
|
notice( t('Action completed.') . EOL);
|
|
$o .= t('Thank you.');
|
|
return $o;
|
|
}
|
|
|
|
killme();
|
|
}
|
|
|
|
|