2010-07-01 19:48:07 -04:00
< ? php
2010-12-14 19:34:49 -05:00
/**
*
* Module : dfrn_request
*
* Purpose : Handles communication associated with the issuance of
* friend requests .
*
*/
2010-07-01 19:48:07 -04:00
if ( ! function_exists ( 'dfrn_request_init' )) {
function dfrn_request_init ( & $a ) {
if ( $a -> argc > 1 )
$which = $a -> argv [ 1 ];
2010-12-12 17:33:04 -05:00
profile_load ( $a , $which );
2010-07-01 19:48:07 -04:00
return ;
}}
2010-12-14 19:34:49 -05:00
/**
* Function : dfrn_request_post
*
* Purpose :
* Handles multiple scenarios .
*
* Scenario 1 :
* Clicking 'submit' on a friend request page .
*
* Scenario 2 :
* Following Scenario 1 , we are brought back to our home site
* in order to link our friend request with our own server cell .
* After logging in , we click 'submit' to approve the linkage .
*
*/
2010-07-01 19:48:07 -04:00
if ( ! function_exists ( 'dfrn_request_post' )) {
function dfrn_request_post ( & $a ) {
if (( $a -> argc != 2 ) || ( ! count ( $a -> profile )))
return ;
2012-02-28 08:42:12 -05:00
if ( x ( $_POST , 'cancel' )) {
2011-08-02 00:02:25 -04:00
goaway ( z_root ());
2010-07-01 19:48:07 -04:00
}
2010-07-06 00:39:55 -04:00
2010-12-14 19:34:49 -05:00
/**
*
* Scenario 2 : We ' ve introduced ourself to another cell , then have been returned to our own cell
* to confirm the request , and then we ' ve clicked submit ( perhaps after logging in ) .
* That brings us here :
*
*/
2010-07-01 19:48:07 -04:00
2010-07-22 05:13:39 -04:00
if (( x ( $_POST , 'localconfirm' )) && ( $_POST [ 'localconfirm' ] == 1 )) {
2010-07-06 00:39:55 -04:00
2010-12-14 19:34:49 -05:00
/**
* Ensure this is a valid request
*/
2010-07-22 05:13:39 -04:00
if ( local_user () && ( $a -> user [ 'nickname' ] == $a -> argv [ 1 ]) && ( x ( $_POST , 'dfrn_url' ))) {
2010-07-06 00:39:55 -04:00
2010-07-01 19:48:07 -04:00
2010-12-14 19:34:49 -05:00
$dfrn_url = notags ( trim ( $_POST [ 'dfrn_url' ]));
$aes_allow = ((( x ( $_POST , 'aes_allow' )) && ( $_POST [ 'aes_allow' ] == 1 )) ? 1 : 0 );
2010-07-22 05:13:39 -04:00
$confirm_key = (( x ( $_POST , 'confirm_key' )) ? $_POST [ 'confirm_key' ] : " " );
2012-05-29 21:43:56 -04:00
$hidden = (( x ( $_POST , 'hidden-contact' )) ? intval ( $_POST [ 'hidden-contact' ]) : 0 );
2010-07-22 05:13:39 -04:00
$contact_record = null ;
2010-07-06 00:39:55 -04:00
2010-07-22 05:13:39 -04:00
if ( x ( $dfrn_url )) {
2010-12-14 19:34:49 -05:00
/**
* Lookup the contact based on their URL ( which is the only unique thing we have at the moment )
*/
2010-07-06 00:39:55 -04:00
2012-03-15 00:58:54 -04:00
$r = q ( " SELECT * FROM `contact` WHERE `uid` = %d AND (`url` = '%s' OR `nurl` = '%s') AND `self` = 0 LIMIT 1 " ,
2010-10-18 17:34:59 -04:00
intval ( local_user ()),
2012-03-15 00:58:54 -04:00
dbesc ( $dfrn_url ),
dbesc ( normalise_link ( $dfrn_url ))
2010-07-06 00:39:55 -04:00
);
2010-07-22 05:13:39 -04:00
if ( count ( $r )) {
if ( strlen ( $r [ 0 ][ 'dfrn-id' ])) {
2010-12-14 19:34:49 -05:00
/**
* We don ' t need to be here . It has already happened .
*/
2010-07-27 22:27:14 -04:00
notice ( t ( " This introduction has already been accepted. " ) . EOL );
2010-07-22 05:13:39 -04:00
return ;
}
else
$contact_record = $r [ 0 ];
}
if ( is_array ( $contact_record )) {
2012-05-29 21:43:56 -04:00
$r = q ( " UPDATE `contact` SET `ret-aes` = %d, hidden = %d WHERE `id` = %d LIMIT 1 " ,
2010-07-22 05:13:39 -04:00
intval ( $aes_allow ),
2012-05-29 21:43:56 -04:00
intval ( $hidden ),
2010-07-22 05:13:39 -04:00
intval ( $contact_record [ 'id' ])
);
2010-07-06 00:39:55 -04:00
}
else {
2010-07-22 05:13:39 -04:00
2010-12-14 19:34:49 -05:00
/**
* Scrape the other site ' s profile page to pick up the dfrn links , key , fn , and photo
*/
2010-07-22 05:13:39 -04:00
require_once ( 'Scrape.php' );
$parms = scrape_dfrn ( $dfrn_url );
if ( ! count ( $parms )) {
2010-07-27 22:27:14 -04:00
notice ( t ( 'Profile location is not valid or does not contain profile information.' ) . EOL );
2010-07-06 00:39:55 -04:00
return ;
}
2010-07-22 05:13:39 -04:00
else {
if ( ! x ( $parms , 'fn' ))
2010-07-27 22:27:14 -04:00
notice ( t ( 'Warning: profile location has no identifiable owner name.' ) . EOL );
2010-07-22 05:13:39 -04:00
if ( ! x ( $parms , 'photo' ))
2010-07-27 22:27:14 -04:00
notice ( t ( 'Warning: profile location has no profile photo.' ) . EOL );
2010-07-22 05:13:39 -04:00
$invalid = validate_dfrn ( $parms );
if ( $invalid ) {
2011-03-10 18:22:21 -05:00
notice ( sprintf ( tt ( " %d required parameter was not found at the given location " ,
" %d required parameters were not found at the given location " ,
$invalid ), $invalid ) . EOL );
2010-07-22 05:13:39 -04:00
return ;
}
}
2010-07-01 19:48:07 -04:00
2010-07-22 05:13:39 -04:00
$dfrn_request = $parms [ 'dfrn-request' ];
2010-07-06 00:39:55 -04:00
2010-12-14 19:34:49 -05:00
/********* Escape the entire array ********/
2010-07-22 05:13:39 -04:00
dbesc_array ( $parms );
2010-07-06 00:39:55 -04:00
2010-12-14 19:34:49 -05:00
/******************************************/
/**
* Create a contact record on our site for the other person
*/
2010-07-06 00:39:55 -04:00
2011-11-01 19:08:07 -04:00
$r = q ( " INSERT INTO `contact` ( `uid`, `created`,`url`, `nurl`, `name`, `nick`, `photo`, `site-pubkey`,
2012-05-29 21:43:56 -04:00
`request` , `confirm` , `notify` , `poll` , `poco` , `network` , `aes_allow` , `hidden` )
VALUES ( % d , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , % d , % d ) " ,
2010-10-18 17:34:59 -04:00
intval ( local_user ()),
2010-07-22 05:13:39 -04:00
datetime_convert (),
dbesc ( $dfrn_url ),
2011-11-01 19:08:07 -04:00
dbesc ( normalise_link ( $dfrn_url )),
2010-07-22 05:13:39 -04:00
$parms [ 'fn' ],
2010-10-23 04:20:26 -04:00
$parms [ 'nick' ],
2010-07-22 05:13:39 -04:00
$parms [ 'photo' ],
$parms [ 'key' ],
$parms [ 'dfrn-request' ],
$parms [ 'dfrn-confirm' ],
$parms [ 'dfrn-notify' ],
$parms [ 'dfrn-poll' ],
2011-10-31 23:39:04 -04:00
$parms [ 'dfrn-poco' ],
2011-08-18 19:47:45 -04:00
dbesc ( NETWORK_DFRN ),
2012-05-29 21:43:56 -04:00
intval ( $aes_allow ),
intval ( $hidden )
2010-07-22 05:13:39 -04:00
);
}
2010-07-06 00:39:55 -04:00
2010-07-22 05:13:39 -04:00
if ( $r ) {
2011-05-23 05:39:57 -04:00
info ( t ( " Introduction complete. " ) . EOL );
2010-07-22 05:13:39 -04:00
}
2012-06-12 04:13:09 -04:00
$r = q ( " select id from contact where uid = %d and url = '%s' and `site-pubkey` = '%s limit 1 " ,
intval ( local_user ()),
$dbesc ( $dfrn_url ),
$parms [ 'key' ] // this was already escaped
);
if ( count ( $r )) {
$g = q ( " select def_gid from user where uid = %d limit 1 " ,
intval ( local_user ())
);
if ( $g && intval ( $g [ 0 ][ 'def_gid' ])) {
require_once ( 'include/group.php' );
group_add_member ( local_user (), '' , $r [ 0 ][ 'id' ], $g [ 0 ][ 'def_gid' ]);
}
}
2010-12-14 19:34:49 -05:00
/**
* Allow the blocked remote notification to complete
*/
2010-07-01 19:48:07 -04:00
2010-07-22 05:13:39 -04:00
if ( is_array ( $contact_record ))
$dfrn_request = $contact_record [ 'request' ];
2010-07-01 19:48:07 -04:00
2010-07-22 05:13:39 -04:00
if ( strlen ( $dfrn_request ) && strlen ( $confirm_key ))
2011-03-30 18:04:18 -04:00
$s = fetch_url ( $dfrn_request . '?confirm_key=' . $confirm_key );
2010-12-14 19:34:49 -05:00
// (ignore reply, nothing we can do it failed)
2012-04-08 20:28:36 -04:00
goaway ( zrl ( $dfrn_url ));
2010-07-22 05:13:39 -04:00
return ; // NOTREACHED
2010-07-06 00:39:55 -04:00
2010-07-22 05:13:39 -04:00
}
2010-07-06 00:39:55 -04:00
2010-07-01 19:48:07 -04:00
}
2010-07-22 05:13:39 -04:00
// invalid/bogus request
2010-09-13 20:12:54 -04:00
notice ( t ( 'Unrecoverable protocol error.' ) . EOL );
2011-08-02 00:02:25 -04:00
goaway ( z_root ());
2010-07-22 05:13:39 -04:00
return ; // NOTREACHED
2010-07-01 19:48:07 -04:00
}
2010-12-14 19:34:49 -05:00
/**
* Otherwise :
*
* Scenario 1 :
* We are the requestee . A person from a remote cell has made an introduction
* on our profile web page and clicked submit . We will use their DFRN - URL to
* figure out how to contact their cell .
*
* Scrape the originating DFRN - URL for everything we need . Create a contact record
* and an introduction to show our user next time he / she logs in .
* Finally redirect back to the requestor so that their site can record the request .
* If our user ( the requestee ) later confirms this request , a record of it will need
* to exist on the requestor ' s cell in order for the confirmation process to complete ..
*
* It ' s possible that neither the requestor or the requestee are logged in at the moment ,
* and the requestor does not yet have any credentials to the requestee profile .
*
* Who is the requestee ? We ' ve already loaded their profile which means their nickname should be
* in $a -> argv [ 1 ] and we should have their complete info in $a -> profile .
*
*/
2010-07-01 19:48:07 -04:00
2010-07-22 05:13:39 -04:00
if ( ! ( is_array ( $a -> profile ) && count ( $a -> profile ))) {
2010-09-01 20:26:02 -04:00
notice ( t ( 'Profile unavailable.' ) . EOL );
2010-07-22 05:13:39 -04:00
return ;
}
2010-12-20 03:27:00 -05:00
$nickname = $a -> profile [ 'nickname' ];
$notify_flags = $a -> profile [ 'notify-flags' ];
$uid = $a -> profile [ 'uid' ];
$maxreq = intval ( $a -> profile [ 'maxreq' ]);
2010-07-06 00:39:55 -04:00
$contact_record = null ;
2010-12-20 03:27:00 -05:00
$failed = false ;
$parms = null ;
2010-07-01 19:48:07 -04:00
if ( x ( $_POST , 'dfrn_url' )) {
2010-12-20 03:27:00 -05:00
/**
* Block friend request spam
*/
if ( $maxreq ) {
$r = q ( " SELECT * FROM `intro` WHERE `datetime` > '%s' AND `uid` = %d " ,
dbesc ( datetime_convert ( 'UTC' , 'UTC' , 'now - 24 hours' )),
intval ( $uid )
);
if ( count ( $r ) > $maxreq ) {
2011-03-10 18:22:21 -05:00
notice ( sprintf ( t ( '%s has received too many connection requests today.' ), $a -> profile [ 'name' ]) . EOL );
2010-12-20 03:27:00 -05:00
notice ( t ( 'Spam protection measures have been invoked.' ) . EOL );
notice ( t ( 'Friends are advised to please try again in 24 hours.' ) . EOL );
return ;
}
}
2011-01-07 03:24:08 -05:00
/**
*
* Cleanup old introductions that remain blocked .
* Also remove the contact record , but only if there is no existing relationship
2011-12-12 02:33:56 -05:00
* Do not remove email contacts as these may be awaiting email verification
*/
$r = q ( " SELECT `intro`.*, `intro`.`id` AS `iid`, `contact`.`id` AS `cid`, `contact`.`rel`
FROM `intro` LEFT JOIN `contact` on `intro` . `contact-id` = `contact` . `id`
WHERE `intro` . `blocked` = 1 AND `contact` . `self` = 0
AND `contact` . `network` != '%s'
AND `intro` . `datetime` < UTC_TIMESTAMP () - INTERVAL 30 MINUTE " ,
2012-04-10 22:15:52 -04:00
dbesc ( NETWORK_MAIL2 )
2011-12-12 02:33:56 -05:00
);
if ( count ( $r )) {
foreach ( $r as $rr ) {
if ( ! $rr [ 'rel' ]) {
q ( " DELETE FROM `contact` WHERE `id` = %d LIMIT 1 " ,
intval ( $rr [ 'cid' ])
);
}
q ( " DELETE FROM `intro` WHERE `id` = %d LIMIT 1 " ,
intval ( $rr [ 'iid' ])
);
}
}
/**
2011-01-07 03:24:08 -05:00
*
2011-12-12 02:33:56 -05:00
* Cleanup any old email intros - which will have a greater lifetime
2011-01-07 03:24:08 -05:00
*/
$r = q ( " SELECT `intro`.*, `intro`.`id` AS `iid`, `contact`.`id` AS `cid`, `contact`.`rel`
FROM `intro` LEFT JOIN `contact` on `intro` . `contact-id` = `contact` . `id`
2011-12-12 02:33:56 -05:00
WHERE `intro` . `blocked` = 1 AND `contact` . `self` = 0
AND `contact` . `network` = '%s'
AND `intro` . `datetime` < UTC_TIMESTAMP () - INTERVAL 3 DAY " ,
2012-04-10 22:15:52 -04:00
dbesc ( NETWORK_MAIL2 )
2011-12-12 02:33:56 -05:00
);
2011-01-07 03:24:08 -05:00
if ( count ( $r )) {
2011-01-07 06:15:52 -05:00
foreach ( $r as $rr ) {
2011-01-07 03:24:08 -05:00
if ( ! $rr [ 'rel' ]) {
q ( " DELETE FROM `contact` WHERE `id` = %d LIMIT 1 " ,
intval ( $rr [ 'cid' ])
);
}
q ( " DELETE FROM `intro` WHERE `id` = %d LIMIT 1 " ,
intval ( $rr [ 'iid' ])
);
}
}
2012-04-10 22:15:52 -04:00
$email_follow = ( x ( $_POST , 'email_follow' ) ? intval ( $_POST [ 'email_follow' ]) : 0 );
$real_name = ( x ( $_POST , 'realname' ) ? notags ( trim ( $_POST [ 'realname' ])) : '' );
2011-12-12 02:33:56 -05:00
2010-07-01 19:48:07 -04:00
$url = trim ( $_POST [ 'dfrn_url' ]);
2010-07-06 00:39:55 -04:00
if ( ! strlen ( $url )) {
2010-07-27 22:27:14 -04:00
notice ( t ( " Invalid locator " ) . EOL );
2010-07-06 00:39:55 -04:00
return ;
}
2011-09-06 21:06:19 -04:00
$hcard = '' ;
2010-07-19 22:09:58 -04:00
2012-04-10 22:15:52 -04:00
if ( $email_follow ) {
2012-04-23 08:16:57 -04:00
if ( ! validate_email ( $url )) {
2012-04-10 22:15:52 -04:00
notice ( t ( 'Invalid email address.' ) . EOL );
return ;
}
$addr = $url ;
$name = ( $realname ) ? $realname : $addr ;
$nick = substr ( $addr , 0 , strpos ( $addr , '@' ));
$url = 'http://' . substr ( $addr , strpos ( $addr , '@' ) + 1 );
$nurl = normalise_url ( $host );
$poll = 'email ' . random_string ();
$notify = 'smtp ' . random_string ();
$blocked = 1 ;
$pending = 1 ;
$network = NETWORK_MAIL2 ;
$rel = CONTACT_IS_FOLLOWER ;
$mail_disabled = (( function_exists ( 'imap_open' ) && ( ! get_config ( 'system' , 'imap_disabled' ))) ? 0 : 1 );
if ( get_config ( 'system' , 'dfrn_only' ))
$mail_disabled = 1 ;
if ( ! $mail_disabled ) {
$failed = false ;
$r = q ( " SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1 " ,
intval ( $uid )
);
if ( ! count ( $r )) {
notice ( t ( 'This account has not been configured for email. Request failed.' ) . EOL );
return ;
}
}
2012-04-23 08:16:57 -04:00
$r = q ( " insert into contact ( uid, created, addr, name, nick, url, nurl, poll, notify, blocked, pending, network, rel )
values ( % d , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , % d , % d , '%s' , % d ) " ,
intval ( $uid ),
dbesc ( datetime_convert ()),
dbesc ( $addr ),
dbesc ( $name ),
dbesc ( $nick ),
dbesc ( $url ),
dbesc ( $nurl ),
dbesc ( $poll ),
dbesc ( $notify ),
intval ( $blocked ),
intval ( $pending ),
dbesc ( $network ),
intval ( $rel )
);
2012-04-10 22:15:52 -04:00
2012-04-23 08:16:57 -04:00
$r = q ( " select id from contact where poll = '%s' and uid = %d limit 1 " ,
dbesc ( $poll ),
intval ( $uid )
);
if ( count ( $r )) {
$contact_id = $r [ 0 ][ 'id' ];
2012-05-18 01:44:52 -04:00
$g = q ( " select def_gid from user where uid = %d limit 1 " ,
intval ( $uid )
);
if ( $g && intval ( $g [ 0 ][ 'def_gid' ])) {
require_once ( 'include/group.php' );
group_add_member ( $uid , '' , $contact_id , $g [ 0 ][ 'def_gid' ]);
}
2012-04-23 08:16:57 -04:00
$photo = avatar_img ( $addr );
$r = q ( " UPDATE `contact` SET
`photo` = '%s' ,
`thumb` = '%s' ,
`micro` = '%s' ,
`name-date` = '%s' ,
`uri-date` = '%s' ,
`avatar-date` = '%s' ,
`hidden` = 0 ,
WHERE `id` = % d LIMIT 1
" ,
dbesc ( $photos [ 0 ]),
dbesc ( $photos [ 1 ]),
dbesc ( $photos [ 2 ]),
dbesc ( datetime_convert ()),
dbesc ( datetime_convert ()),
dbesc ( datetime_convert ()),
intval ( $contact_id )
);
}
2012-04-23 21:28:33 -04:00
// contact is created. Now create an introduction
2012-04-10 22:15:52 -04:00
2012-04-23 21:28:33 -04:00
$hash = random_string ();
2012-04-10 22:15:52 -04:00
2012-04-23 21:28:33 -04:00
$r = q ( " insert into intro ( uid, `contact-id`, knowyou, note, hash, datetime, blocked )
values ( % d , % d , % d , '%s' , '%s' , '%s' , % d ) " ,
intval ( $uid ),
intval ( $contact_id ),
(( x ( $_POST , 'knowyou' ) && ( $_POST [ 'knowyou' ] == 1 )) ? 1 : 0 ),
dbesc ( notags ( trim ( $_POST [ 'dfrn-request-message' ]))),
dbesc ( $hash ),
dbesc ( datetime_convert ()),
1
);
// Next send an email verify form to the requestor.
2012-04-10 22:15:52 -04:00
2010-10-12 22:32:15 -04:00
}
2012-04-23 08:16:57 -04:00
2010-10-12 22:32:15 -04:00
else {
2012-04-10 22:15:52 -04:00
// Canonicalise email-style profile locator
$url = webfinger_dfrn ( $url , $hcard );
if ( substr ( $url , 0 , 5 ) === 'stat:' ) {
$network = NETWORK_OSTATUS ;
$url = substr ( $url , 5 );
}
else {
$network = NETWORK_DFRN ;
}
2010-10-12 22:32:15 -04:00
}
2010-11-09 21:24:35 -05:00
logger ( 'dfrn_request: url: ' . $url );
2010-07-19 22:09:58 -04:00
if ( ! strlen ( $url )) {
2010-08-31 00:08:45 -04:00
notice ( t ( " Unable to resolve your name at the provided location. " ) . EOL );
2010-07-19 22:09:58 -04:00
return ;
2010-07-08 10:03:25 -04:00
}
2010-07-06 00:39:55 -04:00
2011-08-18 19:47:45 -04:00
if ( $network === NETWORK_DFRN ) {
2010-10-19 18:51:56 -04:00
$ret = q ( " SELECT * FROM `contact` WHERE `uid` = %d AND `url` = '%s' AND `self` = 0 LIMIT 1 " ,
2010-10-12 22:32:15 -04:00
intval ( $uid ),
dbesc ( $url )
2010-07-06 00:39:55 -04:00
);
2010-09-13 20:12:54 -04:00
2010-10-12 22:32:15 -04:00
if ( count ( $ret )) {
if ( strlen ( $ret [ 0 ][ 'issued-id' ])) {
notice ( t ( 'You have already introduced yourself here.' ) . EOL );
return ;
}
2011-08-07 19:15:54 -04:00
elseif ( $ret [ 0 ][ 'rel' ] == CONTACT_IS_FRIEND ) {
2011-03-10 18:22:21 -05:00
notice ( sprintf ( t ( 'Apparently you are already friends with %s.' ), $a -> profile [ 'name' ]) . EOL );
2010-10-17 23:04:17 -04:00
return ;
}
2010-10-12 22:32:15 -04:00
else {
$contact_record = $ret [ 0 ];
$parms = array ( 'dfrn-request' => $ret [ 0 ][ 'request' ]);
}
2010-09-13 20:12:54 -04:00
}
2010-10-17 23:04:17 -04:00
2010-10-12 22:32:15 -04:00
$issued_id = random_string ();
if ( is_array ( $contact_record )) {
// There is a contact record but no issued-id, so this
// is a reciprocal introduction from a known contact
$r = q ( " UPDATE `contact` SET `issued-id` = '%s' WHERE `id` = %d LIMIT 1 " ,
dbesc ( $issued_id ),
intval ( $contact_record [ 'id' ])
);
2010-07-01 19:48:07 -04:00
}
else {
2010-10-12 22:32:15 -04:00
if ( ! validate_url ( $url )) {
notice ( t ( 'Invalid profile URL.' ) . EOL );
goaway ( $a -> get_baseurl () . '/' . $a -> cmd );
return ; // NOTREACHED
}
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
if ( ! allowed_url ( $url )) {
notice ( t ( 'Disallowed profile URL.' ) . EOL );
goaway ( $a -> get_baseurl () . '/' . $a -> cmd );
return ; // NOTREACHED
2010-07-01 19:48:07 -04:00
}
2010-10-12 22:32:15 -04:00
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
require_once ( 'Scrape.php' );
2011-09-06 21:06:19 -04:00
$parms = scrape_dfrn (( $hcard ) ? $hcard : $url );
2010-10-12 22:32:15 -04:00
if ( ! count ( $parms )) {
notice ( t ( 'Profile location is not valid or does not contain profile information.' ) . EOL );
goaway ( $a -> get_baseurl () . '/' . $a -> cmd );
}
else {
if ( ! x ( $parms , 'fn' ))
notice ( t ( 'Warning: profile location has no identifiable owner name.' ) . EOL );
if ( ! x ( $parms , 'photo' ))
notice ( t ( 'Warning: profile location has no profile photo.' ) . EOL );
$invalid = validate_dfrn ( $parms );
if ( $invalid ) {
2011-03-10 18:22:21 -05:00
notice ( sprintf ( tt ( " %d required parameter was not found at the given location " ,
" %d required parameters were not found at the given location " ,
$invalid ), $invalid ) . EOL );
2010-10-12 22:32:15 -04:00
return ;
}
}
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
$parms [ 'url' ] = $url ;
$parms [ 'issued-id' ] = $issued_id ;
2010-07-01 19:48:07 -04:00
2010-07-06 00:39:55 -04:00
2010-10-12 22:32:15 -04:00
dbesc_array ( $parms );
2011-11-01 19:08:07 -04:00
$r = q ( " INSERT INTO `contact` ( `uid`, `created`, `url`, `nurl`,`name`, `nick`, `issued-id`, `photo`, `site-pubkey`,
2011-10-31 23:39:04 -04:00
`request` , `confirm` , `notify` , `poll` , `poco` , `network` )
2011-11-01 19:08:07 -04:00
VALUES ( % d , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' , '%s' ) " ,
2010-07-06 00:39:55 -04:00
intval ( $uid ),
2011-11-01 19:08:07 -04:00
dbesc ( datetime_convert ()),
2010-07-06 00:39:55 -04:00
$parms [ 'url' ],
2011-11-01 19:08:07 -04:00
dbesc ( normalise_link ( $parms [ 'url' ])),
2010-10-12 22:32:15 -04:00
$parms [ 'fn' ],
2010-10-23 04:20:26 -04:00
$parms [ 'nick' ],
2010-10-12 22:32:15 -04:00
$parms [ 'issued-id' ],
$parms [ 'photo' ],
$parms [ 'key' ],
$parms [ 'dfrn-request' ],
$parms [ 'dfrn-confirm' ],
$parms [ 'dfrn-notify' ],
2011-08-18 19:47:45 -04:00
$parms [ 'dfrn-poll' ],
2011-10-31 23:39:04 -04:00
$parms [ 'dfrn-poco' ],
2011-08-18 19:47:45 -04:00
dbesc ( NETWORK_DFRN )
2010-07-06 00:39:55 -04:00
);
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
// find the contact record we just created
if ( $r ) {
$r = q ( " SELECT `id` FROM `contact`
WHERE `uid` = % d AND `url` = '%s' AND `issued-id` = '%s' LIMIT 1 " ,
intval ( $uid ),
$parms [ 'url' ],
$parms [ 'issued-id' ]
);
if ( count ( $r ))
$contact_record = $r [ 0 ];
}
}
if ( $r === false ) {
notice ( t ( 'Failed to update contact record.' ) . EOL );
return ;
}
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
$hash = random_string () . ( string ) time (); // Generate a confirm_key
if ( is_array ( $contact_record )) {
$ret = q ( " INSERT INTO `intro` ( `uid`, `contact-id`, `blocked`, `knowyou`, `note`, `hash`, `datetime`)
VALUES ( % d , % d , 1 , % d , '%s' , '%s' , '%s' ) " ,
intval ( $uid ),
intval ( $contact_record [ 'id' ]),
(( x ( $_POST , 'knowyou' ) && ( $_POST [ 'knowyou' ] == 1 )) ? 1 : 0 ),
dbesc ( notags ( trim ( $_POST [ 'dfrn-request-message' ]))),
dbesc ( $hash ),
dbesc ( datetime_convert ())
);
}
2010-07-01 19:48:07 -04:00
2010-10-17 23:04:17 -04:00
// This notice will only be seen by the requestor if the requestor and requestee are on the same server.
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
if ( ! $failed )
2011-05-23 05:39:57 -04:00
info ( t ( 'Your introduction has been sent.' ) . EOL );
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
// "Homecoming" - send the requestor back to their site to record the introduction.
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
$dfrn_url = bin2hex ( $a -> get_baseurl () . '/profile/' . $nickname );
$aes_allow = (( function_exists ( 'openssl_encrypt' )) ? 1 : 0 );
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
goaway ( $parms [ 'dfrn-request' ] . " ?dfrn_url= $dfrn_url "
. '&dfrn_version=' . DFRN_PROTOCOL_VERSION
. '&confirm_key=' . $hash
. (( $aes_allow ) ? " &aes_allow=1 " : " " )
);
// NOTREACHED
2011-08-18 19:47:45 -04:00
// END $network === NETWORK_DFRN
2010-10-12 22:32:15 -04:00
}
2011-08-18 19:47:45 -04:00
elseif ( $network === NETWORK_OSTATUS ) {
2010-10-12 22:32:15 -04:00
/**
2010-12-14 19:34:49 -05:00
*
* OStatus network
* Check contact existence
2011-08-18 19:47:45 -04:00
* Try and scrape together enough information to create a contact record ,
* with us as CONTACT_IS_FOLLOWER
2010-12-14 19:34:49 -05:00
* Substitute our user ' s feed URL into $url template
* Send the subscriber home to subscribe
*
*/
2010-10-12 22:32:15 -04:00
$url = str_replace ( '{uri}' , $a -> get_baseurl () . '/dfrn_poll/' . $nickname , $url );
goaway ( $url );
// NOTREACHED
2011-08-18 19:47:45 -04:00
// END $network === NETWORK_OSTATUS
2010-10-12 22:32:15 -04:00
}
2010-07-01 19:48:07 -04:00
2010-10-12 22:32:15 -04:00
} return ;
2010-07-01 19:48:07 -04:00
}}
2010-07-22 05:13:39 -04:00
2010-07-01 19:48:07 -04:00
if ( ! function_exists ( 'dfrn_request_content' )) {
function dfrn_request_content ( & $a ) {
if (( $a -> argc != 2 ) || ( ! count ( $a -> profile )))
return " " ;
// "Homecoming". Make sure we're logged in to this site as the correct user. Then offer a confirm button
// to send us to the post section to record the introduction.
if ( x ( $_GET , 'dfrn_url' )) {
2010-07-06 00:39:55 -04:00
if ( ! local_user ()) {
2011-05-23 05:39:57 -04:00
info ( t ( " Please login to confirm introduction. " ) . EOL );
2011-01-07 02:41:14 -05:00
/* setup the return URL to come back to this page if they use openid */
$stripped = str_replace ( 'q=' , '' , $a -> query_string );
2011-01-07 03:24:08 -05:00
$_SESSION [ 'return_url' ] = trim ( $stripped , '/' );
2011-01-07 02:41:14 -05:00
2010-07-01 19:48:07 -04:00
return login ();
}
// Edge case, but can easily happen in the wild. This person is authenticated,
// but not as the person who needs to deal with this request.
2010-07-22 05:13:39 -04:00
if ( $a -> user [ 'nickname' ] != $a -> argv [ 1 ]) {
2010-07-27 22:27:14 -04:00
notice ( t ( " Incorrect identity currently logged in. Please login to <strong>this</strong> profile. " ) . EOL );
2010-07-01 19:48:07 -04:00
return login ();
}
2010-07-22 05:13:39 -04:00
$dfrn_url = notags ( trim ( hex2bin ( $_GET [ 'dfrn_url' ])));
2010-07-01 19:48:07 -04:00
$aes_allow = ((( x ( $_GET , 'aes_allow' )) && ( $_GET [ 'aes_allow' ] == 1 )) ? 1 : 0 );
$confirm_key = ( x ( $_GET , 'confirm_key' ) ? $_GET [ 'confirm_key' ] : " " );
2011-05-11 07:37:13 -04:00
$tpl = get_markup_template ( " dfrn_req_confirm.tpl " );
$o = replace_macros ( $tpl , array (
2010-07-01 19:48:07 -04:00
'$dfrn_url' => $dfrn_url ,
'$aes_allow' => (( $aes_allow ) ? '<input type="hidden" name="aes_allow" value="1" />' : " " ),
2012-05-29 21:43:56 -04:00
'$hidethem' => t ( 'Hide this contact' ),
'$hidechecked' => '' ,
2010-07-01 19:48:07 -04:00
'$confirm_key' => $confirm_key ,
2011-04-07 02:03:54 -04:00
'$welcome' => sprintf ( t ( 'Welcome home %s.' ), $a -> user [ 'username' ]),
'$please' => sprintf ( t ( 'Please confirm your introduction/connection request to %s.' ), $dfrn_url ),
'$submit' => t ( 'Confirm' ),
2010-07-01 19:48:07 -04:00
'$uid' => $_SESSION [ 'uid' ],
2010-07-20 23:48:08 -04:00
'$nickname' => $a -> user [ 'nickname' ],
2010-07-01 19:48:07 -04:00
'dfrn_rawurl' => $_GET [ 'dfrn_url' ]
));
return $o ;
}
2010-07-22 05:13:39 -04:00
elseif (( x ( $_GET , 'confirm_key' )) && strlen ( $_GET [ 'confirm_key' ])) {
// we are the requestee and it is now safe to send our user their introduction,
// We could just unblock it, but first we have to jump through a few hoops to
// send an email, or even to find out if we need to send an email.
$intro = q ( " SELECT * FROM `intro` WHERE `hash` = '%s' LIMIT 1 " ,
dbesc ( $_GET [ 'confirm_key' ])
);
if ( count ( $intro )) {
$r = q ( " SELECT `contact`.*, `user`.* FROM `contact` LEFT JOIN `user` ON `contact`.`uid` = `user`.`uid`
WHERE `contact` . `id` = % d LIMIT 1 " ,
intval ( $intro [ 0 ][ 'contact-id' ])
);
2010-10-17 23:04:17 -04:00
$auto_confirm = false ;
if ( count ( $r )) {
2012-05-29 21:43:56 -04:00
if (( $r [ 0 ][ 'page-flags' ] != PAGE_NORMAL ) && ( $r [ 0 ][ 'page-flags' ] != PAGE_PRVGROUP ))
2010-10-17 23:04:17 -04:00
$auto_confirm = true ;
2011-12-26 18:47:40 -05:00
if ( ! $auto_confirm ) {
require_once ( 'include/enotify.php' );
notification ( array (
'type' => NOTIFY_INTRO ,
'notify_flags' => $r [ 0 ][ 'notify-flags' ],
'language' => $r [ 0 ][ 'language' ],
'to_name' => $r [ 0 ][ 'username' ],
'to_email' => $r [ 0 ][ 'email' ],
2012-02-18 05:57:42 -05:00
'uid' => $r [ 0 ][ 'uid' ],
2011-12-26 18:47:40 -05:00
'link' => $a -> get_baseurl () . '/notifications/intros' ,
'source_name' => (( strlen ( stripslashes ( $r [ 0 ][ 'name' ]))) ? stripslashes ( $r [ 0 ][ 'name' ]) : t ( '[Name Withheld]' )),
'source_link' => $r [ 0 ][ 'url' ],
2012-01-03 23:26:20 -05:00
'source_photo' => $r [ 0 ][ 'photo' ],
'verb' => ACTIVITY_REQ_FRIEND ,
'otype' => 'intro'
2010-07-22 05:13:39 -04:00
));
}
2011-12-26 18:47:40 -05:00
2010-10-17 23:04:17 -04:00
if ( $auto_confirm ) {
require_once ( 'mod/dfrn_confirm.php' );
$handsfree = array (
'uid' => $r [ 0 ][ 'uid' ],
'node' => $r [ 0 ][ 'nickname' ],
'dfrn_id' => $r [ 0 ][ 'issued-id' ],
'intro_id' => $intro [ 0 ][ 'id' ],
2012-04-30 07:11:42 -04:00
'duplex' => (( $r [ 0 ][ 'page-flags' ] == PAGE_FREELOVE ) ? 1 : 0 ),
'activity' => intval ( get_pconfig ( $r [ 0 ][ 'uid' ], 'system' , 'post_newfriend' ))
2010-10-17 23:04:17 -04:00
);
dfrn_confirm_post ( $a , $handsfree );
}
2010-07-22 05:13:39 -04:00
}
2010-10-17 23:04:17 -04:00
if ( ! $auto_confirm ) {
2010-07-01 19:48:07 -04:00
2010-10-17 23:04:17 -04:00
// If we are auto_confirming, this record will have already been nuked
// in dfrn_confirm_post()
$r = q ( " UPDATE `intro` SET `blocked` = 0 WHERE `hash` = '%s' LIMIT 1 " ,
dbesc ( $_GET [ 'confirm_key' ])
);
}
2010-07-22 05:13:39 -04:00
}
2011-08-18 19:47:45 -04:00
2010-07-22 05:13:39 -04:00
killme ();
return ; // NOTREACHED
}
else {
2011-01-01 16:12:31 -05:00
/**
* Normal web request . Display our user ' s introduction form .
*/
2011-04-21 22:12:22 -04:00
if (( get_config ( 'system' , 'block_public' )) && ( ! local_user ()) && ( ! remote_user ())) {
notice ( t ( 'Public access denied.' ) . EOL );
return ;
}
2011-01-01 16:12:31 -05:00
/**
* Try to auto - fill the profile address
*/
if ( local_user ()) {
if ( strlen ( $a -> path )) {
$myaddr = $a -> get_baseurl () . '/profile/' . $a -> user [ 'nickname' ];
}
else {
2011-08-02 00:02:25 -04:00
$myaddr = $a -> user [ 'nickname' ] . '@' . substr ( z_root (), strpos ( z_root (), '://' ) + 3 );
2011-01-01 16:12:31 -05:00
}
}
2011-01-22 05:51:31 -05:00
elseif ( x ( $_GET , 'addr' )) {
2011-01-21 08:21:13 -05:00
$myaddr = hex2bin ( $_GET [ 'addr' ]);
}
else {
/* $_GET variables are already urldecoded */
$myaddr = (( x ( $_GET , 'address' )) ? $_GET [ 'address' ] : '' );
2011-01-01 16:12:31 -05:00
}
2012-04-27 19:23:25 -04:00
// last, try a zrl
if ( ! strlen ( $myaddr ))
$myaddr = get_my_url ();
2011-09-05 21:34:30 -04:00
$target_addr = $a -> profile [ 'nickname' ] . '@' . substr ( z_root (), strpos ( z_root (), '://' ) + 3 );
2011-01-01 16:12:31 -05:00
/**
*
* The auto_request form only has the profile address
* because nobody is going to read the comments and
* it doesn ' t matter if they know you or not .
*
*/
2010-10-18 19:38:48 -04:00
if ( $a -> profile [ 'page-flags' ] == PAGE_NORMAL )
2011-05-11 07:37:13 -04:00
$tpl = get_markup_template ( 'dfrn_request.tpl' );
2010-10-18 19:38:48 -04:00
else
2011-05-11 07:37:13 -04:00
$tpl = get_markup_template ( 'auto_request.tpl' );
2011-01-01 16:12:31 -05:00
2012-04-01 19:18:03 -04:00
# $page_desc = sprintf( t('Diaspora members: Please do not use this form. Instead, enter "%s" into your Diaspora search bar.'),
# $target_addr) . EOL . EOL;
2011-09-05 21:34:30 -04:00
2012-03-13 18:40:16 -04:00
$page_desc .= t ( " Please enter your 'Identity Address' from one of the following supported communications networks: " );
2012-03-15 00:58:54 -04:00
// see if we are allowed to have NETWORK_MAIL2 contacts
$mail_disabled = (( function_exists ( 'imap_open' ) && ( ! get_config ( 'system' , 'imap_disabled' ))) ? 0 : 1 );
if ( get_config ( 'system' , 'dfrn_only' ))
$mail_disabled = 1 ;
if ( ! $mail_disabled ) {
$r = q ( " SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1 " ,
intval ( $a -> profile [ 'uid' ])
);
if ( ! count ( $r ))
$mail_disabled = 1 ;
}
$emailnet = (( $mail_disabled ) ? '' : t ( " <strike>Connect as an email follower</strike> \x28 Coming soon \x29 " ));
2012-03-13 18:40:16 -04:00
$invite_desc = t ( 'If you are not yet a member of the free social web, <a href="http://dir.friendica.com/siteinfo">follow this link to find a public Friendica site and join us today</a>.' );
2011-09-05 21:34:30 -04:00
2010-10-26 00:52:30 -04:00
$o .= replace_macros ( $tpl , array (
2010-12-16 22:38:52 -05:00
'$header' => t ( 'Friend/Connection Request' ),
2011-10-31 23:39:04 -04:00
'$desc' => t ( 'Examples: jojo@demo.friendica.com, http://demo.friendica.com/profile/jojo, testuser@identi.ca' ),
2010-12-16 22:38:52 -05:00
'$pls_answer' => t ( 'Please answer the following:' ),
2011-06-06 19:26:11 -04:00
'$does_know' => sprintf ( t ( 'Does %s know you?' ), $a -> profile [ 'name' ]),
2010-12-16 22:38:52 -05:00
'$yes' => t ( 'Yes' ),
'$no' => t ( 'No' ),
'$add_note' => t ( 'Add a personal note:' ),
2011-09-05 21:34:30 -04:00
'$page_desc' => $page_desc ,
2012-02-19 13:44:30 -05:00
'$friendica' => t ( 'Friendica' ),
2011-06-09 00:06:02 -04:00
'$statusnet' => t ( 'StatusNet/Federated Social Web' ),
2011-09-05 21:34:30 -04:00
'$diaspora' => t ( 'Diaspora' ),
2012-04-01 19:18:03 -04:00
'$diasnote' => sprintf ( t ( ' - please do not use this form. Instead, enter %s into your Diaspora search bar.' ), $target_addr ),
2011-04-14 23:37:42 -04:00
'$your_address' => t ( 'Your Identity Address:' ),
2012-03-13 18:40:16 -04:00
'$invite_desc' => $invite_desc ,
'$emailnet' => $emailnet ,
2010-12-16 22:38:52 -05:00
'$submit' => t ( 'Submit Request' ),
'$cancel' => t ( 'Cancel' ),
2010-10-26 00:52:30 -04:00
'$nickname' => $a -> argv [ 1 ],
'$name' => $a -> profile [ 'name' ],
'$myaddr' => $myaddr
));
2010-07-22 05:13:39 -04:00
return $o ;
2010-07-01 19:48:07 -04:00
}
2010-07-27 22:27:14 -04:00
2010-07-22 05:13:39 -04:00
return ; // Somebody is fishing.
2011-05-23 05:39:57 -04:00
}}