path: root/Zotlabs/Module/Hq.php

<?php
namespace Zotlabs\Module;

use App;
use Zotlabs\Widget\Messages;


require_once("include/bbcode.php");
require_once('include/security.php');
require_once('include/conversation.php');
require_once('include/acl_selectors.php');
require_once('include/items.php');


class Hq extends \Zotlabs\Web\Controller {

	function init() {
		if(! local_channel())
			return;

		App::$profile_uid = local_channel();
	}

	function get($update = 0, $load = false) {

		if(!local_channel()) {
			return;
		}

		$item_hash = '';

		if(argc() > 1 && argv(1) !== 'load') {
			$item_hash = unpack_link_id(argv(1));
		}

		if(isset($_REQUEST['mid'])) {
			$item_hash = unpack_link_id($_REQUEST['mid']);
		}

		if($item_hash === false) {
			notice(t('Malformed message id.') . EOL);
			return;
		}

		$item_normal = item_normal();
		$item_normal_update = item_normal_update();
		$sys = get_sys_channel();
		$sys_item = false;
		$sql_extra = '';
		$target_item = null;
		$o = '';

		if($item_hash) {
			// select the target item with a bias to our own item
			$sql_order = ((local_channel() > $sys['channel_id']) ? 'DESC' : 'ASC');

			$r = q("select id, uid, mid, parent_mid, thr_parent, verb, item_type, item_deleted, item_blocked from item where uid in (%d, %d) and mid = '%s' order by uid $sql_order limit 2",
				intval(local_channel()),
				intval($sys['channel_id']),
				dbesc($item_hash)
			);

			if($r) {
				$target_item = $r[0];
				if (intval($target_item['uid']) === intval($sys['channel_id'])) {
					$sys_item = true;
				}
			}

			//if the item is to be moderated redirect to /moderate
			if($target_item['item_blocked'] == ITEM_MODERATED) {
				goaway(z_root() . '/moderate/' . $target_item['id']);
			}

			$simple_update = '';
			if($update && $_SESSION['loadtime'])
				$simple_update = " AND (( item_unseen = 1 AND item.changed > '" . datetime_convert('UTC','UTC',$_SESSION['loadtime']) . "' )  OR item.changed > '" . datetime_convert('UTC','UTC',$_SESSION['loadtime']) . "' ) ";

		}

		if(! $update) {
			$channel = App::get_channel();

			$channel_acl = [
				'allow_cid' => $channel['channel_allow_cid'],
				'allow_gid' => $channel['channel_allow_gid'],
				'deny_cid'  => $channel['channel_deny_cid'],
				'deny_gid'  => $channel['channel_deny_gid']
			];

			$x = [
				'is_owner'            => true,
				'allow_location'      => ((intval(get_pconfig($channel['channel_id'],'system','use_browser_location'))) ? '1' : ''),
				'default_location'    => $channel['channel_location'],
				'nickname'            => $channel['channel_address'],
				'lockstate'           => (($channel['channel_allow_cid'] || $channel['channel_allow_gid'] || $channel['channel_deny_cid'] || $channel['channel_deny_gid']) ? 'lock' : 'unlock'),
				'acl'                 => populate_acl($channel_acl,true, \Zotlabs\Lib\PermissionDescription::fromGlobalPermission('view_stream'), get_post_aclDialogDescription(), 'acl_dialog_post'),
				'permissions'         => $channel_acl,
				'bang'                => '',
				'visitor'             => true,
				'profile_uid'         => local_channel(),
				'return_path'         => 'hq',
				'expanded'            => true,
				'editor_autocomplete' => true,
				'bbco_autocomplete'   => 'bbcode',
				'bbcode'              => true,
				'jotnets'             => true,
				'reset'               => t('Reset form')
			];

			$a = '';
			$o .= status_editor($a, $x, true);

		}

		if(! $update && ! $load) {

			nav_set_selected('HQ');

			if($target_item) {
				// if the target item is not a post (eg a like) we want to address its thread parent
				//$mid = ((($target_item['verb'] == ACTIVITY_LIKE) || ($target_item['verb'] == ACTIVITY_DISLIKE)) ? $target_item['thr_parent'] : $target_item['mid']);

				// if we got a decoded hash we must encode it again before handing to javascript
				$mid = gen_link_id($target_item['mid']);
			}
			else {
				$mid = '';
			}

			$o .= '<div id="live-hq"></div>' . "\r\n";
			$o .= "<script> var profile_uid = " . local_channel()
				. "; var netargs = '?f='; var profile_page = " . App::$pager['page'] . ";</script>\r\n";

			App::$page['htmlhead'] .= replace_macros(get_markup_template("build_query.tpl"),[
				'$baseurl' => z_root(),
				'$pgtype'  => 'hq',
				'$uid'     => local_channel(),
				'$gid'     => '0',
				'$cid'     => '0',
				'$cmin'    => '0',
				'$cmax'    => '99',
				'$star'    => '0',
				'$liked'   => '0',
				'$conv'    => '0',
				'$spam'    => '0',
				'$fh'      => '0',
				'$dm'      => '0',
				'$nouveau' => '0',
				'$wall'    => '0',
				'$page'    => '1',
				'$list'    => ((x($_REQUEST,'list')) ? intval($_REQUEST['list']) : 0),
				'$search'  => '',
				'$xchan'   => '',
				'$order'   => '',
				'$file'    => '',
				'$cats'    => '',
				'$tags'    => '',
				'$dend'    => '',
				'$dbegin'  => '',
				'$verb'    => '',
				'$net'     => '',
				'$mid'     => (($mid) ? urlencode($mid) : '')
			]);
		}

		if($load && $target_item) {

			if (!$sys_item) {
				$r = q("SELECT item.id AS item_id FROM item
					WHERE uid = %d
					AND mid = '%s'
					$item_normal
					LIMIT 1",
					intval(local_channel()),
					dbesc($target_item['parent_mid'])
				);
			}
			else {
				$sql_extra = item_permissions_sql($sys['channel_id']);

				$r = q("SELECT item.id AS item_id FROM item
					LEFT JOIN abook ON item.author_xchan = abook.abook_xchan
					WHERE mid = '%s' AND item.uid = %d $item_normal
					AND (abook.abook_blocked = 0 or abook.abook_flags is null)
					$sql_extra LIMIT 1",
					dbesc($target_item['parent_mid']),
					intval($sys['channel_id'])
				);
			}
		}
		elseif($update && $target_item) {
			if (!$sys_item) {
				$r = q("SELECT item.parent AS item_id FROM item
					WHERE uid = %d
					AND parent_mid = '%s'
					$item_normal_update
					$simple_update
					LIMIT 1",
					intval(local_channel()),
					dbesc($target_item['parent_mid'])
				);
			}
			else {
				$sql_extra = item_permissions_sql($sys['channel_id']);

				$r = q("SELECT item.parent AS item_id FROM item
					LEFT JOIN abook ON item.author_xchan = abook.abook_xchan
					WHERE mid = '%s' AND item.uid = %d $item_normal_update $simple_update
					AND (abook.abook_blocked = 0 or abook.abook_flags is null)
					$sql_extra LIMIT 1",
					dbesc($target_item['parent_mid']),
					intval($sys['channel_id'])
				);
			}
		}
		else {
			$r = [];
		}

		if($r) {
			$items = q("SELECT item.*, item.id AS item_id
				FROM item
				WHERE parent = '%s' $item_normal $sql_extra",
				dbesc($r[0]['item_id'])
			);

			xchan_query($items,true,(($sys_item) ? local_channel() : 0));
			$items = fetch_post_tags($items,true);
			$items = conv_sort($items,'created');
		}
		else {
			$items = [];
		}

		$o .= conversation($items, 'hq', $update, 'client');

		$o .= '<div id="content-complete"></div>';

		$_SESSION['loadtime'] = datetime_convert();

		return $o;

	}

	function post() {
		if (!local_channel())
			return;

		$options['offset'] = $_REQUEST['offset'] ?? 0;
		$options['type'] = $_REQUEST['type'] ?? '';
		$options['author'] = ((isset($_REQUEST['author'])) ? urldecode($_REQUEST['author']) : '');

		$ret = Messages::get_messages_page($options);

		json_return_and_die($ret);
	}

}