From dd2483221d3ee639088c0baca62a3472c76ecd1c Mon Sep 17 00:00:00 2001 From: friendica Date: Thu, 13 Dec 2012 16:27:58 -0800 Subject: admittedly local magic-auth is easy so that's mostly done. Now it gets hard. --- mod/chanview.php | 2 +- mod/magic.php | 54 +++++++++++++++++++++++++++++++++++++++++++++++++++--- 2 files changed, 52 insertions(+), 4 deletions(-) (limited to 'mod') diff --git a/mod/chanview.php b/mod/chanview.php index 42e5e1ed9..1de4f4e1b 100644 --- a/mod/chanview.php +++ b/mod/chanview.php @@ -40,7 +40,7 @@ function chanview_content(&$a) { } $o = replace_macros(get_markup_template('chanview.tpl'),array( - '$url' => $xchan['xchan_url'] + '$url' => z_root() . '/magic?f=&dest=' . $xchan['xchan_url'] . '&addr=' . $xchan['xchan_addr'] )); return $o; diff --git a/mod/magic.php b/mod/magic.php index 656fb9fad..c1f42f1d1 100644 --- a/mod/magic.php +++ b/mod/magic.php @@ -3,9 +3,57 @@ function magic_init(&$a) { $url = ((x($_REQUEST,'url')) ? $_REQUEST['url'] : ''); - - - if(local_user() && argc() > 1 && intval(argv(1))) { + $addr = ((x($_REQUEST,'addr')) ? $_REQUEST['addr'] : ''); + $hash = ((x($_REQUEST,'hash')) ? $_REQUEST['hash'] : ''); + $dest = ((x($_REQUEST,'dest')) ? $_REQUEST['dest'] : ''); + + + if(local_user()) { + + if($hash) { + $x = q("select xchan.xchan_url, hubloc.* from xchan left join hubloc on xchan_hash = hubloc_hash + where hublock_hash = '%s' and (hubloc_flags & %d) limit 1", + intval(HUBLOC_FLAGS_PRIMARY) + ); + } + elseif($addr) { + $x = q("select hubloc.* from xchan left join hubloc on xchan_hash = hubloc_hash + where xchan_addr = '%s' and (hubloc_flags & %d) limit 1", + dbesc($addr), + intval(HUBLOC_FLAGS_PRIMARY) + ); + } + + if(! $x) { + notice( t('Channel not found.') . EOL); + return; + } + + if($x[0]['hubloc_url'] === z_root()) { + $webbie = substr($x[0]['hubloc_addr'],0,strpos('@',$x[0]['hubloc_addr'])); + switch($dest) { + case 'channel': + $desturl = z_root() . '/channel/' . $webbie; + break; + case 'photos': + $desturl = z_root() . '/photos/' . $webbie; + break; + case 'profile': + $desturl = z_root() . '/profile/' . $webbie; + break; + default: + $desturl = $dest; + break; + } + // We are already authenticated on this site and a registered observer. + // Just redirect. + goaway($desturl); + } + + + + + $cid = $argv(1); -- cgit v1.2.3