1) ? argv(1) : 0); if (is_numeric($type)) { $item_id = intval($type); $type = 'item'; } else { $item_id = ((argc() > 2) ? intval(argv(2)) : 0); } if (!$item_id) killme(); if (!in_array($type, ['item', 'photo', 'attach', 'menu_item', 'chatroom'])) killme(); // we have different naming in in menu_item table and chatroom table switch ($type) { case 'menu_item': $id = 'mitem_id'; break; case 'chatroom': $id = 'cr_id'; break; default: $id = 'id'; break; } $r = q("SELECT * FROM %s WHERE $id = %d LIMIT 1", dbesc($type), intval($item_id) ); if (!$r) killme(); $item = $r[0]; $uid = null; $url = ''; switch ($type) { case 'menu_item': $uid = $item['mitem_channel_id']; break; case 'chatroom': $uid = $item['cr_uid']; $channel = channelx_by_n($uid); $url = z_root() . '/chat/' . $channel['channel_address'] . '/' . $item['cr_id']; break; case 'item': $uid = $item['uid']; $url = $item['plink']; break; case 'photo': $uid = $item['uid']; $channel = channelx_by_n($uid); $url = z_root() . '/photos/' . $channel['channel_address'] . '/image/' . $item['resource_id']; break; case 'attach': $uid = $item['uid']; $channel = channelx_by_n($uid); $url = z_root() . '/cloud/' . $channel['channel_address'] . '/' . $item['display_path']; break; default: break; } if (intval($uid) !== local_channel()) { echo ''; killme(); } if ((isset($item['item_private']) && intval($item['item_private'])) && (!strlen($item['allow_cid'])) && (!strlen($item['allow_gid'])) && (!strlen($item['deny_cid'])) && (!strlen($item['deny_gid']))) { // if the post is private, but public_policy is blank ("visible to the internet"), and there aren't any // specific recipients, we're the recipient of a post with "bcc" or targeted recipients; so we'll just show it // as unknown specific recipients. The sender will have the visibility list and will fall through to the // next section. echo ''; killme(); } $allowed_users = expand_acl($item['allow_cid']); $allowed_groups = expand_acl($item['allow_gid']); $deny_users = expand_acl($item['deny_cid']); $deny_groups = expand_acl($item['deny_gid']); stringify_array_elms($allowed_groups, true); stringify_array_elms($allowed_users, true); stringify_array_elms($deny_groups, true); stringify_array_elms($deny_users, true); $allowed_xchans = []; $profile_groups = []; if ($allowed_groups) { foreach ($allowed_groups as $g) { if (substr($g, 0, 4) === '\'vp.') { $profile_groups[] = '\'' . substr($g, 4); } } } if ($profile_groups) { $r = q("SELECT id, profile_name FROM profile WHERE profile_guid IN ( " . implode(', ', $profile_groups) . " )"); if ($r) { foreach ($r as $rr) { $pgrp_members = AccessList::profile_members_xchan($uid, $rr['id']); $allowed_xchans = array_merge($allowed_xchans, $pgrp_members); $access_list[] = ''; } } } if ($allowed_groups) { $r = q("SELECT id, gname FROM pgrp WHERE hash IN ( " . implode(', ', $allowed_groups) . " )"); if ($r) { foreach ($r as $rr) { $pgrp_members = AccessList::members_xchan($uid, $rr['id']); $allowed_xchans = array_merge($allowed_xchans, $pgrp_members); $access_list[] = ''; } } } if ($allowed_users) { $r = q("SELECT xchan_name, xchan_hash FROM xchan WHERE xchan_hash IN ( " . implode(', ', $allowed_users) . " )"); if ($r) { foreach ($r as $rr) { $allowed_xchans[] = $rr['xchan_hash']; if (!in_array($rr['xchan_hash'], $atoken_xchans)) { $access_list[] = ''; } } } $ocap_tokens = []; foreach ($allowed_users as $allowed_user) { $allowed_user = trim($allowed_user, '\''); if (str_starts_with($allowed_user, 'token:')) { $ocap_tokens[] = str_replace('token:', '', $allowed_user); } } if ($ocap_tokens) { stringify_array_elms($ocap_tokens, true); $ocap_mids = dbq("select id, mid from item where id in (select iid from iconfig where cat = 'ocap' and k = 'relay' and v in (" . implode(', ', $ocap_tokens) . "))"); foreach ($ocap_mids as $ocap) { $ocap_access_list[] = '' . t('Item') . ' ' . $ocap['id'] . ''; } } } $profile_groups = []; if ($deny_groups) { foreach ($deny_groups as $g) { if (substr($g, 0, 4) === '\'vp.') { $profile_groups[] = '\'' . substr($g, 4); } } } if ($profile_groups) { $r = q("SELECT profile_name FROM profile WHERE profile_guid IN ( " . implode(', ', $profile_groups) . " )"); if ($r) { foreach ($r as $rr) { $access_list[] = ''; } } } if ($deny_groups) { $r = q("SELECT gname FROM pgrp WHERE hash IN ( " . implode(', ', $deny_groups) . " )"); if ($r) { foreach ($r as $rr) { $access_list[] = ''; } } } if ($deny_users) { $r = q("SELECT xchan_name FROM xchan WHERE xchan_hash IN ( " . implode(', ', $deny_users) . " )"); if ($r) { foreach ($r as $rr) { $access_list[] = ''; } } } if ($atokens && $allowed_xchans && $url) { $allowed_xchans = array_unique($allowed_xchans); foreach ($atokens as $atoken) { if (in_array($atoken['xchan_hash'], $allowed_xchans)) { $guest_access_list[] = ''; } } } $access_list_header = ''; $guest_access_list_header = ''; $ocap_access_list_header = ''; $divider = ''; $str = ''; if ($access_list) { $str .= $access_list_header . implode($access_list); } if ($guest_access_list) { $str .= $divider . $guest_access_list_header . implode($guest_access_list); } if ($ocap_access_list) { $str .= $divider . $ocap_access_list_header . implode($ocap_access_list); } echo $str; killme(); } }