friendica_2021-01/mod/xrd.php

<?php

require_once('include/crypto.php');

function xrd_init(&$a) {

	$uri = urldecode(notags(trim($_GET['uri'])));

	if(substr($uri,0,4) === 'http')
		$name = basename($uri);
	else {
		$local = str_replace('acct:', '', $uri);
		if(substr($local,0,2) == '//')
			$local = substr($local,2);

		$name = substr($local,0,strpos($local,'@'));
	}

	$r = q("SELECT * FROM `user` WHERE `nickname` = '%s' LIMIT 1",
		dbesc($name)
	);
	if(! count($r))
		killme();

	$salmon_key = salmon_key($r[0]['spubkey']);

	header('Access-Control-Allow-Origin: *');
	header("Content-type: text/xml");

	if(get_config('system','diaspora_enabled')) {
		$tpl = file_get_contents('view/xrd_diaspora.tpl');
		$dspr = replace_macros($tpl,array(
			'$baseurl' => $a->get_baseurl(),
			'$dspr_guid' => $r[0]['guid'],
			'$dspr_key' => base64_encode(pemtorsa($r[0]['pubkey']))
		));
	}
	else
		$dspr = '';

	$tpl = file_get_contents('view/xrd_person.tpl');

	$o = replace_macros($tpl, array(
		'$nick'        => $r[0]['nickname'],
		'$accturi'     => $uri,
		'$profile_url' => $a->get_baseurl() . '/profile/'       . $r[0]['nickname'],
		'$hcard_url'   => $a->get_baseurl() . '/hcard/'         . $r[0]['nickname'],
		'$atom'        => $a->get_baseurl() . '/dfrn_poll/'     . $r[0]['nickname'],
		'$zot_post'    => $a->get_baseurl() . '/post/'          . $r[0]['nickname'],
		'$photo'       => $a->get_baseurl() . '/photo/profile/' . $r[0]['uid']      . '.jpg',
		'$dspr'        => $dspr,
		'$salmon'      => $a->get_baseurl() . '/salmon/'        . $r[0]['nickname'],
		'$salmen'      => $a->get_baseurl() . '/salmon/'        . $r[0]['nickname'] . '/mention',
		'$modexp'      => 'data:application/magic-public-key,'  . $salmon_key,
		'$bigkey'      =>  salmon_key($r[0]['pubkey'])
	));


	$arr = array('user' => $r[0], 'xml' => $o);
	call_hooks('personal_xrd', $arr);

	echo $arr['xml'];
	killme();

}