<?php /** * @file mod/photo.php */ use Friendica\App; use Friendica\Database\DBM; use Friendica\Object\Image; require_once 'include/security.php'; function photo_init(App $a) { global $_SERVER; $prvcachecontrol = false; $file = ""; switch ($a->argc) { case 4: $person = $a->argv[3]; $customres = intval($a->argv[2]); $type = $a->argv[1]; break; case 3: $person = $a->argv[2]; $type = $a->argv[1]; break; case 2: $photo = $a->argv[1]; $file = $photo; break; case 1: default: killme(); // NOTREACHED } if (isset($_SERVER['HTTP_IF_MODIFIED_SINCE'])) { header('HTTP/1.1 304 Not Modified'); header("Last-Modified: " . gmdate("D, d M Y H:i:s", time()) . " GMT"); header('Etag: ' . $_SERVER['HTTP_IF_NONE_MATCH']); header("Expires: " . gmdate("D, d M Y H:i:s", time() + (31536000)) . " GMT"); header("Cache-Control: max-age=31536000"); if (function_exists('header_remove')) { header_remove('Last-Modified'); header_remove('Expires'); header_remove('Cache-Control'); } exit; } $default = 'images/person-175.jpg'; $public = true; if (isset($type)) { // Profile photos switch ($type) { case 'profile': case 'custom': $resolution = 4; break; case 'micro': $resolution = 6; $default = 'images/person-48.jpg'; break; case 'avatar': default: $resolution = 5; $default = 'images/person-80.jpg'; break; } $uid = str_replace(array('.jpg', '.png', '.gif'), array('', '', ''), $person); foreach (Image::supportedTypes() AS $m => $e) { $uid = str_replace('.' . $e, '', $uid); } $r = q("SELECT * FROM `photo` WHERE `scale` = %d AND `uid` = %d AND `profile` = 1 LIMIT 1", intval($resolution), intval($uid) ); if (DBM::is_result($r)) { $data = $r[0]['data']; $mimetype = $r[0]['type']; } if (empty($data)) { $data = file_get_contents($default); $mimetype = 'image/jpeg'; } } else { // Other photos $resolution = 0; $photo = str_replace(array('.jpg', '.png', '.gif'), array('', '', ''), $photo); foreach (Image::supportedTypes() AS $m => $e) { $photo = str_replace('.' . $e, '', $photo); } if (substr($photo, -2, 1) == '-') { $resolution = intval(substr($photo, -1, 1)); $photo = substr($photo, 0, -2); } // check if the photo exists and get the owner of the photo $r = q("SELECT `uid` FROM `photo` WHERE `resource-id` = '%s' LIMIT 1", dbesc($photo), intval($resolution) ); if (DBM::is_result($r)) { $sql_extra = permissions_sql($r[0]['uid']); // Now we'll see if we can access the photo $r = q("SELECT * FROM `photo` WHERE `resource-id` = '%s' AND `scale` <= %d $sql_extra ORDER BY scale DESC LIMIT 1", dbesc($photo), intval($resolution) ); if (DBM::is_result($r)) { $resolution = $r[0]['scale']; $data = $r[0]['data']; $mimetype = $r[0]['type']; $public = $r[0]['allow_cid'] == '' && $r[0]['allow_gid'] == '' && $r[0]['deny_cid'] == '' && $r[0]['deny_gid'] == ''; } else { // The picure exists. We already checked with the first query. // obviously, this is not an authorized viev! $data = file_get_contents('images/nosign.jpg'); $mimetype = 'image/jpeg'; $prvcachecontrol = true; $public = false; } } } if (empty($data)) { if (isset($resolution)) { switch ($resolution) { case 4: $data = file_get_contents('images/person-175.jpg'); $mimetype = 'image/jpeg'; break; case 5: $data = file_get_contents('images/person-80.jpg'); $mimetype = 'image/jpeg'; break; case 6: $data = file_get_contents('images/person-48.jpg'); $mimetype = 'image/jpeg'; break; default: killme(); // NOTREACHED break; } } } // Resize only if its not a GIF and it is supported by the library if ($mimetype != "image/gif" && in_array($mimetype, Image::supportedTypes())) { $Image = new Image($data, $mimetype); if ($Image->isValid()) { if (isset($customres) && $customres > 0 && $customres < 500) { $Image->scaleToSquare($customres); } $data = $Image->asString(); $mimetype = $Image->getType(); } } if (function_exists('header_remove')) { header_remove('Pragma'); header_remove('pragma'); } header("Content-type: " . $mimetype); if ($prvcachecontrol) { // it is a private photo that they have no permission to view. // tell the browser not to cache it, in case they authenticate // and subsequently have permission to see it header("Cache-Control: no-store, no-cache, must-revalidate"); } else { header("Last-Modified: " . gmdate("D, d M Y H:i:s", time()) . " GMT"); header('Etag: "' . md5($data) . '"'); header("Expires: " . gmdate("D, d M Y H:i:s", time() + (31536000)) . " GMT"); header("Cache-Control: max-age=31536000"); } echo $data; // If the photo is public and there is an existing photo directory store the photo there if ($public and $file != '') { // If the photo path isn't there, try to create it $basepath = $a->get_basepath(); if (!is_dir($basepath . "/photo")) { if (is_writable($basepath)) { mkdir($basepath . "/photo"); } } if (is_dir($basepath . "/photo")) { file_put_contents($basepath . "/photo/" . $file, $data); } } killme(); // NOTREACHED }