friendica/mod/pubsub.php

163 lines
4.2 KiB
PHP
Raw Normal View History

2010-10-01 04:41:22 +02:00
<?php
function hub_return($valid,$body) {
2010-10-01 04:41:22 +02:00
if($valid) {
header($_SERVER["SERVER_PROTOCOL"] . ' 200 ' . 'OK');
echo $body;
killme();
}
else {
header($_SERVER["SERVER_PROTOCOL"] . ' 404 ' . 'Not Found');
killme();
}
// NOTREACHED
}
// when receiving an XML feed, always return OK
2010-10-01 04:41:22 +02:00
function hub_post_return() {
2010-10-01 04:41:22 +02:00
header($_SERVER["SERVER_PROTOCOL"] . ' 200 ' . 'OK');
killme();
}
2010-10-01 04:41:22 +02:00
2010-10-01 04:41:22 +02:00
function pubsub_init(&$a) {
$nick = (($a->argc > 1) ? notags(trim($a->argv[1])) : '');
2010-11-08 06:07:47 +01:00
$contact_id = (($a->argc > 2) ? intval($a->argv[2]) : 0 );
2010-10-01 04:41:22 +02:00
if($_SERVER['REQUEST_METHOD'] === 'GET') {
2010-11-08 06:07:47 +01:00
$hub_mode = ((x($_GET,'hub_mode')) ? notags(trim($_GET['hub_mode'])) : '');
$hub_topic = ((x($_GET,'hub_topic')) ? notags(trim($_GET['hub_topic'])) : '');
$hub_challenge = ((x($_GET,'hub_challenge')) ? notags(trim($_GET['hub_challenge'])) : '');
$hub_lease = ((x($_GET,'hub_lease_seconds')) ? notags(trim($_GET['hub_lease_seconds'])) : '');
$hub_verify = ((x($_GET,'hub_verify_token')) ? notags(trim($_GET['hub_verify_token'])) : '');
logger('pubsub: Subscription from ' . $_SERVER['REMOTE_ADDR']);
logger('pubsub: data: ' . print_r($_GET,true), LOGGER_DATA);
2010-10-01 04:41:22 +02:00
$subscribe = (($hub_mode === 'subscribe') ? 1 : 0);
$r = q("SELECT * FROM `user` WHERE `nickname` = '%s' AND `account_expired` = 0 AND `account_removed` = 0 LIMIT 1",
2010-10-01 04:41:22 +02:00
dbesc($nick)
);
2012-06-08 10:15:53 +02:00
if(! count($r)) {
logger('pubsub: local account not found: ' . $nick);
2010-10-01 04:41:22 +02:00
hub_return(false, '');
2012-06-08 10:15:53 +02:00
}
2010-10-01 04:41:22 +02:00
2010-10-01 04:41:22 +02:00
$owner = $r[0];
$sql_extra = ((strlen($hub_verify)) ? sprintf(" AND `hub-verify` = '%s' ", dbesc($hub_verify)) : '');
$r = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d
AND `blocked` = 0 AND `pending` = 0 $sql_extra LIMIT 1",
2010-10-01 04:41:22 +02:00
intval($contact_id),
intval($owner['uid'])
);
2012-06-08 10:15:53 +02:00
if(! count($r)) {
logger('pubsub: contact '.$contact_id.' not found.');
2010-10-01 04:41:22 +02:00
hub_return(false, '');
2012-06-08 10:15:53 +02:00
}
if ($hub_topic)
if(! link_compare($hub_topic,$r[0]['poll'])) {
logger('pubsub: hub topic ' . $hub_topic . ' != ' . $r[0]['poll']);
// should abort but let's humour them.
}
2010-10-01 04:41:22 +02:00
$contact = $r[0];
// We must initiate an unsubscribe request with a verify_token.
2010-10-01 04:41:22 +02:00
// Don't allow outsiders to unsubscribe us.
2011-10-05 03:53:56 +02:00
if($hub_mode === 'unsubscribe') {
if(! strlen($hub_verify)) {
logger('pubsub: bogus unsubscribe');
2011-10-05 03:53:56 +02:00
hub_return(false, '');
}
logger('pubsub: unsubscribe success');
}
2010-10-01 04:41:22 +02:00
if ($hub_mode)
$r = q("UPDATE `contact` SET `subhub` = %d WHERE `id` = %d",
intval($subscribe),
intval($contact['id'])
);
2010-10-01 04:41:22 +02:00
hub_return(true, $hub_challenge);
2010-10-01 04:41:22 +02:00
}
}
require_once('include/security.php');
2010-10-01 04:41:22 +02:00
function pubsub_post(&$a) {
$xml = file_get_contents('php://input');
2010-11-02 01:56:36 +01:00
logger('pubsub: feed arrived from ' . $_SERVER['REMOTE_ADDR'] . ' for ' . $a->cmd );
2010-11-05 04:47:44 +01:00
logger('pubsub: user-agent: ' . $_SERVER['HTTP_USER_AGENT'] );
logger('pubsub: data: ' . $xml, LOGGER_DATA);
2011-06-14 04:06:49 +02:00
// if(! stristr($xml,'<?xml')) {
// logger('pubsub_post: bad xml');
// hub_post_return();
// }
2010-10-01 04:41:22 +02:00
$nick = (($a->argc > 1) ? notags(trim($a->argv[1])) : '');
2010-11-08 06:07:47 +01:00
$contact_id = (($a->argc > 2) ? intval($a->argv[2]) : 0 );
2010-10-01 04:41:22 +02:00
$r = q("SELECT * FROM `user` WHERE `nickname` = '%s' AND `account_expired` = 0 AND `account_removed` = 0 LIMIT 1",
2010-10-01 04:41:22 +02:00
dbesc($nick)
);
if(! count($r))
hub_post_return();
$importer = $r[0];
$r = q("SELECT * FROM `contact` WHERE `subhub` AND `id` = %d AND `uid` = %d
AND (`rel` = %d OR `rel` = %d OR network = '%s') AND NOT `blocked` LIMIT 1",
2010-10-01 04:41:22 +02:00
intval($contact_id),
intval($importer['uid']),
2011-08-08 01:15:54 +02:00
intval(CONTACT_IS_SHARING),
intval(CONTACT_IS_FRIEND),
dbesc(NETWORK_FEED)
2010-10-01 04:41:22 +02:00
);
2011-02-10 04:56:40 +01:00
if(! count($r)) {
logger('pubsub: no contact record for "'.$nick.' ('.$contact_id.')" - ignored. '.$xml);
2010-10-01 04:41:22 +02:00
hub_post_return();
2011-02-10 04:56:40 +01:00
}
2010-10-01 04:41:22 +02:00
$contact = $r[0];
2011-08-24 10:41:27 +02:00
// we have no way to match Diaspora guid's with atom post id's and could get duplicates.
// we'll assume that direct delivery is robust (and this is a bad assumption, but the duplicates are messy).
if($r[0]['network'] === NETWORK_DIASPORA)
hub_post_return();
$feedhub = '';
require_once('include/items.php');
2011-10-04 12:06:34 +02:00
consume_feed($xml,$importer,$contact,$feedhub,1,1);
2010-10-01 04:41:22 +02:00
// do it a second time so that any children find their parents.
2011-10-04 12:06:34 +02:00
consume_feed($xml,$importer,$contact,$feedhub,1,2);
2010-10-01 05:24:03 +02:00
hub_post_return();
2010-10-01 04:41:22 +02:00
}