' . "\r\n"; $nick = (($a->argc > 1) ? $a->argv[1] : ''); profile_load($a,$nick); $item_id = (($a->argc > 2) ? intval($a->argv[2]) : 0); if(! $item_id) { $a->error = 404; notice( t('Item not found.') . EOL); return; } $groups = array(); $contact = null; $remote_contact = false; if(remote_user()) { $contact_id = $_SESSION['visitor_id']; $groups = init_groups_visitor($contact_id); $r = q("SELECT * FROM `contact` WHERE `id` = %d AND `uid` = %d LIMIT 1", intval($contact_id), intval($a->profile['uid']) ); if(count($r)) { $contact = $r[0]; $remote_contact = true; } } if(! $remote_contact) { if(local_user()) { $contact_id = $_SESSION['cid']; $contact = $a->contact; } } $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `self` = 1 LIMIT 1", intval($a->profile['uid']) ); if(count($r)) $a->page_contact = $r[0]; $sql_extra = " AND `allow_cid` = '' AND `allow_gid` = '' AND `deny_cid` = '' AND `deny_gid` = '' "; // Profile owner - everything is visible if(local_user() && (local_user() == $a->profile['uid'])) { $sql_extra = ''; } // authenticated visitor - here lie dragons // If $remotecontact is true, we know that not only is this a remotely authenticated // person, but that it is *our* contact, which is important in multi-user mode. elseif($remote_contact) { $gs = '<<>>'; // should be impossible to match if(count($groups)) { foreach($groups as $g) $gs .= '|<' . intval($g) . '>'; } $sql_extra = sprintf( " AND ( `allow_cid` = '' OR `allow_cid` REGEXP '<%d>' ) AND ( `deny_cid` = '' OR NOT `deny_cid` REGEXP '<%d>' ) AND ( `allow_gid` = '' OR `allow_gid` REGEXP '%s' ) AND ( `deny_gid` = '' OR NOT `deny_gid` REGEXP '%s') ", intval($_SESSION['visitor_id']), intval($_SESSION['visitor_id']), dbesc($gs), dbesc($gs) ); } $r = q("SELECT `item`.*, `item`.`id` AS `item_id`, `contact`.`name`, `contact`.`photo`, `contact`.`url`, `contact`.`rel`, `contact`.`network`, `contact`.`thumb`, `contact`.`self`, `contact`.`writable`, `contact`.`id` AS `cid`, `contact`.`uid` AS `contact-uid` FROM `item` LEFT JOIN `contact` ON `contact`.`id` = `item`.`contact-id` WHERE `item`.`uid` = %d AND `item`.`visible` = 1 AND `item`.`deleted` = 0 AND `contact`.`blocked` = 0 AND `contact`.`pending` = 0 AND `item`.`parent` = ( SELECT `parent` FROM `item` WHERE ( `id` = '%s' OR `uri` = '%s' )) $sql_extra ORDER BY `parent` DESC, `gravity` ASC, `id` ASC ", intval($a->profile['uid']), dbesc($item_id), dbesc($item_id) ); if(count($r)) { if((local_user()) && (local_user() == $a->profile['uid'])) { q("UPDATE `item` SET `unseen` = 0 WHERE `parent` = %d AND `unseen` = 1", intval($r[0]['parent']) ); } $o .= conversation($a,$r,'display', false); } else { $r = q("SELECT `id` FROM `item` WHERE `id` = '%s' OR `uri` = '%s' LIMIT 1", dbesc($item_id), dbesc($item_id) ); if(count($r)) { if($r[0]['deleted']) { notice( t('Item has been removed.') . EOL ); } else { notice( t('Permission denied.') . EOL ); } } else { notice( t('Item not found.') . EOL ); } } $o .= '

' . t('Shared content is covered by the Creative Commons Attribution 3.0 license.') . '

'; return $o; }