friendica/src/Module/FriendSuggest.php

<?php
/**
 * @copyright Copyright (C) 2010-2021, the Friendica project
 *
 * @license GNU AGPL version 3 or any later version
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, either version 3 of the
 * License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 *
 */

namespace Friendica\Module;

use Friendica\BaseModule;
use Friendica\Core\Protocol;
use Friendica\Core\Renderer;
use Friendica\Core\Worker;
use Friendica\DI;
use Friendica\Model\Contact as ContactModel;
use Friendica\Network\HTTPException\ForbiddenException;
use Friendica\Network\HTTPException\NotFoundException;
use Friendica\Util\DateTimeFormat;
use Friendica\Util\Strings;
use Friendica\Worker\Delivery;

/**
 * Suggest friends to a known contact
 */
class FriendSuggest extends BaseModule
{
	public static function init(array $parameters = [])
	{
		if (!local_user()) {
			throw new ForbiddenException(DI::l10n()->t('Permission denied.'));
		}
	}

	public static function post(array $parameters = [])
	{
		$cid = intval($parameters['contact']);

		// We do query the "uid" as well to ensure that it is our contact
		if (!DI::dba()->exists('contact', ['id' => $cid, 'uid' => local_user()])) {
			throw new NotFoundException(DI::l10n()->t('Contact not found.'));
		}

		$suggest_contact_id = intval($_POST['suggest']);
		if (empty($suggest_contact_id)) {
			return;
		}

		// We do query the "uid" as well to ensure that it is our contact
		$contact = DI::dba()->selectFirst('contact', ['name', 'url', 'request', 'avatar'], ['id' => $suggest_contact_id, 'uid' => local_user()]);
		if (empty($contact)) {
			notice(DI::l10n()->t('Suggested contact not found.'));
			return;
		}

		$note = Strings::escapeHtml(trim($_POST['note'] ?? ''));

		$suggest = DI::fsuggest()->insert([
			'uid'     => local_user(),
			'cid'     => $cid,
			'name'    => $contact['name'],
			'url'     => $contact['url'],
			'request' => $contact['request'],
			'photo'   => $contact['avatar'],
			'note'    => $note,
			'created' => DateTimeFormat::utcNow()
		]);

		Worker::add(PRIORITY_HIGH, 'Notifier', Delivery::SUGGESTION, $suggest->id);

		info(DI::l10n()->t('Friend suggestion sent.'));
	}

	public static function content(array $parameters = [])
	{
		$cid = intval($parameters['contact']);

		$contact = DI::dba()->selectFirst('contact', [], ['id' => $cid, 'uid' => local_user()]);
		if (empty($contact)) {
			notice(DI::l10n()->t('Contact not found.'));
			DI::baseUrl()->redirect();
		}

		$contacts = ContactModel::selectToArray(['id', 'name'], [
			'`uid` = ? 
			AND `id` != ? 
			AND `network` = ? 
			AND NOT `self` 
			AND NOT `blocked` 
			AND NOT `pending` 
			AND NOT `archive` 
			AND NOT `deleted` 
			AND `notify` != ""',
			local_user(),
			$cid,
			Protocol::DFRN,
		]);

		$formattedContacts = [];

		foreach ($contacts as $contact) {
			$formattedContacts[$contact['id']] = $contact['name'];
		}

		$tpl = Renderer::getMarkupTemplate('fsuggest.tpl');
		return Renderer::replaceMacros($tpl, [
			'$contact_id'      => $cid,
			'$fsuggest_title'  => DI::l10n()->t('Suggest Friends'),
			'$fsuggest_select' => [
				'suggest',
				DI::l10n()->t('Suggest a friend for %s', $contact['name']),
				'',
				'',
				$formattedContacts,
			],
			'$submit'          => DI::l10n()->t('Submit'),
		]);
	}
}