358 lines
11 KiB
PHP
358 lines
11 KiB
PHP
<?php
|
|
|
|
/* --------------------------------------------------------------------
|
|
|
|
Chevereto
|
|
http://chevereto.com/
|
|
|
|
@author Rodolfo Berrios A. <http://rodolfoberrios.com/>
|
|
<inbox@rodolfoberrios.com>
|
|
|
|
Copyright (C) Rodolfo Berrios A. All rights reserved.
|
|
|
|
BY USING THIS SOFTWARE YOU DECLARE TO ACCEPT THE CHEVERETO EULA
|
|
http://chevereto.com/license
|
|
|
|
--------------------------------------------------------------------- */
|
|
|
|
$route = function($handler) {
|
|
try {
|
|
// 0 -> username
|
|
// 1 -> ?QS | albums | search
|
|
// 2 -> albums/?QS | search/?QS
|
|
|
|
if($handler->isRequestLevel($handler::getCond('mapped_route') ? 4 : 5)) return $handler->issue404(); // Allow only N levels
|
|
|
|
// Handle the request for /user and /username routing
|
|
$request_handle = $handler::getCond('mapped_route') ? $handler->request_array : $handler->request;
|
|
|
|
// Handle the request for /album or /search (personal mode ON + '/' routing)
|
|
if(CHV\getSetting('website_mode') == 'personal' and CHV\getSetting('website_mode_personal_routing') == '/' and in_array($request_handle[0], ['albums', 'search', 'following', 'followers'])) {
|
|
$request_handle = [1 => $request_handle[0]];
|
|
}
|
|
|
|
// Username handle
|
|
$username = $request_handle[0];
|
|
|
|
// Detect mapped args
|
|
if($handler::getCond('mapped_route') and $handler::$mapped_args) {
|
|
$mapped_args = $handler::$mapped_args;
|
|
}
|
|
|
|
if($mapped_args['id']) {
|
|
$id = $handler::$mapped_args['id'];
|
|
}
|
|
|
|
if(is_null($username) and is_null($id)) {
|
|
return $handler->issue404();
|
|
}
|
|
|
|
// User routing redirect
|
|
if(CHV\getSetting('user_routing') and $handler->request_array[0] == 'user') {
|
|
G\redirect(preg_replace('#/user/#', '/', G\get_current_url(), 1));
|
|
}
|
|
|
|
$logged_user = CHV\Login::getUser();
|
|
|
|
// Logged user status override redirect
|
|
CHV\User::statusRedirect($logged_user['status']);
|
|
|
|
$userhandle = is_null($id) ? 'username' : 'id';
|
|
$user = CHV\User::getSingle($$userhandle, $userhandle);
|
|
$is_owner = $user['id'] == $logged_user['id'];
|
|
|
|
// No user or invalid status
|
|
if(!$user OR $user['status'] !== 'valid' AND (!$logged_user OR !$logged_user['is_admin'])) {
|
|
return $handler->issue404();
|
|
}
|
|
|
|
// Single user mode redirect
|
|
if(CHV\getSetting('website_mode') == 'personal' and $user['id'] == CHV\getSetting('website_mode_personal_uid') and $handler->request_array[0] == 'user') {
|
|
G\redirect(CHV\getSetting('website_mode_personal_routing'));
|
|
}
|
|
|
|
// Private gate
|
|
if(!($is_owner || $logged_user['is_admin']) && $user['is_private']) {
|
|
return $handler->issue404();
|
|
}
|
|
|
|
$user_routes = [];
|
|
$user_views = [
|
|
'images' => [
|
|
'title' => _s("%s's Images"),
|
|
'title_short' => _s("Images"),
|
|
'doctitle' => '',
|
|
],
|
|
'albums' => [
|
|
'title' => _s("%s's Albums"),
|
|
'title_short' => _s("Albums"),
|
|
'doctitle' => '',
|
|
],
|
|
'search' => [
|
|
'title' => _s('Results for'),
|
|
'title_short' => '',
|
|
'doctitle' => '',
|
|
],
|
|
];
|
|
|
|
foreach($user_views as $k => $v) { // Need to use $k => $v to fetch array key easily
|
|
array_push($user_routes, $k == 'images' ? $username : $k);
|
|
}
|
|
|
|
foreach($user_views as $k => $v) {
|
|
$user_views[$k]['current'] = FALSE;
|
|
}
|
|
|
|
if($request_handle[1]) {
|
|
|
|
// Sub path user
|
|
if($request_handle[1] !== $_SERVER['QUERY_STRING']) {
|
|
if(!in_array($request_handle[1], $user_routes)) {
|
|
return $handler->issue404();
|
|
}
|
|
}
|
|
|
|
// Search in user
|
|
if($request_handle[1] == 'search') {
|
|
if(!$_SERVER['QUERY_STRING']) {
|
|
return $handler->issue404();
|
|
}
|
|
// Invalid list request?
|
|
if(!empty($_REQUEST['list']) and !in_array($_REQUEST['list'], ['images', 'albums', 'users'])) {
|
|
return $handler->issue404();
|
|
}
|
|
}
|
|
|
|
} else {
|
|
$user_views['images']['current'] = TRUE;
|
|
}
|
|
|
|
$user['followed'] = FALSE;
|
|
$show_follow_button = FALSE;
|
|
|
|
$handler::setCond('show_follow_button', $show_follow_button);
|
|
|
|
$albums = CHV\User::getAlbums($user["id"]);
|
|
|
|
$pre_doctitle = $user['name'];
|
|
if(CHV\getSetting('website_mode') == 'community' or $user['id'] !== CHV\getSetting('website_mode_personal_uid')) {
|
|
$pre_doctitle .= ' ('.$user['username'].')';
|
|
}
|
|
$handler::setVar('pre_doctitle', $pre_doctitle);
|
|
|
|
if(array_key_exists($request_handle[1], $user_views)) {
|
|
$user_views[$request_handle[1]]['current'] = TRUE;
|
|
}
|
|
|
|
if($request_handle[1] == 'search') {
|
|
if(!$_REQUEST['q']) {
|
|
G\redirect($user['url']);
|
|
}
|
|
$user['search'] = [
|
|
'type' => empty($_REQUEST['list']) ? 'images' : $_REQUEST['list'],
|
|
'q' => $_REQUEST['q'],
|
|
'd' => strlen($_REQUEST['q']) >= 25 ? (substr($_REQUEST['q'], 0, 22) . '...') : $_REQUEST['q']
|
|
];
|
|
}
|
|
|
|
// Tabs
|
|
|
|
$base_user_url = $user['url'];
|
|
foreach($user_views as $k => $v) {
|
|
$handler::setCond('user_' . $k, $v['current']);
|
|
if($v['current']) {
|
|
$current_view = $k;
|
|
if($current_view !== 'images') {
|
|
$base_user_url .= '/' . $k;
|
|
}
|
|
}
|
|
}
|
|
$base_user_url = rtrim($base_user_url, '/');
|
|
|
|
$safe_html_user = G\safe_html($user);
|
|
|
|
switch($current_view) {
|
|
|
|
case 'images':
|
|
case 'liked':
|
|
$type = "images";
|
|
$tools = $is_owner || $logged_user['is_admin'];
|
|
$current = FALSE;
|
|
if($current_view == 'liked') {
|
|
$tools_available = $handler::getCond('admin') ? ['delete', 'category', 'flag'] : [];
|
|
}
|
|
|
|
break;
|
|
|
|
case 'following':
|
|
case 'followers':
|
|
$type = 'users';
|
|
$tools = FALSE;
|
|
$params_hidden = [$current_view . '_user_id' => $user['id_encoded']];
|
|
$params_remove_keys = ['list'];
|
|
break;
|
|
|
|
case 'albums':
|
|
$type = "albums";
|
|
$tools = TRUE;
|
|
break;
|
|
|
|
case 'search':
|
|
$type = $user['search']['type'];
|
|
$tabs = [
|
|
[
|
|
'type' => 'images',
|
|
'label' => _n('Image', 'Images', 2),
|
|
'id' => 'list-user-images',
|
|
'current' => $_REQUEST['list'] == 'images' || !$_REQUEST['list'],
|
|
],
|
|
[
|
|
'type' => 'albums',
|
|
'label' => _n('Album', 'Albums', 2),
|
|
'id' => 'list-user-albums',
|
|
'current' => $_REQUEST['list'] == 'albums',
|
|
]
|
|
];
|
|
foreach($tabs as $k => $v) {
|
|
$params = [
|
|
'list' => $v['type'],
|
|
'q' => $safe_html_user['search']['q'],
|
|
'sort' => 'date_desc',
|
|
'page' => '1',
|
|
];
|
|
$tabs[$k]['params'] = http_build_query($params);
|
|
$tabs[$k]['url'] = G\get_base_url($base_user_url) . '/?' . $tabs[$k]['params'];
|
|
}
|
|
break;
|
|
}
|
|
|
|
if($user_views['albums']['current']) {
|
|
$params_hidden['list'] = 'albums';
|
|
}
|
|
|
|
$params_hidden['from'] = 'user';
|
|
|
|
if(!$tabs) {
|
|
$tabs = CHV\Listing::getTabs([
|
|
'listing' => $type,
|
|
'basename' => $base_user_url,
|
|
'tools' => $tools,
|
|
'tools_available' => $tools_available,
|
|
'params_hidden' => $params_hidden,
|
|
'params_remove_keys'=> $params_remove_keys,
|
|
]);
|
|
}
|
|
foreach($tabs as $k => &$v) {
|
|
if($params_hidden && !array_key_exists('params_hidden', $tabs)) {
|
|
$tabs[$k]['params_hidden'] = http_build_query($params_hidden);
|
|
}
|
|
$v['disabled'] = $user[($user_views['images']['current'] ? 'image' : 'album') . '_count'] == 0 ? !$v['current'] : FALSE;
|
|
}
|
|
|
|
// Listings
|
|
if($user["image_count"] > 0 OR $user["album_count"] > 0 OR in_array($current_view, ['liked', 'following', 'followers'])) {
|
|
|
|
$list_params = CHV\Listing::getParams(); // Use CHV magic params
|
|
|
|
if($list_params['sort'][0] == 'likes') {
|
|
$handler->issue404();
|
|
}
|
|
|
|
$tpl = $type;
|
|
|
|
switch($current_view) {
|
|
case 'liked':
|
|
$where = 'WHERE like_user_id=:user_id';
|
|
$tpl = 'liked';
|
|
break;
|
|
case 'following':
|
|
$where = 'WHERE follow_user_id=:user_id';
|
|
break;
|
|
case 'followers':
|
|
$where = 'WHERE follow_followed_user_id=:user_id';
|
|
break;
|
|
default:
|
|
$where = $type == 'images' ? 'WHERE image_user_id=:user_id' : 'WHERE album_user_id=:user_id';
|
|
break;
|
|
}
|
|
|
|
$output_tpl = 'user/' . $tpl;
|
|
|
|
if($user_views['search']['current']) {
|
|
$type = $user["search"]["type"];
|
|
$where = $user["search"]["type"] == "images" ? "WHERE image_user_id=:user_id AND MATCH(image_name, image_title, image_description, image_original_filename) AGAINST(:q)" : "WHERE album_user_id=:user_id AND MATCH(album_name, album_description) AGAINST(:q)";
|
|
}
|
|
|
|
$show_user_items_editor = CHV\Login::getUser() ? TRUE : FALSE;
|
|
|
|
if($type == 'albums') {
|
|
$show_user_items_editor = FALSE;
|
|
}
|
|
|
|
try {
|
|
$list = new CHV\Listing;
|
|
$list->setType($type); // images | users | albums
|
|
$list->setOffset($list_params['offset']);
|
|
$list->setLimit($list_params['limit']); // how many results?
|
|
$list->setItemsPerPage($list_params['items_per_page']); // must
|
|
$list->setSortType($list_params['sort'][0]); // date | size | views | likes
|
|
$list->setSortOrder($list_params['sort'][1]); // asc | desc
|
|
$list->setWhere($where);
|
|
$list->setOwner($user["id"]);
|
|
$list->setRequester(CHV\Login::getUser());
|
|
if($is_owner or $logged_user['is_admin']) {
|
|
if($type == 'users') {
|
|
$list->setTools(FALSE);
|
|
$show_user_items_editor = FALSE;
|
|
} else {
|
|
if($current_view == 'liked') {
|
|
$list->setTools($user['id'] == $logged_user['id'] ? ['embed'] : []);
|
|
} else {
|
|
$list->setTools(TRUE);
|
|
}
|
|
}
|
|
}
|
|
$list->bind(":user_id", $user["id"]);
|
|
if($user_views['search']['current'] AND !empty($user['search']['q'])) {
|
|
$list->bind(':q', $q ?: $user['search']['q']);
|
|
}
|
|
$list->output_tpl = $output_tpl;
|
|
$list->exec();
|
|
} catch(Exception $e) {} // Silence to avoid wrong input queries
|
|
}
|
|
|
|
$title = sprintf($user_views[$current_view]['title'], $user['firstname_html']);
|
|
$title_short = sprintf($user_views[$current_view]['title_short'], $user['firstname_html']);
|
|
|
|
$handler::setCond('owner', $is_owner);
|
|
$handler::setCond('show_user_items_editor', $show_user_items_editor);
|
|
$handler::setVar('user', $user);
|
|
$handler::setVar('safe_html_user', $safe_html_user);
|
|
$handler::setVar('title', $title);
|
|
$handler::setVar('title_short', $title_short);
|
|
$handler::setVar('tabs', $tabs);
|
|
$handler::setVar('list', $list);
|
|
|
|
// Note, _s must be call like this to bind the PO crawler
|
|
if($user_views['albums']['current']) {
|
|
$meta_description = _s('%n (%u) albums on %w');
|
|
} else {
|
|
if($user['bio']) {
|
|
$meta_description = $safe_html_user['bio'];
|
|
} else {
|
|
$meta_description = _s('%n (%u) on %w');
|
|
}
|
|
}
|
|
$handler::setVar('meta_description', strtr($meta_description, ['%n' => $user['name'], '%u' => $user['username'], '%w' => CHV\getSetting('website_name')]));
|
|
|
|
if($handler::getCond('admin') or $is_owner) {
|
|
$handler::setVar('user_items_editor', [
|
|
"user_albums" => CHV\User::getAlbums($user["id"]),
|
|
"type" => $user_views['albums']['current'] ? "albums": "images"
|
|
]);
|
|
}
|
|
|
|
} catch(Exception $e) {
|
|
G\exception_to_error($e);
|
|
}
|
|
}; |