396 lines
12 KiB
PHP
396 lines
12 KiB
PHP
<?php
|
|
|
|
/* --------------------------------------------------------------------
|
|
|
|
Chevereto
|
|
http://chevereto.com/
|
|
|
|
@author Rodolfo Berrios A. <http://rodolfoberrios.com/>
|
|
<inbox@rodolfoberrios.com>
|
|
|
|
Copyright (C) Rodolfo Berrios A. All rights reserved.
|
|
|
|
BY USING THIS SOFTWARE YOU DECLARE TO ACCEPT THE CHEVERETO EULA
|
|
http://chevereto.com/license
|
|
|
|
--------------------------------------------------------------------- */
|
|
|
|
$route = function($handler) {
|
|
try {
|
|
// 0 -> username
|
|
// 1 -> ?QS | albums | search
|
|
// 2 -> albums/?QS | search/?QS
|
|
|
|
if($handler->isRequestLevel($handler::getCond('mapped_route') ? 4 : 5)) return $handler->issue404(); // Allow only N levels
|
|
|
|
// Handle the request for /user and /username routing
|
|
$request_handle = $handler::getCond('mapped_route') ? $handler->request_array : $handler->request;
|
|
|
|
// Handle the request for /album or /search (personal mode ON + '/' routing)
|
|
if(CHV\getSetting('website_mode') == 'personal' and CHV\getSetting('website_mode_personal_routing') == '/' and in_array($request_handle[0], ['albums', 'search', 'following', 'followers'])) {
|
|
$request_handle = [1 => $request_handle[0]];
|
|
}
|
|
|
|
// Username handle
|
|
$username = $request_handle[0];
|
|
|
|
// Detect mapped args
|
|
if($handler::getCond('mapped_route') and $handler::$mapped_args) {
|
|
$mapped_args = $handler::$mapped_args;
|
|
}
|
|
|
|
if($mapped_args['id']) {
|
|
$id = $handler::$mapped_args['id'];
|
|
}
|
|
|
|
if(is_null($username) and is_null($id)) {
|
|
return $handler->issue404();
|
|
}
|
|
|
|
// User routing redirect
|
|
if(CHV\getSetting('user_routing') and $handler->request_array[0] == 'user') {
|
|
G\redirect(preg_replace('#/user/#', '/', G\get_current_url(), 1));
|
|
}
|
|
|
|
$logged_user = CHV\Login::getUser();
|
|
|
|
// Logged user status override redirect
|
|
CHV\User::statusRedirect($logged_user['status']);
|
|
|
|
$userhandle = is_null($id) ? 'username' : 'id';
|
|
$user = CHV\User::getSingle($$userhandle, $userhandle);
|
|
$is_owner = $user['id'] == $logged_user['id'];
|
|
|
|
// No user or invalid status
|
|
if(!$user OR $user['status'] !== 'valid' AND (!$logged_user OR !$logged_user['is_admin'])) {
|
|
return $handler->issue404();
|
|
}
|
|
|
|
// Single user mode redirect
|
|
if(CHV\getSetting('website_mode') == 'personal' and $user['id'] == CHV\getSetting('website_mode_personal_uid') and $handler->request_array[0] == 'user') {
|
|
G\redirect(CHV\getSetting('website_mode_personal_routing'));
|
|
}
|
|
|
|
// Private gate
|
|
if(!($is_owner || $logged_user['is_admin']) && $user['is_private']) {
|
|
return $handler->issue404();
|
|
}
|
|
|
|
$user_routes = [];
|
|
$user_views = [
|
|
'images' => [
|
|
'title' => _s("%s's Images"),
|
|
'title_short' => _s("Images"),
|
|
'doctitle' => '',
|
|
],
|
|
'albums' => [
|
|
'title' => _s("%s's Albums"),
|
|
'title_short' => _s("Albums"),
|
|
'doctitle' => '',
|
|
],
|
|
'search' => [
|
|
'title' => _s('Results for'),
|
|
'title_short' => '',
|
|
'doctitle' => '',
|
|
],
|
|
];
|
|
|
|
foreach($user_views as $k => $v) { // Need to use $k => $v to fetch array key easily
|
|
array_push($user_routes, $k == 'images' ? $username : $k);
|
|
}
|
|
|
|
foreach($user_views as $k => $v) {
|
|
$user_views[$k]['current'] = FALSE;
|
|
}
|
|
|
|
if($request_handle[1]) {
|
|
|
|
// Sub path user
|
|
if($request_handle[1] !== $_SERVER['QUERY_STRING']) {
|
|
if(!in_array($request_handle[1], $user_routes)) {
|
|
return $handler->issue404();
|
|
}
|
|
}
|
|
|
|
// Search in user
|
|
if($request_handle[1] == 'search') {
|
|
if(!$_SERVER['QUERY_STRING']) {
|
|
return $handler->issue404();
|
|
}
|
|
// Invalid list request?
|
|
if(!empty($_REQUEST['list']) and !in_array($_REQUEST['list'], ['images', 'albums', 'users'])) {
|
|
return $handler->issue404();
|
|
}
|
|
}
|
|
|
|
} else {
|
|
$user_views['images']['current'] = TRUE;
|
|
}
|
|
|
|
$user['followed'] = FALSE;
|
|
$show_follow_button = FALSE;
|
|
|
|
$handler::setCond('show_follow_button', $show_follow_button);
|
|
|
|
$albums = CHV\User::getAlbums($user["id"]);
|
|
|
|
$pre_doctitle = $user['name'];
|
|
if(CHV\getSetting('website_mode') == 'community' or $user['id'] !== CHV\getSetting('website_mode_personal_uid')) {
|
|
$pre_doctitle .= ' ('.$user['username'].')';
|
|
}
|
|
$handler::setVar('pre_doctitle', $pre_doctitle);
|
|
|
|
if(array_key_exists($request_handle[1], $user_views)) {
|
|
$user_views[$request_handle[1]]['current'] = TRUE;
|
|
}
|
|
|
|
if($request_handle[1] == 'search') {
|
|
if(!$_REQUEST['q']) {
|
|
G\redirect($user['url']);
|
|
}
|
|
$user['search'] = [
|
|
'type' => empty($_REQUEST['list']) ? 'images' : $_REQUEST['list'],
|
|
'q' => $_REQUEST['q'],
|
|
'd' => strlen($_REQUEST['q']) >= 25 ? (substr($_REQUEST['q'], 0, 22) . '...') : $_REQUEST['q']
|
|
];
|
|
}
|
|
|
|
// Tabs
|
|
$base_user_url = $user["url"];
|
|
|
|
foreach($user_views as $k => $v) {
|
|
$handler::setCond('user_' . $k, $v['current']);
|
|
if($v['current']) {
|
|
$current_view = $k;
|
|
if($current_view !== 'images') {
|
|
$base_user_url .= '/' . $k;
|
|
}
|
|
}
|
|
}
|
|
|
|
$safe_html_user = G\safe_html($user);
|
|
|
|
switch($current_view) {
|
|
|
|
case 'images':
|
|
case 'liked':
|
|
$type = "images";
|
|
$tabs = [
|
|
[
|
|
"label" => _s('Most recent'),
|
|
"id" => "list-most-recent",
|
|
"params" => "list=images&sort=date_desc&page=1",
|
|
"current" => $_REQUEST["sort"] == "date_desc" or !$_REQUEST["sort"] ? TRUE : FALSE,
|
|
],
|
|
[
|
|
"label" => _s('Oldest'),
|
|
"id" => "list-most-oldest",
|
|
"params" => "list=images&sort=date_asc&page=1",
|
|
"current" => $_REQUEST["sort"] == "date_asc",
|
|
],
|
|
[
|
|
'label' => _s('Most viewed'),
|
|
'id' => 'list-most-viewed',
|
|
'params' => 'list=images&sort=views_desc&page=1',
|
|
'current' => $_REQUEST['sort'] == 'views_desc',
|
|
],
|
|
];
|
|
$current = FALSE;
|
|
foreach($tabs as $k => $v) {
|
|
if($v['current']) {
|
|
$current = TRUE;
|
|
}
|
|
$tabs[$k]["type"] = "images";
|
|
$tabs[$k]['list'] = TRUE;
|
|
$tabs[$k]['tools'] = ($is_owner || $logged_user['is_admin']);
|
|
if($current_view == 'liked') {
|
|
$tabs[$k]['tools_available'] = $handler::getCond('admin') ? ['delete', 'category', 'flag'] : [];
|
|
}
|
|
}
|
|
break;
|
|
|
|
case 'following':
|
|
case 'followers':
|
|
$type = "users";
|
|
$tabs = [
|
|
[
|
|
"label" => _s('Most recent'),
|
|
"id" => "list-most-recent",
|
|
"params" => "sort=date_desc&page=1",
|
|
"current" => ($_REQUEST["sort"] == "date_desc" || !$_REQUEST["sort"]),
|
|
],
|
|
[
|
|
"label" => _s('Oldest'),
|
|
"id" => "list-most-oldest",
|
|
"params" => "list=images&sort=date_asc&page=1",
|
|
"current" => $_REQUEST["sort"] == "date_asc",
|
|
]
|
|
];
|
|
foreach($tabs as $k => $v) {
|
|
$tabs[$k]["type"] = "users";
|
|
$tabs[$k]['tools'] = FALSE;
|
|
$tabs[$k]['params_hidden'] = $current_view . '_user_id=' . $user["id_encoded"];
|
|
|
|
}
|
|
break;
|
|
|
|
case 'albums':
|
|
$type = "albums";
|
|
$tabs = [
|
|
[
|
|
"label" => _s('Most recent'),
|
|
"id" => "list-most-recent",
|
|
"params" => "sort=date_desc&page=1",
|
|
"current" => $_REQUEST["sort"] == "date_desc" or !$_REQUEST["sort"] ? true : false,
|
|
],
|
|
[
|
|
"label" => _s('Oldest'),
|
|
"id" => "list-most-oldest",
|
|
"params" => "sort=date_asc&page=1",
|
|
"current" => $_REQUEST["sort"] == "date_asc",
|
|
]
|
|
];
|
|
foreach($tabs as $k => $v) {
|
|
$tabs[$k]["type"] = "albums";
|
|
}
|
|
break;
|
|
|
|
case 'search':
|
|
$type = $user["search"]["type"];
|
|
$tabs = [
|
|
[
|
|
"type" => "images",
|
|
"label" => _s('Images'),
|
|
"id" => "list-user-images",
|
|
"current" => $_REQUEST["list"] == "images" or !$_REQUEST["list"] ? true : false,
|
|
],
|
|
[
|
|
"type" => "albums",
|
|
"label" => _s('Albums'),
|
|
"id" => "list-user-albums",
|
|
"current" => $_REQUEST["list"] == "albums",
|
|
]
|
|
];
|
|
foreach($tabs as $k => $v) {
|
|
$tabs[$k]["params"] = "list=".$v["type"]."&q=".$safe_html_user["search"]["q"]."&sort=date_desc&page=1";
|
|
}
|
|
break;
|
|
}
|
|
|
|
foreach((array)$tabs as $k => $v) {
|
|
$tabs[$k]["url"] = rtrim($base_user_url, '/') . "/?" . $tabs[$k]["params"];
|
|
$tabs[$k]["params_hidden"] = isset($tabs[$k]["params_hidden"]) ? ($tabs[$k]["params_hidden"] . '&') : '';
|
|
if($user_views['albums']['current']) {
|
|
$tabs[$k]["params_hidden"] .= "list=albums&";
|
|
}
|
|
$tabs[$k]["params_hidden"] .= ($current_view == 'liked' ? 'like_user_id' : 'userid') . '=' . $user["id_encoded"] . "&from=user";
|
|
$tabs[$k]["disabled"] = $user[$user_views['images']['current'] ? "image_count" : "album_count"] == 0 ? !$v["current"] : false;
|
|
}
|
|
|
|
// Listings
|
|
if($user["image_count"] > 0 OR $user["album_count"] > 0 OR in_array($current_view, ['liked', 'following', 'followers'])) {
|
|
|
|
$list_params = CHV\Listing::getParams(); // Use CHV magic params
|
|
|
|
if($list_params['sort'][0] == 'likes') {
|
|
$handler->issue404();
|
|
}
|
|
|
|
$tpl = $type;
|
|
|
|
switch($current_view) {
|
|
case 'liked':
|
|
$where = 'WHERE like_user_id=:user_id';
|
|
$tpl = 'liked';
|
|
break;
|
|
case 'following':
|
|
$where = 'WHERE follow_user_id=:user_id';
|
|
break;
|
|
case 'followers':
|
|
$where = 'WHERE follow_followed_user_id=:user_id';
|
|
break;
|
|
default:
|
|
$where = $type == 'images' ? 'WHERE image_user_id=:user_id' : 'WHERE album_user_id=:user_id';
|
|
break;
|
|
}
|
|
|
|
$output_tpl = 'user/' . $tpl;
|
|
|
|
if($user_views['search']['current']) {
|
|
$type = $user["search"]["type"];
|
|
$where = $user["search"]["type"] == "images" ? "WHERE image_user_id=:user_id AND MATCH(image_name, image_title, image_description, image_original_filename) AGAINST(:q)" : "WHERE album_user_id=:user_id AND MATCH(album_name, album_description) AGAINST(:q)";
|
|
}
|
|
|
|
$show_user_items_editor = CHV\Login::getUser() ? TRUE : FALSE;
|
|
|
|
if($type == 'albums') {
|
|
$show_user_items_editor = FALSE;
|
|
}
|
|
|
|
try {
|
|
$list = new CHV\Listing;
|
|
$list->setType($type); // images | users | albums
|
|
$list->setOffset($list_params['offset']);
|
|
$list->setLimit($list_params['limit']); // how many results?
|
|
$list->setItemsPerPage($list_params['items_per_page']); // must
|
|
$list->setSortType($list_params['sort'][0]); // date | size | views | likes
|
|
$list->setSortOrder($list_params['sort'][1]); // asc | desc
|
|
$list->setWhere($where);
|
|
$list->setOwner($user["id"]);
|
|
$list->setRequester(CHV\Login::getUser());
|
|
if($is_owner or $logged_user['is_admin']) {
|
|
if($type == 'users') {
|
|
$list->setTools(FALSE);
|
|
$show_user_items_editor = FALSE;
|
|
} else {
|
|
if($current_view == 'liked') {
|
|
$list->setTools($user['id'] == $logged_user['id'] ? ['embed'] : []);
|
|
} else {
|
|
$list->setTools(TRUE);
|
|
}
|
|
}
|
|
}
|
|
$list->bind(":user_id", $user["id"]);
|
|
if($user_views['search']['current'] AND !empty($user['search']['q'])) {
|
|
$list->bind(':q', $q ?: $user['search']['q']);
|
|
}
|
|
$list->output_tpl = $output_tpl;
|
|
$list->exec();
|
|
} catch(Exception $e) {} // Silence to avoid wrong input queries
|
|
}
|
|
|
|
$title = sprintf($user_views[$current_view]['title'], $user['firstname_html']);
|
|
$title_short = sprintf($user_views[$current_view]['title_short'], $user['firstname_html']);
|
|
|
|
$handler::setCond('owner', $is_owner);
|
|
$handler::setCond('show_user_items_editor', $show_user_items_editor);
|
|
$handler::setVar('user', $user);
|
|
$handler::setVar('safe_html_user', $safe_html_user);
|
|
$handler::setVar('title', $title);
|
|
$handler::setVar('title_short', $title_short);
|
|
$handler::setVar('tabs', $tabs);
|
|
$handler::setVar('list', $list);
|
|
|
|
// Note, _s must be call like this to bind the PO crawler
|
|
if($user_views['albums']['current']) {
|
|
$meta_description = _s('%n (%u) albums on %w');
|
|
} else {
|
|
if($user['bio']) {
|
|
$meta_description = $safe_html_user['bio'];
|
|
} else {
|
|
$meta_description = _s('%n (%u) on %w');
|
|
}
|
|
}
|
|
$handler::setVar('meta_description', strtr($meta_description, ['%n' => $user['name'], '%u' => $user['username'], '%w' => CHV\getSetting('website_name')]));
|
|
|
|
if($handler::getCond('admin') or $is_owner) {
|
|
$handler::setVar('user_items_editor', [
|
|
"user_albums" => CHV\User::getAlbums($user["id"]),
|
|
"type" => $user_views['albums']['current'] ? "albums": "images"
|
|
]);
|
|
}
|
|
|
|
} catch(Exception $e) {
|
|
G\exception_to_error($e);
|
|
}
|
|
}; |