. */ if (!defined('LACONICA')) { exit(1); } require_once INSTALL_DIR . '/lib/noticelist.php'; class NewnoticeAction extends Action { function handle($args) { parent::handle($args); if (!common_logged_in()) { common_user_error(_('Not logged in.')); } else if ($_SERVER['REQUEST_METHOD'] == 'POST') { # CSRF protection - token set in common_notice_form() $token = $this->trimmed('token'); if (!$token || $token != common_session_token()) { $this->client_error(_('There was a problem with your session token. Try again, please.')); return; } $this->save_new_notice(); } else { $this->show_form(); } } function save_new_notice() { $user = common_current_user(); assert($user); # XXX: maybe an error instead... $content = $this->trimmed('status_textarea'); if (!$content) { $this->show_form(_('No content!')); return; } else { $content_shortened = common_shorten_links($content); if (mb_strlen($content_shortened) > 140) { common_debug("Content = '$content_shortened'", __FILE__); common_debug("mb_strlen(\$content) = " . mb_strlen($content_shortened), __FILE__); $this->show_form(_('That\'s too long. Max notice size is 140 chars.')); return; } } $inter = new CommandInterpreter(); $cmd = $inter->handle_command($user, $content_shortened); if ($cmd) { if ($this->boolean('ajax')) { $cmd->execute(new AjaxWebChannel()); } else { $cmd->execute(new WebChannel()); } return; } $replyto = $this->trimmed('inreplyto'); $notice = Notice::saveNew($user->id, $content, 'web', 1, ($replyto == 'false') ? NULL : $replyto); if (is_string($notice)) { $this->show_form($notice); return; } common_broadcast_notice($notice); if ($this->boolean('ajax')) { common_start_html('text/xml;charset=utf-8', true); common_element_start('head'); common_element('title', null, _('Notice posted')); common_element_end('head'); common_element_start('body'); $this->show_notice($notice); common_element_end('body'); common_element_end('html'); } else { $returnto = $this->trimmed('returnto'); if ($returnto) { $url = common_local_url($returnto, array('nickname' => $user->nickname)); } else { $url = common_local_url('shownotice', array('notice' => $notice->id)); } common_redirect($url, 303); } } function ajax_error_msg($msg) { common_start_html('text/xml;charset=utf-8', false); common_element_start('head'); common_element('title', null, _('Ajax Error')); common_element_end('head'); common_element_start('body'); common_element('p', array('class' => 'error'), $msg); common_element_end('body'); common_element_end('html'); } function show_top($content=NULL) { common_notice_form(NULL, $content); } function show_form($msg=NULL) { if ($msg && $this->boolean('ajax')) { $this->ajax_error_msg($msg); return; } $content = $this->trimmed('status_textarea'); if (!$content) { $replyto = $this->trimmed('replyto'); $profile = Profile::staticGet('nickname', $replyto); if ($profile) { $content = '@' . $profile->nickname . ' '; } } common_show_header(_('New notice'), NULL, $content, array($this, 'show_top')); if ($msg) { common_element('p', 'error', $msg); } common_show_footer(); } function show_notice($notice) { $nli = new NoticeListItem($notice); $nli->show(); } }