. // }}} namespace Component\Posting; use App\Core\Cache; use App\Core\DB\DB; use App\Core\Event; use App\Core\Form; use App\Core\GSFile; use function App\Core\I18n\_m; use App\Core\Modules\Component; use App\Entity\Attachment; use App\Entity\AttachmentToNote; use App\Entity\GSActorToAttachment; use App\Entity\Link; use App\Entity\Note; use App\Entity\NoteToLink; use App\Util\Common; use App\Util\Exception\ClientException; use App\Util\Exception\InvalidFormException; use App\Util\Exception\RedirectException; use InvalidArgumentException; use Symfony\Component\Form\Extension\Core\Type\ChoiceType; use Symfony\Component\Form\Extension\Core\Type\FileType; use Symfony\Component\Form\Extension\Core\Type\SubmitType; use Symfony\Component\Form\Extension\Core\Type\TextareaType; class Posting extends Component { /** * "Perfect URL Regex", courtesy of https://urlregex.com/ */ const URL_REGEX = <<getId(); $to_tags = []; $tags = Cache::get("actor-tags-{$actor_id}", function () use ($actor_id) { return DB::dql('select c.tag from App\Entity\GSActorCircle c where c.tagger = :tagger', ['tagger' => $actor_id]); }); foreach ($tags as $t) { $t = $t['tag']; $to_tags[$t] = $t; } $placeholder_string = ['How are you feeling?', 'Have something to share?', 'How was your day?']; Event::handle('PostingPlaceHolderString', [&$placeholder_string]); $rand_key = array_rand($placeholder_string); $request = $vars['request']; $form = Form::create([ ['content', TextareaType::class, ['label' => ' ', 'data' => '', 'attr' => ['placeholder' => _m($placeholder_string[$rand_key])]]], ['attachments', FileType::class, ['label' => ' ', 'data' => null, 'multiple' => true, 'required' => false]], ['visibility', ChoiceType::class, ['label' => _m('Visibility:'), 'expanded' => true, 'data' => 'public', 'choices' => [_m('Public') => 'public', _m('Instance') => 'instance', _m('Private') => 'private']]], ['to', ChoiceType::class, ['label' => _m('To:'), 'multiple' => true, 'expanded' => true, 'choices' => $to_tags]], ['post_note', SubmitType::class, ['label' => _m('Post')]], ]); $form->handleRequest($request); if ($form->isSubmitted()) { $data = $form->getData(); if ($form->isValid()) { self::storeNote($actor_id, $data['content'], $data['attachments'], $is_local = true); throw new RedirectException(); } else { throw new InvalidFormException(); } } $vars['post_form'] = $form->createView(); return Event::next; } /** * Store the given note with $content and $attachments, created by * $actor_id, possibly as a reply to note $reply_to and with flag * $is_local. Sanitizes $content and $attachments */ public static function storeNote(int $actor_id, ?string $content, array $attachments, bool $is_local, ?int $reply_to = null, ?int $repeat_of = null) { $note = Note::create([ 'gsactor_id' => $actor_id, 'content' => $content, 'is_local' => $is_local, 'reply_to' => $reply_to, 'repeat_of' => $repeat_of, ]); $processed_attachments = []; foreach ($attachments as $f) { // where $f is a Symfony\Component\HttpFoundation\File\UploadedFile $filesize = $f->getSize(); $max_file_size = Common::config('attachments', 'file_quota'); if ($max_file_size < $filesize) { throw new ClientException(_m('No file may be larger than {quota} bytes and the file you sent was {size} bytes. ' . 'Try to upload a smaller version.', ['quota' => $max_file_size, 'size' => $filesize])); } Event::handle('EnforceUserFileQuota', [$filesize, $actor_id]); $processed_attachments[] = [GSFile::sanitizeAndStoreFileAsAttachment($f), $f->getClientOriginalName()]; } DB::persist($note); // Need file and note ids for the next step DB::flush(); if ($processed_attachments != []) { foreach ($processed_attachments as [$a, $fname]) { if (empty(DB::findBy('gsactor_to_attachment', ['attachment_id' => $a->getId(), 'gsactor_id' => $actor_id]))) { DB::persist(GSActorToAttachment::create(['attachment_id' => $a->getId(), 'gsactor_id' => $actor_id])); } DB::persist(AttachmentToNote::create(['attachment_id' => $a->getId(), 'note_id' => $note->getId(), 'title' => $fname])); } DB::flush(); } if (Common::config('attachments', 'process_links')) { $matched_urls = []; $processed_urls = false; preg_match_all(self::URL_REGEX, $content, $matched_urls, PREG_SET_ORDER); foreach ($matched_urls as $match) { try { $link_id = Link::getOrCreate($match[0])->getId(); DB::persist(NoteToLink::create(['link_id' => $link_id, 'note_id' => $note->getId()])); $processed_urls = true; } catch (InvalidArgumentException) { continue; } } if ($processed_urls) { DB::flush(); } } } /** * Get a unique representation of a file on disk * * This can be used in the future to deduplicate images by visual content */ public function onHashFile(string $filename, ?string &$out_hash) { $out_hash = hash_file(Attachment::FILEHASH_ALGO, $filename); return Event::stop; } /** * Fill the list of allowed sizes for an attachment, to prevent potential DoS'ing by requesting thousands of different thumbnail sizes */ public function onGetAllowedThumbnailSizes(?array &$sizes) { $sizes[] = ['width' => Common::config('thumbnail', 'width'), 'height' => Common::config('thumbnail', 'height')]; return Event::next; } }