. * * @category API * @package StatusNet * @author Craig Andrews * @author Evan Prodromou * @author Jeffery To * @author Tom Blankenship * @author Mike Cochrane * @author Robin Millette * @author Zach Copley * @copyright 2009-2010 StatusNet, Inc. * @copyright 2009 Free Software Foundation, Inc http://www.fsf.org * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0 * @link http://status.net/ */ /* External API usage documentation. Please update when you change how this method works. */ /*! @page statusesupdate statuses/update @section Description Updates the authenticating user's status. Requires the status parameter specified below. Request must be a POST. @par URL pattern /api/statuses/update.:format @par Formats (:format) xml, json @par HTTP Method(s) POST @par Requires Authentication Yes @param status (Required) The URL-encoded text of the status update. @param source (Optional) The source application name, if using HTTP authentication or an anonymous OAuth consumer. @param in_reply_to_status_id (Optional) The ID of an existing status that the update is in reply to. @param lat (Optional) The latitude the status refers to. @param long (Optional) The longitude the status refers to. @param media (Optional) a media upload, such as an image or movie file. @sa @ref authentication @sa @ref apiroot @subsection usagenotes Usage notes @li The URL pattern is relative to the @ref apiroot. @li If the @e source parameter is not supplied the source of the status will default to 'api'. When authenticated via a registered OAuth application, the application's registered name and URL will always override the source parameter. @li The XML response uses GeoRSS to encode the latitude and longitude (see example response below ). @li Data uploaded via the @e media parameter should be multipart/form-data encoded. @subsection exampleusage Example usage @verbatim curl -u username:password http://example.com/api/statuses/update.xml -d status='Howdy!' -d lat='30.468' -d long='-94.743' @endverbatim @subsection exampleresponse Example response @verbatim Howdy! false Tue Mar 30 23:28:05 +0000 2010 api 26668724 30.468 -94.743 false 25803 Jed Sanders jedsanders Hoop and Holler, Texas I like to think of myself as America's Favorite. http://avatar.example.com/25803-48-20080924200604.png http://jedsanders.net false 5 2 Wed Sep 24 20:04:00 +0000 2008 0 0 UTC false 70 true true @endverbatim */ if (!defined('STATUSNET')) { exit(1); } /** * Updates the authenticating user's status (posts a notice). * * @category API * @package StatusNet * @author Craig Andrews * @author Evan Prodromou * @author Jeffery To * @author Tom Blankenship * @author Mike Cochrane * @author Robin Millette * @author Zach Copley * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0 * @link http://status.net/ */ class ApiStatusesUpdateAction extends ApiAuthAction { protected $needPost = true; var $status = null; var $in_reply_to_status_id = null; var $lat = null; var $lon = null; var $media_ids = array(); // file_id in the keys /** * Take arguments for running * * @param array $args $_REQUEST args * * @return boolean success flag */ protected function prepare(array $args=array()) { parent::prepare($args); $this->status = $this->trimmed('status'); $this->lat = $this->trimmed('lat'); $this->lon = $this->trimmed('long'); $matches = array(); common_debug(get_called_class().': media_ids=='._ve($this->trimmed('media_ids'))); if (preg_match_all('/\d+/', $this->trimmed('media_ids'), $matches) !== false) { foreach (array_unique($matches[0]) as $match) { try { $this->media_ids[$match] = true; // = File::getByID($match); } catch (Exception $e) { // Either $match was 0 (EmptyIdException) or File was not found (NoResultException) // Do we abort and report to the client? } } } $this->in_reply_to_status_id = intval($this->trimmed('in_reply_to_status_id')); return true; } /** * Handle the request * * Make a new notice for the update, save it, and show it * * @return void */ protected function handle() { parent::handle(); // Workaround for PHP returning empty $_POST and $_FILES when POST // length > post_max_size in php.ini if (empty($_FILES) && empty($_POST) && ($_SERVER['CONTENT_LENGTH'] > 0) ) { // TRANS: Client error displayed when the number of bytes in a POST request exceeds a limit. // TRANS: %s is the number of bytes of the CONTENT_LENGTH. $msg = _m('The server was unable to handle that much POST data (%s byte) due to its current configuration.', 'The server was unable to handle that much POST data (%s bytes) due to its current configuration.', intval($_SERVER['CONTENT_LENGTH'])); $this->clientError(sprintf($msg, $_SERVER['CONTENT_LENGTH'])); } if (empty($this->status)) { // TRANS: Client error displayed when the parameter "status" is missing. $this->clientError(_('Client must provide a \'status\' parameter with a value.')); } if (is_null($this->scoped)) { // TRANS: Client error displayed when updating a status for a non-existing user. $this->clientError(_('No such user.'), 404); } /* Do not call shortenLinks until the whole notice has been build */ // Check for commands $inter = new CommandInterpreter(); $cmd = $inter->handle_command($this->auth_user, $this->status); if ($cmd) { if ($this->supported($cmd)) { $cmd->execute(new Channel()); } // Cmd not supported? Twitter just returns your latest status. // And, it returns your last status whether the cmd was successful // or not! $this->notice = $this->auth_user->getCurrentNotice(); } else { $reply_to = null; if (!empty($this->in_reply_to_status_id)) { // Check whether notice actually exists $reply = Notice::getKV($this->in_reply_to_status_id); if ($reply) { $reply_to = $this->in_reply_to_status_id; } else { // TRANS: Client error displayed when replying to a non-existing notice. $this->clientError(_('Parent notice not found.'), 404); } } common_debug(get_called_class().': parsed media_ids=='._ve($this->media_ids)); foreach(array_keys($this->media_ids) as $media_id) { // FIXME: Validation on this... Worst case is that if someone sends bad media_ids then // we'll fill the notice with non-working links, so no real harm, done, but let's fix. $this->status .= ' ' . common_local_url('attachment', array('attachment' => $media_id)); } $upload = null; try { $upload = MediaFile::fromUpload('media', $this->scoped); $this->status .= ' ' . $upload->shortUrl(); /* Do not call shortenLinks until the whole notice has been build */ } catch (NoUploadedMediaException $e) { // There was no uploaded media for us today. } /* Do call shortenlinks here & check notice length since notice is about to be saved & sent */ $status_shortened = $this->auth_user->shortenLinks($this->status); if (Notice::contentTooLong($status_shortened)) { if ($upload instanceof MediaFile) { $upload->delete(); } // TRANS: Client error displayed exceeding the maximum notice length. // TRANS: %d is the maximum lenth for a notice. $msg = _m('Maximum notice size is %d character, including attachment URL.', 'Maximum notice size is %d characters, including attachment URL.', Notice::maxContent()); /* Use HTTP 413 error code (Request Entity Too Large) * instead of basic 400 for better understanding */ $this->clientError(sprintf($msg, Notice::maxContent()), 413); } $content = html_entity_decode($status_shortened, ENT_NOQUOTES, 'UTF-8'); $options = array('reply_to' => $reply_to); if ($this->scoped->shareLocation()) { $locOptions = Notice::locationOptions($this->lat, $this->lon, null, null, $this->scoped); $options = array_merge($options, $locOptions); } try { $this->notice = Notice::saveNew( $this->scoped->id, $content, $this->source, $options ); } catch (Exception $e) { $this->clientError($e->getMessage(), $e->getCode()); } if (isset($upload)) { $upload->attachToNotice($this->notice); } } $this->showNotice(); } /** * Show the resulting notice * * @return void */ function showNotice() { if (!empty($this->notice)) { if ($this->format == 'xml') { $this->showSingleXmlStatus($this->notice); } elseif ($this->format == 'json') { $this->show_single_json_status($this->notice); } } } /** * Is this command supported when doing an update from the API? * * @param string $cmd the command to check for * * @return boolean true or false */ function supported($cmd) { static $cmdlist = array('SubCommand', 'UnsubCommand', 'OnCommand', 'OffCommand', 'JoinCommand', 'LeaveCommand'); $supported = null; if (Event::handle('CommandSupportedAPI', array($cmd, &$supported))) { $supported = $supported || in_array(get_class($cmd), $cmdlist); } return $supported; } }