forked from GNUsocial/gnu-social
133 lines
4.7 KiB
PHP
133 lines
4.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types = 1);
|
|
// {{{ License
|
|
// This file is part of GNU social - https://www.gnu.org/software/social
|
|
//
|
|
// GNU social is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// GNU social is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with GNU social. If not, see <http://www.gnu.org/licenses/>.
|
|
// }}}
|
|
|
|
/**
|
|
* @author Hugo Sales <hugo@hsal.es>
|
|
* @copyright 2021 Free Software Foundation, Inc http://www.fsf.org
|
|
* @license https://www.gnu.org/licenses/agpl.html GNU AGPL v3 or later
|
|
*/
|
|
|
|
namespace Plugin\Reply\Controller;
|
|
|
|
use App\Core\Controller;
|
|
use App\Core\DB\DB;
|
|
use App\Core\Form;
|
|
use App\Entity\Actor;
|
|
use Component\Posting\Posting;
|
|
use Plugin\Reply\Entity\NoteReply;
|
|
use function App\Core\I18n\_m;
|
|
use App\Core\Log;
|
|
use App\Core\Router\Router;
|
|
use App\Entity\Note;
|
|
use App\Util\Common;
|
|
use App\Util\Exception\ClientException;
|
|
use App\Util\Exception\InvalidFormException;
|
|
use App\Util\Exception\NoSuchNoteException;
|
|
use App\Util\Exception\RedirectException;
|
|
use Symfony\Component\Form\Extension\Core\Type\FileType;
|
|
use Symfony\Component\Form\Extension\Core\Type\SubmitType;
|
|
use Symfony\Component\Form\Extension\Core\Type\TextareaType;
|
|
use Symfony\Component\HttpFoundation\Request;
|
|
|
|
class Reply extends Controller
|
|
{
|
|
/**
|
|
* Controller for the note reply non-JS page
|
|
*/
|
|
public function replyAddNote(Request $request, int $id)
|
|
{
|
|
$user = Common::ensureLoggedIn();
|
|
$actor_id = $user->getId();
|
|
|
|
$note = Note::getWithPK($id);
|
|
if (is_null($note) || !$note->isVisibleTo($user)) {
|
|
throw new NoSuchNoteException();
|
|
}
|
|
|
|
$form = Form::create([
|
|
['content', TextareaType::class, [
|
|
'label' => _m('Reply'),
|
|
'label_attr' => ['class' => 'section-form-label'],
|
|
'help' => _m('Please input your reply.'),
|
|
],
|
|
],
|
|
['attachments', FileType::class, ['label' => ' ', 'multiple' => true, 'required' => false]],
|
|
['replyform', SubmitType::class, ['label' => _m('Submit')]],
|
|
]);
|
|
|
|
$form->handleRequest($request);
|
|
|
|
if ($form->isSubmitted()) {
|
|
$data = $form->getData();
|
|
if ($form->isValid()) {
|
|
// Create a new note with the same content as the original
|
|
$reply = Posting::storeLocalNote(
|
|
actor: Actor::getWithPK($actor_id),
|
|
content: $data['content'],
|
|
content_type: 'text/plain', // TODO
|
|
attachments: $data['attachments'],
|
|
);
|
|
DB::persist($reply);
|
|
|
|
// Update DB
|
|
DB::flush();
|
|
|
|
// Find the id of the note we just created
|
|
$reply_id = $reply->getId();
|
|
$og_id = $note->getId();
|
|
|
|
// Add it to note_repeat table
|
|
if (!is_null($reply_id)) {
|
|
DB::persist(NoteReply::create([
|
|
'note_id' => $reply_id,
|
|
'actor_id' => $actor_id,
|
|
'reply_to' => $og_id
|
|
]));
|
|
}
|
|
|
|
// Update DB one last time
|
|
DB::flush();
|
|
|
|
if (array_key_exists('from', $get_params = $this->params())) {
|
|
// Prevent open redirect
|
|
if (Router::isAbsolute($get_params['from'])) {
|
|
Log::warning("Actor {$actor_id} attempted to reply to a note and then get redirected to another host, or the URL was invalid ({$get_params['from']})");
|
|
throw new ClientException(_m('Can not redirect to outside the website from here'), 400); // 400 Bad request (deceptive)
|
|
} else {
|
|
# TODO anchor on element id
|
|
throw new RedirectException($get_params['from']);
|
|
}
|
|
} else {
|
|
throw new RedirectException('root'); // If we don't have a URL to return to, go to the instance root
|
|
}
|
|
|
|
} else {
|
|
throw new InvalidFormException();
|
|
}
|
|
}
|
|
|
|
return [
|
|
'_template' => 'reply/add_reply.html.twig',
|
|
'note' => $note,
|
|
'add_reply' => $form->createView(),
|
|
];
|
|
}
|
|
}
|