You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
457 lines
15 KiB
457 lines
15 KiB
<?php
|
|
|
|
/**
|
|
* @package tikiwiki
|
|
*/
|
|
|
|
// (c) Copyright by authors of the Tiki Wiki CMS Groupware Project
|
|
//
|
|
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
|
|
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
|
|
// $Id$
|
|
|
|
/**
|
|
* XML-RPC services
|
|
* As of 2017-02-06, these services are all related to blogs.
|
|
* These services implement part of the Blogger XML-RPC API (see https://codex.wordpress.org/XML-RPC_Blogger_API ).
|
|
* As of 2017-02-06, Blogger currently supports Blogger API version 3 (see https://developers.google.com/blogger/ ), which is no longer based on XML. The API implemented here seems to predate Blogger API version 1 and is presumably no longer supported by Blogger.
|
|
* One client of Blogger's XML-RPC API is wBloggar... which appears to be very close to death as of 2017-02-06. It may no longer implement this version of the API anyway. Is there any client still implementing this API? Chealer 2017-02-06
|
|
* See https://doc.tiki.org/XMLRPC
|
|
*/
|
|
|
|
include_once('tiki-setup.php');
|
|
$bloglib = TikiLib::lib('blog');
|
|
|
|
if ($prefs['feature_xmlrpc'] != 'y') {
|
|
die;
|
|
}
|
|
|
|
// Build map using webservices
|
|
$map = [
|
|
'blogger.newPost' => ['function' => 'newPost'],
|
|
'blogger.getUserInfo' => ['function' => 'getUserInfo'],
|
|
'blogger.getPost' => ['function' => 'getPost'],
|
|
'blogger.editPost' => ['function' => 'editPost'],
|
|
'blogger.deletePost' => ['function' => 'deletePost'],
|
|
'blogger.getRecentPosts' => ['function' => 'getRecentPosts'],
|
|
'blogger.getUsersBlogs' => ['function' => 'getUserBlogs']
|
|
];
|
|
|
|
$s = new XML_RPC_Server($map);
|
|
|
|
/**
|
|
* @param $user
|
|
* @param $blogid
|
|
* @param $permName
|
|
* @return bool
|
|
*/
|
|
function check_individual($user, $blogId, $permName)
|
|
{
|
|
$userlib = TikiLib::lib('user');
|
|
|
|
// If the user is admin he can do everything
|
|
if ($userlib->user_has_permission($user, 'tiki_p_blog_admin')) {
|
|
return true;
|
|
}
|
|
|
|
// If no individual permissions for the object then ok
|
|
if (! $userlib->object_has_one_permission($blogId, 'blog')) {
|
|
return true;
|
|
}
|
|
|
|
// If the object has individual permissions then check
|
|
// Now get all the permissions that are set for this type of permissions 'image gallery'
|
|
if ($userlib->object_has_permission($user, $blogId, 'blog', $permName)) {
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
/* Validates the user and returns user information */
|
|
/**
|
|
* @param $params
|
|
* @return XML_RPC_Response
|
|
*/
|
|
function getUserInfo($params)
|
|
{
|
|
$userlib = TikiLib::lib('user');
|
|
$tikilib = TikiLib::lib('tiki');
|
|
|
|
$appkeyp = $params->getParam(0);
|
|
$appkey = $appkeyp->scalarval();
|
|
$usernamep = $params->getParam(1);
|
|
$username = $usernamep->scalarval();
|
|
$passwordp = $params->getParam(2);
|
|
$password = $passwordp->scalarval();
|
|
list($ok, $username, $e) = $userlib->validate_user($username, $password);
|
|
|
|
if ($ok) {
|
|
$myStruct = new XML_RPC_Value(
|
|
[
|
|
'nickname' => new XML_RPC_Value($username),
|
|
'firstname' => new XML_RPC_Value('none'),
|
|
'lastname' => new XML_RPC_Value('none'),
|
|
'email' => new XML_RPC_Value('none'),
|
|
'userid' => new XML_RPC_Value('$username'),
|
|
'url' => new XML_RPC_Value('none')
|
|
],
|
|
'struct'
|
|
);
|
|
|
|
return new XML_RPC_Response($myStruct);
|
|
} else {
|
|
return new XML_RPC_Response(0, 101, 'Invalid username or password');
|
|
}
|
|
}
|
|
|
|
/* Posts a new submission to the CMS */
|
|
/**
|
|
* @param $params
|
|
* @return XML_RPC_Response
|
|
*/
|
|
function newPost($params)
|
|
{
|
|
$userlib = TikiLib::lib('user');
|
|
$tikilib = TikiLib::lib('tiki');
|
|
$bloglib = TikiLib::lib('blog');
|
|
|
|
$appkeyp = $params->getParam(0);
|
|
$appkey = $appkeyp->scalarval();
|
|
$blogidp = $params->getParam(1);
|
|
$blogid = $blogidp->scalarval();
|
|
$usernamep = $params->getParam(2);
|
|
$username = $usernamep->scalarval();
|
|
$passwordp = $params->getParam(3);
|
|
$password = $passwordp->scalarval();
|
|
$passp = $params->getParam(4);
|
|
$content = $passp->scalarval();
|
|
$passp = $params->getParam(5);
|
|
$publish = $passp->scalarval();
|
|
|
|
// Fix for w.bloggar
|
|
preg_match('/<title>(.*)</title>/', $content, $title);
|
|
$title = $title[1];
|
|
$content = preg_replace('#<title>(.*)</title>#', '', $content);
|
|
|
|
// Now check if the user is valid and if the user can post a submission
|
|
list($ok, $username, $e) = $userlib->validate_user($username, $password);
|
|
if (! $ok) {
|
|
return new XML_RPC_Response(0, 101, 'Invalid username or password');
|
|
}
|
|
|
|
// Get individual permissions for this weblog if they exist
|
|
if (! check_individual($username, $blogid, 'tiki_p_blog_post')) {
|
|
return new XML_RPC_Response(0, 101, 'User is not allowed to post to this weblog due to individual restrictions for this weblog');
|
|
}
|
|
|
|
// If the blog is not public then check if the user is the owner
|
|
if (! $userlib->user_has_permission($username, 'tiki_p_blog_admin')) {
|
|
if (! $userlib->user_has_permission($username, 'tiki_p_blog_post')) {
|
|
return new XML_RPC_Response(0, 101, 'User is not allowed to post');
|
|
}
|
|
|
|
$bloglib = TikiLib::lib('blog');
|
|
$blog_info = $bloglib->get_blog($blogid);
|
|
|
|
if ($blog_info['public'] != 'y') {
|
|
if ($username != $blog_info['user']) {
|
|
return new XML_RPC_Response(0, 101, 'User is not allowed to post');
|
|
}
|
|
}
|
|
}
|
|
|
|
// User ok and can submit then submit the post
|
|
$id = $bloglib->blog_post($blogid, $content, '', $username, $title);
|
|
|
|
return new XML_RPC_Response(new XML_RPC_Value("$id"));
|
|
}
|
|
|
|
// :TODO: editPost
|
|
/**
|
|
* @param $params
|
|
* @return XML_RPC_Response
|
|
*/
|
|
function editPost($params)
|
|
{
|
|
$userlib = TikiLib::lib('user');
|
|
$tikilib = TikiLib::lib('tiki');
|
|
$bloglib = TikiLib::lib('blog');
|
|
|
|
$appkeyp = $params->getParam(0);
|
|
$appkey = $appkeyp->scalarval();
|
|
$blogidp = $params->getParam(1);
|
|
$postid = $blogidp->scalarval();
|
|
$usernamep = $params->getParam(2);
|
|
$username = $usernamep->scalarval();
|
|
$passwordp = $params->getParam(3);
|
|
$password = $passwordp->scalarval();
|
|
$passp = $params->getParam(4);
|
|
$content = $passp->scalarval();
|
|
$passp = $params->getParam(5);
|
|
$publish = $passp->scalarval();
|
|
|
|
// Fix for w.bloggar
|
|
preg_match('/<title>(.*)</title>/', $content, $title);
|
|
$title = $title[1];
|
|
$content = preg_replace('#<title>(.*)</title>#', '', $content);
|
|
|
|
// Now check if the user is valid and if the user can post a submission
|
|
list($ok, $username, $e) = $userlib->validate_user($username, $password);
|
|
if (! $ok) {
|
|
return new XML_RPC_Response(0, 101, 'Invalid username or password');
|
|
}
|
|
|
|
if (! check_individual($username, $blogid, 'tiki_p_blog_post')) {
|
|
return new XML_RPC_Response(
|
|
0,
|
|
101,
|
|
'User is not allowed to post to this weblog due to individual restrictions for this weblog therefor the user cannot edit a post'
|
|
);
|
|
}
|
|
|
|
if (! $userlib->user_has_permission($username, 'tiki_p_blog_post')) {
|
|
return new XML_RPC_Response(0, 101, 'User is not allowed to post');
|
|
}
|
|
|
|
// Now get the post information
|
|
$post_data = $bloglib->get_post($postid);
|
|
|
|
if (! $post_data) {
|
|
return new XML_RPC_Response(0, 101, 'Post not found');
|
|
}
|
|
|
|
if ($post_data['user'] != $username) {
|
|
if (! $userlib->user_has_permission($username, 'tiki_p_blog_admin')) {
|
|
return new XML_RPC_Response(0, 101, 'Permission denied to edit that post since the post does not belong to the user');
|
|
}
|
|
}
|
|
|
|
$id = $bloglib->update_post($postid, $blogid, $content, $username, $title);
|
|
return new XML_RPC_Response(new XML_RPC_Value(1, 'boolean'));
|
|
}
|
|
|
|
// :TODO: deletePost
|
|
/**
|
|
* @param $params
|
|
* @return XML_RPC_Response
|
|
*/
|
|
function deletePost($params)
|
|
{
|
|
$userlib = TikiLib::lib('user');
|
|
$tikilib = TikiLib::lib('tiki');
|
|
$bloglib = TikiLib::lib('blog');
|
|
|
|
$appkeyp = $params->getParam(0);
|
|
$appkey = $appkeyp->scalarval();
|
|
$blogidp = $params->getParam(1);
|
|
$postid = $blogidp->scalarval();
|
|
$usernamep = $params->getParam(2);
|
|
$username = $usernamep->scalarval();
|
|
$passwordp = $params->getParam(3);
|
|
$password = $passwordp->scalarval();
|
|
$passp = $params->getParam(4);
|
|
$publish = $passp->scalarval();
|
|
|
|
// Now check if the user is valid and if the user can post a submission
|
|
list($ok, $username, $e) = $userlib->validate_user($username, $password);
|
|
if (! $ok) {
|
|
return new XML_RPC_Response(0, 101, 'Invalid username or password');
|
|
}
|
|
|
|
// Now get the post information
|
|
$post_data = $bloglib->get_post($postid);
|
|
|
|
if (! $post_data) {
|
|
return new XML_RPC_Response(0, 101, 'Post not found');
|
|
}
|
|
|
|
if ($post_data['user'] != $username) {
|
|
if (! $userlib->user_has_permission($username, 'tiki_p_blog_admin')) {
|
|
return new XML_RPC_Response(0, 101, 'Permission denied to edit that post');
|
|
}
|
|
}
|
|
|
|
$id = $bloglib->remove_post($postid);
|
|
return new XML_RPC_Response(new XML_RPC_Value(1, 'boolean'));
|
|
}
|
|
|
|
// :TODO: getTemplate
|
|
|
|
// :TODO: setTemplate
|
|
|
|
// :TODO: getPost
|
|
/**
|
|
* @param $params
|
|
* @return XML_RPC_Response
|
|
*/
|
|
function getPost($params)
|
|
{
|
|
$userlib = TikiLib::lib('user');
|
|
$tikilib = TikiLib::lib('tiki');
|
|
$bloglib = TikiLib::lib('blog');
|
|
|
|
$appkeyp = $params->getParam(0);
|
|
$appkey = $appkeyp->scalarval();
|
|
$blogidp = $params->getParam(1);
|
|
$postid = $blogidp->scalarval();
|
|
$usernamep = $params->getParam(2);
|
|
$username = $usernamep->scalarval();
|
|
$passwordp = $params->getParam(3);
|
|
$password = $passwordp->scalarval();
|
|
|
|
// Now check if the user is valid and if the user can post a submission
|
|
list($ok, $username, $e) = $userlib->validate_user($username, $password);
|
|
if (! $ok) {
|
|
return new XML_RPC_Response(0, 101, 'Invalid username or password');
|
|
}
|
|
|
|
if (! check_individual($username, $blogid, 'tiki_p_blog_post')) {
|
|
return new XML_RPC_Response(0, 101, 'User is not allowed to post to this weblog due to individual restrictions for this weblog');
|
|
}
|
|
|
|
if (! $userlib->user_has_permission($username, 'tiki_p_blog_post')) {
|
|
return new XML_RPC_Response(0, 101, 'User is not allowed to post');
|
|
}
|
|
|
|
if (! $userlib->user_has_permission($username, 'tiki_p_read_blog')) {
|
|
return new XML_RPC_Response(0, 101, 'Permission denied to read this blog');
|
|
}
|
|
|
|
// Now get the post information
|
|
$post_data = $bloglib->get_post($postid);
|
|
|
|
if (! $post_data) {
|
|
return new XML_RPC_Response(0, 101, 'Post not found');
|
|
}
|
|
|
|
$dateCreated = $tikilib->get_iso8601_datetime($post_data['created']);
|
|
// added dateTime type for blogger compliant xml tag Joerg Knobloch <joerg@happypenguins.net>
|
|
$myStruct = new XML_RPC_Value(
|
|
[
|
|
'userid' => new XML_RPC_Value($username),
|
|
'dateCreated' => new XML_RPC_Value($dateCreated, 'dateTime.iso8601'),
|
|
// Fix for w.Bloggar
|
|
'content' => new XML_RPC_Value('<title>' . $post_data['title'] . '</title>' . $post_data['data']),
|
|
'postid' => new XML_RPC_Value($post_data['postId'])
|
|
],
|
|
'struct'
|
|
);
|
|
|
|
// User ok and can submit then submit an article
|
|
return new XML_RPC_Response($myStruct);
|
|
}
|
|
|
|
// :TODO: getRecentPosts
|
|
/**
|
|
* @param $params
|
|
* @return XML_RPC_Response
|
|
*/
|
|
function getRecentPosts($params)
|
|
{
|
|
$userlib = TikiLib::lib('user');
|
|
$tikilib = TikiLib::lib('tiki');
|
|
$bloglib = TikiLib::lib('blog');
|
|
|
|
$appkeyp = $params->getParam(0);
|
|
$appkey = $appkeyp->scalarval();
|
|
$blogidp = $params->getParam(1);
|
|
$blogid = $blogidp->scalarval();
|
|
$usernamep = $params->getParam(2);
|
|
$username = $usernamep->scalarval();
|
|
$passwordp = $params->getParam(3);
|
|
$password = $passwordp->scalarval();
|
|
$passp = $params->getParam(4);
|
|
$number = $passp->scalarval();
|
|
|
|
// Now check if the user is valid and if the user can post a submission
|
|
list($ok, $username, $e) = $userlib->validate_user($username, $password);
|
|
if (! $ok) {
|
|
return new XML_RPC_Response(0, 101, 'Invalid username or password');
|
|
}
|
|
|
|
if (! check_individual($username, $blogid, 'tiki_p_blog_post')) {
|
|
return new XML_RPC_Response(
|
|
0,
|
|
101,
|
|
'User is not allowed to post to this weblog due to individual restrictions for this weblog therefore the user cannot edit a post'
|
|
);
|
|
}
|
|
|
|
if (! $userlib->user_has_permission($username, 'tiki_p_blog_post')) {
|
|
return new XML_RPC_Response(0, 101, 'User is not allowed to post');
|
|
}
|
|
|
|
// Now get the post information
|
|
$posts = $bloglib->list_blog_posts($blogid, false, 0, $number, 'created_desc', '', '');
|
|
|
|
if (count($posts) == 0) {
|
|
return new XML_RPC_Response(0, 101, 'No posts');
|
|
}
|
|
|
|
$arrayval = [];
|
|
|
|
foreach ($posts['data'] as $post) {
|
|
$dateCreated = $tikilib->get_iso8601_datetime($post['created']);
|
|
|
|
$myStruct = new XML_RPC_Value(
|
|
[
|
|
'userid' => new XML_RPC_Value($username),
|
|
'dateCreated' => new XML_RPC_Value($dateCreated, 'dateTime.iso8601'),
|
|
// Fix for w.Bloggar
|
|
'content' => new XML_RPC_Value('<title>' . $post['title'] . '</title>' . $post['data']),
|
|
'postid' => new XML_RPC_Value($post['postId'])
|
|
],
|
|
'struct'
|
|
);
|
|
|
|
$arrayval[] = $myStruct;
|
|
}
|
|
|
|
// User ok and can submit then submit an article
|
|
$myVal = new XML_RPC_Value($arrayval, 'array');
|
|
return new XML_RPC_Response($myVal);
|
|
}
|
|
|
|
// :TODO: tiki.tikiPost
|
|
|
|
/* Get the topics where the user can post a new */
|
|
/**
|
|
* @param $params
|
|
* @return XML_RPC_Response
|
|
*/
|
|
function getUserBlogs($params)
|
|
{
|
|
$userlib = TikiLib::lib('user');
|
|
$tikilib = TikiLib::lib('tiki');
|
|
$bloglib = TikiLib::lib('blog');
|
|
|
|
$appkeyp = $params->getParam(0);
|
|
$appkey = $appkeyp->scalarval();
|
|
$usernamep = $params->getParam(1);
|
|
$username = $usernamep->scalarval();
|
|
$passwordp = $params->getParam(2);
|
|
$password = $passwordp->scalarval();
|
|
|
|
$arrayVal = [];
|
|
|
|
$blogs = $bloglib->list_user_blogs($username, true);
|
|
$foo = parse_url($_SERVER['REQUEST_URI']);
|
|
$foo1 = $tikilib->httpPrefix() . str_replace('xmlrpc', 'tiki-view_blog', $foo['path']);
|
|
|
|
foreach ($blogs as $blog) {
|
|
$myStruct = new XML_RPC_Value(
|
|
[
|
|
'blogName' => new XML_RPC_Value($blog['title']),
|
|
'url' => new XML_RPC_Value($foo1 . '?blogId=' . $blog['blogId']),
|
|
'blogid' => new XML_RPC_Value($blog['blogId'])
|
|
],
|
|
'struct'
|
|
);
|
|
|
|
$arrayVal[] = $myStruct;
|
|
}
|
|
|
|
$myVal = new XML_RPC_Value($arrayVal, 'array');
|
|
return new XML_RPC_Response($myVal);
|
|
}
|