plugin.php

<?php
/**
 * Facebook plugin's main file
 * 
 * @package Wedge:Facebook
 * @author Shitiz "Dragooon" Garg <Email mail@dragooon.net> <Url http://smf-media.com>
 * @copyright 2012, Shitiz "Dragooon" Garg <mail@dragooon.net>
 * @license
 *		Licensed under "New BSD License (3-clause version)"
 *		http://www.opensource.org/licenses/BSD-3-Clause
 * @version 1.0
 */

if (!defined('WEDGE'))
	die('File cannot be requested directly');

/**
 * "load_theme" hook callback, called on every page. Adds the "FB Login" sideblock for guests
 * and loads template as well as language for future uses
 * 
 * @return void
 */
function facebook_hook_load_theme()
{
	global $settings, $context;

	loadPluginSource('Wedge:Facebook', array('facebook', 'Subs-Plugin'));
	loadPluginTemplate('Wedge:Facebook', 'templates/plugin');
	loadPluginLanguage('Wedge:Facebook', 'languages/plugin');

	if (!facebook_enabled())
		return false;

	// Make sure we're properly registered with Facebook's real time updates
	if (empty($settings['facebook_real_time_token']) && empty($settings['facebook_real_time_token__temp']))
	{
		$verify_token = sha1(microtime() * mt_rand());

		$facebook = facebook_instance();

		updateSettings(array('facebook_real_time_token__temp' => $verify_token));

		$subscription = $facebook->api('/' . $settings['facebook_app_id'] . '/subscriptions', 'POST', array(
			'access_token' => facebook_app_token(),
			'object' => 'user',
			'fields' => 'name,feed,birthday,pic',
			'callback_url' => $context['plugins_url']['Wedge:Facebook'] . '/callback.php',
			'verify_token' => $verify_token,
		));
	}

	if (we::$is_guest)
		wetem::after('side_user', 'facebook_block');
}

/**
 * New topic hook, will create a post on Facebook for this topic
 *
 * @param array $msgOptions
 * @param array $topicOptions
 * @param array $posterOptions
 * @param bool $new_topic
 */
function facebook_hook_create_post_after($msgOptions, $topicOptions, $posterOptions, $new_topic)
{
	global $txt, $board_info, $context;

	// Not a new topic? Facebook not enabled? Forget about it
	if (!facebook_enabled() || !$new_topic || empty($posterOptions['id']))
		return true;

	// Get this member's information
	list ($id_member, $id_facebook, $fields) = array_values(facebook_get_members($posterOptions['id']));

	// Not allowed to post the topic?
	if (empty($id_facebook) || !in_array('topictofeed', $fields))
		return true;

	// Post the topic to facebook
	$facebook = facebook_instance();
	$facebook->api('/' . $id_facebook . '/feed', 'POST', array(
		'message' => sprintf($txt['facebook_new_topic'], $board_info['name'], $context['forum_name']),
		'link' => SCRIPT . '?topic=' . $topicOptions['id'] . '.0',
		'name' => $msgOptions['subject'],
		'caption' => shorten_subject(strip_tags(parse_bbc($msgOptions['body'])), 120),
	));
}

/**
 * Hook callback for "profile_areas", adds facebook's profile area into the menu
 *
 * @param array $profile_areas
 * @return void
 */
function facebook_hook_profile_areas($profile_areas)
{
	global $txt;

	$profile_areas['edit_profile']['areas']['facebook'] = array(
		'label' => $txt['facebook'],
		'enabled' => facebook_enabled() && we::$user['is_owner'],
		'function' => 'Facebook_profile',
		'permission' => array(
			'own' => array('profile_extra_own'),
			'any' => array('profile_extra_any'),
		),
	);
}

/**
 * Hook callback for "thought_add", posts facebook's thoughts into facebook's wall
 *
 * @param string $privacy
 * @param string $text
 * @param int $id_parent
 * @param int $id_master
 * @param int $id_thought
 * @param int $id_member
 * @param string $member_name
 * @return void
 */
function facebook_hook_thought_add($privacy, $text, $id_parent, $id_master, $id_thought, $id_member, $member_name)
{
	// Irrelevant thought?
	// !! @todo: fix privacy setting (it's the old system.)
	if ($id_parent != 0 || $id_master != 0 || $privacy != '-3')
		return;

	// Get the member's info and make sure we should post this thought to his/her feed
	list ($id_member, $id_facebook, $fields) = array_values(facebook_get_members(MID));
	if (empty($id_facebook) || !in_array('thoughttofeed', $fields))
		return;

	$text = html_entity_decode($text, ENT_QUOTES);

	// Cache it to prevent facebook updating our own thought...
	cache_put_data('fb_last_thought_' . MID, array('message' => $text), 7 * 86400);

	// Post this thought to the feed
	$facebook = facebook_instance();
	$facebook->api('/' . $id_facebook . '/feed', 'POST', array(
		'message' => $text,
	));
}
/**
 * Handles facebook profile area
 *
 * @param int $memID
 * @return void
 */
function Facebook_profile($memID)
{
	global $context;

	// Load this user's facebook info
	list ($id_member, $id_facebook, $fields) = array_values(facebook_get_members($memID));

	// Saving the fields?
	if (!empty($_POST['save']))
	{
		$_POST['facebook_fields'] = (array) $_POST['facebook_fields'];
		foreach ($_POST['facebook_fields'] as $k => $field)
			if (!in_array($field, array('name', 'birthday', 'feed', 'thoughttofeed', 'topictofeed')))
				unset($_POST['facebook_fields'][$k]);

		updateMemberData((int) $memID, array(
			'facebook_fields' => implode(',', $_POST['facebook_fields']),
		));

		// Update the caches
		$cache_data = array(
			'id' => $id_member,
			'fbid' => $id_facebook,
			'fields' => $_POST['facebook_fields'],
		);
		cache_put_data('fb_id_facebook_' . $id_facebook, $cache_data, 86400);
		cache_put_data('fb_id_member_' . $id_member, $cache_data, 86400);

		redirectexit('action=profile;area=facebook');
	}

	// Load the template
	$context['facebook'] = array(
		'id' => $id_facebook,
		'fields' => $fields,
	);
	wetem::load('facebook_profile');
}

/**
 * Handles "facebook" action and routes it to the correct sub-function
 * 
 * @return void
 */
function Facebook()
{
	if (!facebook_enabled())
		return false;

	$areas = array(
		'login' => 'Facebook_login_redirect',
		'login_return' => 'Facebook_login_return',
		'register' => 'Facebook_register',
	);

	if (isset($_REQUEST['area']) && isset($areas[$_REQUEST['area']]))
		return $areas[$_REQUEST['area']]();

	redirectexit();
}

/**
 * Redirects the user to facebook login
 * 
 * @return void
 */
function Facebook_login_redirect()
{
	// Initialize Facebook
	$facebook = facebook_instance();
	redirectexit($facebook->getLoginUrl(array(
		'redirect_uri' => SCRIPT . '?action=facebook;area=login_return',
		'scope' => 'email,user_birthday,read_stream,user_status,publish_stream,offline_access',
	)));
}

/**
 * Actually logs in the user returning from Facebook, if not found, prompts the password field
 * if the user's a guest, otherwise assigns the Facebook ID to the current member
 * 
 * @return void
 */
function Facebook_login_return()
{
	global $context, $user_settings, $txt;

	if (!facebook_enabled())
		fatal_lang_error('facebook_disabled');

	loadSource(array('Subs-Auth', 'Subs-Login', 'Subs-Members', 'Subs-Graphics'));

	$facebook = facebook_instance();
	$user = $facebook->getUser();

	$me = $facebook->api('/me', 'GET', array(
		'fields' => 'name,email,birthday'
	));

	if (empty($me) || empty($me['id']))
		fatal_lang_error('facebook_invalid_request');

	// Are we an existing user?
	$request = wesql::query('
		SELECT passwd, id_member, id_group, lngfile, is_activated, email_address, additional_groups, member_name, password_salt, passwd_flood
		FROM {db_prefix}members
		WHERE facebook_id = {string:fb_id}
		LIMIT 1',
		array(
			'fb_id' => $me['id'],
		)
	);
	$rows = wesql::num_rows($request);
	$user_settings = wesql::fetch_assoc($request);
	wesql::free_result($request);

	// Log this user in
	if ($rows > 0 && we::$is_guest)
		DoLogin();
	// Otherwise register them if they're a guest
	elseif (we::$is_guest)
	{
		if (empty($me['email']))
			fatal_lang_error('facebook_no_email');

		$_SESSION['facebook_info'] = $me;
		$context['page_title'] = $txt['facebook_create_password'];
		$context['facebook_info'] = $me;
		$context['facebook_pic_url'] = Facebook::$DOMAIN_MAP['graph'] . '/' . $me['id'] . '/picture';
		$context['facebook_requires_username'] = isReservedName($me['name']);
		wetem::load('facebook_create_password');
	}
	// Otherwise straight away assign them their FB ID
	elseif ($rows == 0)
	{
		updateMemberData((array) MID, array(
			'facebook_id' => $me['id'],
		));

		redirectexit('action=profile;area=facebook');
	}
	else
		fatal_lang_error('facebook_user_already_exists', 'general', array($user_settings['id_member'], $user_settings['member_name']));
}

/**
 * Actually registers an user
 *
 * @return void
 */
function Facebook_register()
{
	global $context, $settings, $txt;

	loadSource(array('Subs-Auth', 'Subs-Login', 'Subs-Members', 'Subs-Graphics'));
	loadLanguage('Login');

	if (!facebook_enabled())
		fatal_lang_error('facebook_disabled');

	if (empty($_SESSION['facebook_info']) || empty($_SESSION['facebook_info']['email']))
		redirectexit();

	// Check to make sure this user doesn't already exist
	$request = wesql::query('
		SELECT id_member
		FROM {db_prefix}members
		WHERE facebook_id = {string:id}
		LIMIT 1',
		array(
			'id' => $_SESSION['facebook_info']['id'],
		)
	);
	if (wesql::num_rows($request) > 0)
		redirectexit('action=facebook;area=login');

	// We don't need to do much validating, we'll let registerMember handle those
	$regOptions = array(
		'password' => $_POST['passwd'],
		'password_check' => $_POST['passwd_check'],
		'username' => $_POST['username'],
		'interface' => 'guest',
		'auth_method' => 'password',
		'email' => $_SESSION['facebook_info']['email'],
		'check_reserved_name' => true,
		'check_password_strength' => true,
		'check_email_ban' => true,
		'send_welcome_email' => !empty($settings['send_welcomeEmail']),
		'require' => 'nothing',
		'extra_register_vars' => array(
			'real_name' => $_SESSION['facebook_info']['name'],
			'birthdate' => strftime('%Y-%m-%d', strtotime($_SESSION['facebook_info']['birthday'])),
		),
	);

	$id_member = registerMember($regOptions);
	if (is_array($id_member))
	{
		$context['registration_errors'] = $id_member;
		$context['page_title'] = $txt['facebook_create_password'];
		$context['facebook_info'] = $_SESSION['facebook_info'];
		$context['facebook_pic_url'] = Facebook::$DOMAIN_MAP['graph'] . '/' . $_SESSION['facebook_info']['id'] . '/picture';
		$context['facebook_requires_username'] = isReservedName($_SESSION['facebook_info']['name']);
		wetem::load('facebook_create_password');
	}
	else
	{
		downloadAvatar(str_replace('https://', 'http://', Facebook::$DOMAIN_MAP['graph']) . '/' . $_SESSION['facebook_info']['id'] . '/picture?type=large', $id_member, $settings['avatar_max_width_upload'], $settings['avatar_max_height_upload']);

		updateMemberData((array) $id_member, array(
			'facebook_id' => $_SESSION['facebook_info']['id'],
			'facebook_fields' => 'name,birthday,picture',
		));

		// We run this since it is supposed to be run anyway
		call_hook('activate', array($regOptions['username']));

		// Facebook hook
		call_hook('facebook_register', array($id_member, $_SESSION['facebook_info']['id']));

		setLoginCookie(60 * $settings['cookieTime'], $id_member, sha1(sha1(strtolower($regOptions['username']) . $regOptions['password']) . $regOptions['register_vars']['password_salt']));

		// Redirect them to FB profile area by default
		$_SESSION['login_url'] = 'action=profile;area=facebook';

		redirectexit('action=login2;sa=check;member=' . $id_member, $context['server']['needs_login_fix']);
	}
}