include.php

<?php
/*
 *  Copyright (C) 2012 MyProfile Project
 *  
 *  Permission is hereby granted, free of charge, to any person obtaining a copy
 *  of this software and associated documentation files (the "Software"), to deal 
 *  in the Software without restriction, including without limitation the rights 
 *  to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 
 *  copies of the Software, and to permit persons to whom the Software is furnished 
 *  to do so, subject to the following conditions:

 *  The above copyright notice and this permission notice shall be included in all 
 *  copies or substantial portions of the Software.

 *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, 
 *  INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A 
 *  PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT 
 *  HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION 
 *  OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE 
 *  SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 */

// set default time zone
// see http://www.php.net/manual/timezones.php for available values
date_default_timezone_set('UTC');

define('INCLUDE_CHECK',true);
set_include_path(get_include_path() . PATH_SEPARATOR . dirname(__FILE__).'/');

// check if it's a first install
if (!file_exists('config.php')) {
    include 'header.php';
    include 'lib/functions.php';
    echo error('Your MyProfile installation is not complete. Please complete the installation process.');
    echo "<p>Click here to start the installation process.";
    echo "<form action=\"install.php\"><input class=\"btn btn-primary\" type=\"submit\" value=\" MyProfile installation \"></form></p>\n";
    
    include 'footer.php';    
}

// Local includes
require_once 'config.php';
require_once 'lib/functions.php';
require_once 'lib/Messages.php';
require_once 'lib/MyProfile.class.php';
require_once 'lib/Recovery.class.php';
require_once 'lib/Wall.class.php';
// Email libs
require_once 'lib/Mail.php';
require_once 'lib/Mail/mime.php';

// Logging
require_once 'lib/logger.php';

// WebID auth
require_once 'lib/WebIDDelegatedAuth/lib/Authentication.php';

// Feed stuff
require_once 'lib/feeds/FeedItem.php';
require_once 'lib/feeds/FeedWriter.php';

// RDF stuff
require_once 'lib/arc/ARC2.php';
require_once 'lib/EasyRdf.php';
require_once 'lib/sparqllib.php';

// Get the current document URI
$page_uri = 'http';
if (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == 'on') {
    $page_uri .= 's';
}
$page_uri .= '://' . $_SERVER['SERVER_NAME'];
// this is the base uri 
$base_uri = $page_uri;
define ('BASE_URI', $base_uri);
// add current document
$page_uri .= $_SERVER['REQUEST_URI'];

// Preparing the session
session_name('tzLogin');

// Making the cookie live for 1 day
session_set_cookie_params(24*60*60);

// Create session
if (!isset($_SESSION)) {
    session_start();
    $auth = new Authentication_Delegated();
    $log = new KLogger( "logs/log.txt" , KLogger::DEBUG );

    $_SESSION['base_uri'] = $base_uri;
    $_SESSION['page_uri'] = $page_uri;
}

// If you are logged in, but you don't have the tzRemember cookie (browser restart)
if((isset($_SESSION['id'])) && (!isset($_COOKIE['tzRemember']))) {
    // Destroy the session
    $_SESSION = array();
    session_destroy();	
}

// Logout
if(isset($_REQUEST['logout'])) {
    # clear WebID session	
    if ($_SESSION['webid'])
        $auth->logout;	

    # clear local session
    $_SESSION = array();
    session_destroy();

    header("Location: /");
    exit;
}

// Authenticate using WebID
if ((strlen($auth->webid) > 0) || (isset($_REQUEST["recovery_code"])) || (isset($_REQUEST["pairing_pin"]))) {
    $ok = False;

    // Authenticated through WebID-TLS
    if ((strlen($auth->webid) > 0) && ($auth->isAuthenticated() == True)) {  
        $webid = $auth->webid;
        $ok = True;
    } 
    
    // Authenticate through recovery hash
    if (strlen($_REQUEST["recovery_code"]) > 0) {
        $recovery = new Recovery();
        $status = $recovery->hash_authenticated($_REQUEST["recovery_code"]);
        if ($status == True) {
            $webid = $recovery->get_webid();
            $_SESSION['recovery_status'] = null;
            $ok = True;
        } else {
            $_SESSION['recovery_status'] = error('Your recovery code does not match any records in our database.');
        }
    }
    
    if (strlen($_REQUEST["pairing_pin"]) > 0) {
        $recovery = new Recovery();
        $status = $recovery->pin_authenticated($_REQUEST["pairing_pin"]);
        if ($status == True) {
            $webid = $recovery->get_webid();
            $_SESSION['recovery_status'] = null;
            $ok = True;
        } else {
            $_SESSION['recovery_status'] = error('Your recovery PIN does not match any records in our database.');
        }
    }
    
    // DEBUG
    //echo "\n<!-- WEBID=".$webid."\nSESSION=\n".print_r($_SESSION, true)."-->\n";
    
    if ($ok == True) {
        if (!isset($_SESSION['myprofile'])) {
            $_SESSION['webid'] = $webid;

            $_SESSION['myprofile'] = new MyProfile($webid, BASE_URI, SPARQL_ENDPOINT);
            // load rest of data only if we can load the profile
            if ($_SESSION['myprofile']->load()) {
                $_SESSION['usr'] = $_SESSION['myprofile']->get_name();
              	$_SESSION['img'] = $_SESSION['myprofile']->get_picture();
	            $_SESSION['feed_hash'] = $_SESSION['myprofile']->get_feed();
                $_SESSION['user_hash'] = $_SESSION['myprofile']->get_hash();
            }
        }

        // Store some data in the session
        setcookie('tzRemember', '1');
        // Log success
        $log->LogInfo("[SUCCESS] Authenticated " . $webid . " => " . $auth->authnDiagnostic);
    } else {
        // log reason why it failed
        $log->LogInfo("[FAILURE] Fail to authenticate " . $webid . " => " . $auth->authnDiagnostic);
    }
}

// Get the number of messages
if (isset($_SESSION['webid']) && $_SESSION['webid']) {
    $messages = get_msg_count($_SESSION['webid']);
    $wall_msg = get_msg_count($_SESSION['webid'], True, True);
}


// Bad place to add logic for adding/removing friends.
// add a specific person as friend
if ((isset($_SESSION['myprofile'])) && ($_SESSION['myprofile']->is_local($webid)) && (isset($_REQUEST['action'])) && ($_REQUEST['action'] == 'addfriend')) {
    // add friend and display confirmation
    $confirmation = $_SESSION['myprofile']->add_friend($_REQUEST['add_webid']);
    
    $_SESSION['myprofile'] = new MyProfile($_SESSION['webid'], BASE_URI, SPARQL_ENDPOINT);
    $_SESSION['myprofile']->load(true);
}

// remove a specific person from friends
if ((isset($_SESSION['myprofile'])) && ($_SESSION['myprofile']->is_local($webid)) && (isset($_REQUEST['action'])) && ($_REQUEST['action'] == 'delfriend')) {
    // remove friend and display confirmation    
    $confirmation = $_SESSION['myprofile']->del_friend($_REQUEST['del_webid']);

    $_SESSION['myprofile'] = new MyProfile($_SESSION['webid'], BASE_URI, SPARQL_ENDPOINT);
    $_SESSION['myprofile']->load(true);
}

// cast a YES vote for a given message and user
if ((isset($_REQUEST['vote'])) && ($_REQUEST['vote'] == 'yes') && (isset($_SESSION['myprofile'])) && (isset($_REQUEST['message_id']))) {
    echo cast_vote ($_SESSION['webid'], $_REQUEST['message_id'], 1);
}
// cast a NO vote for a given message and user
if ((isset($_REQUEST['vote'])) && ($_REQUEST['vote'] == 'no') && (isset($_SESSION['myprofile'])) && (isset($_REQUEST['message_id']))) {
    echo cast_vote ($_SESSION['webid'], $_REQUEST['message_id'], 0);
}