WP File Manager

Current Path: /home/argothem/www/organecyberpresse/plugins/auto/twitter/v2.1.0/action/

Name	Action
..
ajouter_twitteraccount.php	Edit
api_twitter_oauth_authorize.php	Edit
preferer_twitteraccount.php	Edit
supprimer_twitteraccount.php	Edit
twidget.php	Edit

Editing: twidget.php

<?php
/*
 * Plugin Twitter v2
 * (c) 2009-2021
 *
 * envoyer et lire des messages de Twitter
 * distribue sous licence GNU/LGPL
 *
 */

if (!defined("_ECRIRE_INC_VERSION")) {
	return;
}

function action_twidget_dist() {

$url = $_SERVER['QUERY_STRING'];
	$url = preg_replace(",^(.+&)?action=twidget&w=/?,", "", $url);

if (!_request('debug')) {
		header("Content-type: text/javascript; charset=utf-8");
	}

$res = twidget_get_cached_url($url);
	// header Expires pour eviter overflow par le meme client
	header("Pragma: public");
	header("Cache-Control: maxage=" . _EXPIRES);
	header('Expires: ' . gmdate('D, d M Y H:i:s', time() + _EXPIRES) . ' GMT');

// toujours renvoyer un JSON acceptable, pour declencher la callback notamment :
	if (!strlen(trim($res))) {
		$res = twidget_return($res, _request('callback'));
	}
	echo $res;

exit;
}

function twidget_return($content, $callback = "") {
	if (!strlen(trim($content))) {
		$content = "[]";
	}
	if ($callback) {
		$content = $callback . "(" . $content . ");";
	}

return $content;
}

function twidget_get_cached_url($url, $force = false) {
	$callback = "";
	// enlever le param anti cache
	$url = preg_replace(",&\d+=cachebust,", "", $url);
	// extraire la callback pour ne pas la cacher (mutualisation du cache)
	if (preg_match(",&callback=[^&]*,", $url, $m)) {
		$callback = substr($m[0], 10);
		$url = str_replace($m[0], "", $url);
	}

@define('_TWIDGET_CACHE', 180);
	$expires = _TWIDGET_CACHE;

if (_request('debug')) {
		$force = true;
		if (_request('debug')) {
			$d = "&debug=" . _request('debug');
			$url = str_replace($d, "", $url);
		}
	}

$hash = md5($url);
	$dir = sous_repertoire(_DIR_CACHE, "twidget");

$f = "$dir" . "p$hash.txt";

if (!$force
		AND lire_fichier($f, $c)
		AND $c = unserialize($c)
		AND isset($c['content'])
		// AND $contenu = trim($c['content'])
		AND time() - $c['time'] < _TWIDGET_CACHE) {
		if (!defined('_EXPIRES')) {
			define('_EXPIRES', $expires);
		}

return twidget_return($c['content'], $callback);
	}

spip_log("cache $f invalide (force $force)", "twitget");
	// si job_queue, programmer la maj et renvoyer le contenu existant
	if (!$force
		// AND isset($c['content'])
		// AND $contenu = trim($c['content'])
		AND function_exists('job_queue_add')) {
		job_queue_add('twidget_get_cached_url', 'Twitter Widget proxy', array($url, true), 'action/twidget', true);
		if (!defined('_EXPIRES')) {
			define('_EXPIRES', $expires);
		}

return twidget_return(isset($c['content']) ? $c['content'] : '', $callback);
	}

spip_log("requete api twitter $url", "twitget");
	// mettre a jour le cache

$surl = explode("?", $url);
	$command = array_shift($surl);
	$surl = implode("?", $surl);
	parse_str($surl, $query);

// reaffecter API v1 sur API v1.1
	$command_v11 = $command;
	switch ($command) {
		case "search.json":
			$command_v11 = "search/tweets";
			if (isset($query['rpp'])) {
				$query['count'] = $query['rpp'];
				unset($query['rpp']);
			}
			break;
		default:
			$command_v11 = preg_replace(",^1/|\.json$,", "", $command);
			break;
	}
	unset($query['clientsource']);
	if (isset($query['callback'])) {
		$callback = $query['callback'];
		unset($query['callback']);
	}

include_spip("inc/twitter");

$res = twitter_api_call($command_v11, "get", $query);

if (_request('debug')) {
		var_dump($url);
		var_dump(array($command_v11, $query));
		var_dump($command);
	}

// redresser la sortie API v1.1 => API v1
	switch ($command) {
		case "search.json":
			include_spip("inc/json");
			foreach (array('completed_in', 'max_id', 'max_id_str', 'query') as $k) {
				$res[$k] = ($res['search_metadata'][$k] ?? '');
			}
			$res['results'] = ($res['statuses'] ?? []);
			foreach ($res['results'] as $k => $r) {
				$res['results'][$k]['from_user'] = $r['user']['screen_name'];
				$res['results'][$k]['profile_image_url'] = $r['user']['profile_image_url'];
				$res['results'][$k]['profile_image_url_https'] = $r['user']['profile_image_url_https'];
			}
			unset($res['statuses']);
			unset($res['search_metadata']);
			$res = json_encode($res);
			break;
		case "1/statuses/user_timeline.json":
			foreach ($res as $k => $r) {
				$res[$k]['profile_image_url'] = $r['user']['profile_image_url'];
				$res[$k]['profile_image_url_https'] = $r['user']['profile_image_url_https'];
			}
			$res = json_encode($res);
			break;
		default:
			$res = json_encode($res);
			break;
	}

if (_request('debug')) {
		var_dump($res);
	}

$contenu = trim($res);

// ne pas cacher une requete qui echoue (twitter fail)
	if ($contenu
		OR !isset($c['content'])
		OR !strlen(trim($c['content']))) {
		include_spip("inc/filtres_mini");
		$base = protocole_implicite(url_de_base() . (_DIR_RACINE ? _DIR_RESTREINT_ABS : ''));

// intercepter, cacher et relocaliser les avatars
		preg_match_all(',"profile_image_url(?:_https)?":"([^"]*)",Uims', $contenu, $regs, PREG_SET_ORDER);
		foreach ($regs as $reg) {
			if (_request('debug')) {
				var_dump($reg);
			}
			$new = twidget_get_cached_avatar($reg[1]);
			$new = url_absolue($new, $base);
			if (_request('debug')) {
				var_dump($new);
			}
			$contenu = str_replace($reg[1], $new, $contenu);
		}

ecrire_fichier($f, serialize(array('time' => time(), 'content' => $contenu)));
	}

// par defaut expire sur une minute pour limiter le rate
	// si contenu vide envoyer un expire 15min car on est sans doute
	// en limitation d'API
	if (!$contenu) {
		$expires = 15 * 60;
	}

// header Expires pour eviter overflow par le meme client
	if (!defined('_EXPIRES')) {
		define('_EXPIRES', $expires);
	}

return twidget_return($contenu, $callback);

}

function twidget_get_cached_avatar($img_url) {

if (empty($img_url)) {
		return $img_url;
	}

$img_url = str_replace('\/', '/', $img_url);

@define('_TWIDGET_CACHE_AVATAR', 24 * 3600);
	$parts = parse_url($img_url);

$hash = md5($parts['path']);
	$ext = ".jpg";
	if ($p = strrpos($parts['path'], ".")) {
		$ext = substr($parts['path'], $p);
	}

$dir = sous_repertoire(_DIR_VAR, "twidget");
	$dir = sous_repertoire($dir, substr($hash, 0, 2));
	$f = $dir . $hash . $ext;

if (file_exists($f) AND time() - filemtime($f) < _TWIDGET_CACHE_AVATAR) {
		return $f;
	}

if (!function_exists("recuperer_url")) {
		include_spip("inc/distant");
	}

$res = recuperer_url($img_url, array('file' => $f));
	if (empty($res['file']) and !file_exists($f)) {
		return $img_url;
	}

return $f;
}