harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add signatures

Browse Source
This commit is contained in:
friendica 2015-02-02 16:54:55 -08:00
parent 043ff33e43
commit 125ebfeb0c
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
mod/prate.php
View File

@ -2,12 +2,13 @@
function prate_post(&$a) { function prate_post(&$a) {
if(! local_channel()) if(! local_channel())
return; return;
$channel = $a->get_channel(); $channel = $a->get_channel();
$target = $_REQUEST['target']; $target = trim($_REQUEST['target']);
if(! $target) if(! $target)
return; return;
@ -20,7 +21,12 @@ function prate_post(&$a) {
if($rating > 10) if($rating > 10)
$rating = 10; $rating = 10;
$rating_text = escape_tags($_REQUEST['rating_text']); $rating_text = trim(escape_tags($_REQUEST['rating_text']));
$signed = $target . '.' . $rating . '.' . $rating_text;
$sig = base64url_encode(rsa_sign($signed,$channel['channel_prvkey']));
$z = q("select * from xlink where xlink_xchan = '%s' and xlink_xlink = '%s' and xlink_static = 1 limit 1", $z = q("select * from xlink where xlink_xchan = '%s' and xlink_xlink = '%s' and xlink_static = 1 limit 1",
dbesc($channel['channel_hash']), dbesc($channel['channel_hash']),
@ -28,20 +34,22 @@ function prate_post(&$a) {
); );
if($z) { if($z) {
$record = $z[0]['xlink_id']; $record = $z[0]['xlink_id'];
$w = q("update xlink set xlink_rating = '%d', xlink_rating_text = '%s', xlink_updated = '%s' $w = q("update xlink set xlink_rating = '%d', xlink_rating_text = '%s', xlink_sig = '%s', xlink_updated = '%s'
where xlink_id = %d", where xlink_id = %d",
intval($rating), intval($rating),
dbesc($rating_text), dbesc($rating_text),
dbesc($sig),
dbesc(datetime_convert()), dbesc(datetime_convert()),
intval($record) intval($record)
); );
} }
else { else {
$w = q("insert into xlink ( xlink_xchan, xlink_link, xlink_rating, xlink_rating_text, xlink_updated, xlink_static ) values ( '%s', '%s', %d, '%s', '%s', 1 ) ", $w = q("insert into xlink ( xlink_xchan, xlink_link, xlink_rating, xlink_rating_text, xlink_sig, xlink_updated, xlink_static ) values ( '%s', '%s', %d, '%s', '%s', '%s', 1 ) ",
dbesc($channel['channel_hash']), dbesc($channel['channel_hash']),
dbesc($target), dbesc($target),
intval($rating), intval($rating),
dbesc($rating_text), dbesc($rating_text),
dbesc($sig),
dbesc(datetime_convert()) dbesc(datetime_convert())
); );
$z = q("select * from xlink where xlink_xchan = '%s' and xlink_link = '%s' and xlink_static = 1 limit 1", $z = q("select * from xlink where xlink_xchan = '%s' and xlink_link = '%s' and xlink_static = 1 limit 1",