AnonSec Shell
Server IP : 85.193.89.191  /  Your IP : 3.17.173.100
Web Server : Apache
System : Linux 956367-cx40159.tmweb.ru 3.10.0-1160.105.1.el7.x86_64 #1 SMP Thu Dec 7 15:39:45 UTC 2023 x86_64
User : bitrix ( 600)
PHP Version : 8.1.27
Disable Function : NONE
MySQL : OFF  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/bitrix/www/bitrix/modules/blog/general/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/bitrix/www/bitrix/modules/blog/general/blog_metaweblog.php
<?php

IncludeModuleLangFile(__FILE__);

use Bitrix\Main\Text\HtmlFilter;

class CBlogMetaWeblog
{
	public static function Authorize($user, $password)
	{
		global $USER, $APPLICATION;

		$arAuthResult = $USER->Login($user, $password, "Y");
		$APPLICATION->arAuthResult = $arAuthResult;
		if($USER->IsAuthorized() && $arAuthResult["MESSAGE"] == '')
			return true;
		else
			return false;
	}

	public static function DecodeParams($value)
	{
		foreach($value as $t => $v)
		{
			if($t == "base64")
				return base64_decode($v[0]["#"]);
			else
				return $v[0]["#"];
		}
	}

	public static function GetUsersBlogs($params, $arPath)
	{
		global $USER;
		$blog = CBlogMetaWeblog::DecodeParams($params[0]["#"]["value"][0]["#"]);
		$user = CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			$dbBlog = CBlog::GetList(Array(), Array("OWNER_ID" => $userId, "GROUP_SITE_ID" => SITE_ID, "ACTIVE" => "Y"), false, false, Array("ID", "URL", "NAME", "OWNER_ID"));
			while($arBlog = $dbBlog->GetNext())
			{

				if($arPath["PATH_TO_BLOG"] <> '')
				{
					if (defined("SITE_SERVER_NAME") && SITE_SERVER_NAME <> '')
						$serverName = SITE_SERVER_NAME;
					else
						$serverName = COption::GetOptionString("main", "server_name", "");
					if ($serverName == '')
						$serverName = $_SERVER["SERVER_NAME"];
					$serverName = HtmlFilter::encode($serverName);

					$path2Blog = "http://".$serverName.CComponentEngine::MakePathFromTemplate($arPath["PATH_TO_BLOG"], array("blog" => $arBlog["URL"], "user_id" => $arBlog["OWNER_ID"]));
				}
				else
					$path2Blog = $arBlog["URL"];
				$result .= '
						<value>
							<struct>
								<member>
									<name>url</name>
									<value>'.$path2Blog.'</value>
								</member>
								<member>
									<name>blogid</name>
									<value>'.$arBlog["ID"].'</value>
								</member>
								<member>
									<name>blogName</name>
									<value>'.$arBlog["NAME"].'</value>
								</member>
							</struct>
						</value>
					';
			}

			if (CModule::IncludeModule("socialnetwork"))
			{
				$arGroupFilter = array(
					"USER_ID" => $userId,
					"<=ROLE" => SONET_ROLES_USER,
					"GROUP_SITE_ID" => SITE_ID,
					"GROUP_ACTIVE" => "Y"
				);

				$dbGroups = CSocNetUserToGroup::GetList(
					array("GROUP_NAME" => "ASC"),
					$arGroupFilter,
					false,
					false,
					array("ID", "GROUP_ID","GROUP_OWNER_ID", "GROUP_NAME", "GROUP_SITE_ID")
				);
				while ($arGroups = $dbGroups->GetNext())
				{
					$perms = BLOG_PERMS_DENY;

					if (CSocNetFeaturesPerms::CanPerformOperation($userId, SONET_ENTITY_GROUP, $arGroups["GROUP_ID"], "blog", "write_post", CSocNetUser::IsCurrentUserModuleAdmin($arGroups["GROUP_SITE_ID"])))
						$perms = BLOG_PERMS_WRITE;
					elseif (CSocNetFeaturesPerms::CanPerformOperation($userId, SONET_ENTITY_GROUP, $arGroups["GROUP_ID"], "blog", "full_post"))
						$perms = BLOG_PERMS_FULL;

					if($perms >= BLOG_PERMS_WRITE)
					{
						$dbBlog = CBlog::GetList(Array(), Array("SOCNET_GROUP_ID" => $arGroups["GROUP_ID"], "GROUP_SITE_ID" => SITE_ID, "ACTIVE" => "Y"), false, false, Array("ID", "URL", "NAME"));
						if($arBlog = $dbBlog->GetNext())
						{
							$result .= '
									<value>
										<struct>
											<member>
												<name>url</name>
												<value>'.$arBlog["URL"].'</value>
											</member>
											<member>
												<name>blogid</name>
												<value>'.$arBlog["ID"].'</value>
											</member>
											<member>
												<name>blogName</name>
												<value>'.$arBlog["NAME"].'</value>
											</member>
										</struct>
									</value>
								';
						}
					}
				}
			}

			if($result <> '')
			{
				return '<params>
							<param>
								<value>
									<array>
										<data>'
											.$result.
										'</data>
									</array>
								</value>
							</param>
						</params>';
			}
			else
			{
				return '<fault>
					<value>
						<struct>
							<member>
								<name>faultCode</name>
								<value><int>4</int></value>
								</member>
							<member>
								<name>faultString</name>
								<value><string>User hasn\'t blog.</string></value>
								</member>
							</struct>
						</value>
					</fault>';
			}
		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
							</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
							</member>
						</struct>
					</value>
				</fault>';
		}
	}

	public static function GetCategories($params)
	{
		global $USER;
		$blog = CBlogMetaWeblog::DecodeParams($params[0]["#"]["value"][0]["#"]);
		$user = CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			$dbBlog = CBlog::GetList(Array(), Array("GROUP_SITE_ID" => SITE_ID, "ACTIVE" => "Y", "ID" => $blog), false, false, Array("ID", "URL", "NAME"));
			if($arBlog = $dbBlog->GetNext())
			{
				$dbCategory = CBlogCategory::GetList(Array("NAME" => "ASC"), Array("BLOG_ID" => $arBlog["ID"]));
				while($arCategory = $dbCategory->GetNext())
				{

					$result .= '
							<value>
								<struct>
									<member>
										<name>description</name>
										<value>'.$arCategory["NAME"].'</value>
									</member>
									<member>
										<name>title</name>
										<value>'.$arCategory["NAME"].'</value>
									</member>
								</struct>
							</value>
						';
				}
			}


			if($result <> '')
			{
				return '<params>
							<param>
								<value>
									<array>
										<data>'
											.$result.
										'</data>
									</array>
								</value>
							</param>
						</params>';
			}
			else
			{
				return '<fault>
					<value>
						<struct>
							<member>
								<name>faultCode</name>
								<value><int>4</int></value>
							</member>
							<member>
								<name>faultString</name>
								<value><string>No categories in blog.</string></value>
							</member>
							</struct>
						</value>
					</fault>';
			}
		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
							</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
							</member>
						</struct>
					</value>
				</fault>';
		}

	}

	public static function GetRecentPosts($params, $arPath)
	{
		global $USER;
		$blogId = intval(CBlogMetaWeblog::DecodeParams($params[0]["#"]["value"][0]["#"]));
		$user = CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);
		$numPosts = intval(CBlogMetaWeblog::DecodeParams($params[3]["#"]["value"][0]["#"]));
		if($numPosts <= 0)
			$numPosts = 1;
		elseif($numPosts > 20)
			$numPosts = 20;

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			if(intval($blogId) > 0)
			{
				$dbBlog = CBlog::GetList(Array(), Array("GROUP_SITE_ID" => SITE_ID, "ACTIVE" => "Y", "ID" => $blogId), false, false, Array("ID", "URL", "NAME"));
				if($arBlog = $dbBlog->GetNext())
				{
					$parser = new blogTextParser();
					$arSelectedFields = array("ID", "BLOG_ID", "TITLE", "DATE_PUBLISH", "AUTHOR_ID", "DETAIL_TEXT", "DETAIL_TEXT_TYPE");
					$dbPost = CBlogPost::GetList(Array("DATE_PUBLISH" => "DESC", "ID" => "DESC"), Array("BLOG_ID" => $blogId), false, Array("nTopCount" => $numPosts), $arSelectedFields);
					while($arPost = $dbPost->GetNext())
					{
						if (!empty($arPost['DETAIL_TEXT']))
						{
							$arPost['DETAIL_TEXT'] = \Bitrix\Main\Text\Emoji::decode($arPost['DETAIL_TEXT']);
						}

						$dateISO = date("Y-m-d\TH:i:s", MakeTimeStamp($arPost["DATE_PUBLISH"]));
						$title = htmlspecialcharsEx($arPost["TITLE"]);
						$arImages = Array();
						$res = CBlogImage::GetList(array("ID"=>"ASC"),array("POST_ID"=>$arPost["ID"], "BLOG_ID"=>$arPost["BLOG_ID"], "IS_COMMENT" => "N"));
						while ($arImage = $res->Fetch())
									$arImages[$arImage['ID']] = $arImage['FILE_ID'];

						if($arPost["DETAIL_TEXT_TYPE"] == "html")
						{
							$arAllow = array("HTML" => "Y", "ANCHOR" => "Y", "IMG" => "Y", "SMILES" => "Y", "NL2BR" => "N", "VIDEO" => "N", "QUOTE" => "N", "CODE" => "N");

							$text = $parser->convert_to_rss($arPost["DETAIL_TEXT"], $arImages, $arAllow, false);
						}
						else
						{
							$arAllow = array("HTML" => "N", "ANCHOR" => "Y", "BIU" => "Y", "IMG" => "Y", "QUOTE" => "N", "CODE" => "N", "FONT" => "Y", "LIST" => "Y", "SMILES" => "Y", "NL2BR" => "N", "VIDEO" => "N");
							$text = $parser->convert_to_rss(htmlspecialcharsEx($arPost["DETAIL_TEXT"]), $arImages, $arAllow, false);
						}
						$text = "<![CDATA[".$text."]]>";

						$category="";
						$dbCategory = CBlogPostCategory::GetList(Array(), Array("BLOG_ID" => $arPost["BLOG_ID"], "POST_ID" => $arPost["ID"]));
						while($arCategory = $dbCategory->Fetch())
						{
							$category .= '<value>'.htmlspecialcharsEx($arCategory["NAME"]).'</value>';
						}

						$path2Post = "";
						if($arPath["PATH_TO_POST"] <> '')
						{
							if (defined("SITE_SERVER_NAME") && SITE_SERVER_NAME <> '')
								$serverName = SITE_SERVER_NAME;
							else
								$serverName = COption::GetOptionString("main", "server_name", "www.bitrixsoft.com");
							$path2Post = "http://".$serverName.CComponentEngine::MakePathFromTemplate($arPath["PATH_TO_POST"], array("blog" => $arBlog["URL"], "user_id" => $arBlog["OWNER_ID"], "post_id" => $arPost["ID"]));
						}

						$result .= '
							<value>
								<struct>';
						if($category <> '')
							$result .= '<member>
										<name>categories</name>
										<value>
										<array>
										<data>
										'.$category.'
										</data>
										</array>
										</value>
									</member>
								';
						$result .= '
									<member>
										<name>dateCreated</name>
										<value>
										<dateTime.iso8601>'.$dateISO.'</dateTime.iso8601>
										</value>
									</member>
									<member>
										<name>description</name>
										<value>'.$text.'</value>
									</member>
									<member>
										<name>link</name>
										<value>'.htmlspecialcharsEx($path2Post).'</value>
									</member>
									<member>
										<name>postid</name>
										<value>
										<i4>'.$arPost["ID"].'</i4>
										</value>
									</member>
									<member>
										<name>title</name>
										<value>'.$title.'</value>
									</member>
									<member>
										<name>publish</name>
										<value>
										<boolean>'.(($arPost["PUBLISH_STATUS"] == "D") ? "0" : "1").'</boolean>
										</value>
									</member>
								</struct>
							</value>
							';
					}
				}
			}

			return '<params>
						<param>
							<value>
								<array>
									<data>'
										.$result.
									'</data>
								</array>
							</value>
						</param>
					</params>';
		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
							</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
							</member>
						</struct>
					</value>
				</fault>';
		}

	}

	public static function NewMediaObject($params)
	{
		global $USER, $DB;
		$blogId = intval(CBlogMetaWeblog::DecodeParams($params[0]["#"]["value"][0]["#"]));
		$user = CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);
		$arImage = $params[3]["#"]["value"][0]["#"]["struct"][0]["#"]["member"];


		foreach($arImage as $val)
		{
			$arImageInfo[$val["#"]["name"][0]["#"]] = CBlogMetaWeblog::DecodeParams($val["#"]["value"][0]["#"]);
		}

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			if(intval($blogId) > 0)
			{
				$dbBlog = CBlog::GetList(Array(), Array("GROUP_SITE_ID" => SITE_ID, "ACTIVE" => "Y", "ID" => $blogId), false, false, Array("ID", "URL", "NAME"));
				if($arBlog = $dbBlog->GetNext())
				{
					$filename = trim(str_replace("\\", "/", trim($arImageInfo["name"])), "/");
					if ($filename <> '')
					{
						$TEMP_FILE_NAME = CTempFile::GetFileName(md5($filename).'.'.GetFileExtension($filename));
						CheckDirPath($TEMP_FILE_NAME);
					}
					else
					{
						$TEMP_FILE_NAME = '';
					}

					if(($TEMP_FILE_NAME <> '') && ($fp = fopen($TEMP_FILE_NAME, "ab")))
					{
						$result = fwrite($fp, $arImageInfo["bits"]);
						if($result !== strlen($arImageInfo["bits"]))
						{
							return '<fault>
									<value>
										<struct>
											<member>
												<name>faultCode</name>
												<value><int>3</int></value>
											</member>
											<member>
												<name>faultString</name>
												<value><string>Error on saving media object</string></value>
											</member>
										</struct>
									</value>
								</fault>';
						}
						fclose($fp);
					}
					else
					{
						return '<fault>
								<value>
									<struct>
										<member>
											<name>faultCode</name>
											<value><int>3</int></value>
										</member>
										<member>
											<name>faultString</name>
											<value><string>Error on saving media object</string></value>
										</member>
									</struct>
								</value>
							</fault>';
					}

					$arFields = array(
						"BLOG_ID"	=> $arBlog["ID"],
						"USER_ID"	=> $userId,
						"=TIMESTAMP_X"	=> $DB->GetNowFunction(),
						"FILE_ID" => Array(
							"name" => $arImageInfo["name"],
							"tmp_name" => $TEMP_FILE_NAME,
							"MODULE_ID" => "blog",
							"type" => $arImageInfo["type"],
						)
					);
					$imageId = CBlogImage::Add($arFields);
					$arImg = CBlogImage::GetByID($imageId);
					$arFile = CFile::GetFileArray($arImg["FILE_ID"]);
					$path = $arFile["SRC"];

					$dbSite = CSite::GetByID(SITE_ID);
					$arSite = $dbSite -> Fetch();
					$serverName = htmlspecialcharsEx($arSite["SERVER_NAME"]);
					if ($serverName == '')
					{
						if (defined("SITE_SERVER_NAME") && SITE_SERVER_NAME <> '')
							$serverName = SITE_SERVER_NAME;
						else
							$serverName = COption::GetOptionString("main", "server_name", "www.bitrixsoft.com");
					}

					if($path <> '')
					{
						return '<params>
							<param>
								<value>
									<struct>
									<member>
									<name>url</name>
									<value>
									<string>'.CHTTP::URN2URI($path, $serverName).'</string>
									</value>
									</member>
									</struct>
								</value>
							</param>
							</params>';
					}
				}
			}
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
						</member>
						<member>
							<name>faultString</name>
							<value><string>Error on saving media object</string></value>
						</member>
					</struct>
				</value>
				</fault>';
		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
						</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
						</member>
					</struct>
				</value>
				</fault>';
		}

	}

	public static function NewPost($params)
	{
		global $USER, $DB;
		$blogId = intval(CBlogMetaWeblog::DecodeParams($params[0]["#"]["value"][0]["#"]));
		$user = CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);
		$arPostInfo = $params[3]["#"]["value"][0]["#"]["struct"][0]["#"]["member"];
		$publish = $params[4]["#"]["value"][0]["#"]["boolean"][0]["#"];

		foreach($arPostInfo as $val)
		{
			${$val["#"]["name"][0]["#"]} = CBlogMetaWeblog::DecodeParams($val["#"]["value"][0]["#"]);
		}
//		security
		if(!empty($description))
			$description = HtmlFilter::encode($description);

		$arCategory = Array();
		if(is_array($categories["data"][0]["#"]["value"]))
		{
			foreach($categories["data"][0]["#"]["value"] as $val)
			{
				$catTmp = CBlogMetaWeblog::DecodeParams($val["#"]);
				if($catTmp <> '')
					$arCategory[] = $catTmp;
			}
		}

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			if(intval($blogId) > 0)
			{
				$dbBlog = CBlog::GetList(Array(), Array("GROUP_SITE_ID" => SITE_ID, "ACTIVE" => "Y", "ID" => $blogId), false, false, Array("ID", "URL", "NAME", "GROUP_ID", "SOCNET_GROUP_ID"));
				if($arBlog = $dbBlog->GetNext())
				{
					$CATEGORYtmp = Array();
					$dbCategory = CBlogCategory::GetList(Array(), Array("BLOG_ID" => $blogId));
					while($arCat = $dbCategory->Fetch())
					{
						$arCatBlog[ToLower($arCat["NAME"])] = $arCat["ID"];
					}

					if (intval($arBlog["SOCNET_GROUP_ID"]) > 0 && CModule::IncludeModule("socialnetwork") && method_exists("CSocNetGroup", "GetSite"))
					{
						$arSites = array();
						$rsGroupSite = CSocNetGroup::GetSite($arBlog["SOCNET_GROUP_ID"]);
						while($arGroupSite = $rsGroupSite->Fetch())
							$arSites[] = $arGroupSite["LID"];
					}
					else
						$arSites = array(SITE_ID);

					foreach($arCategory as $tg)
					{
						$tg = trim($tg);
						if(!in_array($arCatBlog[ToLower($tg)], $CATEGORYtmp))
						{
							if(intval($arCatBlog[ToLower($tg)]) > 0)
								$CATEGORYtmp[] = $arCatBlog[ToLower($tg)];
							else
							{
								$CATEGORYtmp[] = CBlogCategory::Add(array("BLOG_ID" => $blogId, "NAME" => $tg));

								foreach ($arSites as $site_id_tmp)
									BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/category/");
							}
						}
					}

					$dbSite = CSite::GetByID(SITE_ID);
					$arSite = $dbSite -> Fetch();
					$serverName = htmlspecialcharsEx($arSite["SERVER_NAME"]);
					if ($serverName == '')
					{
						if (defined("SITE_SERVER_NAME") && SITE_SERVER_NAME <> '')
							$serverName = SITE_SERVER_NAME;
						else
							$serverName = COption::GetOptionString("main", "server_name", "www.bitrixsoft.com");
					}

					$arImgRepl = Array();
					$dbImage = CBlogImage::GetList(array(), Array("POST_ID" => false, "BLOG_ID" => $blogId, "IS_COMMENT" => "N"));
					while($arImage = $dbImage->Fetch())
					{
						$path = "";
						$path = CFile::GetPath($arImage["FILE_ID"]);
						$path = "http://".$serverName.$path;

						if(mb_strpos($description, $path) !== false)
						{
							$description = str_replace(('<img src="'.$path.'" alt=""/>'), "[IMG ID=".$arImage["ID"]."]", $description);
							$arImgRepl[] = $arImage["ID"];
						}
					}

					$arFields=array(
							"BLOG_ID"			=> $blogId,
							"AUTHOR_ID"			=> $userId,
							"TITLE"				=> $title,
							"DETAIL_TEXT"		=> $description,
							"DETAIL_TEXT_TYPE"	=> "html",
							"=DATE_PUBLISH"		=> $DB->GetNowFunction(),
							"=DATE_CREATE"		=> $DB->GetNowFunction(),
							"PUBLISH_STATUS"	=> (($publish == 1) ? "P" : "D"),
							"ENABLE_TRACKBACK"	=> "N",
							"ENABLE_COMMENTS"	=> "Y",
							"CATEGORY_ID"		=> implode(",", $CATEGORYtmp),
							"PERMS_POST" => array(),
							"PERMS_COMMENT" => array(),
						);
					$postId = CBlogPost::Add($arFields);
					if(intval($postId) > 0)
					{
						foreach($CATEGORYtmp as $v)
							CBlogPostCategory::Add(Array("BLOG_ID" => $arBlog["ID"], "POST_ID" => $postId, "CATEGORY_ID"=>$v));
						foreach($arImgRepl as $v)
							CBlogImage::Update($v, Array("POST_ID" => $postId));

						foreach ($arSites as $site_id_tmp)
						{
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/first_page/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/calendar/");
							BXClearCache(True, "/".$site_id_tmp."/blog/last_messages/");
							BXClearCache(True, "/".$site_id_tmp."/blog/commented_posts/");
							BXClearCache(True, "/".$site_id_tmp."/blog/popular_posts/");
							BXClearCache(True, "/".$site_id_tmp."/blog/last_comments/");
							BXClearCache(True, "/".$site_id_tmp."/blog/groups/".$arBlog["GROUP_ID"]."/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/rss_out/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/rss_all/");
							BXClearCache(True, "/".$site_id_tmp."/blog/rss_sonet/");
							BXClearCache(True, "/".$site_id_tmp."/blog/rss_all/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/favorite/");
						}

						return '<params>
									<param>
										<value>
											<i4>'.$postId.'</i4>
										</value>
									</param>
								</params>';
					}
					else
					{
						return '<fault>
							<value>
								<struct>
									<member>
										<name>faultCode</name>
										<value><int>3</int></value>
										</member>
									<member>
										<name>faultString</name>
										<value><string>Error on adding post</string></value>
										</member>
									</struct>
								</value>
							</fault>';
					}
				}
			}

		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
							</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
							</member>
						</struct>
					</value>
				</fault>';
		}
	}

	public static function EditPost($params)
	{
		global $USER, $DB;
		$postId = intval(CBlogMetaWeblog::DecodeParams($params[0]["#"]["value"][0]["#"]));
		$user = CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);
		$arPostInfo = $params[3]["#"]["value"][0]["#"]["struct"][0]["#"]["member"];
		$publish = $params[4]["#"]["value"][0]["#"]["boolean"][0]["#"];

		foreach($arPostInfo as $val)
		{
			${$val["#"]["name"][0]["#"]} = CBlogMetaWeblog::DecodeParams($val["#"]["value"][0]["#"]);
		}
		
//		security
		if(!empty($description))
			$description = HtmlFilter::encode($description);
		
		$arCategory = Array();
		if(is_array($categories["data"][0]["#"]["value"]))
		{
			foreach($categories["data"][0]["#"]["value"] as $val)
			{
				$catTmp = CBlogMetaWeblog::DecodeParams($val["#"]);
				if($catTmp <> '')
					$arCategory[] = $catTmp;
			}
		}

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			if(intval($postId) > 0)
			{
				$arSelectedFields = array("ID", "BLOG_ID", "TITLE", "DATE_PUBLISH", "AUTHOR_ID", "DETAIL_TEXT", "DETAIL_TEXT_TYPE");
				$dbPost = CBlogPost::GetList(Array(), Array("AUTHOR_ID" => $userId, "ID" => $postId), false, Array("nTopCount" => 1), $arSelectedFields);
				if($arPost = $dbPost->Fetch())
				{
					if (!empty($arPost['DETAIL_TEXT']))
					{
						$arPost['DETAIL_TEXT'] = \Bitrix\Main\Text\Emoji::decode($arPost['DETAIL_TEXT']);
					}

					$arBlog = CBlog::GetByID($arPost["BLOG_ID"]);

					if (intval($arBlog["SOCNET_GROUP_ID"]) > 0 && CModule::IncludeModule("socialnetwork") && method_exists("CSocNetGroup", "GetSite"))
					{
						$arSites = array();
						$rsGroupSite = CSocNetGroup::GetSite($arBlog["SOCNET_GROUP_ID"]);
						while($arGroupSite = $rsGroupSite->Fetch())
							$arSites[] = $arGroupSite["LID"];
					}
					else
						$arSites = array(SITE_ID);

					$CATEGORYtmp = Array();
					$dbCategory = CBlogCategory::GetList(Array(), Array("BLOG_ID" => $arPost["BLOG_ID"]));
					while($arCat = $dbCategory->Fetch())
					{
						$arCatBlog[ToLower($arCat["NAME"])] = $arCat["ID"];
					}

					foreach($arCategory as $tg)
					{
						$tg = trim($tg);
						if(!in_array($arCatBlog[ToLower($tg)], $CATEGORYtmp))
						{
							if(intval($arCatBlog[ToLower($tg)]) > 0)
								$CATEGORYtmp[] = $arCatBlog[ToLower($tg)];
							else
							{
								$CATEGORYtmp[] = CBlogCategory::Add(array("BLOG_ID" => $arPost["BLOG_ID"], "NAME" => $tg));

								foreach ($arSites as $site_id_tmp)
									BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/category/");
							}
						}
					}

					$dbSite = CSite::GetByID(SITE_ID);
					$arSite = $dbSite -> Fetch();
					$serverName = htmlspecialcharsEx($arSite["SERVER_NAME"]);
					if ($serverName == '')
					{
						if (defined("SITE_SERVER_NAME") && SITE_SERVER_NAME <> '')
							$serverName = SITE_SERVER_NAME;
						else
							$serverName = COption::GetOptionString("main", "server_name", "www.bitrixsoft.com");
					}

					$dbImage = CBlogImage::GetList(array(), Array("POST_ID" => false, "BLOG_ID" => $arBlog["ID"], "IS_COMMENT" => "N"));
					while($arImage = $dbImage->Fetch())
					{
						$path = "";
						$path = CFile::GetPath($arImage["FILE_ID"]);
						$path = "http://".$serverName.$path;

						if(mb_strpos($description, $path) !== false)
						{
							$description = str_replace(('<img src="'.$path.'" alt=""/>'), "[IMG ID=".$arImage["ID"]."]", $description);
							CBlogImage::Update($arImage["ID"], Array("POST_ID" => $arPost["ID"]));
						}
					}


					$arFields=array(
							"TITLE"				=> $title,
							"DETAIL_TEXT"		=> $description,
							"DETAIL_TEXT_TYPE"	=> "html",
							"PUBLISH_STATUS"	=> (($publish == 1) ? "P" : "D"),
							"CATEGORY_ID"		=> implode(",", $CATEGORYtmp),
						);
					$postId = CBlogPost::Update($arPost["ID"], $arFields);

					CBlogPostCategory::DeleteByPostID($arPost["ID"]);
					foreach($CATEGORYtmp as $v)
						CBlogPostCategory::Add(Array("BLOG_ID" => $arPost["BLOG_ID"], "POST_ID" => $arPost["ID"], "CATEGORY_ID"=>$v));
					if(intval($postId) > 0)
					{
						foreach ($arSites as $site_id_tmp)
						{
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/first_page/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/calendar/");
							BXClearCache(True, "/".$site_id_tmp."/blog/last_messages/");
							BXClearCache(True, "/".$site_id_tmp."/blog/commented_posts/");
							BXClearCache(True, "/".$site_id_tmp."/blog/popular_posts/");
							BXClearCache(True, "/".$site_id_tmp."/blog/last_comments/");
							BXClearCache(True, "/".$site_id_tmp."/blog/groups/".$arBlog["GROUP_ID"]."/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/trackback/".$arPost["ID"]."/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/comment/".$arPost["ID"]."/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/rss_out/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/rss_all/");
							BXClearCache(True, "/".$site_id_tmp."/blog/rss_sonet/");
							BXClearCache(True, "/".$site_id_tmp."/blog/rss_all/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/favorite/");
							BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/post/".$arPost["ID"]."/");
						}

						return '<params>
									<param>
										<value>
											<i4>'.$postId.'</i4>
										</value>
									</param>
								</params>';
					}
					else
					{
						return '<fault>
							<value>
								<struct>
									<member>
										<name>faultCode</name>
										<value><int>3</int></value>
										</member>
									<member>
										<name>faultString</name>
										<value><string>Error on saving post</string></value>
										</member>
									</struct>
								</value>
							</fault>';
					}
				}
			}

		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
							</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
							</member>
						</struct>
					</value>
				</fault>';
		}
	}

	public static function GetPost($params, $arPath)
	{
		global $USER;
		$postId = intval(CBlogMetaWeblog::DecodeParams($params[0]["#"]["value"][0]["#"]));
		$user = CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			if(intval($postId) > 0)
			{
				$arSelectedFields = array("ID", "BLOG_ID", "TITLE", "DATE_PUBLISH", "AUTHOR_ID", "DETAIL_TEXT", "DETAIL_TEXT_TYPE", "BLOG_URL", "BLOG_OWNER_ID");
				$dbPost = CBlogPost::GetList(Array(), Array("AUTHOR_ID" => $userId, "ID" => $postId), false, Array("nTopCount" => 1), $arSelectedFields);
				if($arPost = $dbPost->Fetch())
				{
					if (!empty($arPost['DETAIL_TEXT']))
					{
						$arPost['DETAIL_TEXT'] = \Bitrix\Main\Text\Emoji::decode($arPost['DETAIL_TEXT']);
					}

					$parser = new blogTextParser();
					$dateISO = date("Y-m-d\TH:i:s", MakeTimeStamp($arPost["DATE_PUBLISH"]));
					$title = htmlspecialcharsEx($arPost["TITLE"]);
					$arImages = Array();
					$res = CBlogImage::GetList(array("ID"=>"ASC"),array("POST_ID"=>$arPost["ID"], "BLOG_ID"=>$arPost["BLOG_ID"], "IS_COMMENT" => "N"));
					while ($arImage = $res->Fetch())
								$arImages[$arImage['ID']] = $arImage['FILE_ID'];

					if($arPost["DETAIL_TEXT_TYPE"] == "html")
					{
						$arAllow = array("HTML" => "Y", "ANCHOR" => "Y", "IMG" => "Y", "SMILES" => "Y", "NL2BR" => "N", "VIDEO" => "N", "QUOTE" => "N", "CODE" => "N");

						$text = $parser->convert_to_rss($arPost["DETAIL_TEXT"], $arImages, $arAllow, false);
					}
					else
					{
						$arAllow = array("HTML" => "N", "ANCHOR" => "Y", "BIU" => "Y", "IMG" => "Y", "QUOTE" => "N", "CODE" => "N", "FONT" => "Y", "LIST" => "Y", "SMILES" => "Y", "NL2BR" => "N", "VIDEO" => "N");
						$text = $parser->convert_to_rss(htmlspecialcharsEx($arPost["DETAIL_TEXT"]), $arImages, $arAllow, false);
					}
					$text = "<![CDATA[".($text)."]]>";

					$category="";
					$dbCategory = CBlogPostCategory::GetList(Array(), Array("BLOG_ID" => $arPost["BLOG_ID"], "POST_ID" => $arPost["ID"]));
					while($arCategory = $dbCategory->Fetch())
					{
						$category .= '<value>'.htmlspecialcharsEx($arCategory["NAME"]).'</value>';
					}

					$path2Post = "";
					if($arPath["PATH_TO_POST"] <> '')
					{
						if (defined("SITE_SERVER_NAME") && SITE_SERVER_NAME <> '')
							$serverName = SITE_SERVER_NAME;
						else
							$serverName = COption::GetOptionString("main", "server_name", "www.bitrixsoft.com");
						$path2Post = "http://".$serverName.CComponentEngine::MakePathFromTemplate($arPath["PATH_TO_POST"], array("blog" => $arPost["BLOG_URL"], "user_id" => $arPost["BLOG_OWNER_ID"], "post_id" => $arPost["ID"]));
					}

					$result .= '
						<value>
							<struct>';
					if($category <> '')
						$result .= '<member>
									<name>categories</name>
									<value>
									<array>
									<data>
									'.$category.'
									</data>
									</array>
									</value>
								</member>
							';
					$result .= '
								<member>
									<name>dateCreated</name>
									<value>
									<dateTime.iso8601>'.$dateISO.'</dateTime.iso8601>
									</value>
								</member>
								<member>
									<name>description</name>
									<value>'.$text.'</value>
								</member>
								<member>
									<name>link</name>
									<value>'.htmlspecialcharsEx($path2Post).'</value>
								</member>
								<member>
									<name>postid</name>
									<value>
									<i4>'.$arPost["ID"].'</i4>
									</value>
								</member>
								<member>
									<name>title</name>
									<value>'.$title.'</value>
								</member>
								<member>
									<name>publish</name>
									<value>
									<boolean>'.(($arPost["PUBLISH_STATUS"] == "D") ? "0" : "1").'</boolean>
									</value>
								</member>
							</struct>
						</value>
						';
				}
			}

			return '<params>
						<param>
							<value>
								<array>
									<data>'
										.$result.
									'</data>
								</array>
							</value>
						</param>
					</params>';
		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
							</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
							</member>
						</struct>
					</value>
				</fault>';
		}
	}

	public static function DeletePost($params)
	{
		global $USER;
		$postId = intval(CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]));
		$user = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[3]["#"]["value"][0]["#"]);

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			if(intval($postId) > 0)
			{
				$dbPost = CBlogPost::GetList(Array(), Array("AUTHOR_ID" => $userId, "ID" => $postId), false, Array("nTopCount" => 1), Array("ID", "BLOG_ID", "AUTHOR_ID"));
				if($arPost = $dbPost->Fetch())
				{
					CBlogPost::Delete($postId);

					$arBlog = CBlog::GetByID($arPost["BLOG_ID"]);

					if (intval($arBlog["SOCNET_GROUP_ID"]) > 0 && CModule::IncludeModule("socialnetwork") && method_exists("CSocNetGroup", "GetSite"))
					{
						$arSites = array();
						$rsGroupSite = CSocNetGroup::GetSite($arBlog["SOCNET_GROUP_ID"]);
						while($arGroupSite = $rsGroupSite->Fetch())
							$arSites[] = $arGroupSite["LID"];
					}
					else
						$arSites = array(SITE_ID);

					foreach ($arSites as $site_id_tmp)
					{
						BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/first_page/");
						BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/pages/");
						BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/calendar/");
						BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/post/".$postId."/");
						BXClearCache(True, "/".$site_id_tmp."/blog/last_messages/");
						BXClearCache(True, "/".$site_id_tmp."/blog/commented_posts/");
						BXClearCache(True, "/".$site_id_tmp."/blog/popular_posts/");
						BXClearCache(True, "/".$site_id_tmp."/blog/last_comments/");
						BXClearCache(True, "/".$site_id_tmp."/blog/groups/".$arResult["BLOG"]["GROUP_ID"]."/");
						BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/trackback/".$postId."/");
						BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/rss_out/");
						BXClearCache(True, "/".$site_id_tmp."/blog/".$arBlog["URL"]."/rss_all/");
						BXClearCache(True, "/".$site_id_tmp."/blog/rss_sonet/");
						BXClearCache(True, "/".$site_id_tmp."/blog/rss_all/");
					}
				}
			}

			return '<params>
						<param>
							<value>
								<boolean>1</boolean>
							</value>
						</param>
					</params>';
		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
							</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
							</member>
						</struct>
					</value>
				</fault>';
		}
	}

	public static function GetUserInfo($params)
	{
		global $USER;
		$user = CBlogMetaWeblog::DecodeParams($params[1]["#"]["value"][0]["#"]);
		$password = CBlogMetaWeblog::DecodeParams($params[2]["#"]["value"][0]["#"]);

		if(CBlogMetaWeblog::Authorize($user, $password))
		{
			$result = '';
			$userId = $USER->GetID();

			$dbUser = CUser::GetByID($userId);
			if($arUser = $dbUser->Fetch())
			{
				$BlogUser = CBlogUser::GetByID($userId, BLOG_BY_USER_ID);
				if($BlogUser["ALIAS"] <> '')
					$nick = htmlspecialcharsEx($BlogUser["ALIAS"]);
				else
					$nick = htmlspecialcharsEx($arUser["LOGIN"]);
				$result .= '
						<value>
							<struct>
								<member>
									<name>nickname</name>
									<value>'.$nick.'</value>
								</member>
								<member>
									<name>email</name>
									<value>'.htmlspecialcharsEx($arUser["EMAIL"]).'</value>
								</member>
								<member>
									<name>lastname</name>
									<value>'.htmlspecialcharsEx($arUser["LAST_NAME"]).'</value>
								</member>
								<member>
									<name>firstname</name>
									<value>'.htmlspecialcharsEx($arUser["NAME"]).'</value>
								</member>
							</struct>
						</value>
					';
			}


			if($result <> '')
			{
				return '<params>
							<param>
								<value>
									<array>
										<data>'
											.$result.
										'</data>
									</array>
								</value>
							</param>
						</params>';
			}
			else
			{
				return '<fault>
					<value>
						<struct>
							<member>
								<name>faultCode</name>
								<value><int>4</int></value>
							</member>
							<member>
								<name>faultString</name>
								<value><string>User not found.</string></value>
							</member>
							</struct>
						</value>
					</fault>';
			}
		}
		else
		{
			return '<fault>
				<value>
					<struct>
						<member>
							<name>faultCode</name>
							<value><int>3</int></value>
							</member>
						<member>
							<name>faultString</name>
							<value><string>'.$arAuthResult["MESSAGE"].'</string></value>
							</member>
						</struct>
					</value>
				</fault>';
		}

	}
}

Anon7 - 2022
AnonSec Team