POST

2 files changed, 320 insertions, 0 deletions

diff --git a/src/main/java/com/juick/api/Main.java b/src/main/java/com/juick/api/Main.java
index cc068ccd..c43804d7 100644
--- a/src/main/java/com/juick/api/Main.java
+++ b/src/main/java/com/juick/api/Main.java
@@ -17,9 +17,16 @@
  */
 package com.juick.api;
 
+import com.juick.Tag;
+import com.juick.json.MessageSerializer;
+import com.juick.server.*;
 import com.juick.xmpp.JID;
+import com.juick.xmpp.Message;
 import com.juick.xmpp.Stream;
 import com.juick.xmpp.StreamComponent;
+import com.juick.xmpp.extensions.JuickMessage;
+import com.juick.xmpp.extensions.Nickname;
+import com.juick.xmpp.extensions.XOOB;
 import org.springframework.jdbc.core.JdbcTemplate;
 import org.springframework.jdbc.datasource.DriverManagerDataSource;
 
@@ -32,6 +39,11 @@ import javax.servlet.http.HttpServletResponse;
 import java.io.IOException;
 import java.io.PrintWriter;
 import java.net.Socket;
+import java.net.URL;
+import java.net.URLEncoder;
+import java.sql.Connection;
+import java.util.ArrayList;
+import java.util.List;
 import java.util.Properties;
 import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
@@ -187,6 +199,12 @@ public class Main extends HttpServlet implements Stream.StreamListener {
         String uri = request.getRequestURI();
         switch (uri) {
             case "/post":
+                int mid = Utils.parseInt(request.getParameter("mid"), 0);
+                if (mid == 0) {
+                    doPostMessage(jdbc, request, response, xmpp, vuid);
+                } else {
+                    doPostComment(jdbc, request, response, xmpp, vuid);
+                }
                 break;
             case "/pm":
                 pm.doPostPM(request, response, xmpp, vuid);
@@ -197,6 +215,221 @@ public class Main extends HttpServlet implements Stream.StreamListener {
         }
     }
 
+    public void doPostMessage(JdbcTemplate sql, HttpServletRequest request, HttpServletResponse response, Stream xmpp, int vuid)
+            throws ServletException, IOException {
+        String body = request.getParameter("body");
+        if (body == null || body.length() < 1 || body.length() > 4096) {
+            response.sendError(400);
+            return;
+        }
+        body = body.replace("\r", "");
+
+        String tagsStr = request.getParameter("tags");
+        List<Tag> tags = new ArrayList<>();
+        String tagsArr[] = new String[1];
+        if (tagsStr != null && !tagsStr.isEmpty()) {
+            tagsArr = tagsStr.split("[ \\,]");
+            for (int i = 0; i < tagsArr.length; i++) {
+                if (tagsArr[i].startsWith("*")) {
+                    tagsArr[i] = tagsArr[i].substring(1);
+                }
+                if (tagsArr[i].length() > 64) {
+                    tagsArr[i] = tagsArr[i].substring(0, 64);
+                }
+            }
+            tags = TagQueries.getTags(sql, tagsArr, true);
+            while (tags.size() > 5) {
+                tags.remove(5);
+            }
+        }
+
+        String attachmentFName = null;
+        try {
+            attachmentFName = Utils.receiveMultiPartFile(request, "attach");
+        } catch (Exception e) {
+            System.out.println("MULTIPART ERROR: " + e.toString());
+            response.sendError(400);
+            return;
+        }
+
+        String paramImg = request.getParameter("img");
+        if (attachmentFName == null && paramImg != null && paramImg.length() > 10 ) {
+            try {
+                URL imgUrl = new URL(paramImg);
+                attachmentFName = Utils.downloadImage(imgUrl);
+            } catch (Exception e) {
+                System.out.println("DOWNLOAD ERROR: " + e.toString());
+                response.sendError(500);
+                return;
+            }
+        }
+
+        String attachmentType = attachmentFName != null ? attachmentFName.substring(attachmentFName.length() - 3) : null;
+        int mid = MessagesQueries.createMessage(sql, vuid, body, attachmentType, tags);
+        SubscriptionsQueries.subscribeMessage(sql, mid, vuid);
+        JuickMessage jmsg = new JuickMessage(MessagesQueries.getMessage(sql, mid));
+        if (xmpp != null) {
+            Message xmsg = new Message();
+            xmsg.from = new JID("juick", "juick.com", null);
+            xmsg.type = Message.Type.chat;
+            xmsg.thread = "juick-" + mid;
+
+            xmsg.addChild(jmsg);
+
+            Nickname nick = new Nickname();
+            nick.Nickname = "@" + jmsg.getUser().getUName();
+            xmsg.addChild(nick);
+
+            if (attachmentFName != null) {
+                String fname = mid + "." + attachmentType;
+                String attachmentURL = "http://i.juick.com/photos-1024/" + fname;
+
+                Runtime.getRuntime().exec("/var/www/juick.com/cgi/p-convert.sh /var/www/juick.com/i/tmp/" + attachmentFName + " " + fname);
+
+                body = attachmentURL + "\n" + body;
+                XOOB xoob = new XOOB();
+                xoob.URL = attachmentURL;
+                xmsg.addChild(xoob);
+            }
+
+            String tagsStr2 = "";
+            for (String tag : tagsArr) {
+                tagsStr2 += " *" + tag;
+            }
+            xmsg.body = "@" + jmsg.getUser().getUName() + ":" + tagsStr2 + "\n" + body + "\n\n#" + mid + " http://juick.com/" + mid;
+
+            xmsg.to = new JID("juick", "s2s.juick.com", null);
+            xmpp.send(xmsg);
+
+            xmsg.to.Host = "ws.juick.com";
+            xmpp.send(xmsg);
+
+            xmsg.to.Host = "push.juick.com";
+            xmpp.send(xmsg);
+
+            xmsg.to.Host = "crosspost.juick.com";
+            xmsg.to.Username = "twitter";
+            xmpp.send(xmsg);
+            xmsg.to.Username = "fb";
+            xmpp.send(xmsg);
+
+            xmsg.to.Host = "nologin.ru";
+            xmsg.to.Username = "jubo";
+            xmpp.send(xmsg);
+        } else {
+            log("XMPP unavailable");
+        }
+        MessageSerializer serializer = new MessageSerializer();
+        Main.replyJSON(request, response, serializer.serialize(jmsg).toString());
+    }
+
+    public void doPostComment(JdbcTemplate sql, HttpServletRequest request, HttpServletResponse response, Stream xmpp, int vuid)
+            throws ServletException, IOException {
+        int mid = Utils.parseInt(request.getParameter("mid"), 0);
+        if (mid == 0) {
+            response.sendError(400);
+            return;
+        }
+        com.juick.Message msg = MessagesQueries.getMessage(sql, mid);
+        if (msg == null) {
+            response.sendError(404);
+            return;
+        }
+
+        int rid = Utils.parseInt(request.getParameter("rid"), 0);
+        com.juick.Message reply = null;
+        if (rid > 0) {
+            reply = MessagesQueries.getReply(sql, mid, rid);
+            if (reply == null) {
+                response.sendError(404);
+                return;
+            }
+        }
+
+        String body = request.getParameter("body");
+        if (body == null || body.length() < 1 || body.length() > 4096) {
+            response.sendError(400);
+            return;
+        }
+        body = body.replace("\r", "");
+
+        if ((msg.ReadOnly && msg.getUser().getUID() != vuid) || UserQueries.isInBLAny(sql, msg.getUser().getUID(), vuid)
+                || (reply != null && UserQueries.isInBLAny(sql, reply.getUser().getUID(), vuid))) {
+            response.sendError(403);
+            return;
+        }
+
+        String attachmentFName = null;
+        try {
+            attachmentFName = Utils.receiveMultiPartFile(request, "attach");
+        } catch (Exception e) {
+            System.out.println("MULTIPART ERROR: " + e.toString());
+            response.sendError(400);
+            return;
+        }
+
+        String paramImg = request.getParameter("img");
+        if (attachmentFName == null && paramImg != null && paramImg.length() > 10) {
+            try {
+                attachmentFName = Utils.downloadImage(new URL(paramImg));
+            } catch (Exception e) {
+                System.out.println("DOWNLOAD ERROR: " + e.toString());
+                response.sendError(500);
+                return;
+            }
+        }
+
+        String attachmentType = attachmentFName != null ? attachmentFName.substring(attachmentFName.length() - 3) : null;
+        int ridnew = MessagesQueries.createReply(sql, mid, rid, vuid, body, attachmentType);
+        SubscriptionsQueries.subscribeMessage(sql, mid, vuid);
+
+        JuickMessage jmsg = new JuickMessage(MessagesQueries.getReply(sql, mid, ridnew));
+
+        if (xmpp != null) {
+            Message xmsg = new Message();
+            xmsg.from = new JID("juick", "juick.com", null);
+            xmsg.type = Message.Type.chat;
+            xmsg.thread = "juick-" + mid;
+            xmsg.addChild(jmsg);
+
+            String quote = reply != null ? reply.getText() : msg.getText();
+            if (quote.length() >= 50) {
+                quote = quote.substring(0, 47) + "...";
+            }
+
+            Nickname nick = new Nickname();
+            nick.Nickname = "@" + jmsg.getUser().getUName();
+            xmsg.addChild(nick);
+
+            if (attachmentFName != null) {
+                String fname = mid + "-" + ridnew + "." + attachmentType;
+                String attachmentURL = "http://i.juick.com/photos-1024/" + fname;
+
+                Runtime.getRuntime().exec("/var/www/juick.com/cgi/p-convert.sh /var/www/juick.com/i/tmp/" + attachmentFName + " " + fname);
+
+                body = attachmentURL + "\n" + body;
+                XOOB xoob = new XOOB();
+                xoob.URL = attachmentURL;
+                xmsg.addChild(xoob);
+            }
+
+            xmsg.body = "Reply by @" + jmsg.getUser().getUName() + ":\n>" + quote + "\n" + body + "\n\n#" + mid + "/" + ridnew + " http://juick.com/" + mid + "#" + ridnew;
+
+            xmsg.to = new JID("juick", "s2s.juick.com", null);
+            xmpp.send(xmsg);
+
+            xmsg.to.Host = "ws.juick.com";
+            xmpp.send(xmsg);
+
+            xmsg.to.Host = "push.juick.com";
+            xmpp.send(xmsg);
+        } else {
+            log("XMPP unavailable");
+        }
+        MessageSerializer serializer = new MessageSerializer();
+        Main.replyJSON(request, response, serializer.serialize(jmsg).toString());
+    }
+
     public static void replyJSON(HttpServletRequest request, HttpServletResponse response, String json) throws IOException {
         response.setContentType("application/json; charset=UTF-8");
         response.setHeader("Access-Control-Allow-Origin", "*");
diff --git a/src/main/java/com/juick/api/Utils.java b/src/main/java/com/juick/api/Utils.java
index 6383fec0..7a498a10 100644
--- a/src/main/java/com/juick/api/Utils.java
+++ b/src/main/java/com/juick/api/Utils.java
@@ -18,17 +18,25 @@
 package com.juick.api;
 
 import com.juick.server.UserQueries;
+
+import java.io.FileOutputStream;
 import java.io.IOException;
+import java.io.InputStream;
+import java.net.URL;
+import java.net.URLConnection;
 import java.sql.Connection;
 import java.sql.ResultSet;
 import java.sql.SQLException;
 import java.sql.Statement;
 import java.util.ArrayList;
+import java.util.UUID;
 import java.util.logging.Level;
 import java.util.logging.Logger;
 import javax.servlet.http.Cookie;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.Part;
+
 import org.springframework.jdbc.core.JdbcTemplate;
 import sun.misc.BASE64Decoder;
 
@@ -152,4 +160,83 @@ public class Utils {
         }
         return ret;
     }
+    public static String getPartFilename(Part part) {
+        for (String cd : part.getHeader("content-disposition").split(";")) {
+            if (cd.trim().startsWith("filename")) {
+                String filename = cd.substring(cd.indexOf('=') + 1).trim().replace("\"", "");
+                return filename.substring(filename.lastIndexOf('/') + 1).substring(filename.lastIndexOf('\\') + 1); // MSIE fix.
+            }
+        }
+        return null;
+    }
+    public static String receiveMultiPartFile(HttpServletRequest request, String name) throws Exception {
+        String attachmentFName = null;
+
+        Part filePart = request.getPart("attach");
+        if (filePart != null) {
+            String partname = Utils.getPartFilename(filePart);
+            if (partname != null && partname.length() > 0) {
+                String attachmentType = partname.substring(partname.length() - 3).toLowerCase();
+                if (attachmentType.equals("jpg") || attachmentType.equals("peg") || attachmentType.equals("png")) {
+                    if (attachmentType.equals("peg")) {
+                        attachmentType = "jpg";
+                    }
+                    attachmentFName = UUID.randomUUID().toString() + "." + attachmentType;
+                    filePart.write("/var/www/juick.com/i/tmp/" + attachmentFName);
+                } else {
+                    throw new Exception("Wrong file type");
+                }
+            }
+        }
+
+        return attachmentFName;
+    }
+    public static String downloadImage(URL url) throws Exception {
+        String attachmentFName = null;
+        Exception ex = null;
+
+        InputStream is = null;
+        FileOutputStream fos = null;
+        try {
+            URLConnection urlConn = url.openConnection();
+            is = urlConn.getInputStream();
+            String mime = urlConn.getContentType();
+
+            String attachmentType;
+            if (mime != null && mime.equals("image/jpeg")) {
+                attachmentType = "jpg";
+            } else if (mime != null && mime.equals("image/png")) {
+                attachmentType = "png";
+            } else {
+                throw new Exception("Wrong file type");
+            }
+
+            attachmentFName = UUID.randomUUID().toString() + "." + attachmentType;
+            fos = new FileOutputStream("/var/www/juick.com/i/tmp/" + attachmentFName);
+            byte[] buffer = new byte[10240];
+            int len;
+            while ((len = is.read(buffer)) > 0) {
+                fos.write(buffer, 0, len);
+            }
+        } catch (Exception e) {
+            ex = e;
+            attachmentFName = null;
+        } finally {
+            try {
+                if (is != null) {
+                    is.close();
+                }
+            } finally {
+                if (fos != null) {
+                    fos.close();
+                }
+            }
+        }
+
+        if (ex != null) {
+            throw ex;
+        } else {
+            return attachmentFName;
+        }
+    }
 }