friendica/mod/xrd.php

<?php

require_once('salmon.php');
require_once('certfns.php');

function xrd_content(&$a) {

	$uri = urldecode(notags(trim($_GET['uri'])));

	if(substr($uri,0,4) === 'http')
		$name = basename($uri);
	else {
		$local = str_replace('acct:', '', $uri);
		if(substr($local,0,2) == '//')
			$local = substr($local,2);

		$name = substr($local,0,strpos($local,'@'));
	}

	$r = q("SELECT * FROM `user` WHERE `nickname` = '%s' LIMIT 1",
		dbesc($name)
	);
	if(! count($r))
		killme();

	$salmon_key = str_replace('=','',salmon_key($r[0]['spubkey']));

	header('Access-Control-Allow-Origin: *');
	header("Content-type: text/xml");

	$dspr_enabled = get_config('system','diaspora_enabled');

	if($dspr_enabled) {
		$tpl = file_get_contents('view/xrd_diaspora.tpl');
		$dspr = replace_macros($tpl,array(
			'$baseurl' => $a->get_baseurl(),
			'$dspr_guid' => $r[0]['guid'],
			'$dspr_key' => base64_encode(pemtorsa($r[0]['pubkey']))
		));
	}
	else
		$dspr = '';


	$tpl = file_get_contents('view/xrd_person.tpl');

	$o = replace_macros($tpl, array(
		'$accturi'     => $uri,
		'$profile_url' => $a->get_baseurl() . '/profile/'       . $r[0]['nickname'],
		'$hcard_url'   => $a->get_baseurl() . '/hcard/'         . $r[0]['nickname'],
		'$atom'        => $a->get_baseurl() . '/dfrn_poll/'     . $r[0]['nickname'],
		'$photo'       => $a->get_baseurl() . '/photo/profile/' . $r[0]['uid']      . '.jpg',
		'$dspr'        => $dspr,
		'$salmon'      => $a->get_baseurl() . '/salmon/'        . $r[0]['nickname'],
		'$salmen'      => $a->get_baseurl() . '/salmon/'        . $r[0]['nickname'] . '/mention',
		'$modexp'      => 'data:application/magic-public-key,'  . $salmon_key
	));


	$arr = array('user' => $r[0], 'xml' => $o);
	call_hooks('personal_xrd', $arr);

	echo $o;
	killme();

}