{

/**

private static $_instance = null;

/**

protected static $_oauth_consumer_key = null;

/**

protected static $_oauth_consumer_secret = null;

/**

protected static $_oauth_bearer_token = null;

/**

protected static $_endpoint = 'https://api.twitter.com/1.1/';

/**

protected static $_endpoint_media = 'https://upload.twitter.com/1.1/';

/**

protected static $_endpoint_oauth = 'https://api.twitter.com/';

/**

protected static $_endpoint_old = 'https://api.twitter.com/1/';

/**

protected $_oauth_token = null;

/**

protected $_oauth_token_secret = null;

/**

protected $_return_format = CODEBIRD_RETURNFORMAT_OBJECT;

/**

protected $_supported_media_files = array(IMAGETYPE_GIF, IMAGETYPE_JPEG, IMAGETYPE_PNG);

/**

protected $_version = '2.6.0-dev';

/**

protected $_use_curl = true;

/**

protected $_timeout = 10000;

/**

protected $_connectionTimeout = 3000;

/**

public function __construct()

{

// Pre-define $_use_curl depending on cURL availability

$this->setUseCurl(function_exists('curl_init'));

}

/**

public static function getInstance()

{

if (self::$_instance === null) {

self::$_instance = new self;

}

return self::$_instance;

}

/**

public static function setConsumerKey($key, $secret)

{

self::$_oauth_consumer_key = $key;

self::$_oauth_consumer_secret = $secret;

}

/**

public static function setBearerToken($token)

{

self::$_oauth_bearer_token = $token;

}

/**

public function getVersion()

{

return $this->_version;

}

/**

public function setToken($token, $secret)

{

$this->_oauth_token = $token;

$this->_oauth_token_secret = $secret;

}

/**

public function setUseCurl($use_curl)

{

if ($use_curl && ! function_exists('curl_init')) {

throw new \Exception('To use cURL, the PHP curl extension must be available.');

}

$this->_use_curl = (bool) $use_curl;

}

/**

public function setTimeout($timeout)

{

$this->_timeout = (int) $timeout;

}

/**

public function setConnectionTimeout($timeout)

{

$this->_connectionTimeout = (int) $timeout;

}

/**

public function setReturnFormat($return_format)

{

$this->_return_format = $return_format;

}

/**

public function getApiMethods()

{

static $httpmethods = array(

'GET' => array(

// Timelines

'statuses/mentions_timeline',

'statuses/user_timeline',

'statuses/home_timeline',

'statuses/retweets_of_me',

// Tweets

'statuses/retweets/:id',

'statuses/show/:id',

'statuses/oembed',

'statuses/retweeters/ids',

// Search

'search/tweets',

// Direct Messages

'direct_messages',

'direct_messages/sent',

'direct_messages/show',

// Friends & Followers

'friendships/no_retweets/ids',

'friends/ids',

'followers/ids',

'friendships/lookup',

'friendships/incoming',

'friendships/outgoing',

'friendships/show',

'friends/list',

'followers/list',

'friendships/lookup',

// Users

'account/settings',

'account/verify_credentials',

'blocks/list',

'blocks/ids',

'users/lookup',

'users/show',

'users/search',

'users/contributees',

'users/contributors',

'users/profile_banner',

'mutes/users/ids',

'mutes/users/list',

// Suggested Users

'users/suggestions/:slug',

'users/suggestions',

'users/suggestions/:slug/members',

// Favorites

'favorites/list',

// Lists

'lists/list',

'lists/statuses',

'lists/memberships',

'lists/subscribers',

'lists/subscribers/show',

'lists/members/show',

'lists/members',

'lists/show',

'lists/subscriptions',

'lists/ownerships',

// Saved searches

'saved_searches/list',

'saved_searches/show/:id',

// Places & Geo

'geo/id/:place_id',

'geo/reverse_geocode',

'geo/search',

'geo/similar_places',

// Trends

'trends/place',

'trends/available',

'trends/closest',

// OAuth

'oauth/authenticate',

'oauth/authorize',

// Help

'help/configuration',

'help/languages',

'help/privacy',

'help/tos',

'application/rate_limit_status',

// Tweets

'statuses/lookup',

// Internal

'users/recommendations',

'account/push_destinations/device',

'activity/about_me',

'activity/by_friends',

'statuses/media_timeline',

'timeline/home',

'help/experiments',

'search/typeahead',

'search/universal',

'discover/universal',

'conversation/show',

'statuses/:id/activity/summary',

'account/login_verification_enrollment',

'account/login_verification_request',

'prompts/suggest',

'beta/timelines/custom/list',

'beta/timelines/timeline',

'beta/timelines/custom/show'

),

'POST' => array(

// Tweets

'statuses/destroy/:id',

'statuses/update',

'statuses/retweet/:id',

'statuses/update_with_media',

'media/upload',

// Direct Messages

'direct_messages/destroy',

'direct_messages/new',

// Friends & Followers

'friendships/create',

'friendships/destroy',

'friendships/update',

// Users

'account/settings__post',

'account/update_delivery_device',

'account/update_profile',

'account/update_profile_background_image',

'account/update_profile_colors',

'account/update_profile_image',

'blocks/create',

'blocks/destroy',

'account/update_profile_banner',

'account/remove_profile_banner',

'mutes/users/create',

'mutes/users/destroy',

// Favorites

'favorites/destroy',

'favorites/create',

// Lists

'lists/members/destroy',

'lists/subscribers/create',

'lists/subscribers/destroy',

'lists/members/create_all',

'lists/members/create',

'lists/destroy',

'lists/update',

'lists/create',

'lists/members/destroy_all',

// Saved Searches

'saved_searches/create',

'saved_searches/destroy/:id',

// Spam Reporting

'users/report_spam',

// OAuth

'oauth/access_token',

'oauth/request_token',

'oauth2/token',

'oauth2/invalidate_token',

// Internal

'direct_messages/read',

'account/login_verification_enrollment__post',

'push_destinations/enable_login_verification',

'account/login_verification_request__post',

'beta/timelines/custom/create',

'beta/timelines/custom/update',

'beta/timelines/custom/destroy',

'beta/timelines/custom/add',

'beta/timelines/custom/remove'

)

);

return $httpmethods;

}

/**

public function __call($fn, $params)

{

// parse parameters

$apiparams = array();

if (count($params) > 0) {

if (is_array($params[0])) {

$apiparams = $params[0];

if (! is_array($apiparams)) {

$apiparams = array();

}

} else {

parse_str($params[0], $apiparams);

if (! is_array($apiparams)) {

$apiparams = array();

}

// remove auto-added slashes if on magic quotes steroids

if (get_magic_quotes_gpc()) {

foreach($apiparams as $key => $value) {

if (is_array($value)) {

$apiparams[$key] = array_map('stripslashes', $value);

} else {

$apiparams[$key] = stripslashes($value);

}

}

}

}

}

// stringify null and boolean parameters

foreach ($apiparams as $key => $value) {

if (! is_scalar($value)) {

continue;

}

if (is_null($value)) {

$apiparams[$key] = 'null';

} elseif (is_bool($value)) {

$apiparams[$key] = $value ? 'true' : 'false';

}

}

$app_only_auth = false;

if (count($params) > 1) {

$app_only_auth = !! $params[1];

}

// reset token when requesting a new token (causes 401 for signature error on 2nd+ requests)

if ($fn === 'oauth_requestToken') {

$this->setToken(null, null);

}

// map function name to API method

$method = '';

// replace _ by /

$path = explode('_', $fn);

for ($i = 0; $i < count($path); $i++) {

if ($i > 0) {

$method .= '/';

}

$method .= $path[$i];

}

// undo replacement for URL parameters

$url_parameters_with_underscore = array('screen_name', 'place_id');

foreach ($url_parameters_with_underscore as $param) {

$param = strtoupper($param);

$replacement_was = str_replace('_', '/', $param);

$method = str_replace($replacement_was, $param, $method);

}

// replace AA by URL parameters

$method_template = $method;

$match = array();

if (preg_match('/[A-Z_]{2,}/', $method, $match)) {

foreach ($match as $param) {

$param_l = strtolower($param);

$method_template = str_replace($param, ':' . $param_l, $method_template);

if (! isset($apiparams[$param_l])) {

for ($i = 0; $i < 26; $i++) {

$method_template = str_replace(chr(65 + $i), '_' . chr(97 + $i), $method_template);

}

throw new \Exception(

'To call the templated method "' . $method_template

. '", specify the parameter value for "' . $param_l . '".'

);

}

$method = str_replace($param, $apiparams[$param_l], $method);

unset($apiparams[$param_l]);

}

}

// replace A-Z by _a-z

for ($i = 0; $i < 26; $i++) {

$method = str_replace(chr(65 + $i), '_' . chr(97 + $i), $method);

$method_template = str_replace(chr(65 + $i), '_' . chr(97 + $i), $method_template);

}

$httpmethod = $this->_detectMethod($method_template, $apiparams);

$multipart = $this->_detectMultipart($method_template);

$internal = $this->_detectInternal($method_template);

return $this->_callApi(

$httpmethod,

$method,

$apiparams,

$multipart,

$app_only_auth,

$internal

);

}

/**

/**

public function oauth_authenticate($force_login = NULL, $screen_name = NULL, $type = 'authenticate')

{

if (! in_array($type, array('authenticate', 'authorize'))) {

throw new \Exception('To get the ' . $type . ' URL, use the correct third parameter, or omit it.');

}

if ($this->_oauth_token === null) {

throw new \Exception('To get the ' . $type . ' URL, the OAuth token must be set.');

}

$url = self::$_endpoint_oauth . 'oauth/' . $type . '?oauth_token=' . $this->_url($this->_oauth_token);

if ($force_login) {

$url .= "&force_login=1";

}

if ($screen_name) {

$url .= "&screen_name=" . $screen_name;

}

return $url;

}

/**

public function oauth_authorize($force_login = NULL, $screen_name = NULL)

{

return $this->oauth_authenticate($force_login, $screen_name, 'authorize');

}

/**

public function oauth2_token()

{

if ($this->_use_curl) {

return $this->_oauth2TokenCurl();

}

return $this->_oauth2TokenNoCurl();

}

/**

protected function _oauth2TokenCurl()

{

if (self::$_oauth_consumer_key === null) {

throw new \Exception('To obtain a bearer token, the consumer key must be set.');

}

$post_fields = array(

'grant_type' => 'client_credentials'

);

$url = self::$_endpoint_oauth . 'oauth2/token';

$ch = curl_init($url);

curl_setopt($ch, CURLOPT_POST, 1);

curl_setopt($ch, CURLOPT_POSTFIELDS, $post_fields);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);

curl_setopt($ch, CURLOPT_HEADER, 1);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);

curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);

curl_setopt($ch, CURLOPT_CAINFO, __DIR__ . '/cacert.pem');

curl_setopt($ch, CURLOPT_USERPWD, self::$_oauth_consumer_key . ':' . self::$_oauth_consumer_secret);

curl_setopt($ch, CURLOPT_HTTPHEADER, array(

'Expect:'

));

$result = curl_exec($ch);

// certificate validation results

$validation_result = curl_errno($ch);

$this->_validateSslCertificate($validation_result);

$httpstatus = curl_getinfo($ch, CURLINFO_HTTP_CODE);

$reply = $this->_parseApiReply($result);

$headers = $this->_parseApiReply($result, true);

$rate = $this->_getRateLimitInfo($headers);

switch ($this->_return_format) {

case CODEBIRD_RETURNFORMAT_ARRAY:

$reply['httpstatus'] = $httpstatus;

$reply['rate'] = $rate;

if ($httpstatus === 200) {

self::setBearerToken($reply['access_token']);

}

break;

case CODEBIRD_RETURNFORMAT_JSON:

if ($httpstatus === 200) {

$parsed = json_decode($reply);

self::setBearerToken($parsed->access_token);

}

break;

case CODEBIRD_RETURNFORMAT_OBJECT:

$reply->httpstatus = $httpstatus;

$reply->rate = $rate;

if ($httpstatus === 200) {

self::setBearerToken($reply->access_token);

}

break;

}

return $reply;

}

/**

protected function _oauth2TokenNoCurl()

{

if (self::$_oauth_consumer_key == null) {

throw new \Exception('To obtain a bearer token, the consumer key must be set.');

}

$url = self::$_endpoint_oauth . 'oauth2/token';

$hostname = parse_url($url, PHP_URL_HOST);

$context = stream_context_create(array(

'http' => array(

'method' => 'POST',

'protocol_version' => '1.1',

'header' => "Accept: */*\r\n"

. 'Authorization: Basic '

. base64_encode(

self::$_oauth_consumer_key

. ':'

. self::$_oauth_consumer_secret

),

'timeout' => $this->_timeout / 1000,

'content' => 'grant_type=client_credentials',

'ignore_errors' => true

),

'ssl' => array(

'verify_peer' => true,

'cafile' => __DIR__ . '/cacert.pem',

'verify_depth' => 5,

'peer_name' => $hostname

)

));

$reply = @file_get_contents($url, false, $context);

$headers = $http_response_header;

$result = '';

foreach ($headers as $header) {

$result .= $header . "\r\n";

}

$result .= "\r\n" . $reply;

// find HTTP status

$httpstatus = '500';

$match = array();

if (preg_match('/HTTP\/\d\.\d (\d{3})/', $headers[0], $match)) {

$httpstatus = $match[1];

}

$reply = $this->_parseApiReply($result);

$headers = $this->_parseApiReply($result, true);

$rate = $this->_getRateLimitInfo($headers);

switch ($this->_return_format) {

case CODEBIRD_RETURNFORMAT_ARRAY:

$reply['httpstatus'] = $httpstatus;

$reply['rate'] = $rate;

if ($httpstatus === 200) {

self::setBearerToken($reply['access_token']);

}

break;

case CODEBIRD_RETURNFORMAT_JSON:

if ($httpstatus === 200) {

$parsed = json_decode($reply);

self::setBearerToken($parsed->access_token);

}

break;

case CODEBIRD_RETURNFORMAT_OBJECT:

$reply->httpstatus = $httpstatus;

$reply->rate = $rate;

if ($httpstatus === 200) {

self::setBearerToken($reply->access_token);

}

break;

}

return $reply;

}

/**

/**

protected function _getRateLimitInfo($headers)

{

if (! isset($headers['x-rate-limit-limit'])) {

return null;

}

return array(

'limit' => $headers['x-rate-limit-limit'],

'remaining' => $headers['x-rate-limit-remaining'],

'reset' => $headers['x-rate-limit-reset']

);

}

/**

protected function _validateSslCertificate($validation_result)

{

if (in_array(

$validation_result,

array(

CURLE_SSL_CERTPROBLEM,

CURLE_SSL_CACERT,

CURLE_SSL_CACERT_BADFILE,

CURLE_SSL_CRL_BADFILE,

CURLE_SSL_ISSUER_ERROR

)

)

) {

throw new \Exception(

'Error ' . $validation_result

. ' while validating the Twitter API certificate.'

);

}

}

/**

/**

protected function _url($data)

{

if (is_array($data)) {

return array_map(array(

$this,

'_url'

), $data);

} elseif (is_scalar($data)) {

return str_replace(array(

'+',

'!',

'*',

"'",

'(',

')'

), array(

' ',

'%21',

'%2A',

'%27',

'%28',

'%29'

), rawurlencode($data));

} else {

return '';

}

}

/**

protected function _sha1($data)

{

if (self::$_oauth_consumer_secret === null) {

throw new \Exception('To generate a hash, the consumer secret must be set.');

}

if (!function_exists('hash_hmac')) {

throw new \Exception('To generate a hash, the PHP hash extension must be available.');

}

return base64_encode(hash_hmac(

'sha1',

$data,

self::$_oauth_consumer_secret

. '&'

. ($this->_oauth_token_secret != null

? $this->_oauth_token_secret

: ''

),

true

));

}

/**

protected function _nonce($length = 8)

{

if ($length < 1) {

throw new \Exception('Invalid nonce length.');

}

return substr(md5(microtime(true)), 0, $length);

}

/**

protected function _sign($httpmethod, $method, $params = array(), $append_to_get = false)

{

if (self::$_oauth_consumer_key === null) {

throw new \Exception('To generate a signature, the consumer key must be set.');

}

$sign_params = array(

'consumer_key' => self::$_oauth_consumer_key,

'version' => '1.0',

'timestamp' => time(),

'nonce' => $this->_nonce(),

'signature_method' => 'HMAC-SHA1'

);

$sign_base_params = array();

foreach ($sign_params as $key => $value) {

$sign_base_params['oauth_' . $key] = $this->_url($value);

}

if ($this->_oauth_token != null) {

$sign_base_params['oauth_token'] = $this->_url($this->_oauth_token);

}

$oauth_params = $sign_base_params;

foreach ($params as $key => $value) {

$sign_base_params[$key] = $this->_url($value);

}

ksort($sign_base_params);

$sign_base_string = '';

foreach ($sign_base_params as $key => $value) {

$sign_base_string .= $key . '=' . $value . '&';

}

$sign_base_string = substr($sign_base_string, 0, -1);

$signature = $this->_sha1($httpmethod . '&' . $this->_url($method) . '&' . $this->_url($sign_base_string));

$params = $append_to_get ? $sign_base_params : $oauth_params;

$params['oauth_signature'] = $signature;

$keys = $params;

ksort($keys);

if ($append_to_get) {

$authorization = '';

foreach ($keys as $key => $value) {

$authorization .= $key . '="' . $this->_url($value) . '", ';

}

return authorization.substring(0, authorization.length - 1);

}

$authorization = 'OAuth ';

foreach ($keys as $key => $value) {

$authorization .= $key . "=\"" . $this->_url($value) . "\", ";

}

return substr($authorization, 0, -2);

}

/**

protected function _detectMethod($method, $params)

{

// multi-HTTP method endpoints

switch ($method) {

case 'account/settings':

case 'account/login_verification_enrollment':

case 'account/login_verification_request':

$method = count($params) > 0 ? $method . '__post' : $method;

break;

}

$apimethods = $this->getApiMethods();

foreach ($apimethods as $httpmethod => $methods) {

if (in_array($method, $methods)) {

return $httpmethod;

}

}

throw new \Exception('Can\'t find HTTP method to use for "' . $method . '".');

}

/**