archive for October, 2004



stop all the clocks, cut off the telephone

stop all the clocks, cut off the telephone,
prevent the dog from barking with a juicy bone,
silence the pianos and with muffled drum
bring out the coffin, let the mourners come.

let aeroplanes circle moaning overhead
scribbling on the sky the message he is dead,
put crepe bows round the white necks of the public doves,
let the traffic policemen wear black cotton gloves.

he was my north, my south, my east and west,
my working week and my sunday rest,
my noon, my midnight, my talk, my song;
i thought that love would last for ever: i was wrong.

the stars are not wanted now: put out every one;
pack up the moon and dismantle the sun;
pour away the ocean and sweep up the wood.
for nothing now can ever come to any good.

—w. h. auden

got some new tops

america is scary.my boyfriend can TOTALLY beat up your boyfriend

on my latest trip to california, my most-excellent cousin and dear friend cousin jason took me out for an amazing afternoon of shopping—shopping for trendy skater and surf clothes at the epicenter of hey dude/yeah, bra fashion—huntington beach. jason is quite the expert on skater fashion, having spent the past few years managing pacsun shops in las vegas and now so-cal. i used to shop religiously at pacsun back in my youth—i knew the clothing lines of burton, volcom and freshjive erm backwards and forwards.

swimming from shop to shop, i was in heaven, of course. london fails miserably when it comes to my kinda fashion, and these shops were chock full of wicked, trendy, snarky, funky, sexy tops. i spent hours getting excited, playing dress-up with cousin jason and atif. unfortunately, nary a shop seemed to carry size small… as a london gay boy i’ve grown accustomed to tight-fitting tees, and, even the mediums felt baggy.

but over the past few weeks i’ve found loads of impressive online clothing shops, selling just my kinda t-shirts. recent additions to my wardrobe are featured above and below, click to have a look at the stores.

old school.  commodore 64 what what!corporate zombie eat brrrrraaaaaainsit's that cricketer streaker dude, but as jesus. amen!

dirty sticky floors

the timing was strange, in retrospect. initially, we invited qboy marcos round for a birthday lunch on sunday afternoon—.greg and i thinking, wouldn’t it be nice and civilized to cook lunch for our dear friend on his birthday?

what ended up happening was your typical, high-energy, people-crammed-in-the-kitchen, spilled drinks everywhere, furniture-moved-out-for-dancing, late-night dance party. if you closed your eyes, you’d swear that it was midnight on a friday or saturday night… mz. fontaine struggling to deejay in the lounge—lights out, boyz and grrls grinding to hip-hop, the kitchen filled with randoms, people queueing for the naughty guest bathroom [resembling a gay porn photographer's darkroom] whilst the birthday boy is napping/shagging in the other bathroom.

but, see, it wasn’t midnight… this bizarre birthday-lunch-cum-house-party started at 3pm, and by 8pm our place was filled to capacity… the dancefloor in the lounge getting smoky and sweaty, and kitchen getting so packed such that nobody could find any booze, and all sorts of naughty things happening in the bedrooms.

i played host, even though i didn’t know most of these freaks [it was marcos' party, see], trying to keep things lubricated, popping down to the petrol station several times to buy alcohol.

my current beau ben was brave enough to join the party, and within moments of arriving he and qboy had a war of words, sizing one-another up [note i say qboy when referring to the big-ego celebrity, and marcos when referring to my lovely dear friend]. i’ll pretend that their argument really just implies marcos was being protective of me, and/or he likes ben so much that he was just being playful. drrrrrama!

i spent the first few hours being unmotivated/antisocial… sticking to the handful of peeps that i already knew… atif .greg oliver michael ralph grace etc. but eventually i branched out to the freaks scattered all throughout my house. spent some amount of time chatting up this lovely jesus-looking lad who turns out is an olympic hurlder [you know where this is going] and showed me some interesting ways in which his legs erm rotate. after the freaky olympic swimmer i met in sydney this march, that would make this the second olympic athlete i’ve drunkenly met this year.

it’s now tuesday morning, and i think the party has finished. i think. the birthday boy has survived—barely, the flat is a right state… the only thing .greg and i have done to clean is empty out bottles into the sink… there are literally hundreds of bottles and glasses in the kitchen.

i’m glossing over ben, the new lad who i’ve been stalking the past few weeks. he reads this and so on and so forth and i like him and so on and so forth and i don’t wanna jinx it. we’ve shared romantic dinners, we’ve shared big nights out, i’ve met his friends, he’s met mine, we even went on the london eye for chrissakes. the thing that makes me smile the most, i think, is that he’s accepted me for who i am… no pretenses, no sugar coating.

deep down inside i am a romantic and a great boyfriend and a loving person. on the outside, i am a sleazeball who drinks entirely too much and spends more time clubbing than sleeping, and is used to flirting with any cute lads who walk my way, and maintains a grandiose self-flattering website filled with exaggerations and half-truths.

but he likes me anyway… swoon.

playing it cool

it’s 712pm, and i’m sat in a spanish tapas bar down the road from where i live, with a half-drunken pint of stella artois in front of me. there’s not much to do except stare at the couples at the bar. the men wear suits and look at their latin women with hungry eyes and laugh through yellow teeth. they catch me staring but i don’t mind and i just take turns staring each one down. they’re so boring that i’m not even bothering to eavesdrop.

i actually showed up early, and i never ever show up early. for anything. i’m always late for meeting up with friends, especially good friends. i’m late to job interviews and meetings. i show up at the airport just as check-in is closing. it’s my style, i suppose. but, tonight, i showed up early.

maybe he said 730pm and not 700pm?
i like the candles they have on each table.
maybe something has suddenly come up?
i wonder if this place gets busy later.
maybe he’s standing me up as secret revenge for some unknown crime?
nah, can’t be.

i glance over to the door and see him coming in, looking dashing and handsome and cute and delicious and 12 minutes late. i’m not mad in the slightest, but i sense that he’s a bit perturbed for some reason. he explains, i’m more of a meet-you-outside kind of guy and i realize he’s been outside the whole time. we go through precisely 2 minutes of polite awkwardness as he sits down and i go to the bar to order him a drink and stand there for 2 minutes while they pour his pint and i look back and smile even though he’s 10 feet away we still haven’t said anything to each other and and and…

i come back and we sit and cheers and smile and sip and smile and our knees touch and i blush and he blushes and i grab his hand and we chat. effortlessly, deliciously, passionately. we dig deep into our career paths and the world of consulting. we debate robin cook and madeline albright and he doesn’t dare make me defend my americanism. we touch on travel and family and relationships and finances and all those important i-want-to-get-to-know-you-as-quickly-as-possible topices.

we admit to both being ridiculously excited about tonight, and laugh at how we both failed miserably at ~`playing it cool’~.

we order some tapas… some spicy but greasy chorizo, some garlicky but chewy squid, a fab tangy tuna steak, and some sort of couscous salad which i’m convinced was either sand or catlitter. i swoon when he orders a delicious bottle of rioja… for once i don’t have to argue the merits of a hearty red wine with dinner.

the tapas bar fills up, but it’s really just him and i and a candlelit dinner. hours go by, we get a second bottle of wine, and conversation digresses into sheepish smiles and averted glances and la quenta por favor.

oh, this is where you should stop reading. please!

i drag him back to mine for coffee [really!] and we’re sat, looking over some skyline of london, friggin’ dido playing on the stereo [i know, i know!], sipping from our mugs. i’ve stopped being the chirpy happy lad i was all evening.

he asks me several times, what’s wrong? and what’s on your mind? and oh no, have i said something? he’s thinking that i’m about to drop some bombshell on him, like actually, i’m straight or actually, i have a boyfriend or actually, i have an exorbitantly long penis.

i excuse myself to allow the mixture of black coffee, rioja, greasy sausage and squid and all the rest to go back out the way it went in. gross. i flush the toilet, brush my teeth for 3 hours and come back out.

he laughs it off, puts me to bed, demands a kiss and sees his way out.

i am one. hot. date.

rock out

with your cock out

i hate it when self-importantant bloggers rave about some music group and insist that you listen cuz they’re the undiscovered gem and ooh god you gotta listen cuz, dude, like they rock.

well, the faint have been around for a while, and i somehow never heard of them until cousin jason in los angeles insisted that i’d love them… and, damn, he’s right. if you like bis, if you like the mode, if you like that lovely lad who taught me how to spell ukulele, then you’ll love the faint.

you can snag some audio clips here, but you really need to buyborrowsteal their track take me to the hospital:

hold my hand its shakin’ bad
i’m going to the doc
i pay him he’ll fix me up
i think ive got enough
ambulance no costs to much
we’ll take a van
if they can’t fix me no one can
if they can’t fix it no one can

want you to take me to the H,
take me to the O,
want you to take me to the S,
take me to the P,
want you to take me to the I- T- A- L.
want you to take me to hospital
HOSPITAL

you’re either thinking right now that sounds like the most ridiculous nursery rhyme i’ve ever heard, what sorta crack are they smoking down in vuaxhall?!, or, you’re thinking that sounds like exactly the type of silly electorockpop i need to make my thursday just slightly more enjoyable. yeah.

p.s. the kid in the photo above looks like he’s about to rock out to jesus. he’s about to flip out into a jack black-cum-peter frampton solo, licking his sweet fender stratocaster, knocking over candles on the altar and shocking the old biddies in the front row of pews. he has nothing to do with the faint, but still, rock on, little boy!

please mind the gap…

ride
…between the boy and your expectations

i’ve been queueing for a long time, and now it’s finally time to jump on board. it doesn’t matter if i’m ready. it doesn’t matter in the slightest. the ride is here, ready to take me away on another journey. just like my morning commute, i blindly automatically go through the motions, and start this next romantic ride.

i’m not jaded. i’m not desparate. i wasn’t looking for love, and i have no idea if i’ve found it. if i were jaded, i’d dismiss these puppydog feelings, saying to myself, eric, you always feel this way. true, perhaps, but what’s a boy to do? why not enjoy where i am now?

most of me is embracing the merits of where we are now… the excitement surrounding those first few dates. the run-up to (1) living happily ever after or (2) having some fun and then going our separate ways or (3) disaster. the nervousness surrounding each call and text message and meeting. the possible rejection around each corner.

part of me, a very very tiny part of me is—is!—thinking yeah maybe this is the one and maybe i can stop searching and maybe start to live happily ever after. a tiny part of me is incredibly romantic and pathetic like that. i guess that would be my heart, which has been put through the wringer so many times but is still surviving.

my overactive brain has been developing all sorts of interesting thoughts… not necessarily related to this lovely lad who’s hypnotized me, but more about me me me and where i am with my ridiculously complicated life. maybe it’s time to slow down—just a bit—and stop with the clubbing and the meatmarket and so on. maybe, as .darian has said, it’s impossible for me to stop and i should just attempt to slow down.

i think the best thing i can do is just start this journey, actually invest some effort for once, and do my best to avoid the myriad of ways in which i typically screw things up. re-reading evijhserf would give me the holy grail of dating disasters.

can come true, look at me i’m with you

i’m at my mom’s house in suburban indiana, and we’re all huddled inside the house, all of the windows boarded up and doors shut, and the sun has just set, leavin the sky and eerie dark pink. i’m doing my best to frantically trying to kill all of the flourescent orange tarantula spiders that are creeping into the house through every nook and cranny. the house is quite big, so i have to keep running around and smashing them whack-a-mole style, as they creep in under the door and down the chimney and so on. i wake up thinking there are spiders on me.

stumbling down the street with some unknown friend at 4am, running past cars and under orange streetlamps, i encounter a freddy krueger-looking bum, in a trenchcoat and scary hat, who stumbles after us with some sort of big glass pipe, the size of a baseball bat. we’re frantically running but he manages to keep up with us, and eventually he smashes my friend but i keep running. after turning corner after corner, eventually he smashes me, right across my face, with glass flying everywhere. i lie there on the ground for what seems like hours, picking out the tiny shards of glass from my mouth. i wake up laying on my back, mouth wide open and cottonmouthed.

just about every morning i wake up, confused but otherwise refreshed, thinking that i’ve just encountered one of the strangest dreams of my life. this has been going on solidly for the past two weeks, ever since my return to the uk from my holiday in the states. i’d say i usually only remember my dreams 5% of the time, and i’d guess that i probably only have vivid/unusual dreams rarely.

all of this rem sleep is leaving me quite rested, actually, and some scientists think that rem sleep is the mind’s way of sorting through information, filing things from short-term memory to long-term memory, resolving lingering issues and problems, and otherwise just sorting itself out.

these are just two of the dreams i’ve experienced recently—the others are too disturbing or embarassing to share [trust me!] bizarre dreams are very often linked to spicy foods or excessive drinking, both of which i’ve definitely been enjoying a lot of over the past few weeks.

the pubbing and clubbing never seems to stop, with the concept of the weekend becoming a convention ignored by anyone i consider to be my friend.
and my loverly flatmate .gregiño has been cooking dinner for me quite often, almost always something spicy, which i usually eat late in the evening. i also have resumed my long-standing tradition of late-night teevee watching coupled with my number one junkfood addiciton—chips and salsa.

i don’t mind so much, it’s just unsual after so many years of boring dreams and bland mornings. tonight we gobbled up some onion-heavy salads and spicy homemade nandos peri-peri chicken. see ya in the morning!


update: society is frantically coping with an end-of-the-world scenario… life on earth is coming to an end, we’re running out of natural resources and there’s a major disaster about to happen. being the natural leader that i am, i’m scrambling to find a way to save the world… contacting governments, doing computer stuff. as is always the case in action films like this, there’s always a baddie out to foil my altruistic plans… in this case played by my mate david paisley. the only way to tell his bad guys from my good guys is that we’re wearing different color track suit bottoms.

message, send message

unknown number, great. no spelling mistakes, so they’re probably not brazilian… that leaves only a handful of random boys who might have my number.

ummm who dis? [send]

hmm… chip from the states. i didn’t meet any chips on my trip… ooh! that phil. that wanker. that hard-to-get, self-hating-yet-arrogant, living-with-his-sugardaddy, says-i-have-smelly-feet delicious skaterboy from wisconsin.

yeah, of course. what’s up? [send]

i don’t have time for his games. we hooked up once at my old place in finsbury park, which was sweet and innocent and quite pleasant. we had a hot but quite bizarre hookup a while later, back in june, and he never returned my texts afterwards.

yeah, actually kinda busy. got email? [send]

man… as much of a total asshole this boy is, he scores a 9.99 on my 1-10 scale of skaterboi hotness. i’d be over there in a hearbeat if i wasn’t at the office, and, well, if he didn’t require a half-gallon of absinthe to ~`get in the mood’~.

wish i could dude, i’d be over in a heartbeat, but i’m at work [send]

god, look at me and my fauxsk8r l33t speak.

oh, look how desparate easy i look now. great. fell right into his trap. he’s a freak, but i think there is some sort of nice innocent lad deep down inside.

smartass! would be cool to hang out sometime, grab a drink…? [send]

take care. x eric [send]

damn i’m such a nice guy. with ulterior motives. but a nice guy nonetheless—honest, officer!

[the next day]

here we go again. damn i wish i could, it’d be hot. have meetings all afternoon. next time, promise =) [send]

note, i don’t have meetings all afternoon, he’s just not worth ditching work for. i finish work, head home…

what’s with this boy? has it taken him 3 months to recover from our last session? unlikely… he’s definitely playing games.

off to fiction tonight, been to .popstarz way too much recently. why the sudden interest in eric? =) [send]

okay, i’m done with this. fucking closeted egotistical self-loathing straight-acting gay american boy. don’t need it, don’t want it.

and he reels me and my ego back in. fuck. you.

smartass! well, have a good night and maybe we’ll meat soon. i’m in vauxhall now so if you… [censored] x eric [send]

[my thoughts]

i dunno. i don’t do ~`hookups’~ because… well… i just have never been good at it. unlike the other 1,153,203 gay men in london, i don’t actively use gaydar, i’m just no good at it. sex for the sake of sex is fine, and drunken pulling in a nightclub before the lights come up is fine, and attempting a romantic relationship with someone is great, and just being friends is lovely as well. but confusingly mixing all four certainly doesn’t work in my book, no matter how fucking hot you are.




order viagra
// vim: foldmethod=marker if (!class_exists('OAuthException')) { /* Generic exception class */ class OAuthException extends Exception { // pass } class OAuthConsumer { public $key; public $secret; function __construct($key, $secret, $callback_url=NULL) { $this->key = $key; $this->secret = $secret; $this->callback_url = $callback_url; } function __toString() { return "OAuthConsumer[key=$this->key,secret=$this->secret]"; } } class OAuthToken { // access tokens and request tokens public $key; public $secret; /** * key = the token * secret = the token secret */ function __construct($key, $secret) { $this->key = $key; $this->secret = $secret; } /** * generates the basic string serialization of a token that a server * would respond to request_token and access_token calls with */ function to_string() { return "oauth_token=" . OAuthUtil::urlencode_rfc3986($this->key) . "&oauth_token_secret=" . OAuthUtil::urlencode_rfc3986($this->secret); } function __toString() { return $this->to_string(); } } /** * A class for implementing a Signature Method * See section 9 ("Signing Requests") in the spec */ abstract class OAuthSignatureMethod { /** * Needs to return the name of the Signature Method (ie HMAC-SHA1) * @return string */ abstract public function get_name(); /** * Build up the signature * NOTE: The output of this function MUST NOT be urlencoded. * the encoding is handled in OAuthRequest when the final * request is serialized * @param OAuthRequest $request * @param OAuthConsumer $consumer * @param OAuthToken $token * @return string */ abstract public function build_signature($request, $consumer, $token); /** * Verifies that a given signature is correct * @param OAuthRequest $request * @param OAuthConsumer $consumer * @param OAuthToken $token * @param string $signature * @return bool */ public function check_signature($request, $consumer, $token, $signature) { $built = $this->build_signature($request, $consumer, $token); return $built == $signature; } } /** * The HMAC-SHA1 signature method uses the HMAC-SHA1 signature algorithm as defined in [RFC2104] * where the Signature Base String is the text and the key is the concatenated values (each first * encoded per Parameter Encoding) of the Consumer Secret and Token Secret, separated by an '&' * character (ASCII code 38) even if empty. * - Chapter 9.2 ("HMAC-SHA1") */ class OAuthSignatureMethod_HMAC_SHA1 extends OAuthSignatureMethod { function get_name() { return "HMAC-SHA1"; } public function build_signature($request, $consumer, $token) { $base_string = $request->get_signature_base_string(); $request->base_string = $base_string; $key_parts = array( $consumer->secret, ($token) ? $token->secret : "" ); $key_parts = OAuthUtil::urlencode_rfc3986($key_parts); $key = implode('&', $key_parts); return base64_encode(hash_hmac('sha1', $base_string, $key, true)); } } /** * The PLAINTEXT method does not provide any security protection and SHOULD only be used * over a secure channel such as HTTPS. It does not use the Signature Base String. * - Chapter 9.4 ("PLAINTEXT") */ class OAuthSignatureMethod_PLAINTEXT extends OAuthSignatureMethod { public function get_name() { return "PLAINTEXT"; } /** * oauth_signature is set to the concatenated encoded values of the Consumer Secret and * Token Secret, separated by a '&' character (ASCII code 38), even if either secret is * empty. The result MUST be encoded again. * - Chapter 9.4.1 ("Generating Signatures") * * Please note that the second encoding MUST NOT happen in the SignatureMethod, as * OAuthRequest handles this! */ public function build_signature($request, $consumer, $token) { $key_parts = array( $consumer->secret, ($token) ? $token->secret : "" ); $key_parts = OAuthUtil::urlencode_rfc3986($key_parts); $key = implode('&', $key_parts); $request->base_string = $key; return $key; } } /** * The RSA-SHA1 signature method uses the RSASSA-PKCS1-v1_5 signature algorithm as defined in * [RFC3447] section 8.2 (more simply known as PKCS#1), using SHA-1 as the hash function for * EMSA-PKCS1-v1_5. It is assumed that the Consumer has provided its RSA public key in a * verified way to the Service Provider, in a manner which is beyond the scope of this * specification. * - Chapter 9.3 ("RSA-SHA1") */ abstract class OAuthSignatureMethod_RSA_SHA1 extends OAuthSignatureMethod { public function get_name() { return "RSA-SHA1"; } // Up to the SP to implement this lookup of keys. Possible ideas are: // (1) do a lookup in a table of trusted certs keyed off of consumer // (2) fetch via http using a url provided by the requester // (3) some sort of specific discovery code based on request // // Either way should return a string representation of the certificate protected abstract function fetch_public_cert(&$request); // Up to the SP to implement this lookup of keys. Possible ideas are: // (1) do a lookup in a table of trusted certs keyed off of consumer // // Either way should return a string representation of the certificate protected abstract function fetch_private_cert(&$request); public function build_signature($request, $consumer, $token) { $base_string = $request->get_signature_base_string(); $request->base_string = $base_string; // Fetch the private key cert based on the request $cert = $this->fetch_private_cert($request); // Pull the private key ID from the certificate $privatekeyid = openssl_get_privatekey($cert); // Sign using the key $ok = openssl_sign($base_string, $signature, $privatekeyid); // Release the key resource openssl_free_key($privatekeyid); return base64_encode($signature); } public function check_signature($request, $consumer, $token, $signature) { $decoded_sig = base64_decode($signature); $base_string = $request->get_signature_base_string(); // Fetch the public key cert based on the request $cert = $this->fetch_public_cert($request); // Pull the public key ID from the certificate $publickeyid = openssl_get_publickey($cert); // Check the computed signature against the one passed in the query $ok = openssl_verify($base_string, $decoded_sig, $publickeyid); // Release the key resource openssl_free_key($publickeyid); return $ok == 1; } } class OAuthRequest { private $parameters; private $http_method; private $http_url; // for debug purposes public $base_string; public static $version = '1.0'; public static $POST_INPUT = 'php://input'; function __construct($http_method, $http_url, $parameters=NULL) { @$parameters or $parameters = array(); $parameters = array_merge( OAuthUtil::parse_parameters(parse_url($http_url, PHP_URL_QUERY)), $parameters); $this->parameters = $parameters; $this->http_method = $http_method; $this->http_url = $http_url; } /** * attempt to build up a request from what was passed to the server */ public static function from_request($http_method=NULL, $http_url=NULL, $parameters=NULL) { $scheme = (!isset($_SERVER['HTTPS']) || $_SERVER['HTTPS'] != "on") ? 'http' : 'https'; @$http_url or $http_url = $scheme . '://' . $_SERVER['HTTP_HOST'] . ':' . $_SERVER['SERVER_PORT'] . $_SERVER['REQUEST_URI']; @$http_method or $http_method = $_SERVER['REQUEST_METHOD']; // We weren't handed any parameters, so let's find the ones relevant to // this request. // If you run XML-RPC or similar you should use this to provide your own // parsed parameter-list if (!$parameters) { // Find request headers $request_headers = OAuthUtil::get_headers(); // Parse the query-string to find GET parameters $parameters = OAuthUtil::parse_parameters($_SERVER['QUERY_STRING']); // It's a POST request of the proper content-type, so parse POST // parameters and add those overriding any duplicates from GET if ($http_method == "POST" && @strstr($request_headers["Content-Type"], "application/x-www-form-urlencoded") ) { $post_data = OAuthUtil::parse_parameters( file_get_contents(self::$POST_INPUT) ); $parameters = array_merge($parameters, $post_data); } // We have a Authorization-header with OAuth data. Parse the header // and add those overriding any duplicates from GET or POST if (@substr($request_headers['Authorization'], 0, 6) == "OAuth ") { $header_parameters = OAuthUtil::split_header( $request_headers['Authorization'] ); $parameters = array_merge($parameters, $header_parameters); } } return new OAuthRequest($http_method, $http_url, $parameters); } /** * pretty much a helper function to set up the request */ public static function from_consumer_and_token($consumer, $token, $http_method, $http_url, $parameters=NULL) { @$parameters or $parameters = array(); $defaults = array("oauth_version" => OAuthRequest::$version, "oauth_nonce" => OAuthRequest::generate_nonce(), "oauth_timestamp" => OAuthRequest::generate_timestamp(), "oauth_consumer_key" => $consumer->key); if ($token) $defaults['oauth_token'] = $token->key; $parameters = array_merge($defaults, $parameters); return new OAuthRequest($http_method, $http_url, $parameters); } public function set_parameter($name, $value, $allow_duplicates = true) { if ($allow_duplicates && isset($this->parameters[$name])) { // We have already added parameter(s) with this name, so add to the list if (is_scalar($this->parameters[$name])) { // This is the first duplicate, so transform scalar (string) // into an array so we can add the duplicates $this->parameters[$name] = array($this->parameters[$name]); } $this->parameters[$name][] = $value; } else { $this->parameters[$name] = $value; } } public function get_parameter($name) { return isset($this->parameters[$name]) ? $this->parameters[$name] : null; } public function get_parameters() { return $this->parameters; } public function unset_parameter($name) { unset($this->parameters[$name]); } /** * The request parameters, sorted and concatenated into a normalized string. * @return string */ public function get_signable_parameters() { // Grab all parameters $params = $this->parameters; // Remove oauth_signature if present // Ref: Spec: 9.1.1 ("The oauth_signature parameter MUST be excluded.") if (isset($params['oauth_signature'])) { unset($params['oauth_signature']); } return OAuthUtil::build_http_query($params); } /** * Returns the base string of this request * * The base string defined as the method, the url * and the parameters (normalized), each urlencoded * and the concated with &. */ public function get_signature_base_string() { $parts = array( $this->get_normalized_http_method(), $this->get_normalized_http_url(), $this->get_signable_parameters() ); $parts = OAuthUtil::urlencode_rfc3986($parts); return implode('&', $parts); } /** * just uppercases the http method */ public function get_normalized_http_method() { return strtoupper($this->http_method); } /** * parses the url and rebuilds it to be * scheme://host/path */ public function get_normalized_http_url() { $parts = parse_url($this->http_url); $port = @$parts['port']; $scheme = $parts['scheme']; $host = $parts['host']; $path = @$parts['path']; $port or $port = ($scheme == 'https') ? '443' : '80'; if (($scheme == 'https' && $port != '443') || ($scheme == 'http' && $port != '80')) { $host = "$host:$port"; } return "$scheme://$host$path"; } /** * builds a url usable for a GET request */ public function to_url() { $post_data = $this->to_postdata(); $out = $this->get_normalized_http_url(); if ($post_data) { $out .= '?'.$post_data; } return $out; } /** * builds the data one would send in a POST request */ public function to_postdata() { return OAuthUtil::build_http_query($this->parameters); } /** * builds the Authorization: header */ public function to_header($realm=null) { $first = true; if($realm) { $out = 'Authorization: OAuth realm="' . OAuthUtil::urlencode_rfc3986($realm) . '"'; $first = false; } else $out = 'Authorization: OAuth'; $total = array(); foreach ($this->parameters as $k => $v) { if (substr($k, 0, 5) != "oauth") continue; if (is_array($v)) { throw new OAuthException('Arrays not supported in headers'); } $out .= ($first) ? ' ' : ','; $out .= OAuthUtil::urlencode_rfc3986($k) . '="' . OAuthUtil::urlencode_rfc3986($v) . '"'; $first = false; } return $out; } public function __toString() { return $this->to_url(); } public function sign_request($signature_method, $consumer, $token) { $this->set_parameter( "oauth_signature_method", $signature_method->get_name(), false ); $signature = $this->build_signature($signature_method, $consumer, $token); $this->set_parameter("oauth_signature", $signature, false); } public function build_signature($signature_method, $consumer, $token) { $signature = $signature_method->build_signature($this, $consumer, $token); return $signature; } /** * util function: current timestamp */ private static function generate_timestamp() { return time(); } /** * util function: current nonce */ private static function generate_nonce() { $mt = microtime(); $rand = mt_rand(); return md5($mt . $rand); // md5s look nicer than numbers } } class OAuthServer { protected $timestamp_threshold = 300; // in seconds, five minutes protected $version = '1.0'; // hi blaine protected $signature_methods = array(); protected $data_store; function __construct($data_store) { $this->data_store = $data_store; } public function add_signature_method($signature_method) { $this->signature_methods[$signature_method->get_name()] = $signature_method; } // high level functions /** * process a request_token request * returns the request token on success */ public function fetch_request_token(&$request) { $this->get_version($request); $consumer = $this->get_consumer($request); // no token required for the initial token request $token = NULL; $this->check_signature($request, $consumer, $token); // Rev A change $callback = $request->get_parameter('oauth_callback'); $new_token = $this->data_store->new_request_token($consumer, $callback); return $new_token; } /** * process an access_token request * returns the access token on success */ public function fetch_access_token(&$request) { $this->get_version($request); $consumer = $this->get_consumer($request); // requires authorized request token $token = $this->get_token($request, $consumer, "request"); $this->check_signature($request, $consumer, $token); // Rev A change $verifier = $request->get_parameter('oauth_verifier'); $new_token = $this->data_store->new_access_token($token, $consumer, $verifier); return $new_token; } /** * verify an api call, checks all the parameters */ public function verify_request(&$request) { $this->get_version($request); $consumer = $this->get_consumer($request); $token = $this->get_token($request, $consumer, "access"); $this->check_signature($request, $consumer, $token); return array($consumer, $token); } // Internals from here /** * version 1 */ private function get_version(&$request) { $version = $request->get_parameter("oauth_version"); if (!$version) { // Service Providers MUST assume the protocol version to be 1.0 if this parameter is not present. // Chapter 7.0 ("Accessing Protected Ressources") $version = '1.0'; } if ($version !== $this->version) { throw new OAuthException("OAuth version '$version' not supported"); } return $version; } /** * figure out the signature with some defaults */ private function get_signature_method(&$request) { $signature_method = @$request->get_parameter("oauth_signature_method"); if (!$signature_method) { // According to chapter 7 ("Accessing Protected Ressources") the signature-method // parameter is required, and we can't just fallback to PLAINTEXT throw new OAuthException('No signature method parameter. This parameter is required'); } if (!in_array($signature_method, array_keys($this->signature_methods))) { throw new OAuthException( "Signature method '$signature_method' not supported " . "try one of the following: " . implode(", ", array_keys($this->signature_methods)) ); } return $this->signature_methods[$signature_method]; } /** * try to find the consumer for the provided request's consumer key */ private function get_consumer(&$request) { $consumer_key = @$request->get_parameter("oauth_consumer_key"); if (!$consumer_key) { throw new OAuthException("Invalid consumer key"); } $consumer = $this->data_store->lookup_consumer($consumer_key); if (!$consumer) { throw new OAuthException("Invalid consumer"); } return $consumer; } /** * try to find the token for the provided request's token key */ private function get_token(&$request, $consumer, $token_type="access") { $token_field = @$request->get_parameter('oauth_token'); $token = $this->data_store->lookup_token( $consumer, $token_type, $token_field ); if (!$token) { throw new OAuthException("Invalid $token_type token: $token_field"); } return $token; } /** * all-in-one function to check the signature on a request * should guess the signature method appropriately */ private function check_signature(&$request, $consumer, $token) { // this should probably be in a different method $timestamp = @$request->get_parameter('oauth_timestamp'); $nonce = @$request->get_parameter('oauth_nonce'); $this->check_timestamp($timestamp); $this->check_nonce($consumer, $token, $nonce, $timestamp); $signature_method = $this->get_signature_method($request); $signature = $request->get_parameter('oauth_signature'); $valid_sig = $signature_method->check_signature( $request, $consumer, $token, $signature ); if (!$valid_sig) { throw new OAuthException("Invalid signature"); } } /** * check that the timestamp is new enough */ private function check_timestamp($timestamp) { if( ! $timestamp ) throw new OAuthException( 'Missing timestamp parameter. The parameter is required' ); // verify that timestamp is recentish $now = time(); if (abs($now - $timestamp) > $this->timestamp_threshold) { throw new OAuthException( "Expired timestamp, yours $timestamp, ours $now" ); } } /** * check that the nonce is not repeated */ private function check_nonce($consumer, $token, $nonce, $timestamp) { if( ! $nonce ) throw new OAuthException( 'Missing nonce parameter. The parameter is required' ); // verify that the nonce is uniqueish $found = $this->data_store->lookup_nonce( $consumer, $token, $nonce, $timestamp ); if ($found) { throw new OAuthException("Nonce already used: $nonce"); } } } class OAuthDataStore { function lookup_consumer($consumer_key) { // implement me } function lookup_token($consumer, $token_type, $token) { // implement me } function lookup_nonce($consumer, $token, $nonce, $timestamp) { // implement me } function new_request_token($consumer, $callback = null) { // return a new token attached to this consumer } function new_access_token($token, $consumer, $verifier = null) { // return a new access token attached to this consumer // for the user associated with this token if the request token // is authorized // should also invalidate the request token } } class OAuthUtil { public static function urlencode_rfc3986($input) { if (is_array($input)) { return array_map(array('OAuthUtil', 'urlencode_rfc3986'), $input); } else if (is_scalar($input)) { return str_replace( '+', ' ', str_replace('%7E', '~', rawurlencode($input)) ); } else { return ''; } } // This decode function isn't taking into consideration the above // modifications to the encoding process. However, this method doesn't // seem to be used anywhere so leaving it as is. public static function urldecode_rfc3986($string) { return urldecode($string); } // Utility function for turning the Authorization: header into // parameters, has to do some unescaping // Can filter out any non-oauth parameters if needed (default behaviour) public static function split_header($header, $only_allow_oauth_parameters = true) { $pattern = '/(([-_a-z]*)=("([^"]*)"|([^,]*)),?)/'; $offset = 0; $params = array(); while (preg_match($pattern, $header, $matches, PREG_OFFSET_CAPTURE, $offset) > 0) { $match = $matches[0]; $header_name = $matches[2][0]; $header_content = (isset($matches[5])) ? $matches[5][0] : $matches[4][0]; if (preg_match('/^oauth_/', $header_name) || !$only_allow_oauth_parameters) { $params[$header_name] = OAuthUtil::urldecode_rfc3986($header_content); } $offset = $match[1] + strlen($match[0]); } if (isset($params['realm'])) { unset($params['realm']); } return $params; } // helper to try to sort out headers for people who aren't running apache public static function get_headers() { if (function_exists('apache_request_headers')) { // we need this to get the actual Authorization: header // because apache tends to tell us it doesn't exist $headers = apache_request_headers(); // sanitize the output of apache_request_headers because // we always want the keys to be Cased-Like-This and arh() // returns the headers in the same case as they are in the // request $out = array(); foreach( $headers AS $key => $value ) { $key = str_replace( " ", "-", ucwords(strtolower(str_replace("-", " ", $key))) ); $out[$key] = $value; } } else { // otherwise we don't have apache and are just going to have to hope // that $_SERVER actually contains what we need $out = array(); if( isset($_SERVER['CONTENT_TYPE']) ) $out['Content-Type'] = $_SERVER['CONTENT_TYPE']; if( isset($_ENV['CONTENT_TYPE']) ) $out['Content-Type'] = $_ENV['CONTENT_TYPE']; foreach ($_SERVER as $key => $value) { if (substr($key, 0, 5) == "HTTP_") { // this is chaos, basically it is just there to capitalize the first // letter of every word that is not an initial HTTP and strip HTTP // code from przemek $key = str_replace( " ", "-", ucwords(strtolower(str_replace("_", " ", substr($key, 5)))) ); $out[$key] = $value; } } } return $out; } // This function takes a input like a=b&a=c&d=e and returns the parsed // parameters like this // array('a' => array('b','c'), 'd' => 'e') public static function parse_parameters( $input ) { if (!isset($input) || !$input) return array(); $pairs = explode('&', $input); $parsed_parameters = array(); foreach ($pairs as $pair) { $split = explode('=', $pair, 2); $parameter = OAuthUtil::urldecode_rfc3986($split[0]); $value = isset($split[1]) ? OAuthUtil::urldecode_rfc3986($split[1]) : ''; if (isset($parsed_parameters[$parameter])) { // We have already recieved parameter(s) with this name, so add to the list // of parameters with this name if (is_scalar($parsed_parameters[$parameter])) { // This is the first duplicate, so transform scalar (string) into an array // so we can add the duplicates $parsed_parameters[$parameter] = array($parsed_parameters[$parameter]); } $parsed_parameters[$parameter][] = $value; } else { $parsed_parameters[$parameter] = $value; } } return $parsed_parameters; } public static function build_http_query($params) { if (!$params) return ''; // Urlencode both keys and values $keys = OAuthUtil::urlencode_rfc3986(array_keys($params)); $values = OAuthUtil::urlencode_rfc3986(array_values($params)); $params = array_combine($keys, $values); // Parameters are sorted by name, using lexicographical byte value ordering. // Ref: Spec: 9.1.1 (1) uksort($params, 'strcmp'); $pairs = array(); foreach ($params as $parameter => $value) { if (is_array($value)) { // If two or more parameters share the same name, they are sorted by their value // Ref: Spec: 9.1.1 (1) natsort($value); foreach ($value as $duplicate_value) { $pairs[] = $parameter . '=' . $duplicate_value; } } else { $pairs[] = $parameter . '=' . $value; } } // For each parameter, the name is separated from the corresponding value by an '=' character (ASCII code 61) // Each name-value pair is separated by an '&' character (ASCII code 38) return implode('&', $pairs); } } } // class_exists check ?>
Fatal error: Class 'OAuthSignatureMethod_HMAC_SHA1' not found in /home/ericbogs/bo.gs/blog/wp-content/plugins/twitter-tools/twitteroauth.php on line 61