From edc93fd13e5f038f4297b9ce2142442bef4ced88 Mon Sep 17 00:00:00 2001
From: Maxim Leshchenko <cnmaks90@gmail.com>
Date: Fri, 12 Nov 2021 20:08:06 +0200
Subject: [PATCH] Add configurable limit on the depth of likes

---
 Web/Models/Entities/Post.php | 44 ++++++++++++++++++++----------------
 quirks.yml                   | 10 ++++++++
 2 files changed, 34 insertions(+), 20 deletions(-)

diff --git a/Web/Models/Entities/Post.php b/Web/Models/Entities/Post.php
index 03385736..17c096fa 100644
--- a/Web/Models/Entities/Post.php
+++ b/Web/Models/Entities/Post.php
@@ -9,6 +9,27 @@ class Post extends Postable
 {
     protected $tableName = "posts";
     protected $upperNodeReferenceColumnName = "wall";
+
+    private function setLikeRecursively(bool $liked, User $user, int $depth): void
+    {
+        $searchData = [
+            "origin" => $user->getId(),
+            "model"  => static::class,
+            "target" => $this->getRecord()->id,
+        ];
+
+        if((sizeof(DB::i()->getContext()->table("likes")->where($searchData)) > 0) !== $liked) {
+            if($this->getOwner(false)->getId() !== $user->getId() && !($this->getOwner() instanceof Club))
+                (new LikeNotification($this->getOwner(false), $this, $user))->emit();
+
+            parent::setLike($liked, $user);
+        }
+
+        if($depth < ovkGetQuirk("wall.repost-liking-recursion-limit"))
+            foreach($this->getChildren() as $attachment)
+                if($attachment instanceof Post)
+                    $attachment->setLikeRecursively($liked, $user, $depth + 1);
+    }
     
     /**
      * May return fake owner (group), if flags are [1, (*)]
@@ -130,33 +151,16 @@ class Post extends Postable
         if($this->getOwner(false)->getId() !== $user->getId() && !($this->getOwner() instanceof Club))
             (new LikeNotification($this->getOwner(false), $this, $user))->emit();
 
-        foreach($this->getChildren() as $attachment) {
+        foreach($this->getChildren() as $attachment)
             if($attachment instanceof Post)
-                $attachment->setLike($liked, $user);
-        }
+                $attachment->setLikeRecursively($liked, $user, 2);
 
         return $liked;
     }
 
     function setLike(bool $liked, User $user): void
     {
-        $searchData = [
-            "origin" => $user->getId(),
-            "model"  => static::class,
-            "target" => $this->getRecord()->id,
-        ];
-
-        if((sizeof(DB::i()->getContext()->table("likes")->where($searchData)) > 0) !== $liked) {
-            if($this->getOwner(false)->getId() !== $user->getId() && !($this->getOwner() instanceof Club))
-                (new LikeNotification($this->getOwner(false), $this, $user))->emit();
-
-            parent::setLike($liked, $user);
-        }
-
-        foreach($this->getChildren() as $attachment) {
-            if($attachment instanceof Post)
-                $attachment->setLike($liked, $user);
-        }
+        $this->setLikeRecursively($liked, $user, 1);
     }
     
     function deletePost(): void 
diff --git a/quirks.yml b/quirks.yml
index 54b0301f..c7967fc8 100644
--- a/quirks.yml
+++ b/quirks.yml
@@ -34,3 +34,13 @@ blobs.erase-upon-deletion: 0
 # + Set this option to 1 if you want to use quirky VK Mobile behaviour (yes graffiti in comments)
 # + Set this option to 0 if you want to use VK Desktop behaviour (no graffiti in comments)
 comments.allow-graffiti: 0
+
+# Maximum recursion depth of likes on reposts
+# Restriction on the recursion depth of repost likes.
+# For example, if the value is 5, likes will be set for a maximum of 5 posts, even if there are more posts in the repost hierarchy.
+# Needed to protect against attacks
+# 
+# Possible values:
+# + Set this option to -1 if you want to disable the limit
+# + Set this option to any non-negative number to be this limit
+wall.repost-liking-recursion-limit: 10