]> git.wh0rd.org - tt-rss.git/blame - backend.php
obsolete cookie storage for collapsed status of feedlist and special categories ...
[tt-rss.git] / backend.php
CommitLineData
1d3a17c7 1<?php
d65981e2
AD
2 error_reporting(E_ERROR | E_WARNING | E_PARSE);
3
ce885e21
AD
4 /* remove ill effects of magic quotes */
5
6 if (get_magic_quotes_gpc()) {
7 $_GET = array_map('stripslashes', $_GET);
8 $_POST = array_map('stripslashes', $_POST);
9 $_REQUEST = array_map('stripslashes', $_REQUEST);
10 $_COOKIE = array_map('stripslashes', $_COOKIE);
11 }
12
36bfab86 13 require_once "sessions.php";
c339343b 14 require_once "modules/backend-rpc.php";
dc56b3b7 15
894ebcf5 16/* if ($_GET["debug"]) {
cce28758
AD
17 define('DEFAULT_ERROR_LEVEL', E_ALL);
18 } else {
19 define('DEFAULT_ERROR_LEVEL', E_ERROR | E_WARNING | E_PARSE);
20 }
894ebcf5
AD
21
22 error_reporting(DEFAULT_ERROR_LEVEL); */
cce28758 23
657770a0
AD
24 require_once "sanity_check.php";
25 require_once "config.php";
af106b0e
AD
26
27 require_once "db.php";
28 require_once "db-prefs.php";
29 require_once "functions.php";
657770a0 30
dc56b3b7 31 no_cache_incantation();
8d039718
AD
32
33 if (ENABLE_TRANSLATIONS == true) {
34 startup_gettext();
35 }
dc56b3b7 36
7f0acba7
AD
37 $script_started = getmicrotime();
38
39 $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
40
41 if (!$link) {
42 if (DB_TYPE == "mysql") {
43 print mysql_error();
44 }
45 // PG seems to display its own errors just fine by default.
46 return;
47 }
48
f29ba148 49 init_connection($link);
7f0acba7
AD
50
51 $op = $_REQUEST["op"];
fac5e7d1 52 $mode = $_REQUEST["mode"];
7f0acba7 53
c339343b 54 $print_exec_time = false;
7e3634d9 55
fac5e7d1
AD
56 if ((!$op || $op == "rpc" || $op == "rss" ||
57 ($op == "view" && $mode != "zoom") ||
945c243e 58 $op == "digestSend" || $op == "viewfeed" || $op == "publish" ||
18664970 59 $op == "globalUpdateFeeds") && !$_REQUEST["noxml"]) {
04fedbf5
AD
60 header("Content-Type: application/xml; charset=utf-8");
61
62 if (ENABLE_GZIP_OUTPUT) {
63 ob_start("ob_gzhandler");
64 }
65
9fdf7824
AD
66 } else {
67 if (!$_REQUEST["noxml"]) {
68 header("Content-Type: text/html; charset=utf-8");
69 } else {
70 header("Content-Type: text/plain; charset=utf-8");
71 }
262bd8ea
AD
72 }
73
f3acc32e
AD
74 if (!$op) {
75 header("Content-Type: application/xml");
76 print_error_xml(7); exit;
77 }
9c883208
AD
78
79 if (SINGLE_USER_MODE) {
80 authenticate_user($link, "admin", null);
81 }
82
7f0acba7 83 if (!($_SESSION["uid"] && validate_session($link)) && $op != "globalUpdateFeeds"
945c243e 84 && $op != "rss" && $op != "getUnread" && $op != "publish") {
262bd8ea 85
2e918d9d 86 if ($op == "rpc" || $op == "viewfeed" || $op == "view") {
af106b0e 87 print_error_xml(6); die;
04269460
AD
88 } else {
89 print "
90 <html><body>
91 <p>Error: Not logged in.</p>
92 <script type=\"text/javascript\">
93 if (parent.window != 'undefined') {
01a87dff 94 parent.window.location = \"tt-rss.php\";
04269460 95 } else {
01a87dff 96 window.location = \"tt-rss.php\";
04269460
AD
97 }
98 </script>
99 </body></html>
100 ";
262bd8ea
AD
101 }
102 exit;
103 }
1c7f75ed 104
ad815c71 105 $purge_intervals = array(
d1db26aa
AD
106 0 => __("Use default"),
107 -1 => __("Never purge"),
108 5 => __("1 week old"),
109 14 => __("2 weeks old"),
110 31 => __("1 month old"),
111 60 => __("2 months old"),
112 90 => __("3 months old"));
ad815c71
AD
113
114 $update_intervals = array(
ecace165 115 0 => __("Default interval"),
d1db26aa 116 -1 => __("Disable updates"),
1e7cbe16 117 15 => __("Each 15 minutes"),
d1db26aa
AD
118 30 => __("Each 30 minutes"),
119 60 => __("Hourly"),
120 240 => __("Each 4 hours"),
121 720 => __("Each 12 hours"),
122 1440 => __("Daily"),
123 10080 => __("Weekly"));
ad815c71 124
16211ddb 125 $update_methods = array(
ecace165 126 0 => __("Default"),
0dd9c0cf
AD
127 1 => __("Magpie"),
128 2 => __("SimplePie"));
16211ddb
AD
129
130 if (ENABLE_SIMPLEPIE) {
131 $update_methods[0] .= ' (SimplePie)';
132 } else {
133 $update_methods[0] .= ' (Magpie)';
134 }
135
3c5783b7 136 $access_level_names = array(
d1db26aa 137 0 => __("User"),
a88d37e5 138 5 => __("Power User"),
d1db26aa 139 10 => __("Administrator"));
3c5783b7 140
f27d955a 141 require_once "modules/pref-prefs.php";
ef8be8ea
AD
142 require_once "modules/popup-dialog.php";
143 require_once "modules/help.php";
144 require_once "modules/pref-feeds.php";
145 require_once "modules/pref-filters.php";
146 require_once "modules/pref-labels.php";
147 require_once "modules/pref-users.php";
ef8be8ea 148
b2804af7 149 if (!sanity_check($link)) { return; }
023fe037 150
45004d43
AD
151 switch($op) { // Select action according to $op value.
152 case "rpc":
153 // Handle remote procedure calls.
154 handle_rpc_request($link);
155 break; // rpc
156
157 case "feeds":
877be781
AD
158 if (ENABLE_GZIP_OUTPUT) {
159 ob_start("ob_gzhandler");
160 }
161
45004d43
AD
162 $tags = $_GET["tags"];
163
164 $subop = $_GET["subop"];
165
166 switch($subop) {
167 case "catchupAll":
168 db_query($link, "UPDATE ttrss_user_entries SET
169 last_read = NOW(),unread = false WHERE owner_uid = " . $_SESSION["uid"]);
ad0056a8
AD
170 ccache_zero_all($link, $_SESSION["uid"]);
171
45004d43
AD
172 break;
173
174 case "collapse":
175 $cat_id = db_escape_string($_GET["cid"]);
176
57937c42
AD
177 if ($cat_id > 0) {
178 db_query($link, "UPDATE ttrss_feed_categories SET
179 collapsed = NOT collapsed WHERE id = '$cat_id' AND owner_uid = " .
180 $_SESSION["uid"]);
181 } else {
182 $pref_name = '';
183
184 switch ($cat_id) {
185 case -1:
186 $pref_name = '_COLLAPSED_SPECIAL';
187 break;
188 case -2:
189 $pref_name = '_COLLAPSED_LABELS';
190 break;
191 case 0:
192 $pref_name = '_COLLAPSED_UNCAT';
193 break;
194 }
195
196 if ($pref_name) {
197 if (get_pref($link, $pref_name)) {
198 set_pref($link, $pref_name, 'false');
199 } else {
200 set_pref($link, $pref_name, 'true');
201 }
202 }
203 }
45004d43
AD
204 return;
205 break;
9d393c84
AD
206
207 case "catsortreset":
208 db_query($link, "UPDATE ttrss_feed_categories
209 SET order_id = 0 WHERE owner_uid = " . $_SESSION["uid"]);
210 return;
211 break;
212
213 case "catsort":
214 $corder = db_escape_string($_GET["corder"]);
215
216 $cats = split(",", $corder);
217
218 for ($i = 0; $i < count($cats); $i++) {
219 $cat_id = $cats[$i];
220
221 if ($cat_id > 0) {
222 db_query($link, "UPDATE ttrss_feed_categories
223 SET order_id = '$i' WHERE id = '$cat_id' AND
224 owner_uid = " . $_SESSION["uid"]);
225 }
226 }
227
228 return;
229 break;
230
45004d43 231 }
c3b81db0 232
45a15f78
AD
233 $_SESSION["viewfeed:counters_stamp"] = time();
234
45004d43
AD
235 outputFeedList($link, $tags);
236 break; // feeds
1cd17194 237
45004d43 238 case "view":
e097e8be 239
45004d43
AD
240 $id = db_escape_string($_GET["id"]);
241 $feed_id = db_escape_string($_GET["feed"]);
242 $cids = split(",", db_escape_string($_GET["cids"]));
243 $mode = db_escape_string($_GET["mode"]);
244 $omode = db_escape_string($_GET["omode"]);
e097e8be 245
6cc1fab3
AD
246 $csync = $_GET["csync"];
247
45004d43 248 print "<reply>";
e097e8be 249
45004d43
AD
250 // in prefetch mode we only output requested cids, main article
251 // just gets marked as read (it already exists in client cache)
e097e8be 252
45004d43
AD
253 if ($mode == "") {
254 outputArticleXML($link, $id, $feed_id);
eedfb635
AD
255 } else if ($mode == "zoom") {
256 outputArticleXML($link, $id, $feed_id, true, true);
45004d43
AD
257 } else {
258 catchupArticleById($link, $id, 0);
8a4c759e 259 ccache_update($link, $feed_id, $_SESSION["uid"]);
45004d43 260 }
e097e8be 261
a598370d
AD
262 if (!$_SESSION["bw_limit"]) {
263 foreach ($cids as $cid) {
264 if ($cid) {
265 outputArticleXML($link, $cid, $feed_id, false);
266 }
45004d43 267 }
e097e8be 268 }
e097e8be 269
bd090ab4 270// if (get_pref($link, "SYNC_COUNTERS") || ($mode == "prefetch" && $csync)) {
3c204a8e 271
ee8091ba 272 if (time() - $_SESSION["view:counters_stamp"] > 3 && $mode == "prefetch") {
45004d43
AD
273 print "<counters>";
274 getAllCounters($link, $omode);
275 print "</counters>";
3c204a8e
AD
276 $_SESSION["view:counters_stamp"] = time();
277 }
5a94a953 278
45004d43
AD
279 print "</reply>";
280 break; // view
1cd17194 281
45004d43 282 case "viewfeed":
1cd17194 283
45004d43
AD
284 $print_exec_time = true;
285 $timing_info = getmicrotime();
46921916 286
45004d43 287 print "<reply>";
3de0261a 288
45004d43 289 if ($_GET["debug"]) $timing_info = print_checkpoint("0", $timing_info);
46921916 290
45004d43 291 $omode = db_escape_string($_GET["omode"]);
3de0261a 292
45004d43
AD
293 $feed = db_escape_string($_GET["feed"]);
294 $subop = db_escape_string($_GET["subop"]);
295 $view_mode = db_escape_string($_GET["view_mode"]);
296 $limit = db_escape_string($_GET["limit"]);
297 $cat_view = db_escape_string($_GET["cat"]);
298 $next_unread_feed = db_escape_string($_GET["nuf"]);
299 $offset = db_escape_string($_GET["skip"]);
081e527d 300 $vgroup_last_feed = db_escape_string($_GET["vgrlf"]);
6cc1fab3 301 $csync = $_GET["csync"];
7b4d02a8 302 $order_by = db_escape_string($_GET["order_by"]);
203de776 303
51e196de
AD
304 /* Updating a label ccache means recalculating all of the caches
305 * so for performance reasons we don't do that here */
306
5c432ba4 307// if (time() - $_SESSION["viewfeed:ccache_update_stamp"] > 120) {
34c30ac1
AD
308 if ($feed >= 0) {
309 ccache_update($link, $feed, $_SESSION["uid"], $cat_view);
310 }
311 $_SESSION["viewfeed:ccache_update_stamp"] = time();
5c432ba4 312// }
0737b95a 313
45004d43
AD
314 set_pref($link, "_DEFAULT_VIEW_MODE", $view_mode);
315 set_pref($link, "_DEFAULT_VIEW_LIMIT", $limit);
7b4d02a8 316 set_pref($link, "_DEFAULT_VIEW_ORDER_BY", $order_by);
40496720 317
45004d43
AD
318 if (!$cat_view && preg_match("/^[0-9][0-9]*$/", $feed)) {
319 db_query($link, "UPDATE ttrss_feeds SET last_viewed = NOW()
320 WHERE id = '$feed' AND owner_uid = ".$_SESSION["uid"]);
321 }
7466dc6a 322
1098687a
AD
323 if (!$next_unread_feed) {
324 print "<headlines id=\"$feed\" is_cat=\"$cat_view\"><![CDATA[";
325 } else {
326 print "<headlines id=\"$next_unread_feed\" is_cat=\"$cat_view\"><![CDATA[";
327 }
a5c815d3
AD
328
329 $override_order = false;
330
331 switch ($order_by) {
332 case "date":
333 if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
334 $override_order = "updated";
335 } else {
336 $override_order = "updated DESC";
337 }
338 break;
c50e2b30 339
a5c815d3
AD
340 case "title":
341 $override_order = "updated DESC";
342 break;
d76a3b03 343
a5c815d3
AD
344 case "score":
345 $override_order = "score DESC";
346 break;
347 }
e19c1824 348
a5c815d3
AD
349 $ret = outputHeadlinesList($link, $feed, $subop,
350 $view_mode, $limit, $cat_view, $next_unread_feed, $offset,
351 $vgroup_last_feed, $override_order);
7b4d02a8 352
a5c815d3
AD
353 $topmost_article_ids = $ret[0];
354 $headlines_count = $ret[1];
355 $returned_feed = $ret[2];
356 $disable_cache = $ret[3];
357 $vgroup_last_feed = $ret[4];
7b4d02a8 358
a5c815d3 359 print "]]></headlines>";
46921916 360
a5c815d3
AD
361 print "<headlines-count value=\"$headlines_count\"/>";
362 print "<vgroup-last-feed value=\"$vgroup_last_feed\"/>";
081e527d 363
cfcb7d42 364 $headlines_unread = ccache_find($link, $returned_feed, $_SESSION["uid"],
696a6850
AD
365 $cat_view, true);
366
367 if ($headlines_unread == -1) {
368 $headlines_unread = getFeedUnread($link, $returned_feed, $cat_view);
369
370 }
a5c815d3
AD
371
372 print "<headlines-unread value=\"$headlines_unread\"/>";
373 printf("<disable-cache value=\"%d\"/>", $disable_cache);
374
375 if ($_GET["debug"]) $timing_info = print_checkpoint("10", $timing_info);
376
377 if (is_array($topmost_article_ids) && !get_pref($link, 'COMBINED_DISPLAY_MODE') && !$_SESSION["bw_limit"]) {
378 print "<articles>";
379 foreach ($topmost_article_ids as $id) {
380 outputArticleXML($link, $id, $feed, false);
45004d43 381 }
a5c815d3 382 print "</articles>";
961f4c73 383 }
961f4c73 384
45004d43 385 if ($_GET["debug"]) $timing_info = print_checkpoint("20", $timing_info);
46921916 386
6cc1fab3 387
bd090ab4
AD
388// if (get_pref($link, "SYNC_COUNTERS") ||
389// time() - $_SESSION["get_all_counters_stamp"] > $viewfeed_ctr_interval) {
0bdec456
AD
390// print "<counters>";
391// getAllCounters($link, $omode, $feed);
392// print "</counters>";
393// }
394
a06d0e5a 395 if (get_pref($link, 'COMBINED_DISPLAY_MODE') || $subop ||
abd9b165 396 time() - $_SESSION["viewfeed:counters_stamp"] > 60) {
b1676464
AD
397 if (!$offset) {
398 print "<counters>";
399 getAllCounters($link, $omode, $feed);
400 print "</counters>";
a06d0e5a 401 $_SESSION["viewfeed:counters_stamp"] = time();
b1676464 402 }
0bdec456 403 }
98bea1b1 404
45004d43 405 if ($_GET["debug"]) $timing_info = print_checkpoint("30", $timing_info);
46921916 406
45004d43 407 print_runtime_info($link);
03c88bdd 408
45004d43
AD
409 print "</reply>";
410 break; // viewfeed
1cd17194 411
45004d43
AD
412 case "pref-feeds":
413 module_pref_feeds($link);
414 break; // pref-feeds
a7f22b70 415
45004d43
AD
416 case "pref-filters":
417 module_pref_filters($link);
418 break; // pref-filters
a0476535 419
45004d43
AD
420 case "pref-labels":
421 module_pref_labels($link);
422 break; // pref-labels
d0000401 423
45004d43
AD
424 case "pref-prefs":
425 module_pref_prefs($link);
426 break; // pref-prefs
f27d955a 427
45004d43
AD
428 case "pref-users":
429 module_pref_users($link);
430 break; // prefs-users
a0476535 431
45004d43
AD
432 case "help":
433 module_help($link);
434 break; // help
a0476535 435
45004d43
AD
436 case "dlg":
437 module_popup_dialog($link);
438 break; // dlg
a7f22b70 439
45004d43
AD
440 case "pref-pub-items":
441 module_pref_pub_items($link);
442 break; // pref-pub-items
e4f4b46f 443
45004d43
AD
444 case "globalUpdateFeeds":
445 // update feeds of all users, may be used anonymously
e4f4b46f 446
5cbaf873 447 print "<!--";
45004d43 448 // Update all feeds needing a update.
5cbaf873
AD
449 update_daemon_common($link, 0, true, true);
450 print " -->";
a7f22b70 451
45004d43
AD
452 print "<rpc-reply>
453 <message msg=\"All feeds updated\"/>
454 </rpc-reply>";
455 break; // globalUpdateFeeds
e5d758e3 456
45004d43
AD
457 case "pref-feed-browser":
458 module_pref_feed_browser($link);
459 break; // pref-feed-browser
c6232e43 460
45004d43
AD
461 case "publish":
462 $key = db_escape_string($_GET["key"]);
ead2715d 463 $limit = (int)db_escape_string($_GET["limit"]);
945c243e 464
45004d43
AD
465 $result = db_query($link, "SELECT login, owner_uid
466 FROM ttrss_user_prefs, ttrss_users WHERE
467 pref_name = '_PREFS_PUBLISH_KEY' AND
468 value = '$key' AND
469 ttrss_users.id = owner_uid");
945c243e 470
45004d43
AD
471 if (db_num_rows($result) == 1) {
472 $owner = db_fetch_result($result, 0, "owner_uid");
473 $login = db_fetch_result($result, 0, "login");
945c243e 474
ead2715d 475 generate_syndicated_feed($link, $owner, -2, false, $limit);
945c243e 476
45004d43
AD
477 } else {
478 print "<error>User not found</error>";
479 }
480 break; // publish
18664970 481
45004d43
AD
482 case "rss":
483 $feed = db_escape_string($_GET["id"]);
484 $user = db_escape_string($_GET["user"]);
485 $pass = db_escape_string($_GET["pass"]);
486 $is_cat = $_GET["is_cat"] != false;
ead2715d 487 $limit = (int)db_escape_string($_GET["limit"]);
e1eb2147 488
45004d43
AD
489 $search = db_escape_string($_GET["q"]);
490 $match_on = db_escape_string($_GET["m"]);
491 $search_mode = db_escape_string($_GET["smode"]);
18664970 492
b4798282
AD
493 if (SINGLE_USER_MODE) {
494 authenticate_user($link, "admin", null);
495 }
496
45004d43
AD
497 if (!$_SESSION["uid"] && $user && $pass) {
498 authenticate_user($link, $user, $pass);
499 }
18664970 500
45004d43
AD
501 if ($_SESSION["uid"] ||
502 http_authenticate_user($link)) {
945c243e 503
ead2715d 504 generate_syndicated_feed($link, 0, $feed, $is_cat, $limit,
45004d43
AD
505 $search, $search_mode, $match_on);
506 }
507 break; // rss
18664970 508
45004d43
AD
509 case "getUnread":
510 $login = db_escape_string($_GET["login"]);
f3acc32e 511
45004d43 512 header("Content-Type: text/plain; charset=utf-8");
f3acc32e 513
45004d43 514 $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login'");
7e3634d9 515
45004d43
AD
516 if (db_num_rows($result) == 1) {
517 $uid = db_fetch_result($result, 0, "id");
518 print getGlobalUnread($link, $uid);
519 } else {
520 print "-1;User not found";
521 }
7e3634d9 522
45004d43
AD
523 $print_exec_time = false;
524 break; // getUnread
9cd7c995 525
45004d43
AD
526 case "digestTest":
527 header("Content-Type: text/plain");
528 print_r(prepare_headlines_digest($link, $_SESSION["uid"]));
529 $print_exec_time = false;
530 break; // digestTest
448b0abd 531
45004d43
AD
532 case "digestSend":
533 header("Content-Type: text/plain");
534 send_headlines_digests($link);
535 $print_exec_time = false;
536 break; // digestSend
7e3634d9 537
45004d43 538 } // Select action according to $op value.
f3acc32e 539
45004d43 540 // We close the connection to database.
4b3dff6e 541 db_close($link);
1cd17194 542?>
406d9489 543
7e3634d9 544<?php if ($print_exec_time) { ?>
1d3a17c7 545<!-- <?php echo sprintf("Backend execution time: %.4f seconds", getmicrotime() - $script_started) ?> -->
f3acc32e 546<?php } ?>