]> git.wh0rd.org - tt-rss.git/blame - backend.php
add lib/
[tt-rss.git] / backend.php
CommitLineData
1d3a17c7 1<?php
d65981e2
AD
2 error_reporting(E_ERROR | E_WARNING | E_PARSE);
3
ce885e21
AD
4 /* remove ill effects of magic quotes */
5
6 if (get_magic_quotes_gpc()) {
7 $_GET = array_map('stripslashes', $_GET);
8 $_POST = array_map('stripslashes', $_POST);
9 $_REQUEST = array_map('stripslashes', $_REQUEST);
10 $_COOKIE = array_map('stripslashes', $_COOKIE);
11 }
12
36bfab86 13 require_once "sessions.php";
c339343b 14 require_once "modules/backend-rpc.php";
dc56b3b7 15
894ebcf5 16/* if ($_GET["debug"]) {
cce28758
AD
17 define('DEFAULT_ERROR_LEVEL', E_ALL);
18 } else {
19 define('DEFAULT_ERROR_LEVEL', E_ERROR | E_WARNING | E_PARSE);
20 }
894ebcf5
AD
21
22 error_reporting(DEFAULT_ERROR_LEVEL); */
cce28758 23
657770a0
AD
24 require_once "sanity_check.php";
25 require_once "config.php";
af106b0e
AD
26
27 require_once "db.php";
28 require_once "db-prefs.php";
29 require_once "functions.php";
657770a0 30
dc56b3b7 31 no_cache_incantation();
8d039718
AD
32
33 if (ENABLE_TRANSLATIONS == true) {
34 startup_gettext();
35 }
dc56b3b7 36
7f0acba7
AD
37 $script_started = getmicrotime();
38
39 $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
40
41 if (!$link) {
42 if (DB_TYPE == "mysql") {
43 print mysql_error();
44 }
45 // PG seems to display its own errors just fine by default.
46 return;
47 }
48
f29ba148 49 init_connection($link);
7f0acba7
AD
50
51 $op = $_REQUEST["op"];
fac5e7d1 52 $mode = $_REQUEST["mode"];
7f0acba7 53
c339343b 54 $print_exec_time = false;
7e3634d9 55
fac5e7d1
AD
56 if ((!$op || $op == "rpc" || $op == "rss" ||
57 ($op == "view" && $mode != "zoom") ||
945c243e 58 $op == "digestSend" || $op == "viewfeed" || $op == "publish" ||
18664970 59 $op == "globalUpdateFeeds") && !$_REQUEST["noxml"]) {
04fedbf5
AD
60 header("Content-Type: application/xml; charset=utf-8");
61
62 if (ENABLE_GZIP_OUTPUT) {
63 ob_start("ob_gzhandler");
64 }
65
9fdf7824
AD
66 } else {
67 if (!$_REQUEST["noxml"]) {
68 header("Content-Type: text/html; charset=utf-8");
69 } else {
70 header("Content-Type: text/plain; charset=utf-8");
71 }
262bd8ea
AD
72 }
73
f3acc32e
AD
74 if (!$op) {
75 header("Content-Type: application/xml");
76 print_error_xml(7); exit;
77 }
42c32916 78
7f0acba7 79 if (!($_SESSION["uid"] && validate_session($link)) && $op != "globalUpdateFeeds"
945c243e 80 && $op != "rss" && $op != "getUnread" && $op != "publish") {
262bd8ea 81
2e918d9d 82 if ($op == "rpc" || $op == "viewfeed" || $op == "view") {
af106b0e 83 print_error_xml(6); die;
04269460
AD
84 } else {
85 print "
86 <html><body>
87 <p>Error: Not logged in.</p>
88 <script type=\"text/javascript\">
89 if (parent.window != 'undefined') {
01a87dff 90 parent.window.location = \"tt-rss.php\";
04269460 91 } else {
01a87dff 92 window.location = \"tt-rss.php\";
04269460
AD
93 }
94 </script>
95 </body></html>
96 ";
262bd8ea
AD
97 }
98 exit;
99 }
1c7f75ed 100
ad815c71 101 $purge_intervals = array(
d1db26aa
AD
102 0 => __("Use default"),
103 -1 => __("Never purge"),
104 5 => __("1 week old"),
105 14 => __("2 weeks old"),
106 31 => __("1 month old"),
107 60 => __("2 months old"),
108 90 => __("3 months old"));
ad815c71
AD
109
110 $update_intervals = array(
ecace165 111 0 => __("Default interval"),
d1db26aa 112 -1 => __("Disable updates"),
1e7cbe16 113 15 => __("Each 15 minutes"),
d1db26aa
AD
114 30 => __("Each 30 minutes"),
115 60 => __("Hourly"),
116 240 => __("Each 4 hours"),
117 720 => __("Each 12 hours"),
118 1440 => __("Daily"),
119 10080 => __("Weekly"));
ad815c71 120
16211ddb 121 $update_methods = array(
ecace165 122 0 => __("Default"),
0dd9c0cf
AD
123 1 => __("Magpie"),
124 2 => __("SimplePie"));
16211ddb
AD
125
126 if (ENABLE_SIMPLEPIE) {
127 $update_methods[0] .= ' (SimplePie)';
128 } else {
129 $update_methods[0] .= ' (Magpie)';
130 }
131
3c5783b7 132 $access_level_names = array(
d1db26aa 133 0 => __("User"),
a88d37e5 134 5 => __("Power User"),
d1db26aa 135 10 => __("Administrator"));
3c5783b7 136
f27d955a 137 require_once "modules/pref-prefs.php";
ef8be8ea
AD
138 require_once "modules/popup-dialog.php";
139 require_once "modules/help.php";
140 require_once "modules/pref-feeds.php";
141 require_once "modules/pref-filters.php";
142 require_once "modules/pref-labels.php";
143 require_once "modules/pref-users.php";
c339343b 144 require_once "modules/pref-feed-browser.php";
ef8be8ea 145
b2804af7 146 if (!sanity_check($link)) { return; }
023fe037 147
45004d43
AD
148 switch($op) { // Select action according to $op value.
149 case "rpc":
150 // Handle remote procedure calls.
151 handle_rpc_request($link);
152 break; // rpc
153
154 case "feeds":
877be781
AD
155 if (ENABLE_GZIP_OUTPUT) {
156 ob_start("ob_gzhandler");
157 }
158
45004d43
AD
159 $tags = $_GET["tags"];
160
161 $subop = $_GET["subop"];
162
163 switch($subop) {
164 case "catchupAll":
165 db_query($link, "UPDATE ttrss_user_entries SET
166 last_read = NOW(),unread = false WHERE owner_uid = " . $_SESSION["uid"]);
ad0056a8
AD
167 ccache_zero_all($link, $_SESSION["uid"]);
168
45004d43
AD
169 break;
170
171 case "collapse":
172 $cat_id = db_escape_string($_GET["cid"]);
173
174 db_query($link, "UPDATE ttrss_feed_categories SET
175 collapsed = NOT collapsed WHERE id = '$cat_id' AND owner_uid = " .
176 $_SESSION["uid"]);
177 return;
178 break;
9d393c84
AD
179
180 case "catsortreset":
181 db_query($link, "UPDATE ttrss_feed_categories
182 SET order_id = 0 WHERE owner_uid = " . $_SESSION["uid"]);
183 return;
184 break;
185
186 case "catsort":
187 $corder = db_escape_string($_GET["corder"]);
188
189 $cats = split(",", $corder);
190
191 for ($i = 0; $i < count($cats); $i++) {
192 $cat_id = $cats[$i];
193
194 if ($cat_id > 0) {
195 db_query($link, "UPDATE ttrss_feed_categories
196 SET order_id = '$i' WHERE id = '$cat_id' AND
197 owner_uid = " . $_SESSION["uid"]);
198 }
199 }
200
201 return;
202 break;
203
45004d43 204 }
c3b81db0 205
45004d43
AD
206 outputFeedList($link, $tags);
207 break; // feeds
1cd17194 208
45004d43 209 case "view":
e097e8be 210
45004d43
AD
211 $id = db_escape_string($_GET["id"]);
212 $feed_id = db_escape_string($_GET["feed"]);
213 $cids = split(",", db_escape_string($_GET["cids"]));
214 $mode = db_escape_string($_GET["mode"]);
215 $omode = db_escape_string($_GET["omode"]);
e097e8be 216
6cc1fab3
AD
217 $csync = $_GET["csync"];
218
45004d43 219 print "<reply>";
e097e8be 220
45004d43
AD
221 // in prefetch mode we only output requested cids, main article
222 // just gets marked as read (it already exists in client cache)
e097e8be 223
45004d43
AD
224 if ($mode == "") {
225 outputArticleXML($link, $id, $feed_id);
eedfb635
AD
226 } else if ($mode == "zoom") {
227 outputArticleXML($link, $id, $feed_id, true, true);
45004d43
AD
228 } else {
229 catchupArticleById($link, $id, 0);
8a4c759e 230 ccache_update($link, $feed_id, $_SESSION["uid"]);
45004d43 231 }
e097e8be 232
a598370d
AD
233 if (!$_SESSION["bw_limit"]) {
234 foreach ($cids as $cid) {
235 if ($cid) {
236 outputArticleXML($link, $cid, $feed_id, false);
237 }
45004d43 238 }
e097e8be 239 }
e097e8be 240
d234a2e3 241
bd090ab4 242// if (get_pref($link, "SYNC_COUNTERS") || ($mode == "prefetch" && $csync)) {
45004d43
AD
243 print "<counters>";
244 getAllCounters($link, $omode);
245 print "</counters>";
bd090ab4 246// }
5a94a953 247
45004d43
AD
248 print "</reply>";
249 break; // view
1cd17194 250
45004d43 251 case "viewfeed":
1cd17194 252
45004d43
AD
253 $print_exec_time = true;
254 $timing_info = getmicrotime();
46921916 255
45004d43 256 print "<reply>";
3de0261a 257
45004d43 258 if ($_GET["debug"]) $timing_info = print_checkpoint("0", $timing_info);
46921916 259
45004d43 260 $omode = db_escape_string($_GET["omode"]);
3de0261a 261
45004d43
AD
262 $feed = db_escape_string($_GET["feed"]);
263 $subop = db_escape_string($_GET["subop"]);
264 $view_mode = db_escape_string($_GET["view_mode"]);
265 $limit = db_escape_string($_GET["limit"]);
266 $cat_view = db_escape_string($_GET["cat"]);
267 $next_unread_feed = db_escape_string($_GET["nuf"]);
268 $offset = db_escape_string($_GET["skip"]);
081e527d 269 $vgroup_last_feed = db_escape_string($_GET["vgrlf"]);
6cc1fab3 270 $csync = $_GET["csync"];
7b4d02a8 271 $order_by = db_escape_string($_GET["order_by"]);
203de776 272
51e196de
AD
273 /* Updating a label ccache means recalculating all of the caches
274 * so for performance reasons we don't do that here */
275
34c30ac1
AD
276 if (time() - $_SESSION["viewfeed:ccache_update_stamp"] > 120) {
277 if ($feed >= 0) {
278 ccache_update($link, $feed, $_SESSION["uid"], $cat_view);
279 }
280 $_SESSION["viewfeed:ccache_update_stamp"] = time();
51e196de 281 }
0737b95a 282
45004d43
AD
283 set_pref($link, "_DEFAULT_VIEW_MODE", $view_mode);
284 set_pref($link, "_DEFAULT_VIEW_LIMIT", $limit);
7b4d02a8 285 set_pref($link, "_DEFAULT_VIEW_ORDER_BY", $order_by);
40496720 286
45004d43
AD
287 if (!$cat_view && preg_match("/^[0-9][0-9]*$/", $feed)) {
288 db_query($link, "UPDATE ttrss_feeds SET last_viewed = NOW()
289 WHERE id = '$feed' AND owner_uid = ".$_SESSION["uid"]);
290 }
7466dc6a 291
1098687a
AD
292 if (!$next_unread_feed) {
293 print "<headlines id=\"$feed\" is_cat=\"$cat_view\"><![CDATA[";
294 } else {
295 print "<headlines id=\"$next_unread_feed\" is_cat=\"$cat_view\"><![CDATA[";
296 }
a5c815d3
AD
297
298 $override_order = false;
299
300 switch ($order_by) {
301 case "date":
302 if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
303 $override_order = "updated";
304 } else {
305 $override_order = "updated DESC";
306 }
307 break;
c50e2b30 308
a5c815d3
AD
309 case "title":
310 $override_order = "updated DESC";
311 break;
d76a3b03 312
a5c815d3
AD
313 case "score":
314 $override_order = "score DESC";
315 break;
316 }
e19c1824 317
a5c815d3
AD
318 $ret = outputHeadlinesList($link, $feed, $subop,
319 $view_mode, $limit, $cat_view, $next_unread_feed, $offset,
320 $vgroup_last_feed, $override_order);
7b4d02a8 321
a5c815d3
AD
322 $topmost_article_ids = $ret[0];
323 $headlines_count = $ret[1];
324 $returned_feed = $ret[2];
325 $disable_cache = $ret[3];
326 $vgroup_last_feed = $ret[4];
7b4d02a8 327
a5c815d3 328 print "]]></headlines>";
46921916 329
a5c815d3
AD
330 print "<headlines-count value=\"$headlines_count\"/>";
331 print "<vgroup-last-feed value=\"$vgroup_last_feed\"/>";
081e527d 332
cfcb7d42 333 $headlines_unread = ccache_find($link, $returned_feed, $_SESSION["uid"],
696a6850
AD
334 $cat_view, true);
335
336 if ($headlines_unread == -1) {
337 $headlines_unread = getFeedUnread($link, $returned_feed, $cat_view);
338
339 }
a5c815d3
AD
340
341 print "<headlines-unread value=\"$headlines_unread\"/>";
342 printf("<disable-cache value=\"%d\"/>", $disable_cache);
343
344 if ($_GET["debug"]) $timing_info = print_checkpoint("10", $timing_info);
345
346 if (is_array($topmost_article_ids) && !get_pref($link, 'COMBINED_DISPLAY_MODE') && !$_SESSION["bw_limit"]) {
347 print "<articles>";
348 foreach ($topmost_article_ids as $id) {
349 outputArticleXML($link, $id, $feed, false);
45004d43 350 }
a5c815d3 351 print "</articles>";
961f4c73 352 }
961f4c73 353
45004d43 354 if ($_GET["debug"]) $timing_info = print_checkpoint("20", $timing_info);
46921916 355
6cc1fab3 356
bd090ab4
AD
357// if (get_pref($link, "SYNC_COUNTERS") ||
358// time() - $_SESSION["get_all_counters_stamp"] > $viewfeed_ctr_interval) {
0bdec456
AD
359// print "<counters>";
360// getAllCounters($link, $omode, $feed);
361// print "</counters>";
362// }
363
a06d0e5a 364 if (get_pref($link, 'COMBINED_DISPLAY_MODE') || $subop ||
abd9b165 365 time() - $_SESSION["viewfeed:counters_stamp"] > 60) {
b1676464
AD
366 if (!$offset) {
367 print "<counters>";
368 getAllCounters($link, $omode, $feed);
369 print "</counters>";
a06d0e5a 370 $_SESSION["viewfeed:counters_stamp"] = time();
b1676464 371 }
0bdec456 372 }
98bea1b1 373
45004d43 374 if ($_GET["debug"]) $timing_info = print_checkpoint("30", $timing_info);
46921916 375
45004d43 376 print_runtime_info($link);
03c88bdd 377
45004d43
AD
378 print "</reply>";
379 break; // viewfeed
1cd17194 380
45004d43
AD
381 case "pref-feeds":
382 module_pref_feeds($link);
383 break; // pref-feeds
a7f22b70 384
45004d43
AD
385 case "pref-filters":
386 module_pref_filters($link);
387 break; // pref-filters
a0476535 388
45004d43
AD
389 case "pref-labels":
390 module_pref_labels($link);
391 break; // pref-labels
d0000401 392
45004d43
AD
393 case "pref-prefs":
394 module_pref_prefs($link);
395 break; // pref-prefs
f27d955a 396
45004d43
AD
397 case "pref-users":
398 module_pref_users($link);
399 break; // prefs-users
a0476535 400
45004d43
AD
401 case "help":
402 module_help($link);
403 break; // help
a0476535 404
45004d43
AD
405 case "dlg":
406 module_popup_dialog($link);
407 break; // dlg
a7f22b70 408
45004d43
AD
409 case "pref-pub-items":
410 module_pref_pub_items($link);
411 break; // pref-pub-items
e4f4b46f 412
45004d43
AD
413 case "globalUpdateFeeds":
414 // update feeds of all users, may be used anonymously
e4f4b46f 415
5cbaf873 416 print "<!--";
45004d43 417 // Update all feeds needing a update.
5cbaf873
AD
418 update_daemon_common($link, 0, true, true);
419 print " -->";
a7f22b70 420
45004d43
AD
421 print "<rpc-reply>
422 <message msg=\"All feeds updated\"/>
423 </rpc-reply>";
424 break; // globalUpdateFeeds
e5d758e3 425
45004d43
AD
426 case "pref-feed-browser":
427 module_pref_feed_browser($link);
428 break; // pref-feed-browser
c6232e43 429
45004d43
AD
430 case "publish":
431 $key = db_escape_string($_GET["key"]);
ead2715d 432 $limit = (int)db_escape_string($_GET["limit"]);
945c243e 433
45004d43
AD
434 $result = db_query($link, "SELECT login, owner_uid
435 FROM ttrss_user_prefs, ttrss_users WHERE
436 pref_name = '_PREFS_PUBLISH_KEY' AND
437 value = '$key' AND
438 ttrss_users.id = owner_uid");
945c243e 439
45004d43
AD
440 if (db_num_rows($result) == 1) {
441 $owner = db_fetch_result($result, 0, "owner_uid");
442 $login = db_fetch_result($result, 0, "login");
945c243e 443
ead2715d 444 generate_syndicated_feed($link, $owner, -2, false, $limit);
945c243e 445
45004d43
AD
446 } else {
447 print "<error>User not found</error>";
448 }
449 break; // publish
18664970 450
45004d43
AD
451 case "rss":
452 $feed = db_escape_string($_GET["id"]);
453 $user = db_escape_string($_GET["user"]);
454 $pass = db_escape_string($_GET["pass"]);
455 $is_cat = $_GET["is_cat"] != false;
ead2715d 456 $limit = (int)db_escape_string($_GET["limit"]);
e1eb2147 457
45004d43
AD
458 $search = db_escape_string($_GET["q"]);
459 $match_on = db_escape_string($_GET["m"]);
460 $search_mode = db_escape_string($_GET["smode"]);
18664970 461
45004d43
AD
462 if (!$_SESSION["uid"] && $user && $pass) {
463 authenticate_user($link, $user, $pass);
464 }
18664970 465
45004d43
AD
466 if ($_SESSION["uid"] ||
467 http_authenticate_user($link)) {
945c243e 468
ead2715d 469 generate_syndicated_feed($link, 0, $feed, $is_cat, $limit,
45004d43
AD
470 $search, $search_mode, $match_on);
471 }
472 break; // rss
18664970 473
45004d43
AD
474 case "getUnread":
475 $login = db_escape_string($_GET["login"]);
f3acc32e 476
45004d43 477 header("Content-Type: text/plain; charset=utf-8");
f3acc32e 478
45004d43 479 $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login'");
7e3634d9 480
45004d43
AD
481 if (db_num_rows($result) == 1) {
482 $uid = db_fetch_result($result, 0, "id");
483 print getGlobalUnread($link, $uid);
484 } else {
485 print "-1;User not found";
486 }
7e3634d9 487
45004d43
AD
488 $print_exec_time = false;
489 break; // getUnread
9cd7c995 490
45004d43
AD
491 case "digestTest":
492 header("Content-Type: text/plain");
493 print_r(prepare_headlines_digest($link, $_SESSION["uid"]));
494 $print_exec_time = false;
495 break; // digestTest
448b0abd 496
45004d43
AD
497 case "digestSend":
498 header("Content-Type: text/plain");
499 send_headlines_digests($link);
500 $print_exec_time = false;
501 break; // digestSend
7e3634d9 502
45004d43 503 } // Select action according to $op value.
f3acc32e 504
45004d43 505 // We close the connection to database.
4b3dff6e 506 db_close($link);
1cd17194 507?>
406d9489 508
7e3634d9 509<?php if ($print_exec_time) { ?>
1d3a17c7 510<!-- <?php echo sprintf("Backend execution time: %.4f seconds", getmicrotime() - $script_started) ?> -->
f3acc32e 511<?php } ?>