]> git.wh0rd.org - tt-rss.git/blame - backend.php
active_feed_is_cat, active_feed_id handling changes
[tt-rss.git] / backend.php
CommitLineData
1d3a17c7 1<?php
d65981e2
AD
2 error_reporting(E_ERROR | E_WARNING | E_PARSE);
3
ce885e21
AD
4 /* remove ill effects of magic quotes */
5
6 if (get_magic_quotes_gpc()) {
7 $_GET = array_map('stripslashes', $_GET);
8 $_POST = array_map('stripslashes', $_POST);
9 $_REQUEST = array_map('stripslashes', $_REQUEST);
10 $_COOKIE = array_map('stripslashes', $_COOKIE);
11 }
12
36bfab86 13 require_once "sessions.php";
c339343b 14 require_once "modules/backend-rpc.php";
dc56b3b7 15
894ebcf5 16/* if ($_GET["debug"]) {
cce28758
AD
17 define('DEFAULT_ERROR_LEVEL', E_ALL);
18 } else {
19 define('DEFAULT_ERROR_LEVEL', E_ERROR | E_WARNING | E_PARSE);
20 }
894ebcf5
AD
21
22 error_reporting(DEFAULT_ERROR_LEVEL); */
cce28758 23
657770a0
AD
24 require_once "sanity_check.php";
25 require_once "config.php";
af106b0e
AD
26
27 require_once "db.php";
28 require_once "db-prefs.php";
29 require_once "functions.php";
657770a0 30
dc56b3b7 31 no_cache_incantation();
8d039718
AD
32
33 if (ENABLE_TRANSLATIONS == true) {
34 startup_gettext();
35 }
dc56b3b7 36
7f0acba7
AD
37 $script_started = getmicrotime();
38
39 $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
40
41 if (!$link) {
42 if (DB_TYPE == "mysql") {
43 print mysql_error();
44 }
45 // PG seems to display its own errors just fine by default.
46 return;
47 }
48
f29ba148 49 init_connection($link);
7f0acba7
AD
50
51 $op = $_REQUEST["op"];
fac5e7d1 52 $mode = $_REQUEST["mode"];
7f0acba7 53
c339343b 54 $print_exec_time = false;
7e3634d9 55
fac5e7d1
AD
56 if ((!$op || $op == "rpc" || $op == "rss" ||
57 ($op == "view" && $mode != "zoom") ||
945c243e 58 $op == "digestSend" || $op == "viewfeed" || $op == "publish" ||
18664970 59 $op == "globalUpdateFeeds") && !$_REQUEST["noxml"]) {
04fedbf5
AD
60 header("Content-Type: application/xml; charset=utf-8");
61
62 if (ENABLE_GZIP_OUTPUT) {
63 ob_start("ob_gzhandler");
64 }
65
9fdf7824
AD
66 } else {
67 if (!$_REQUEST["noxml"]) {
68 header("Content-Type: text/html; charset=utf-8");
69 } else {
70 header("Content-Type: text/plain; charset=utf-8");
71 }
262bd8ea
AD
72 }
73
f3acc32e
AD
74 if (!$op) {
75 header("Content-Type: application/xml");
76 print_error_xml(7); exit;
77 }
42c32916 78
7f0acba7 79 if (!($_SESSION["uid"] && validate_session($link)) && $op != "globalUpdateFeeds"
945c243e 80 && $op != "rss" && $op != "getUnread" && $op != "publish") {
262bd8ea 81
2e918d9d 82 if ($op == "rpc" || $op == "viewfeed" || $op == "view") {
af106b0e 83 print_error_xml(6); die;
04269460
AD
84 } else {
85 print "
86 <html><body>
87 <p>Error: Not logged in.</p>
88 <script type=\"text/javascript\">
89 if (parent.window != 'undefined') {
01a87dff 90 parent.window.location = \"tt-rss.php\";
04269460 91 } else {
01a87dff 92 window.location = \"tt-rss.php\";
04269460
AD
93 }
94 </script>
95 </body></html>
96 ";
262bd8ea
AD
97 }
98 exit;
99 }
1c7f75ed 100
ad815c71 101 $purge_intervals = array(
d1db26aa
AD
102 0 => __("Use default"),
103 -1 => __("Never purge"),
104 5 => __("1 week old"),
105 14 => __("2 weeks old"),
106 31 => __("1 month old"),
107 60 => __("2 months old"),
108 90 => __("3 months old"));
ad815c71
AD
109
110 $update_intervals = array(
ecace165 111 0 => __("Default interval"),
d1db26aa 112 -1 => __("Disable updates"),
1e7cbe16 113 15 => __("Each 15 minutes"),
d1db26aa
AD
114 30 => __("Each 30 minutes"),
115 60 => __("Hourly"),
116 240 => __("Each 4 hours"),
117 720 => __("Each 12 hours"),
118 1440 => __("Daily"),
119 10080 => __("Weekly"));
ad815c71 120
16211ddb 121 $update_methods = array(
ecace165 122 0 => __("Default"),
0dd9c0cf
AD
123 1 => __("Magpie"),
124 2 => __("SimplePie"));
16211ddb
AD
125
126 if (ENABLE_SIMPLEPIE) {
127 $update_methods[0] .= ' (SimplePie)';
128 } else {
129 $update_methods[0] .= ' (Magpie)';
130 }
131
3c5783b7 132 $access_level_names = array(
d1db26aa 133 0 => __("User"),
a88d37e5 134 5 => __("Power User"),
d1db26aa 135 10 => __("Administrator"));
3c5783b7 136
f27d955a 137 require_once "modules/pref-prefs.php";
ef8be8ea
AD
138 require_once "modules/popup-dialog.php";
139 require_once "modules/help.php";
140 require_once "modules/pref-feeds.php";
141 require_once "modules/pref-filters.php";
142 require_once "modules/pref-labels.php";
143 require_once "modules/pref-users.php";
c339343b 144 require_once "modules/pref-feed-browser.php";
ef8be8ea 145
b2804af7 146 if (!sanity_check($link)) { return; }
023fe037 147
45004d43
AD
148 switch($op) { // Select action according to $op value.
149 case "rpc":
150 // Handle remote procedure calls.
151 handle_rpc_request($link);
152 break; // rpc
153
154 case "feeds":
877be781
AD
155 if (ENABLE_GZIP_OUTPUT) {
156 ob_start("ob_gzhandler");
157 }
158
45004d43
AD
159 $tags = $_GET["tags"];
160
161 $subop = $_GET["subop"];
162
163 switch($subop) {
164 case "catchupAll":
165 db_query($link, "UPDATE ttrss_user_entries SET
166 last_read = NOW(),unread = false WHERE owner_uid = " . $_SESSION["uid"]);
ad0056a8
AD
167 ccache_zero_all($link, $_SESSION["uid"]);
168
45004d43
AD
169 break;
170
171 case "collapse":
172 $cat_id = db_escape_string($_GET["cid"]);
173
174 db_query($link, "UPDATE ttrss_feed_categories SET
175 collapsed = NOT collapsed WHERE id = '$cat_id' AND owner_uid = " .
176 $_SESSION["uid"]);
177 return;
178 break;
9d393c84
AD
179
180 case "catsortreset":
181 db_query($link, "UPDATE ttrss_feed_categories
182 SET order_id = 0 WHERE owner_uid = " . $_SESSION["uid"]);
183 return;
184 break;
185
186 case "catsort":
187 $corder = db_escape_string($_GET["corder"]);
188
189 $cats = split(",", $corder);
190
191 for ($i = 0; $i < count($cats); $i++) {
192 $cat_id = $cats[$i];
193
194 if ($cat_id > 0) {
195 db_query($link, "UPDATE ttrss_feed_categories
196 SET order_id = '$i' WHERE id = '$cat_id' AND
197 owner_uid = " . $_SESSION["uid"]);
198 }
199 }
200
201 return;
202 break;
203
45004d43 204 }
c3b81db0 205
45004d43
AD
206 outputFeedList($link, $tags);
207 break; // feeds
1cd17194 208
45004d43 209 case "view":
e097e8be 210
45004d43
AD
211 $id = db_escape_string($_GET["id"]);
212 $feed_id = db_escape_string($_GET["feed"]);
213 $cids = split(",", db_escape_string($_GET["cids"]));
214 $mode = db_escape_string($_GET["mode"]);
215 $omode = db_escape_string($_GET["omode"]);
e097e8be 216
6cc1fab3
AD
217 $csync = $_GET["csync"];
218
45004d43 219 print "<reply>";
e097e8be 220
45004d43
AD
221 // in prefetch mode we only output requested cids, main article
222 // just gets marked as read (it already exists in client cache)
e097e8be 223
45004d43
AD
224 if ($mode == "") {
225 outputArticleXML($link, $id, $feed_id);
eedfb635
AD
226 } else if ($mode == "zoom") {
227 outputArticleXML($link, $id, $feed_id, true, true);
45004d43
AD
228 } else {
229 catchupArticleById($link, $id, 0);
8a4c759e 230 ccache_update($link, $feed_id, $_SESSION["uid"]);
45004d43 231 }
e097e8be 232
a598370d
AD
233 if (!$_SESSION["bw_limit"]) {
234 foreach ($cids as $cid) {
235 if ($cid) {
236 outputArticleXML($link, $cid, $feed_id, false);
237 }
45004d43 238 }
e097e8be 239 }
e097e8be 240
d234a2e3 241
bd090ab4 242// if (get_pref($link, "SYNC_COUNTERS") || ($mode == "prefetch" && $csync)) {
45004d43
AD
243 print "<counters>";
244 getAllCounters($link, $omode);
245 print "</counters>";
bd090ab4 246// }
5a94a953 247
45004d43
AD
248 print "</reply>";
249 break; // view
1cd17194 250
45004d43 251 case "viewfeed":
1cd17194 252
45004d43
AD
253 $print_exec_time = true;
254 $timing_info = getmicrotime();
46921916 255
45004d43 256 print "<reply>";
3de0261a 257
45004d43 258 if ($_GET["debug"]) $timing_info = print_checkpoint("0", $timing_info);
46921916 259
45004d43 260 $omode = db_escape_string($_GET["omode"]);
3de0261a 261
45004d43
AD
262 $feed = db_escape_string($_GET["feed"]);
263 $subop = db_escape_string($_GET["subop"]);
264 $view_mode = db_escape_string($_GET["view_mode"]);
265 $limit = db_escape_string($_GET["limit"]);
266 $cat_view = db_escape_string($_GET["cat"]);
267 $next_unread_feed = db_escape_string($_GET["nuf"]);
268 $offset = db_escape_string($_GET["skip"]);
081e527d 269 $vgroup_last_feed = db_escape_string($_GET["vgrlf"]);
6cc1fab3 270 $csync = $_GET["csync"];
7b4d02a8 271 $order_by = db_escape_string($_GET["order_by"]);
203de776 272
34c4e5fc 273 ccache_update($link, $feed, $_SESSION["uid"], $cat_view);
0737b95a 274
45004d43
AD
275 set_pref($link, "_DEFAULT_VIEW_MODE", $view_mode);
276 set_pref($link, "_DEFAULT_VIEW_LIMIT", $limit);
7b4d02a8 277 set_pref($link, "_DEFAULT_VIEW_ORDER_BY", $order_by);
40496720 278
45004d43
AD
279 if (!$cat_view && preg_match("/^[0-9][0-9]*$/", $feed)) {
280 db_query($link, "UPDATE ttrss_feeds SET last_viewed = NOW()
281 WHERE id = '$feed' AND owner_uid = ".$_SESSION["uid"]);
282 }
7466dc6a 283
3d72bbdb 284 print "<headlines id=\"$feed\" is_cat=\"$cat_view\"><![CDATA[";
a5c815d3
AD
285
286 $override_order = false;
287
288 switch ($order_by) {
289 case "date":
290 if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
291 $override_order = "updated";
292 } else {
293 $override_order = "updated DESC";
294 }
295 break;
c50e2b30 296
a5c815d3
AD
297 case "title":
298 $override_order = "updated DESC";
299 break;
d76a3b03 300
a5c815d3
AD
301 case "score":
302 $override_order = "score DESC";
303 break;
304 }
e19c1824 305
a5c815d3
AD
306 $ret = outputHeadlinesList($link, $feed, $subop,
307 $view_mode, $limit, $cat_view, $next_unread_feed, $offset,
308 $vgroup_last_feed, $override_order);
7b4d02a8 309
a5c815d3
AD
310 $topmost_article_ids = $ret[0];
311 $headlines_count = $ret[1];
312 $returned_feed = $ret[2];
313 $disable_cache = $ret[3];
314 $vgroup_last_feed = $ret[4];
7b4d02a8 315
a5c815d3 316 print "]]></headlines>";
46921916 317
a5c815d3
AD
318 print "<headlines-count value=\"$headlines_count\"/>";
319 print "<vgroup-last-feed value=\"$vgroup_last_feed\"/>";
081e527d 320
a5c815d3
AD
321 $headlines_unread = ccache_find($link, $returned_feed, $_SESSION["uid"]);
322
323 print "<headlines-unread value=\"$headlines_unread\"/>";
324 printf("<disable-cache value=\"%d\"/>", $disable_cache);
325
326 if ($_GET["debug"]) $timing_info = print_checkpoint("10", $timing_info);
327
328 if (is_array($topmost_article_ids) && !get_pref($link, 'COMBINED_DISPLAY_MODE') && !$_SESSION["bw_limit"]) {
329 print "<articles>";
330 foreach ($topmost_article_ids as $id) {
331 outputArticleXML($link, $id, $feed, false);
45004d43 332 }
a5c815d3 333 print "</articles>";
961f4c73 334 }
961f4c73 335
45004d43 336 if ($_GET["debug"]) $timing_info = print_checkpoint("20", $timing_info);
46921916 337
6cc1fab3
AD
338 $viewfeed_ctr_interval = 300;
339
edd56fe5 340 if ($csync || $_SESSION["bw_limit"]) {
6cc1fab3
AD
341 $viewfeed_ctr_interval = 60;
342 }
343
bd090ab4
AD
344// if (get_pref($link, "SYNC_COUNTERS") ||
345// time() - $_SESSION["get_all_counters_stamp"] > $viewfeed_ctr_interval) {
0bdec456
AD
346// print "<counters>";
347// getAllCounters($link, $omode, $feed);
348// print "</counters>";
349// }
350
351 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
b1676464
AD
352 if (!$offset) {
353 print "<counters>";
354 getAllCounters($link, $omode, $feed);
355 print "</counters>";
356 }
0bdec456 357 }
98bea1b1 358
45004d43 359 if ($_GET["debug"]) $timing_info = print_checkpoint("30", $timing_info);
46921916 360
45004d43 361 print_runtime_info($link);
03c88bdd 362
45004d43
AD
363 print "</reply>";
364 break; // viewfeed
1cd17194 365
45004d43
AD
366 case "pref-feeds":
367 module_pref_feeds($link);
368 break; // pref-feeds
a7f22b70 369
45004d43
AD
370 case "pref-filters":
371 module_pref_filters($link);
372 break; // pref-filters
a0476535 373
45004d43
AD
374 case "pref-labels":
375 module_pref_labels($link);
376 break; // pref-labels
d0000401 377
45004d43
AD
378 case "pref-prefs":
379 module_pref_prefs($link);
380 break; // pref-prefs
f27d955a 381
45004d43
AD
382 case "pref-users":
383 module_pref_users($link);
384 break; // prefs-users
a0476535 385
45004d43
AD
386 case "help":
387 module_help($link);
388 break; // help
a0476535 389
45004d43
AD
390 case "dlg":
391 module_popup_dialog($link);
392 break; // dlg
a7f22b70 393
45004d43
AD
394 case "pref-pub-items":
395 module_pref_pub_items($link);
396 break; // pref-pub-items
e4f4b46f 397
45004d43
AD
398 case "globalUpdateFeeds":
399 // update feeds of all users, may be used anonymously
e4f4b46f 400
5cbaf873 401 print "<!--";
45004d43 402 // Update all feeds needing a update.
5cbaf873
AD
403 update_daemon_common($link, 0, true, true);
404 print " -->";
a7f22b70 405
45004d43
AD
406 print "<rpc-reply>
407 <message msg=\"All feeds updated\"/>
408 </rpc-reply>";
409 break; // globalUpdateFeeds
e5d758e3 410
45004d43
AD
411 case "pref-feed-browser":
412 module_pref_feed_browser($link);
413 break; // pref-feed-browser
c6232e43 414
45004d43
AD
415 case "publish":
416 $key = db_escape_string($_GET["key"]);
ead2715d 417 $limit = (int)db_escape_string($_GET["limit"]);
945c243e 418
45004d43
AD
419 $result = db_query($link, "SELECT login, owner_uid
420 FROM ttrss_user_prefs, ttrss_users WHERE
421 pref_name = '_PREFS_PUBLISH_KEY' AND
422 value = '$key' AND
423 ttrss_users.id = owner_uid");
945c243e 424
45004d43
AD
425 if (db_num_rows($result) == 1) {
426 $owner = db_fetch_result($result, 0, "owner_uid");
427 $login = db_fetch_result($result, 0, "login");
945c243e 428
ead2715d 429 generate_syndicated_feed($link, $owner, -2, false, $limit);
945c243e 430
45004d43
AD
431 } else {
432 print "<error>User not found</error>";
433 }
434 break; // publish
18664970 435
45004d43
AD
436 case "rss":
437 $feed = db_escape_string($_GET["id"]);
438 $user = db_escape_string($_GET["user"]);
439 $pass = db_escape_string($_GET["pass"]);
440 $is_cat = $_GET["is_cat"] != false;
ead2715d 441 $limit = (int)db_escape_string($_GET["limit"]);
e1eb2147 442
45004d43
AD
443 $search = db_escape_string($_GET["q"]);
444 $match_on = db_escape_string($_GET["m"]);
445 $search_mode = db_escape_string($_GET["smode"]);
18664970 446
45004d43
AD
447 if (!$_SESSION["uid"] && $user && $pass) {
448 authenticate_user($link, $user, $pass);
449 }
18664970 450
45004d43
AD
451 if ($_SESSION["uid"] ||
452 http_authenticate_user($link)) {
945c243e 453
ead2715d 454 generate_syndicated_feed($link, 0, $feed, $is_cat, $limit,
45004d43
AD
455 $search, $search_mode, $match_on);
456 }
457 break; // rss
18664970 458
45004d43
AD
459 case "labelFromSearch":
460 $search = db_escape_string($_GET["search"]);
461 $search_mode = db_escape_string($_GET["smode"]);
462 $match_on = db_escape_string($_GET["match"]);
463 $is_cat = db_escape_string($_GET["is_cat"]);
464 $title = db_escape_string($_GET["title"]);
465 $feed = sprintf("%d", $_GET["feed"]);
88040f57 466
45004d43 467 $label_qparts = array();
88040f57 468
45004d43 469 $search_expr = getSearchSql($search, $match_on);
88040f57 470
45004d43
AD
471 if ($is_cat) {
472 if ($feed != 0) {
473 $search_expr .= " AND ttrss_feeds.cat_id = $feed ";
474 } else {
475 $search_expr .= " AND ttrss_feeds.cat_id IS NULL ";
476 }
88040f57 477 } else {
45004d43
AD
478 if ($search_mode == "all_feeds") {
479 // NOOP
480 } else if ($search_mode == "this_cat") {
88040f57 481
45004d43
AD
482 $tmp_result = db_query($link, "SELECT cat_id
483 FROM ttrss_feeds WHERE id = '$feed'");
88040f57 484
45004d43 485 $cat_id = db_fetch_result($tmp_result, 0, "cat_id");
88040f57 486
45004d43
AD
487 if ($cat_id > 0) {
488 $search_expr .= " AND ttrss_feeds.cat_id = $cat_id ";
489 } else {
490 $search_expr .= " AND ttrss_feeds.cat_id IS NULL ";
491 }
88040f57 492 } else {
45004d43 493 $search_expr .= " AND ttrss_feeds.id = $feed ";
88040f57 494 }
88040f57 495
45004d43 496 }
88040f57 497
45004d43 498 $search_expr = db_escape_string($search_expr);
88040f57 499
45004d43 500 print $search_expr;
88040f57 501
45004d43
AD
502 if ($title) {
503 $result = db_query($link,
504 "INSERT INTO ttrss_labels (sql_exp,description,owner_uid)
505 VALUES ('$search_expr', '$title', '".$_SESSION["uid"]."')");
506 }
507 break; // labelFromSearch
f3acc32e 508
45004d43
AD
509 case "getUnread":
510 $login = db_escape_string($_GET["login"]);
f3acc32e 511
45004d43 512 header("Content-Type: text/plain; charset=utf-8");
f3acc32e 513
45004d43 514 $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login'");
7e3634d9 515
45004d43
AD
516 if (db_num_rows($result) == 1) {
517 $uid = db_fetch_result($result, 0, "id");
518 print getGlobalUnread($link, $uid);
519 } else {
520 print "-1;User not found";
521 }
7e3634d9 522
45004d43
AD
523 $print_exec_time = false;
524 break; // getUnread
9cd7c995 525
45004d43
AD
526 case "digestTest":
527 header("Content-Type: text/plain");
528 print_r(prepare_headlines_digest($link, $_SESSION["uid"]));
529 $print_exec_time = false;
530 break; // digestTest
448b0abd 531
45004d43
AD
532 case "digestSend":
533 header("Content-Type: text/plain");
534 send_headlines_digests($link);
535 $print_exec_time = false;
536 break; // digestSend
7e3634d9 537
45004d43 538 } // Select action according to $op value.
f3acc32e 539
45004d43 540 // We close the connection to database.
4b3dff6e 541 db_close($link);
1cd17194 542?>
406d9489 543
7e3634d9 544<?php if ($print_exec_time) { ?>
1d3a17c7 545<!-- <?php echo sprintf("Backend execution time: %.4f seconds", getmicrotime() - $script_started) ?> -->
f3acc32e 546<?php } ?>