]>
Commit | Line | Data |
---|---|---|
6afcbcd1 AD |
1 | <?php |
2 | class Article extends Handler_Protected { | |
3 | ||
4 | function csrf_ignore($method) { | |
1c9bda91 | 5 | $csrf_ignored = array("redirect", "editarticletags"); |
6afcbcd1 AD |
6 | |
7 | return array_search($method, $csrf_ignored) !== false; | |
8 | } | |
9 | ||
10 | function redirect() { | |
d9c85e0f | 11 | $id = $this->dbh->escape_string($_REQUEST['id']); |
6afcbcd1 | 12 | |
d9c85e0f | 13 | $result = $this->dbh->query("SELECT link FROM ttrss_entries, ttrss_user_entries |
6afcbcd1 AD |
14 | WHERE id = '$id' AND id = ref_id AND owner_uid = '".$_SESSION['uid']."' |
15 | LIMIT 1"); | |
16 | ||
d9c85e0f AD |
17 | if ($this->dbh->num_rows($result) == 1) { |
18 | $article_url = $this->dbh->fetch_result($result, 0, 'link'); | |
6afcbcd1 AD |
19 | $article_url = str_replace("\n", "", $article_url); |
20 | ||
21 | header("Location: $article_url"); | |
22 | return; | |
23 | ||
24 | } else { | |
25 | print_error(__("Article not found.")); | |
26 | } | |
27 | } | |
28 | ||
29 | function view() { | |
d9c85e0f AD |
30 | $id = $this->dbh->escape_string($_REQUEST["id"]); |
31 | $cids = explode(",", $this->dbh->escape_string($_REQUEST["cids"])); | |
32 | $mode = $this->dbh->escape_string($_REQUEST["mode"]); | |
6afcbcd1 AD |
33 | |
34 | // in prefetch mode we only output requested cids, main article | |
35 | // just gets marked as read (it already exists in client cache) | |
36 | ||
37 | $articles = array(); | |
38 | ||
39 | if ($mode == "") { | |
a42c55f0 | 40 | array_push($articles, format_article($id, false)); |
6afcbcd1 | 41 | } else if ($mode == "zoom") { |
a42c55f0 | 42 | array_push($articles, format_article($id, true, true)); |
6afcbcd1 | 43 | } else if ($mode == "raw") { |
f48f292d | 44 | if (isset($_REQUEST['html'])) { |
6afcbcd1 | 45 | header("Content-Type: text/html"); |
5bbc4bb4 | 46 | print '<link rel="stylesheet" type="text/css" href="css/tt-rss.css"/>'; |
6afcbcd1 AD |
47 | } |
48 | ||
f48f292d | 49 | $article = format_article($id, false, isset($_REQUEST["zoom"])); |
6afcbcd1 AD |
50 | print $article['content']; |
51 | return; | |
52 | } | |
53 | ||
a42c55f0 | 54 | $this->catchupArticleById($id, 0); |
6afcbcd1 AD |
55 | |
56 | if (!$_SESSION["bw_limit"]) { | |
57 | foreach ($cids as $cid) { | |
58 | if ($cid) { | |
a42c55f0 | 59 | array_push($articles, format_article($cid, false, false)); |
6afcbcd1 AD |
60 | } |
61 | } | |
62 | } | |
63 | ||
64 | print json_encode($articles); | |
65 | } | |
66 | ||
a42c55f0 | 67 | private function catchupArticleById($id, $cmode) { |
6afcbcd1 AD |
68 | |
69 | if ($cmode == 0) { | |
d9c85e0f | 70 | $this->dbh->query("UPDATE ttrss_user_entries SET |
6afcbcd1 AD |
71 | unread = false,last_read = NOW() |
72 | WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); | |
73 | } else if ($cmode == 1) { | |
d9c85e0f | 74 | $this->dbh->query("UPDATE ttrss_user_entries SET |
6afcbcd1 AD |
75 | unread = true |
76 | WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); | |
77 | } else { | |
d9c85e0f | 78 | $this->dbh->query("UPDATE ttrss_user_entries SET |
6afcbcd1 AD |
79 | unread = NOT unread,last_read = NOW() |
80 | WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); | |
81 | } | |
82 | ||
a42c55f0 AD |
83 | $feed_id = getArticleFeed($id); |
84 | ccache_update($feed_id, $_SESSION["uid"]); | |
6afcbcd1 AD |
85 | } |
86 | ||
a42c55f0 | 87 | static function create_published_article($title, $url, $content, $labels_str, |
6afcbcd1 AD |
88 | $owner_uid) { |
89 | ||
5e3d5480 | 90 | $guid = 'SHA1:' . sha1("ttshared:" . $url . $owner_uid); // include owner_uid to prevent global GUID clash |
666cd333 AD |
91 | |
92 | if (!$content) { | |
93 | $pluginhost = new PluginHost(); | |
94 | $pluginhost->load_all(PluginHost::KIND_ALL, $owner_uid); | |
7af2e795 | 95 | $pluginhost->load_data(); |
666cd333 AD |
96 | |
97 | $af_readability = $pluginhost->get_plugin("Af_Readability"); | |
98 | ||
99 | if ($af_readability) { | |
7af2e795 | 100 | $enable_share_anything = $pluginhost->get($af_readability, "enable_share_anything"); |
666cd333 | 101 | |
7af2e795 AD |
102 | if ($enable_share_anything) { |
103 | $extracted_content = $af_readability->extract_content($url); | |
104 | ||
105 | if ($extracted_content) $content = db_escape_string($extracted_content); | |
106 | } | |
666cd333 AD |
107 | } |
108 | } | |
109 | ||
6afcbcd1 AD |
110 | $content_hash = sha1($content); |
111 | ||
112 | if ($labels_str != "") { | |
113 | $labels = explode(",", $labels_str); | |
114 | } else { | |
115 | $labels = array(); | |
116 | } | |
117 | ||
118 | $rc = false; | |
119 | ||
120 | if (!$title) $title = $url; | |
121 | if (!$title && !$url) return false; | |
122 | ||
123 | if (filter_var($url, FILTER_VALIDATE_URL) === FALSE) return false; | |
124 | ||
a42c55f0 | 125 | db_query("BEGIN"); |
6afcbcd1 AD |
126 | |
127 | // only check for our user data here, others might have shared this with different content etc | |
a42c55f0 | 128 | $result = db_query("SELECT id FROM ttrss_entries, ttrss_user_entries WHERE |
74163057 | 129 | guid = '$guid' AND ref_id = id AND owner_uid = '$owner_uid' LIMIT 1"); |
6afcbcd1 AD |
130 | |
131 | if (db_num_rows($result) != 0) { | |
132 | $ref_id = db_fetch_result($result, 0, "id"); | |
133 | ||
a42c55f0 | 134 | $result = db_query("SELECT int_id FROM ttrss_user_entries WHERE |
6afcbcd1 AD |
135 | ref_id = '$ref_id' AND owner_uid = '$owner_uid' LIMIT 1"); |
136 | ||
137 | if (db_num_rows($result) != 0) { | |
138 | $int_id = db_fetch_result($result, 0, "int_id"); | |
139 | ||
a42c55f0 | 140 | db_query("UPDATE ttrss_entries SET |
6afcbcd1 AD |
141 | content = '$content', content_hash = '$content_hash' WHERE id = '$ref_id'"); |
142 | ||
a42c55f0 | 143 | db_query("UPDATE ttrss_user_entries SET published = true, |
d2888e88 | 144 | last_published = NOW() WHERE |
6afcbcd1 AD |
145 | int_id = '$int_id' AND owner_uid = '$owner_uid'"); |
146 | } else { | |
147 | ||
a42c55f0 | 148 | db_query("INSERT INTO ttrss_user_entries |
d2888e88 AD |
149 | (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, |
150 | last_read, note, unread, last_published) | |
6afcbcd1 | 151 | VALUES |
d2888e88 | 152 | ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false, NOW())"); |
6afcbcd1 AD |
153 | } |
154 | ||
155 | if (count($labels) != 0) { | |
156 | foreach ($labels as $label) { | |
a42c55f0 | 157 | label_add_article($ref_id, trim($label), $owner_uid); |
6afcbcd1 AD |
158 | } |
159 | } | |
160 | ||
161 | $rc = true; | |
162 | ||
163 | } else { | |
a42c55f0 | 164 | $result = db_query("INSERT INTO ttrss_entries |
6afcbcd1 AD |
165 | (title, guid, link, updated, content, content_hash, date_entered, date_updated) |
166 | VALUES | |
167 | ('$title', '$guid', '$url', NOW(), '$content', '$content_hash', NOW(), NOW())"); | |
168 | ||
a42c55f0 | 169 | $result = db_query("SELECT id FROM ttrss_entries WHERE guid = '$guid'"); |
6afcbcd1 AD |
170 | |
171 | if (db_num_rows($result) != 0) { | |
172 | $ref_id = db_fetch_result($result, 0, "id"); | |
173 | ||
a42c55f0 | 174 | db_query("INSERT INTO ttrss_user_entries |
d2888e88 AD |
175 | (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, |
176 | last_read, note, unread, last_published) | |
6afcbcd1 | 177 | VALUES |
d2888e88 | 178 | ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false, NOW())"); |
6afcbcd1 AD |
179 | |
180 | if (count($labels) != 0) { | |
181 | foreach ($labels as $label) { | |
a42c55f0 | 182 | label_add_article($ref_id, trim($label), $owner_uid); |
6afcbcd1 AD |
183 | } |
184 | } | |
185 | ||
186 | $rc = true; | |
187 | } | |
188 | } | |
189 | ||
a42c55f0 | 190 | db_query("COMMIT"); |
6afcbcd1 AD |
191 | |
192 | return $rc; | |
193 | } | |
194 | ||
1c9bda91 AD |
195 | function editArticleTags() { |
196 | ||
197 | print __("Tags for this article (separated by commas):")."<br>"; | |
198 | ||
d9c85e0f | 199 | $param = $this->dbh->escape_string($_REQUEST['param']); |
1c9bda91 | 200 | |
d9c85e0f | 201 | $tags = get_article_tags($this->dbh->escape_string($param)); |
1c9bda91 AD |
202 | |
203 | $tags_str = join(", ", $tags); | |
204 | ||
328118d1 AD |
205 | print_hidden("id", "$param"); |
206 | print_hidden("op", "article"); | |
207 | print_hidden("method", "setArticleTags"); | |
1c9bda91 AD |
208 | |
209 | print "<table width='100%'><tr><td>"; | |
210 | ||
211 | print "<textarea dojoType=\"dijit.form.SimpleTextarea\" rows='4' | |
8b8568e9 | 212 | style='height : 100px; font-size : 12px; width : 98%' id=\"tags_str\" |
1c9bda91 AD |
213 | name='tags_str'>$tags_str</textarea> |
214 | <div class=\"autocomplete\" id=\"tags_choices\" | |
215 | style=\"display:none\"></div>"; | |
216 | ||
217 | print "</td></tr></table>"; | |
218 | ||
219 | print "<div class='dlgButtons'>"; | |
220 | ||
221 | print "<button dojoType=\"dijit.form.Button\" | |
222 | onclick=\"dijit.byId('editTagsDlg').execute()\">".__('Save')."</button> "; | |
223 | print "<button dojoType=\"dijit.form.Button\" | |
224 | onclick=\"dijit.byId('editTagsDlg').hide()\">".__('Cancel')."</button>"; | |
225 | print "</div>"; | |
226 | ||
227 | } | |
6afcbcd1 | 228 | |
d719b062 | 229 | function setScore() { |
d9c85e0f AD |
230 | $ids = $this->dbh->escape_string($_REQUEST['id']); |
231 | $score = (int)$this->dbh->escape_string($_REQUEST['score']); | |
d719b062 | 232 | |
d9c85e0f | 233 | $this->dbh->query("UPDATE ttrss_user_entries SET |
d719b062 AD |
234 | score = '$score' WHERE ref_id IN ($ids) AND owner_uid = " . $_SESSION["uid"]); |
235 | ||
6f7798b6 | 236 | print json_encode(array("id" => $ids, |
a72cd54c AD |
237 | "score" => (int)$score, |
238 | "score_pic" => get_score_pic($score))); | |
239 | } | |
240 | ||
241 | function getScore() { | |
242 | $id = $this->dbh->escape_string($_REQUEST['id']); | |
243 | ||
244 | $result = $this->dbh->query("SELECT score FROM ttrss_user_entries WHERE ref_id = $id AND owner_uid = " . $_SESSION["uid"]); | |
245 | $score = $this->dbh->fetch_result($result, 0, "score"); | |
246 | ||
247 | print json_encode(array("id" => $id, | |
248 | "score" => (int)$score, | |
d719b062 AD |
249 | "score_pic" => get_score_pic($score))); |
250 | } | |
251 | ||
6afcbcd1 | 252 | |
5df8be5c AD |
253 | function setArticleTags() { |
254 | ||
d9c85e0f | 255 | $id = $this->dbh->escape_string($_REQUEST["id"]); |
5df8be5c | 256 | |
d9c85e0f | 257 | $tags_str = $this->dbh->escape_string($_REQUEST["tags_str"]); |
5df8be5c AD |
258 | $tags = array_unique(trim_array(explode(",", $tags_str))); |
259 | ||
d9c85e0f | 260 | $this->dbh->query("BEGIN"); |
5df8be5c | 261 | |
d9c85e0f | 262 | $result = $this->dbh->query("SELECT int_id FROM ttrss_user_entries WHERE |
5df8be5c AD |
263 | ref_id = '$id' AND owner_uid = '".$_SESSION["uid"]."' LIMIT 1"); |
264 | ||
d9c85e0f | 265 | if ($this->dbh->num_rows($result) == 1) { |
5df8be5c AD |
266 | |
267 | $tags_to_cache = array(); | |
268 | ||
d9c85e0f | 269 | $int_id = $this->dbh->fetch_result($result, 0, "int_id"); |
5df8be5c | 270 | |
d9c85e0f | 271 | $this->dbh->query("DELETE FROM ttrss_tags WHERE |
5df8be5c AD |
272 | post_int_id = $int_id AND owner_uid = '".$_SESSION["uid"]."'"); |
273 | ||
274 | foreach ($tags as $tag) { | |
275 | $tag = sanitize_tag($tag); | |
276 | ||
277 | if (!tag_is_valid($tag)) { | |
278 | continue; | |
279 | } | |
280 | ||
281 | if (preg_match("/^[0-9]*$/", $tag)) { | |
282 | continue; | |
283 | } | |
284 | ||
285 | // print "<!-- $id : $int_id : $tag -->"; | |
286 | ||
287 | if ($tag != '') { | |
d9c85e0f | 288 | $this->dbh->query("INSERT INTO ttrss_tags |
5df8be5c AD |
289 | (post_int_id, owner_uid, tag_name) VALUES ('$int_id', '".$_SESSION["uid"]."', '$tag')"); |
290 | } | |
291 | ||
292 | array_push($tags_to_cache, $tag); | |
293 | } | |
294 | ||
295 | /* update tag cache */ | |
296 | ||
297 | sort($tags_to_cache); | |
298 | $tags_str = join(",", $tags_to_cache); | |
299 | ||
d9c85e0f | 300 | $this->dbh->query("UPDATE ttrss_user_entries |
5df8be5c AD |
301 | SET tag_cache = '$tags_str' WHERE ref_id = '$id' |
302 | AND owner_uid = " . $_SESSION["uid"]); | |
303 | } | |
304 | ||
d9c85e0f | 305 | $this->dbh->query("COMMIT"); |
5df8be5c | 306 | |
a42c55f0 | 307 | $tags = get_article_tags($id); |
5df8be5c AD |
308 | $tags_str = format_tags_string($tags, $id); |
309 | $tags_str_full = join(", ", $tags); | |
310 | ||
311 | if (!$tags_str_full) $tags_str_full = __("no tags"); | |
312 | ||
313 | print json_encode(array("id" => (int)$id, | |
314 | "content" => $tags_str, "content_full" => $tags_str_full)); | |
315 | } | |
316 | ||
c83554bd AD |
317 | |
318 | function completeTags() { | |
d9c85e0f | 319 | $search = $this->dbh->escape_string($_REQUEST["search"]); |
c83554bd | 320 | |
d9c85e0f | 321 | $result = $this->dbh->query("SELECT DISTINCT tag_name FROM ttrss_tags |
c83554bd AD |
322 | WHERE owner_uid = '".$_SESSION["uid"]."' AND |
323 | tag_name LIKE '$search%' ORDER BY tag_name | |
324 | LIMIT 10"); | |
325 | ||
326 | print "<ul>"; | |
d9c85e0f | 327 | while ($line = $this->dbh->fetch_assoc($result)) { |
c83554bd AD |
328 | print "<li>" . $line["tag_name"] . "</li>"; |
329 | } | |
330 | print "</ul>"; | |
331 | } | |
332 | ||
4b7726f0 AD |
333 | function assigntolabel() { |
334 | return $this->labelops(true); | |
335 | } | |
336 | ||
337 | function removefromlabel() { | |
338 | return $this->labelops(false); | |
339 | } | |
340 | ||
341 | private function labelops($assign) { | |
342 | $reply = array(); | |
343 | ||
d9c85e0f AD |
344 | $ids = explode(",", $this->dbh->escape_string($_REQUEST["ids"])); |
345 | $label_id = $this->dbh->escape_string($_REQUEST["lid"]); | |
4b7726f0 | 346 | |
d9c85e0f | 347 | $label = $this->dbh->escape_string(label_find_caption($label_id, |
4b7726f0 AD |
348 | $_SESSION["uid"])); |
349 | ||
350 | $reply["info-for-headlines"] = array(); | |
351 | ||
352 | if ($label) { | |
353 | ||
354 | foreach ($ids as $id) { | |
355 | ||
356 | if ($assign) | |
a42c55f0 | 357 | label_add_article($id, $label, $_SESSION["uid"]); |
4b7726f0 | 358 | else |
a42c55f0 | 359 | label_remove_article($id, $label, $_SESSION["uid"]); |
4b7726f0 | 360 | |
a42c55f0 | 361 | $labels = get_article_labels($id, $_SESSION["uid"]); |
4b7726f0 AD |
362 | |
363 | array_push($reply["info-for-headlines"], | |
7b55001e | 364 | array("id" => $id, "labels" => format_article_labels($labels))); |
4b7726f0 AD |
365 | |
366 | } | |
367 | } | |
368 | ||
369 | $reply["message"] = "UPDATE_COUNTERS"; | |
370 | ||
371 | print json_encode($reply); | |
372 | } | |
373 | ||
374 | ||
c83554bd | 375 | |
6afcbcd1 | 376 | } |