]> git.wh0rd.org - tt-rss.git/blame - include/functions2.php
move getArticleFeed to Article
[tt-rss.git] / include / functions2.php
CommitLineData
97b7d5c0
AD
1<?php
2 function make_init_params() {
3 $params = array();
4
5 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
6 "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
7 "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
8 "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
9
10 $params[strtolower($param)] = (int) get_pref($param);
11 }
12
13 $params["icons_url"] = ICONS_URL;
14 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
15 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
16 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
17 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
18 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
19 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
f6cbe9a5
AD
20
21 $theme = get_pref( "USER_CSS_THEME", false, false);
22 $params["theme"] = theme_valid("$theme") ? $theme : "";
23
84e36b61 24 $params["plugins"] = implode(", ", PluginHost::getInstance()->get_plugin_names());
97b7d5c0 25
31460f84
AD
26 $params["php_platform"] = PHP_OS;
27 $params["php_version"] = PHP_VERSION;
28
29 $params["sanity_checksum"] = sha1(file_get_contents("include/sanity_check.php"));
30
97b7d5c0
AD
31 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
32 ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
33
34 $max_feed_id = db_fetch_result($result, 0, "mid");
35 $num_feeds = db_fetch_result($result, 0, "nf");
36
37 $params["max_feed_id"] = (int) $max_feed_id;
38 $params["num_feeds"] = (int) $num_feeds;
39
40 $params["hotkeys"] = get_hotkeys_map();
41
42 $params["csrf_token"] = $_SESSION["csrf_token"];
43 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
44
45 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
46
70c0a8c2
AD
47 $params["icon_alert"] = base64_img("images/alert.png");
48 $params["icon_information"] = base64_img("images/information.png");
49 $params["icon_cross"] = base64_img("images/cross.png");
50 $params["icon_indicator_white"] = base64_img("images/indicator_white.gif");
51
97b7d5c0
AD
52 return $params;
53 }
54
55 function get_hotkeys_info() {
56 $hotkeys = array(
57 __("Navigation") => array(
58 "next_feed" => __("Open next feed"),
59 "prev_feed" => __("Open previous feed"),
60 "next_article" => __("Open next article"),
61 "prev_article" => __("Open previous article"),
62 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
63 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
64 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
65 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
66 "search_dialog" => __("Show search dialog")),
67 __("Article") => array(
68 "toggle_mark" => __("Toggle starred"),
69 "toggle_publ" => __("Toggle published"),
70 "toggle_unread" => __("Toggle unread"),
71 "edit_tags" => __("Edit tags"),
97b7d5c0
AD
72 "open_in_new_window" => __("Open in new window"),
73 "catchup_below" => __("Mark below as read"),
74 "catchup_above" => __("Mark above as read"),
75 "article_scroll_down" => __("Scroll down"),
76 "article_scroll_up" => __("Scroll up"),
77 "select_article_cursor" => __("Select article under cursor"),
78 "email_article" => __("Email article"),
79 "close_article" => __("Close/collapse article"),
80 "toggle_expand" => __("Toggle article expansion (combined mode)"),
81 "toggle_widescreen" => __("Toggle widescreen mode"),
82 "toggle_embed_original" => __("Toggle embed original")),
83 __("Article selection") => array(
84 "select_all" => __("Select all articles"),
85 "select_unread" => __("Select unread"),
86 "select_marked" => __("Select starred"),
87 "select_published" => __("Select published"),
88 "select_invert" => __("Invert selection"),
89 "select_none" => __("Deselect everything")),
90 __("Feed") => array(
91 "feed_refresh" => __("Refresh current feed"),
92 "feed_unhide_read" => __("Un/hide read feeds"),
93 "feed_subscribe" => __("Subscribe to feed"),
94 "feed_edit" => __("Edit feed"),
95 "feed_catchup" => __("Mark as read"),
96 "feed_reverse" => __("Reverse headlines"),
64c24ecb 97 "feed_toggle_vgroup" => __("Toggle headline grouping"),
97b7d5c0 98 "feed_debug_update" => __("Debug feed update"),
6b0a17ad 99 "feed_debug_viewfeed" => __("Debug viewfeed()"),
97b7d5c0
AD
100 "catchup_all" => __("Mark all feeds as read"),
101 "cat_toggle_collapse" => __("Un/collapse current category"),
102 "toggle_combined_mode" => __("Toggle combined mode"),
103 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
104 __("Go to") => array(
105 "goto_all" => __("All articles"),
106 "goto_fresh" => __("Fresh"),
107 "goto_marked" => __("Starred"),
108 "goto_published" => __("Published"),
109 "goto_tagcloud" => __("Tag cloud"),
110 "goto_prefs" => __("Preferences")),
111 __("Other") => array(
112 "create_label" => __("Create label"),
113 "create_filter" => __("Create filter"),
114 "collapse_sidebar" => __("Un/collapse sidebar"),
115 "help_dialog" => __("Show help dialog"))
116 );
117
118 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
119 $hotkeys = $plugin->hook_hotkey_info($hotkeys);
120 }
121
122 return $hotkeys;
123 }
124
125 function get_hotkeys_map() {
126 $hotkeys = array(
127// "navigation" => array(
128 "k" => "next_feed",
129 "j" => "prev_feed",
130 "n" => "next_article",
131 "p" => "prev_article",
132 "(38)|up" => "prev_article",
133 "(40)|down" => "next_article",
134// "^(38)|Ctrl-up" => "prev_article_noscroll",
135// "^(40)|Ctrl-down" => "next_article_noscroll",
136 "(191)|/" => "search_dialog",
137// "article" => array(
138 "s" => "toggle_mark",
139 "*s" => "toggle_publ",
140 "u" => "toggle_unread",
141 "*t" => "edit_tags",
97b7d5c0
AD
142 "o" => "open_in_new_window",
143 "c p" => "catchup_below",
144 "c n" => "catchup_above",
145 "*n" => "article_scroll_down",
146 "*p" => "article_scroll_up",
147 "*(38)|Shift+up" => "article_scroll_up",
148 "*(40)|Shift+down" => "article_scroll_down",
149 "a *w" => "toggle_widescreen",
150 "a e" => "toggle_embed_original",
151 "e" => "email_article",
152 "a q" => "close_article",
153// "article_selection" => array(
154 "a a" => "select_all",
155 "a u" => "select_unread",
156 "a *u" => "select_marked",
157 "a p" => "select_published",
158 "a i" => "select_invert",
159 "a n" => "select_none",
160// "feed" => array(
161 "f r" => "feed_refresh",
162 "f a" => "feed_unhide_read",
163 "f s" => "feed_subscribe",
164 "f e" => "feed_edit",
165 "f q" => "feed_catchup",
166 "f x" => "feed_reverse",
64c24ecb 167 "f g" => "feed_toggle_vgroup",
97b7d5c0 168 "f *d" => "feed_debug_update",
6b0a17ad 169 "f *g" => "feed_debug_viewfeed",
97b7d5c0
AD
170 "f *c" => "toggle_combined_mode",
171 "f c" => "toggle_cdm_expanded",
172 "*q" => "catchup_all",
173 "x" => "cat_toggle_collapse",
174// "goto" => array(
175 "g a" => "goto_all",
176 "g f" => "goto_fresh",
177 "g s" => "goto_marked",
178 "g p" => "goto_published",
179 "g t" => "goto_tagcloud",
180 "g *p" => "goto_prefs",
181// "other" => array(
182 "(9)|Tab" => "select_article_cursor", // tab
183 "c l" => "create_label",
184 "c f" => "create_filter",
185 "c s" => "collapse_sidebar",
186 "^(191)|Ctrl+/" => "help_dialog",
187 );
188
189 if (get_pref('COMBINED_DISPLAY_MODE')) {
190 $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
191 $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
192 }
193
194 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
195 $hotkeys = $plugin->hook_hotkey_map($hotkeys);
196 }
197
198 $prefixes = array();
199
200 foreach (array_keys($hotkeys) as $hotkey) {
201 $pair = explode(" ", $hotkey, 2);
202
203 if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
204 array_push($prefixes, $pair[0]);
205 }
206 }
207
208 return array($prefixes, $hotkeys);
209 }
210
efcc5d36
AD
211 function check_for_update() {
212 if (defined("GIT_VERSION_TIMESTAMP")) {
465fb16d 213 $content = @fetch_file_contents(array("url" => "http://tt-rss.org/version.json", "timeout" => 5));
efcc5d36
AD
214
215 if ($content) {
216 $content = json_decode($content, true);
217
218 if ($content && isset($content["changeset"])) {
219 if ((int)GIT_VERSION_TIMESTAMP < (int)$content["changeset"]["timestamp"] &&
220 GIT_VERSION_HEAD != $content["changeset"]["id"]) {
221
222 return $content["changeset"]["id"];
223 }
224 }
225 }
226 }
227
119ba03b 228 return "";
efcc5d36
AD
229 }
230
79c891a8 231 function make_runtime_info($disable_update_check = false) {
97b7d5c0
AD
232 $data = array();
233
234 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
235 ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
236
237 $max_feed_id = db_fetch_result($result, 0, "mid");
238 $num_feeds = db_fetch_result($result, 0, "nf");
239
240 $data["max_feed_id"] = (int) $max_feed_id;
241 $data["num_feeds"] = (int) $num_feeds;
242
243 $data['last_article_id'] = getLastArticleId();
244 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
245
246 $data['dep_ts'] = calculate_dep_timestamp();
247 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
248
efcc5d36 249
79c891a8 250 if (CHECK_FOR_UPDATES && !$disable_update_check && $_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
efcc5d36
AD
251 $update_result = @check_for_update();
252
253 $data["update_result"] = $update_result;
254
255 $_SESSION["last_version_check"] = time();
256 }
257
97b7d5c0
AD
258 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
259
260 $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
261
262 if (time() - $_SESSION["daemon_stamp_check"] > 30) {
263
264 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
265
266 if ($stamp) {
267 $stamp_delta = time() - $stamp;
268
269 if ($stamp_delta > 1800) {
270 $stamp_check = 0;
271 } else {
272 $stamp_check = 1;
273 $_SESSION["daemon_stamp_check"] = time();
274 }
275
276 $data['daemon_stamp_ok'] = $stamp_check;
277
278 $stamp_fmt = date("Y.m.d, G:i", $stamp);
279
280 $data['daemon_stamp'] = $stamp_fmt;
281 }
282 }
283 }
284
97b7d5c0
AD
285 return $data;
286 }
287
60e68059 288 function search_to_sql($search, $search_language) {
97b7d5c0 289
28539f6a 290 $keywords = str_getcsv(trim($search), " ");
97b7d5c0
AD
291 $query_keywords = array();
292 $search_words = array();
e854442e 293 $search_query_leftover = array();
97b7d5c0 294
60e68059
AD
295 if ($search_language)
296 $search_language = db_escape_string(mb_strtolower($search_language));
297 else
298 $search_language = "english";
299
97b7d5c0
AD
300 foreach ($keywords as $k) {
301 if (strpos($k, "-") === 0) {
302 $k = substr($k, 1);
303 $not = "NOT";
304 } else {
305 $not = "";
306 }
307
308 $commandpair = explode(":", mb_strtolower($k), 2);
309
310 switch ($commandpair[0]) {
311 case "title":
312 if ($commandpair[1]) {
313 array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
314 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
315 } else {
316 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
317 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
318 array_push($search_words, $k);
319 }
320 break;
321 case "author":
322 if ($commandpair[1]) {
323 array_push($query_keywords, "($not (LOWER(author) LIKE '%".
324 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
325 } else {
326 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
327 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
328 array_push($search_words, $k);
329 }
330 break;
331 case "note":
332 if ($commandpair[1]) {
333 if ($commandpair[1] == "true")
334 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
335 else if ($commandpair[1] == "false")
336 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
337 else
338 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
339 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
340 } else {
341 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
342 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
343 if (!$not) array_push($search_words, $k);
344 }
345 break;
346 case "star":
347
348 if ($commandpair[1]) {
349 if ($commandpair[1] == "true")
350 array_push($query_keywords, "($not (marked = true))");
351 else
352 array_push($query_keywords, "($not (marked = false))");
353 } else {
354 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
355 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
356 if (!$not) array_push($search_words, $k);
357 }
358 break;
359 case "pub":
360 if ($commandpair[1]) {
361 if ($commandpair[1] == "true")
362 array_push($query_keywords, "($not (published = true))");
363 else
364 array_push($query_keywords, "($not (published = false))");
365
366 } else {
367 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
368 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
369 if (!$not) array_push($search_words, $k);
370 }
95a95b0a
S
371 break;
372 case "unread":
373 if ($commandpair[1]) {
374 if ($commandpair[1] == "true")
375 array_push($query_keywords, "($not (unread = true))");
376 else
377 array_push($query_keywords, "($not (unread = false))");
378
379 } else {
380 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
381 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
382 if (!$not) array_push($search_words, $k);
383 }
97b7d5c0
AD
384 break;
385 default:
386 if (strpos($k, "@") === 0) {
387
388 $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
389 $orig_ts = strtotime(substr($k, 1));
390 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
391
392 //$k = date("Y-m-d", strtotime(substr($k, 1)));
393
394 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
395 } else {
97b7d5c0 396
e854442e
AD
397 if (DB_TYPE == "pgsql") {
398 $k = mb_strtolower($k);
399 array_push($search_query_leftover, $not ? "!$k" : $k);
400 } else {
401 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
402 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
403 }
b4f544d3 404
e854442e 405 if (!$not) array_push($search_words, $k);
97b7d5c0
AD
406 }
407 }
408 }
409
e854442e
AD
410 if (count($search_query_leftover) > 0) {
411 $search_query_leftover = db_escape_string(implode(" & ", $search_query_leftover));
b4f544d3 412
e854442e
AD
413 if (DB_TYPE == "pgsql") {
414 array_push($query_keywords,
60e68059 415 "(tsvector_combined @@ to_tsquery('$search_language', '$search_query_leftover'))");
e854442e 416 }
b4f544d3
AD
417
418 }
419
97b7d5c0
AD
420 $search_query_part = implode("AND", $query_keywords);
421
422 return array($search_query_part, $search_words);
423 }
424
425 function getParentCategories($cat, $owner_uid) {
426 $rv = array();
427
428 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
429 WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
430
431 while ($line = db_fetch_assoc($result)) {
432 array_push($rv, $line["parent_cat"]);
433 $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
434 }
435
436 return $rv;
437 }
438
439 function getChildCategories($cat, $owner_uid) {
440 $rv = array();
441
442 $result = db_query("SELECT id FROM ttrss_feed_categories
443 WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
444
445 while ($line = db_fetch_assoc($result)) {
446 array_push($rv, $line["id"]);
447 $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
448 }
449
450 return $rv;
451 }
452
f5a0fb8b
AD
453 function queryFeedHeadlines($params) {
454
455 $feed = $params["feed"];
456 $limit = isset($params["limit"]) ? $params["limit"] : 30;
457 $view_mode = $params["view_mode"];
458 $cat_view = isset($params["cat_view"]) ? $params["cat_view"] : false;
459 $search = isset($params["search"]) ? $params["search"] : false;
60e68059 460 $search_language = isset($params["search_language"]) ? $params["search_language"] : "";
f5a0fb8b
AD
461 $override_order = isset($params["override_order"]) ? $params["override_order"] : false;
462 $offset = isset($params["offset"]) ? $params["offset"] : 0;
463 $owner_uid = isset($params["owner_uid"]) ? $params["owner_uid"] : $_SESSION["uid"];
f5a0fb8b
AD
464 $since_id = isset($params["since_id"]) ? $params["since_id"] : 0;
465 $include_children = isset($params["include_children"]) ? $params["include_children"] : false;
466 $ignore_vfeed_group = isset($params["ignore_vfeed_group"]) ? $params["ignore_vfeed_group"] : false;
467 $override_strategy = isset($params["override_strategy"]) ? $params["override_strategy"] : false;
468 $override_vfeed = isset($params["override_vfeed"]) ? $params["override_vfeed"] : false;
469 $start_ts = isset($params["start_ts"]) ? $params["start_ts"] : false;
48fefe2f 470 $check_first_id = isset($params["check_first_id"]) ? $params["check_first_id"] : false;
19e47ad6 471 $skip_first_id_check = isset($params["skip_first_id_check"]) ? $params["skip_first_id_check"] : false;
97b7d5c0
AD
472
473 $ext_tables_part = "";
83ce77a2
AD
474 $query_strategy_part = "";
475
97b7d5c0
AD
476 $search_words = array();
477
478 if ($search) {
baaf4c30
RH
479 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SEARCH) as $plugin) {
480 list($search_query_part, $search_words) = $plugin->hook_search($search);
9a6456fa 481 break;
baaf4c30 482 }
97b7d5c0 483
baaf4c30
RH
484 // fall back in case of no plugins
485 if (!$search_query_part) {
60e68059 486 list($search_query_part, $search_words) = search_to_sql($search, $search_language);
97b7d5c0 487 }
baaf4c30 488 $search_query_part .= " AND ";
97b7d5c0
AD
489 } else {
490 $search_query_part = "";
491 }
492
97b7d5c0
AD
493 if ($since_id) {
494 $since_id_part = "ttrss_entries.id > $since_id AND ";
495 } else {
496 $since_id_part = "";
497 }
498
499 $view_query_part = "";
500
501 if ($view_mode == "adaptive") {
502 if ($search) {
503 $view_query_part = " ";
504 } else if ($feed != -1) {
505
506 $unread = getFeedUnread($feed, $cat_view);
507
508 if ($cat_view && $feed > 0 && $include_children)
509 $unread += getCategoryChildrenUnread($feed);
510
0bd172cd
AD
511 if ($unread > 0) {
512 $view_query_part = " unread = true AND ";
0bd172cd 513 }
97b7d5c0
AD
514 }
515 }
516
517 if ($view_mode == "marked") {
518 $view_query_part = " marked = true AND ";
519 }
520
521 if ($view_mode == "has_note") {
522 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
523 }
524
525 if ($view_mode == "published") {
526 $view_query_part = " published = true AND ";
527 }
528
529 if ($view_mode == "unread" && $feed != -6) {
530 $view_query_part = " unread = true AND ";
531 }
532
533 if ($limit > 0) {
534 $limit_query_part = "LIMIT " . $limit;
535 }
536
537 $allow_archived = false;
538
539 $vfeed_query_part = "";
540
97b7d5c0 541 /* tags */
9090b874 542 if (!is_numeric($feed)) {
97b7d5c0
AD
543 $query_strategy_part = "true";
544 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
545 id = feed_id) as feed_title,";
97b7d5c0
AD
546 } else if ($feed > 0) {
547
548 if ($cat_view) {
549
550 if ($feed > 0) {
551 if ($include_children) {
552 # sub-cats
553 $subcats = getChildCategories($feed, $owner_uid);
554
555 array_push($subcats, $feed);
556 $query_strategy_part = "cat_id IN (".
557 implode(",", $subcats).")";
558
559 } else {
560 $query_strategy_part = "cat_id = '$feed'";
561 }
562
563 } else {
564 $query_strategy_part = "cat_id IS NULL";
565 }
566
567 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
568
569 } else {
570 $query_strategy_part = "feed_id = '$feed'";
571 }
572 } else if ($feed == 0 && !$cat_view) { // archive virtual feed
573 $query_strategy_part = "feed_id IS NULL";
574 $allow_archived = true;
575 } else if ($feed == 0 && $cat_view) { // uncategorized
576 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
577 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
578 } else if ($feed == -1) { // starred virtual feed
579 $query_strategy_part = "marked = true";
580 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
581 $allow_archived = true;
582
583 if (!$override_order) {
584 $override_order = "last_marked DESC, date_entered DESC, updated DESC";
585 }
586
587 } else if ($feed == -2) { // published virtual feed OR labels category
588
589 if (!$cat_view) {
590 $query_strategy_part = "published = true";
591 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
592 $allow_archived = true;
593
594 if (!$override_order) {
595 $override_order = "last_published DESC, date_entered DESC, updated DESC";
596 }
597
598 } else {
599 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
600
6ee255fb 601 $ext_tables_part = "ttrss_labels2,ttrss_user_labels2,";
97b7d5c0
AD
602
603 $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
604 ttrss_user_labels2.article_id = ref_id";
605
606 }
607 } else if ($feed == -6) { // recently read
608 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
884ae7a9
AD
609
610 if (DB_TYPE == "pgsql") {
6b860bd9 611 $query_strategy_part .= " AND last_read > NOW() - INTERVAL '1 DAY' ";
884ae7a9 612 } else {
6b860bd9 613 $query_strategy_part .= " AND last_read > DATE_SUB(NOW(), INTERVAL 1 DAY) ";
884ae7a9
AD
614 }
615
97b7d5c0
AD
616 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
617 $allow_archived = true;
ad593e43 618 $ignore_vfeed_group = true;
97b7d5c0
AD
619
620 if (!$override_order) $override_order = "last_read DESC";
621
97b7d5c0
AD
622 } else if ($feed == -3) { // fresh virtual feed
623 $query_strategy_part = "unread = true AND score >= 0";
624
625 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
626
627 if (DB_TYPE == "pgsql") {
628 $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
629 } else {
630 $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
631 }
632
633 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
634 } else if ($feed == -4) { // all articles virtual feed
635 $allow_archived = true;
636 $query_strategy_part = "true";
637 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
638 } else if ($feed <= LABEL_BASE_INDEX) { // labels
639 $label_id = feed_to_label_id($feed);
640
641 $query_strategy_part = "label_id = '$label_id' AND
642 ttrss_labels2.id = ttrss_user_labels2.label_id AND
643 ttrss_user_labels2.article_id = ref_id";
644
645 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
6ee255fb 646 $ext_tables_part = "ttrss_labels2,ttrss_user_labels2,";
97b7d5c0
AD
647 $allow_archived = true;
648
649 } else {
650 $query_strategy_part = "true";
651 }
652
653 $order_by = "score DESC, date_entered DESC, updated DESC";
654
97b7d5c0
AD
655 if ($override_order) {
656 $order_by = $override_order;
657 }
658
659 if ($override_strategy) {
660 $query_strategy_part = $override_strategy;
661 }
662
663 if ($override_vfeed) {
664 $vfeed_query_part = $override_vfeed;
665 }
666
667 $feed_title = "";
668
669 if ($search) {
670 $feed_title = T_sprintf("Search results: %s", $search);
671 } else {
672 if ($cat_view) {
673 $feed_title = getCategoryTitle($feed);
674 } else {
675 if (is_numeric($feed) && $feed > 0) {
676 $result = db_query("SELECT title,site_url,last_error,last_updated
677 FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
678
679 $feed_title = db_fetch_result($result, 0, "title");
680 $feed_site_url = db_fetch_result($result, 0, "site_url");
681 $last_error = db_fetch_result($result, 0, "last_error");
682 $last_updated = db_fetch_result($result, 0, "last_updated");
683 } else {
684 $feed_title = getFeedTitle($feed);
685 }
686 }
687 }
688
689
690 $content_query_part = "content, ";
691
9090b874
AD
692 if ($limit_query_part) {
693 $offset_query_part = "OFFSET $offset";
694 } else {
695 $offset_query_part = "";
696 }
97b7d5c0
AD
697
698 if (is_numeric($feed)) {
97b7d5c0
AD
699 // proper override_order applied above
700 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
701 if (!$override_order) {
702 $order_by = "ttrss_feeds.title, $order_by";
703 } else {
704 $order_by = "ttrss_feeds.title, $override_order";
705 }
706 }
707
708 if (!$allow_archived) {
6ee255fb 709 $from_qpart = "${ext_tables_part}ttrss_entries LEFT JOIN ttrss_user_entries ON (ref_id = ttrss_entries.id),ttrss_feeds";
97b7d5c0
AD
710 $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
711
712 } else {
6ee255fb 713 $from_qpart = "${ext_tables_part}ttrss_entries LEFT JOIN ttrss_user_entries ON (ref_id = ttrss_entries.id)
97b7d5c0
AD
714 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
715 }
716
9090b874 717 if ($vfeed_query_part) $vfeed_query_part .= "favicon_avg_color,";
97b7d5c0 718
d1e631f3
AD
719 if ($start_ts) {
720 $start_ts_formatted = date("Y/m/d H:i:s", strtotime($start_ts));
99c19e1d 721 $start_ts_query_part = "date_entered >= '$start_ts_formatted' AND";
d1e631f3
AD
722 } else {
723 $start_ts_query_part = "";
724 }
725
f7fd1edb 726 $first_id = 0;
f56e5a35
AD
727 $first_id_query_strategy_part = $query_strategy_part;
728
729 if ($feed == -3)
730 $first_id_query_strategy_part = "true";
731
332ff5cf
AD
732 if (DB_TYPE == "pgsql") {
733 $sanity_interval_qpart = "date_entered >= NOW() - INTERVAL '1 hour' AND";
734 } else {
735 $sanity_interval_qpart = "date_entered >= DATE_SUB(NOW(), INTERVAL 1 hour) AND";
736 }
737
19e47ad6 738 if (!$search && !$skip_first_id_check) {
e854442e
AD
739 // if previous topmost article id changed that means our current pagination is no longer valid
740 $query = "SELECT DISTINCT
741 ttrss_feeds.title,
742 date_entered,
743 guid,
744 ttrss_entries.id,
745 ttrss_entries.title,
746 updated,
747 score,
748 marked,
749 published,
750 last_marked,
e07be79a
AD
751 last_published,
752 last_read
e854442e
AD
753 FROM
754 $from_qpart
755 WHERE
756 $feed_check_qpart
e854442e
AD
757 ttrss_user_entries.owner_uid = '$owner_uid' AND
758 $search_query_part
759 $start_ts_query_part
760 $since_id_part
332ff5cf 761 $sanity_interval_qpart
e854442e 762 $first_id_query_strategy_part ORDER BY $order_by LIMIT 1";
f5a0fb8b
AD
763
764 if ($_REQUEST["debug"]) {
765 print $query;
766 }
767
768 $result = db_query($query);
f7fd1edb 769 if ($result && db_num_rows($result) > 0) {
e854442e 770 $first_id = (int)db_fetch_result($result, 0, "id");
f5a0fb8b 771
f7fd1edb 772 if ($offset > 0 && $first_id && $check_first_id && $first_id != $check_first_id) {
48fefe2f 773 return array(-1, $feed_title, $feed_site_url, $last_error, $last_updated, $search_words, $first_id);
f5a0fb8b
AD
774 }
775 }
e854442e 776 }
f5a0fb8b 777
97b7d5c0
AD
778 $query = "SELECT DISTINCT
779 date_entered,
780 guid,
781 ttrss_entries.id,ttrss_entries.title,
782 updated,
783 label_cache,
784 tag_cache,
785 always_display_enclosures,
786 site_url,
787 note,
788 num_comments,
789 comments,
790 int_id,
791 uuid,
792 lang,
793 hide_images,
794 unread,feed_id,marked,published,link,last_read,orig_feed_id,
795 last_marked, last_published,
796 $vfeed_query_part
797 $content_query_part
798 author,score
799 FROM
800 $from_qpart
801 WHERE
802 $feed_check_qpart
97b7d5c0
AD
803 ttrss_user_entries.owner_uid = '$owner_uid' AND
804 $search_query_part
d1e631f3 805 $start_ts_query_part
97b7d5c0
AD
806 $view_query_part
807 $since_id_part
808 $query_strategy_part ORDER BY $order_by
809 $limit_query_part $offset_query_part";
810
811 if ($_REQUEST["debug"]) print $query;
812
813 $result = db_query($query);
814
815 } else {
816 // browsing by tag
817
9090b874
AD
818 $query = "SELECT DISTINCT
819 date_entered,
820 guid,
821 note,
822 ttrss_entries.id as id,
823 title,
824 updated,
825 unread,
826 feed_id,
827 orig_feed_id,
828 marked,
829 num_comments,
830 comments,
9cc29abd 831 int_id,
9090b874
AD
832 tag_cache,
833 label_cache,
834 link,
835 lang,
836 uuid,
837 last_read,
838 (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images,
839 last_marked, last_published,
840 $since_id_part
841 $vfeed_query_part
842 $content_query_part
843 author, score
844 FROM ttrss_entries, ttrss_user_entries, ttrss_tags
845 WHERE
846 ref_id = ttrss_entries.id AND
847 ttrss_user_entries.owner_uid = $owner_uid AND
848 post_int_id = int_id AND
849 tag_name = '$feed' AND
850 $view_query_part
851 $search_query_part
852 $query_strategy_part ORDER BY $order_by
853 $limit_query_part $offset_query_part";
97b7d5c0 854
9090b874 855 if ($_REQUEST["debug"]) print $query;
97b7d5c0 856
9090b874 857 $result = db_query($query);
97b7d5c0
AD
858 }
859
48fefe2f 860 return array($result, $feed_title, $feed_site_url, $last_error, $last_updated, $search_words, $first_id);
97b7d5c0
AD
861
862 }
863
59b5d5f3 864 function iframe_whitelisted($entry) {
389ae94a 865 $whitelist = array("youtube.com", "youtu.be", "vimeo.com", "player.vimeo.com");
59b5d5f3
AD
866
867 @$src = parse_url($entry->getAttribute("src"), PHP_URL_HOST);
868
869 if ($src) {
870 foreach ($whitelist as $w) {
871 if ($src == $w || $src == "www.$w")
872 return true;
873 }
874 }
875
876 return false;
877 }
878
97b7d5c0
AD
879 function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false, $highlight_words = false, $article_id = false) {
880 if (!$owner) $owner = $_SESSION["uid"];
881
882 $res = trim($str); if (!$res) return '';
883
884 $charset_hack = '<head>
885 <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
886 </head>';
887
888 $res = trim($res); if (!$res) return '';
889
890 libxml_use_internal_errors(true);
891
892 $doc = new DOMDocument();
893 $doc->loadHTML($charset_hack . $res);
894 $xpath = new DOMXPath($doc);
895
a536f94c 896 $ttrss_uses_https = parse_url(get_self_url_prefix(), PHP_URL_SCHEME) === 'https';
7818bfde
AD
897 $rewrite_base_url = $site_url ? $site_url : SELF_URL_PATH;
898
8519c68d 899 $entries = $xpath->query('(//a[@href]|//img[@src]|//video/source[@src]|//audio/source[@src])');
a536f94c 900
97b7d5c0
AD
901 foreach ($entries as $entry) {
902
7818bfde
AD
903 if ($entry->hasAttribute('href')) {
904 $entry->setAttribute('href',
905 rewrite_relative_url($rewrite_base_url, $entry->getAttribute('href')));
906
907 $entry->setAttribute('rel', 'noopener noreferrer');
908 }
909
910 if ($entry->hasAttribute('src')) {
911 $src = rewrite_relative_url($rewrite_base_url, $entry->getAttribute('src'));
48eefd8c 912 $cached_filename = CACHE_DIR . '/images/' . sha1($src);
7818bfde 913
48eefd8c 914 if (file_exists($cached_filename)) {
9594ea68
AD
915
916 // this is strictly cosmetic
917 if ($entry->tagName == 'img') {
918 $suffix = ".png";
919 } else if ($entry->parentNode && $entry->parentNode->tagName == "video") {
920 $suffix = ".mp4";
921 } else if ($entry->parentNode && $entry->parentNode->tagName == "audio") {
922 $suffix = ".ogg";
923 } else {
924 $suffix = "";
925 }
926
927 $src = get_self_url_prefix() . '/public.php?op=cached_url&hash=' . sha1($src) . $suffix;
7818bfde 928
48eefd8c
AD
929 if ($entry->hasAttribute('srcset')) {
930 $entry->removeAttribute('srcset');
931 }
8519c68d 932
48eefd8c
AD
933 if ($entry->hasAttribute('sizes')) {
934 $entry->removeAttribute('sizes');
7818bfde 935 }
97b7d5c0
AD
936 }
937
7818bfde
AD
938 $entry->setAttribute('src', $src);
939 }
940
941 if ($entry->nodeName == 'img') {
97b7d5c0 942
7818bfde
AD
943 if ($entry->hasAttribute('src')) {
944 $is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';
a01bfd78 945
7818bfde 946 if ($ttrss_uses_https && !$is_https_url) {
a01bfd78 947
5edd605a
AD
948 if ($entry->hasAttribute('srcset')) {
949 $entry->removeAttribute('srcset');
a01bfd78 950 }
97b7d5c0 951
5edd605a
AD
952 if ($entry->hasAttribute('sizes')) {
953 $entry->removeAttribute('sizes');
954 }
0442cbb6 955 }
5edd605a 956 }
5edd605a 957
7818bfde
AD
958 if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
959 $force_remove_images || $_SESSION["bw_limit"]) {
a536f94c 960
7818bfde 961 $p = $doc->createElement('p');
a536f94c 962
7818bfde
AD
963 $a = $doc->createElement('a');
964 $a->setAttribute('href', $entry->getAttribute('src'));
a536f94c 965
7818bfde
AD
966 $a->appendChild(new DOMText($entry->getAttribute('src')));
967 $a->setAttribute('target', '_blank');
ba2853ca 968 $a->setAttribute('rel', 'noopener noreferrer');
a536f94c 969
7818bfde 970 $p->appendChild($a);
97b7d5c0 971
7818bfde 972 $entry->parentNode->replaceChild($p, $entry);
97b7d5c0
AD
973 }
974 }
975
976 if (strtolower($entry->nodeName) == "a") {
977 $entry->setAttribute("target", "_blank");
ba2853ca 978 $entry->setAttribute("rel", "noopener noreferrer");
97b7d5c0
AD
979 }
980 }
981
982 $entries = $xpath->query('//iframe');
983 foreach ($entries as $entry) {
59b5d5f3
AD
984 if (!iframe_whitelisted($entry)) {
985 $entry->setAttribute('sandbox', 'allow-scripts');
c63850fa
AD
986 } else {
987 if ($_SERVER['HTTPS'] == "on") {
988 $entry->setAttribute("src",
989 str_replace("http://", "https://",
990 $entry->getAttribute("src")));
991 }
59b5d5f3 992 }
97b7d5c0
AD
993 }
994
67268b00 995 $allowed_elements = array('a', 'address', 'acronym', 'audio', 'article', 'aside',
97b7d5c0
AD
996 'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
997 'caption', 'cite', 'center', 'code', 'col', 'colgroup',
311cdb27 998 'data', 'dd', 'del', 'details', 'description', 'dfn', 'div', 'dl', 'font',
97b7d5c0 999 'dt', 'em', 'footer', 'figure', 'figcaption',
e2a3689a 1000 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
97b7d5c0
AD
1001 'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
1002 'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
1003 'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
1004 'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
50bda3fe 1005 'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video', 'xml:namespace' );
97b7d5c0
AD
1006
1007 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
1008
1009 $disallowed_attributes = array('id', 'style', 'class');
1010
1011 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
1012 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes, $article_id);
1013 if (is_array($retval)) {
1014 $doc = $retval[0];
1015 $allowed_elements = $retval[1];
1016 $disallowed_attributes = $retval[2];
1017 } else {
1018 $doc = $retval;
1019 }
1020 }
1021
1022 $doc->removeChild($doc->firstChild); //remove doctype
1023 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
1024
1025 if ($highlight_words) {
1026 foreach ($highlight_words as $word) {
1027
1028 // http://stackoverflow.com/questions/4081372/highlight-keywords-in-a-paragraph
1029
1030 $elements = $xpath->query("//*/text()");
1031
1032 foreach ($elements as $child) {
1033
1034 $fragment = $doc->createDocumentFragment();
1035 $text = $child->textContent;
1036
1037 while (($pos = mb_stripos($text, $word)) !== false) {
1038 $fragment->appendChild(new DomText(mb_substr($text, 0, $pos)));
1039 $word = mb_substr($text, $pos, mb_strlen($word));
1040 $highlight = $doc->createElement('span');
1041 $highlight->appendChild(new DomText($word));
1042 $highlight->setAttribute('class', 'highlight');
1043 $fragment->appendChild($highlight);
1044 $text = mb_substr($text, $pos + mb_strlen($word));
1045 }
1046
1047 if (!empty($text)) $fragment->appendChild(new DomText($text));
1048
1049 $child->parentNode->replaceChild($fragment, $child);
1050 }
1051 }
1052 }
1053
1054 $res = $doc->saveHTML();
1055
42f78188
AD
1056 /* strip everything outside of <body>...</body> */
1057
1058 $res_frag = array();
1059 if (preg_match('/<body>(.*)<\/body>/is', $res, $res_frag)) {
1060 return $res_frag[1];
1061 } else {
1062 return $res;
1063 }
97b7d5c0
AD
1064 }
1065
1066 function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
1067 $xpath = new DOMXPath($doc);
1068 $entries = $xpath->query('//*');
1069
1070 foreach ($entries as $entry) {
1071 if (!in_array($entry->nodeName, $allowed_elements)) {
1072 $entry->parentNode->removeChild($entry);
1073 }
1074
1075 if ($entry->hasAttributes()) {
1076 $attrs_to_remove = array();
1077
1078 foreach ($entry->attributes as $attr) {
1079
1080 if (strpos($attr->nodeName, 'on') === 0) {
1081 array_push($attrs_to_remove, $attr);
1082 }
1083
d8b0f067
J
1084 if ($attr->nodeName == 'href' && stripos($attr->value, 'javascript:') === 0) {
1085 array_push($attrs_to_remove, $attr);
1086 }
1087
97b7d5c0
AD
1088 if (in_array($attr->nodeName, $disallowed_attributes)) {
1089 array_push($attrs_to_remove, $attr);
1090 }
1091 }
1092
1093 foreach ($attrs_to_remove as $attr) {
1094 $entry->removeAttributeNode($attr);
1095 }
1096 }
1097 }
1098
1099 return $doc;
1100 }
1101
97b7d5c0
AD
1102 function catchupArticlesById($ids, $cmode, $owner_uid = false) {
1103
1104 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1105 if (count($ids) == 0) return;
1106
1107 $tmp_ids = array();
1108
1109 foreach ($ids as $id) {
1110 array_push($tmp_ids, "ref_id = '$id'");
1111 }
1112
1113 $ids_qpart = join(" OR ", $tmp_ids);
1114
1115 if ($cmode == 0) {
1116 db_query("UPDATE ttrss_user_entries SET
1117 unread = false,last_read = NOW()
1118 WHERE ($ids_qpart) AND owner_uid = $owner_uid");
1119 } else if ($cmode == 1) {
1120 db_query("UPDATE ttrss_user_entries SET
1121 unread = true
1122 WHERE ($ids_qpart) AND owner_uid = $owner_uid");
1123 } else {
1124 db_query("UPDATE ttrss_user_entries SET
1125 unread = NOT unread,last_read = NOW()
1126 WHERE ($ids_qpart) AND owner_uid = $owner_uid");
1127 }
1128
1129 /* update ccache */
1130
1131 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
1132 WHERE ($ids_qpart) AND owner_uid = $owner_uid");
1133
1134 while ($line = db_fetch_assoc($result)) {
1135 ccache_update($line["feed_id"], $owner_uid);
1136 }
1137 }
1138
1139 function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
1140
1141 $a_id = db_escape_string($id);
1142
1143 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1144
1145 $query = "SELECT DISTINCT tag_name,
1146 owner_uid as owner FROM
1147 ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
1148 ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
1149
1150 $tags = array();
1151
1152 /* check cache first */
1153
1154 if ($tag_cache === false) {
1155 $result = db_query("SELECT tag_cache FROM ttrss_user_entries
1156 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
1157
c3522486
AD
1158 if (db_num_rows($result) != 0)
1159 $tag_cache = db_fetch_result($result, 0, "tag_cache");
97b7d5c0
AD
1160 }
1161
1162 if ($tag_cache) {
1163 $tags = explode(",", $tag_cache);
1164 } else {
1165
1166 /* do it the hard way */
1167
1168 $tmp_result = db_query($query);
1169
1170 while ($tmp_line = db_fetch_assoc($tmp_result)) {
1171 array_push($tags, $tmp_line["tag_name"]);
1172 }
1173
1174 /* update the cache */
1175
1176 $tags_str = db_escape_string(join(",", $tags));
1177
1178 db_query("UPDATE ttrss_user_entries
1179 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
1180 AND owner_uid = $owner_uid");
1181 }
1182
1183 return $tags;
1184 }
1185
1186 function trim_array($array) {
1187 $tmp = $array;
1188 array_walk($tmp, 'trim');
1189 return $tmp;
1190 }
1191
1192 function tag_is_valid($tag) {
1193 if ($tag == '') return false;
85d067e8 1194 if (is_numeric($tag)) return false;
97b7d5c0
AD
1195 if (mb_strlen($tag) > 250) return false;
1196
1197 if (!$tag) return false;
1198
1199 return true;
1200 }
1201
1202 function render_login_form() {
1203 header('Cache-Control: public');
1204
1205 require_once "login_form.php";
1206 exit;
1207 }
1208
97b7d5c0
AD
1209 function T_sprintf() {
1210 $args = func_get_args();
1211 return vsprintf(__(array_shift($args)), $args);
1212 }
1213
97b7d5c0
AD
1214 function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
1215 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1216
1217 $rv = array();
1218
1219 $rv['id'] = $id;
1220
1221 /* we can figure out feed_id from article id anyway, why do we
1222 * pass feed_id here? let's ignore the argument :(*/
1223
1224 $result = db_query("SELECT feed_id FROM ttrss_user_entries
1225 WHERE ref_id = '$id'");
1226
1227 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
1228
1229 $rv['feed_id'] = $feed_id;
1230
1231 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
1232
1233 if ($mark_as_read) {
1234 $result = db_query("UPDATE ttrss_user_entries
1235 SET unread = false,last_read = NOW()
1236 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
1237
1238 ccache_update($feed_id, $owner_uid);
1239 }
1240
1241 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,lang,
1242 ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
1243 (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
1244 (SELECT title FROM ttrss_feeds WHERE id = feed_id) as feed_title,
1245 (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
1246 (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
1247 num_comments,
1248 tag_cache,
1249 author,
553ec3c3 1250 guid,
97b7d5c0
AD
1251 orig_feed_id,
1252 note
1253 FROM ttrss_entries,ttrss_user_entries
1254 WHERE id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
1255
1256 if ($result) {
1257
1258 $line = db_fetch_assoc($result);
1259
1260 $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
1261 unset($line["tag_cache"]);
1262
1263 $line["content"] = sanitize($line["content"],
1264 sql_bool_to_bool($line['hide_images']),
1265 $owner_uid, $line["site_url"], false, $line["id"]);
1266
1267 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
1268 $line = $p->hook_render_article($line);
1269 }
1270
967f0619 1271 $num_comments = (int) $line["num_comments"];
97b7d5c0
AD
1272 $entry_comments = "";
1273
1274 if ($num_comments > 0) {
1275 if ($line["comments"]) {
1276 $comments_url = htmlspecialchars($line["comments"]);
1277 } else {
1278 $comments_url = htmlspecialchars($line["link"]);
1279 }
1280 $entry_comments = "<a class=\"postComments\"
ba2853ca 1281 target='_blank' rel=\"noopener noreferrer\" href=\"$comments_url\">$num_comments ".
97b7d5c0
AD
1282 _ngettext("comment", "comments", $num_comments)."</a>";
1283
1284 } else {
1285 if ($line["comments"] && $line["link"] != $line["comments"]) {
ba2853ca 1286 $entry_comments = "<a class=\"postComments\" target='_blank' rel=\"noopener noreferrer\" href=\"".htmlspecialchars($line["comments"])."\">".__("comments")."</a>";
97b7d5c0
AD
1287 }
1288 }
1289
1290 if ($zoom_mode) {
1291 header("Content-Type: text/html");
1292 $rv['content'] .= "<html><head>
1293 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
1294 <title>Tiny Tiny RSS - ".$line["title"]."</title>".
1295 stylesheet_tag("css/tt-rss.css").
1296 stylesheet_tag("css/zoom.css").
1297 stylesheet_tag("css/dijit.css")."
1298
1299 <link rel=\"shortcut icon\" type=\"image/png\" href=\"images/favicon.png\">
1300 <link rel=\"icon\" type=\"image/png\" sizes=\"72x72\" href=\"images/favicon-72px.png\">
1301
97b7d5c0
AD
1302 </head><body id=\"ttrssZoom\">";
1303 }
1304
1305 $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
1306
1307 $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
1308
1309 $entry_author = $line["author"];
1310
1311 if ($entry_author) {
1312 $entry_author = __(" - ") . $entry_author;
1313 }
1314
1315 $parsed_updated = make_local_datetime($line["updated"], true,
1316 $owner_uid, true);
1317
1318 if (!$zoom_mode)
1319 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
1320
1321 if ($line["link"]) {
ba2853ca 1322 $rv['content'] .= "<div class='postTitle'><a target='_blank' rel='noopener noreferrer'
97b7d5c0
AD
1323 title=\"".htmlspecialchars($line['title'])."\"
1324 href=\"" .
1325 htmlspecialchars($line["link"]) . "\">" .
1326 $line["title"] . "</a>" .
1327 "<span class='author'>$entry_author</span></div>";
1328 } else {
1329 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
1330 }
1331
1332 if ($zoom_mode) {
6687cb99 1333 $feed_title = htmlspecialchars($line["feed_title"]);
97b7d5c0
AD
1334
1335 $rv['content'] .= "<div class=\"postFeedTitle\">$feed_title</div>";
1336
1337 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
1338 }
1339
1340 $tags_str = format_tags_string($line["tags"], $id);
1341 $tags_str_full = join(", ", $line["tags"]);
1342
1343 if (!$tags_str_full) $tags_str_full = __("no tags");
1344
1345 if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
1346
1347 $rv['content'] .= "<div class='postTags' style='float : right'>
1348 <img src='images/tag.png'
1349 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
1350
1351 if (!$zoom_mode) {
1352 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
1353 <a title=\"".__('Edit tags for this article')."\"
1354 href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
1355
1356 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
1357 id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
1358 position=\"below\">$tags_str_full</div>";
1359
1360 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
1361 $rv['content'] .= $p->hook_article_button($line);
1362 }
1363
1364 } else {
1365 $tags_str = strip_tags($tags_str);
1366 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
1367 }
1368 $rv['content'] .= "</div>";
1369 $rv['content'] .= "<div clear='both'>";
1370
1371 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
1372 $rv['content'] .= $p->hook_article_left_button($line);
1373 }
1374
1375 $rv['content'] .= "$entry_comments</div>";
1376
1377 if ($line["orig_feed_id"]) {
1378
1379 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
71b75bb7 1380 WHERE id = ".$line["orig_feed_id"] . " AND owner_uid = " . $_SESSION["uid"]);
97b7d5c0
AD
1381
1382 if (db_num_rows($tmp_result) != 0) {
1383
1384 $rv['content'] .= "<div clear='both'>";
1385 $rv['content'] .= __("Originally from:");
1386
1387 $rv['content'] .= "&nbsp;";
1388
1389 $tmp_line = db_fetch_assoc($tmp_result);
1390
ba2853ca 1391 $rv['content'] .= "<a target='_blank' rel='noopener noreferrer'
97b7d5c0
AD
1392 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
1393 $tmp_line['title'] . "</a>";
1394
1395 $rv['content'] .= "&nbsp;";
1396
ba2853ca 1397 $rv['content'] .= "<a target='_blank' rel='noopener noreferrer' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
97b7d5c0
AD
1398 $rv['content'] .= "<img title='".__('Feed URL')."' class='tinyFeedIcon' src='images/pub_set.png'></a>";
1399
1400 $rv['content'] .= "</div>";
1401 }
1402 }
1403
1404 $rv['content'] .= "</div>";
1405
1406 $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
1407 if ($line['note']) {
1408 $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
1409 }
1410 $rv['content'] .= "</div>";
1411
1412 if (!$line['lang']) $line['lang'] = 'en';
1413
1414 $rv['content'] .= "<div class=\"postContent\" lang=\"".$line['lang']."\">";
1415
1416 $rv['content'] .= $line["content"];
6810a1de
AD
1417
1418 if (!$zoom_mode) {
1419 $rv['content'] .= format_article_enclosures($id,
1420 sql_bool_to_bool($line["always_display_enclosures"]),
1421 $line["content"],
1422 sql_bool_to_bool($line["hide_images"]));
1423 }
97b7d5c0
AD
1424
1425 $rv['content'] .= "</div>";
1426
1427 $rv['content'] .= "</div>";
1428
1429 }
1430
1431 if ($zoom_mode) {
1432 $rv['content'] .= "
1433 <div class='footer'>
1434 <button onclick=\"return window.close()\">".
1435 __("Close this window")."</button></div>";
1436 $rv['content'] .= "</body></html>";
1437 }
1438
1439 return $rv;
1440
1441 }
1442
1443 function print_checkpoint($n, $s) {
1444 $ts = microtime(true);
1445 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
1446 return $ts;
1447 }
1448
1449 function sanitize_tag($tag) {
1450 $tag = trim($tag);
1451
1452 $tag = mb_strtolower($tag, 'utf-8');
1453
0e4da73f 1454 $tag = preg_replace('/[,\'\"\+\>\<]/', "", $tag);
97b7d5c0 1455
35c37354
AD
1456 if (DB_TYPE == "mysql") {
1457 $tag = preg_replace('/[\x{10000}-\x{10FFFF}]/u', "\xEF\xBF\xBD", $tag);
1458 }
97b7d5c0
AD
1459
1460 return $tag;
1461 }
1462
1463 function get_self_url_prefix() {
1464 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
1465 return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
1466 } else {
1467 return SELF_URL_PATH;
1468 }
1469 }
1470
1471 /**
1472 * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
1473 *
1474 * @return string The Mozilla Firefox feed adding URL.
1475 */
1476 function add_feed_url() {
1477 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' : 'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
1478
1479 $url_path = get_self_url_prefix() .
1480 "/public.php?op=subscribe&feed_url=%s";
1481 return $url_path;
1482 } // function add_feed_url
1483
1484 function encrypt_password($pass, $salt = '', $mode2 = false) {
1485 if ($salt && $mode2) {
1486 return "MODE2:" . hash('sha256', $salt . $pass);
1487 } else if ($salt) {
1488 return "SHA1X:" . sha1("$salt:$pass");
1489 } else {
1490 return "SHA1:" . sha1($pass);
1491 }
1492 } // function encrypt_password
1493
7b55001e 1494 function load_filters($feed_id, $owner_uid) {
97b7d5c0
AD
1495 $filters = array();
1496
1497 $cat_id = (int)getFeedCategory($feed_id);
1498
1499 if ($cat_id == 0)
1500 $null_cat_qpart = "cat_id IS NULL OR";
1501 else
1502 $null_cat_qpart = "";
1503
1504 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
1505 owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
1506
1507 $check_cats = join(",", array_merge(
1508 getParentCategories($cat_id, $owner_uid),
1509 array($cat_id)));
1510
1511 while ($line = db_fetch_assoc($result)) {
1512 $filter_id = $line["id"];
1513
1514 $result2 = db_query("SELECT
1515 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
1516 FROM ttrss_filters2_rules AS r,
1517 ttrss_filter_types AS t
1518 WHERE
1519 ($null_cat_qpart (cat_id IS NULL AND cat_filter = false) OR cat_id IN ($check_cats)) AND
1520 (feed_id IS NULL OR feed_id = '$feed_id') AND
1521 filter_type = t.id AND filter_id = '$filter_id'");
1522
1523 $rules = array();
1524 $actions = array();
1525
1526 while ($rule_line = db_fetch_assoc($result2)) {
1527# print_r($rule_line);
1528
1529 $rule = array();
1530 $rule["reg_exp"] = $rule_line["reg_exp"];
1531 $rule["type"] = $rule_line["type_name"];
1532 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
1533
1534 array_push($rules, $rule);
1535 }
1536
1537 $result2 = db_query("SELECT a.action_param,t.name AS type_name
1538 FROM ttrss_filters2_actions AS a,
1539 ttrss_filter_actions AS t
1540 WHERE
1541 action_id = t.id AND filter_id = '$filter_id'");
1542
1543 while ($action_line = db_fetch_assoc($result2)) {
1544# print_r($action_line);
1545
1546 $action = array();
1547 $action["type"] = $action_line["type_name"];
1548 $action["param"] = $action_line["action_param"];
1549
1550 array_push($actions, $action);
1551 }
1552
1553
1554 $filter = array();
1555 $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
1556 $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
1557 $filter["rules"] = $rules;
1558 $filter["actions"] = $actions;
1559
1560 if (count($rules) > 0 && count($actions) > 0) {
1561 array_push($filters, $filter);
1562 }
1563 }
1564
1565 return $filters;
1566 }
1567
1568 function get_score_pic($score) {
1569 if ($score > 100) {
1570 return "score_high.png";
1571 } else if ($score > 0) {
1572 return "score_half_high.png";
1573 } else if ($score < -100) {
1574 return "score_low.png";
1575 } else if ($score < 0) {
1576 return "score_half_low.png";
1577 } else {
1578 return "score_neutral.png";
1579 }
1580 }
1581
1582 function feed_has_icon($id) {
1583 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
1584 }
1585
1586 function init_plugins() {
1587 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
1588
1589 return true;
1590 }
1591
7b55001e 1592 function format_tags_string($tags) {
97b7d5c0
AD
1593 if (!is_array($tags) || count($tags) == 0) {
1594 return __("no tags");
1595 } else {
1596 $maxtags = min(5, count($tags));
83ce77a2 1597 $tags_str = "";
97b7d5c0
AD
1598
1599 for ($i = 0; $i < $maxtags; $i++) {
dcbe36b2 1600 $tags_str .= "<a class=\"tag\" href=\"#\" onclick=\"viewfeed({feed:'".$tags[$i]."'})\">" . $tags[$i] . "</a>, ";
97b7d5c0
AD
1601 }
1602
1603 $tags_str = mb_substr($tags_str, 0, mb_strlen($tags_str)-2);
1604
1605 if (count($tags) > $maxtags)
1606 $tags_str .= ", &hellip;";
1607
1608 return $tags_str;
1609 }
1610 }
1611
7b55001e 1612 function format_article_labels($labels) {
97b7d5c0
AD
1613
1614 if (!is_array($labels)) return '';
1615
1616 $labels_str = "";
1617
1618 foreach ($labels as $l) {
1619 $labels_str .= sprintf("<span class='hlLabelRef'
1620 style='color : %s; background-color : %s'>%s</span>",
1621 $l[2], $l[3], $l[1]);
1622 }
1623
1624 return $labels_str;
1625
1626 }
1627
1628 function format_article_note($id, $note, $allow_edit = true) {
1629
1630 $str = "<div class='articleNote' onclick=\"editArticleNote($id)\">
1631 <div class='noteEdit' onclick=\"editArticleNote($id)\">".
1632 ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
1633
1634 return $str;
1635 }
1636
1637
97b7d5c0
AD
1638 function add_feed_category($feed_cat, $parent_cat_id = false) {
1639
1640 if (!$feed_cat) return false;
1641
1642 db_query("BEGIN");
1643
1644 if ($parent_cat_id) {
1645 $parent_qpart = "parent_cat = '$parent_cat_id'";
1646 $parent_insert = "'$parent_cat_id'";
1647 } else {
1648 $parent_qpart = "parent_cat IS NULL";
1649 $parent_insert = "NULL";
1650 }
1651
1652 $feed_cat = mb_substr($feed_cat, 0, 250);
1653
1654 $result = db_query(
1655 "SELECT id FROM ttrss_feed_categories
1656 WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
1657
1658 if (db_num_rows($result) == 0) {
1659
1660 $result = db_query(
1661 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
1662 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
1663
1664 db_query("COMMIT");
1665
1666 return true;
1667 }
1668
1669 return false;
1670 }
1671
97b7d5c0
AD
1672 /**
1673 * Fixes incomplete URLs by prepending "http://".
1674 * Also replaces feed:// with http://, and
1675 * prepends a trailing slash if the url is a domain name only.
1676 *
1677 * @param string $url Possibly incomplete URL
1678 *
1679 * @return string Fixed URL.
1680 */
1681 function fix_url($url) {
dd6e2386
AD
1682
1683 // support schema-less urls
1684 if (strpos($url, '//') === 0) {
1685 $url = 'https:' . $url;
1686 }
1687
97b7d5c0
AD
1688 if (strpos($url, '://') === false) {
1689 $url = 'http://' . $url;
1690 } else if (substr($url, 0, 5) == 'feed:') {
1691 $url = 'http:' . substr($url, 5);
1692 }
1693
1694 //prepend slash if the URL has no slash in it
1695 // "http://www.example" -> "http://www.example/"
1696 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
1697 $url .= '/';
1698 }
1699
62958fe9
BT
1700 //convert IDNA hostname to punycode if possible
1701 if (function_exists("idn_to_ascii")) {
1702 $parts = parse_url($url);
1703 if (mb_detect_encoding($parts['host']) != 'ASCII')
1704 {
1705 $parts['host'] = idn_to_ascii($parts['host']);
1706 $url = build_url($parts);
1707 }
1708 }
1709
97b7d5c0
AD
1710 if ($url != "http:///")
1711 return $url;
1712 else
1713 return '';
1714 }
1715
1716 function validate_feed_url($url) {
1717 $parts = parse_url($url);
1718
1719 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
1720
1721 }
1722
1723 function get_article_enclosures($id) {
1724
1725 $query = "SELECT * FROM ttrss_enclosures
1726 WHERE post_id = '$id' AND content_url != ''";
1727
1728 $rv = array();
1729
1730 $result = db_query($query);
1731
1732 if (db_num_rows($result) > 0) {
1733 while ($line = db_fetch_assoc($result)) {
388d4dfa
AD
1734
1735 if (file_exists(CACHE_DIR . '/images/' . sha1($line["content_url"]))) {
1736 $line["content_url"] = get_self_url_prefix() . '/public.php?op=cached_url&hash=' . sha1($line["content_url"]);
1737 }
1738
97b7d5c0
AD
1739 array_push($rv, $line);
1740 }
1741 }
1742
1743 return $rv;
1744 }
1745
3e0f2090 1746 /* function save_email_address($email) {
97b7d5c0
AD
1747 // FIXME: implement persistent storage of emails
1748
1749 if (!$_SESSION['stored_emails'])
1750 $_SESSION['stored_emails'] = array();
1751
1752 if (!in_array($email, $_SESSION['stored_emails']))
1753 array_push($_SESSION['stored_emails'], $email);
3e0f2090 1754 } */
97b7d5c0
AD
1755
1756
1757 function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
1758
1759 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1760
1761 $sql_is_cat = bool_to_sql_bool($is_cat);
1762
1763 $result = db_query("SELECT access_key FROM ttrss_access_keys
1764 WHERE feed_id = '$feed_id' AND is_cat = $sql_is_cat
1765 AND owner_uid = " . $owner_uid);
1766
1767 if (db_num_rows($result) == 1) {
1768 return db_fetch_result($result, 0, "access_key");
1769 } else {
3ceb893f 1770 $key = db_escape_string(uniqid_short());
97b7d5c0
AD
1771
1772 $result = db_query("INSERT INTO ttrss_access_keys
1773 (access_key, feed_id, is_cat, owner_uid)
1774 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
1775
1776 return $key;
1777 }
1778 return false;
1779 }
1780
1781 function get_feeds_from_html($url, $content)
1782 {
1783 $url = fix_url($url);
1784 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
1785
1786 libxml_use_internal_errors(true);
1787
1788 $doc = new DOMDocument();
1789 $doc->loadHTML($content);
1790 $xpath = new DOMXPath($doc);
1791 $entries = $xpath->query('/html/head/link[@rel="alternate" and '.
16c48032 1792 '(contains(@type,"rss") or contains(@type,"atom"))]|/html/head/link[@rel="feed"]');
97b7d5c0
AD
1793 $feedUrls = array();
1794 foreach ($entries as $entry) {
1795 if ($entry->hasAttribute('href')) {
1796 $title = $entry->getAttribute('title');
1797 if ($title == '') {
1798 $title = $entry->getAttribute('type');
1799 }
1800 $feedUrl = rewrite_relative_url(
1801 $baseUrl, $entry->getAttribute('href')
1802 );
1803 $feedUrls[$feedUrl] = $title;
1804 }
1805 }
1806 return $feedUrls;
1807 }
1808
1809 function is_html($content) {
5a4074a9 1810 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 100)) !== 0;
97b7d5c0
AD
1811 }
1812
1813 function url_is_html($url, $login = false, $pass = false) {
1814 return is_html(fetch_file_contents($url, false, $login, $pass));
1815 }
1816
97b7d5c0
AD
1817 function format_article_enclosures($id, $always_display_enclosures,
1818 $article_content, $hide_images = false) {
1819
1820 $result = get_article_enclosures($id);
1821 $rv = '';
1822
2bb11658
DZ
1823 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_FORMAT_ENCLOSURES) as $plugin) {
1824 $retval = $plugin->hook_format_enclosures($rv, $result, $id, $always_display_enclosures, $article_content, $hide_images);
1825 if (is_array($retval)) {
1826 $rv = $retval[0];
1827 $result = $retval[1];
1828 } else {
1829 $rv = $retval;
1830 }
1831 }
84931635 1832 unset($retval); // Unset to prevent breaking render if there are no HOOK_RENDER_ENCLOSURE hooks below.
97b7d5c0 1833
c6ce584d 1834 if ($rv === '' && !empty($result)) {
97b7d5c0
AD
1835 $entries_html = array();
1836 $entries = array();
1837 $entries_inline = array();
1838
1839 foreach ($result as $line) {
1840
58210301 1841 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ENCLOSURE_ENTRY) as $plugin) {
676c7303 1842 $line = $plugin->hook_enclosure_entry($line);
58210301
AD
1843 }
1844
97b7d5c0
AD
1845 $url = $line["content_url"];
1846 $ctype = $line["content_type"];
1847 $title = $line["title"];
1e871938
FE
1848 $width = $line["width"];
1849 $height = $line["height"];
97b7d5c0
AD
1850
1851 if (!$ctype) $ctype = __("unknown type");
1852
c606bd57
AD
1853 //$filename = substr($url, strrpos($url, "/")+1);
1854 $filename = basename($url);
97b7d5c0
AD
1855
1856 $player = format_inline_player($url, $ctype);
1857
1858 if ($player) array_push($entries_inline, $player);
1859
ba2853ca 1860# $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\" rel=\"noopener noreferrer\">" .
97b7d5c0
AD
1861# $filename . " (" . $ctype . ")" . "</a>";
1862
829d478f 1863 $entry = "<div onclick=\"openUrlPopup('".htmlspecialchars($url)."')\"
97b7d5c0
AD
1864 dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
1865
1866 array_push($entries_html, $entry);
1867
1868 $entry = array();
1869
1870 $entry["type"] = $ctype;
1871 $entry["filename"] = $filename;
1872 $entry["url"] = $url;
1873 $entry["title"] = $title;
1e871938
FE
1874 $entry["width"] = $width;
1875 $entry["height"] = $height;
97b7d5c0
AD
1876
1877 array_push($entries, $entry);
1878 }
1879
1880 if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
1881 if ($always_display_enclosures ||
1882 !preg_match("/<img/i", $article_content)) {
1883
1884 foreach ($entries as $entry) {
1885
945346cb
AD
1886 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ENCLOSURE) as $plugin)
1887 $retval = $plugin->hook_render_enclosure($entry, $hide_images);
97b7d5c0 1888
945346cb
AD
1889
1890 if ($retval) {
1891 $rv .= $retval;
1892 } else {
1893
dc2c4b13 1894 if (preg_match("/image/", $entry["type"])) {
945346cb
AD
1895
1896 if (!$hide_images) {
1897 $encsize = '';
1898 if ($entry['height'] > 0)
08e79cb6 1899 $encsize .= ' height="' . intval($entry['height']) . '"';
945346cb 1900 if ($entry['width'] > 0)
08e79cb6 1901 $encsize .= ' width="' . intval($entry['width']) . '"';
945346cb
AD
1902 $rv .= "<p><img
1903 alt=\"".htmlspecialchars($entry["filename"])."\"
1904 src=\"" .htmlspecialchars($entry["url"]) . "\"
1905 " . $encsize . " /></p>";
1906 } else {
ba2853ca 1907 $rv .= "<p><a target=\"_blank\" rel=\"noopener noreferrer\"
945346cb
AD
1908 href=\"".htmlspecialchars($entry["url"])."\"
1909 >" .htmlspecialchars($entry["url"]) . "</a></p>";
1910 }
1911
1912 if ($entry['title']) {
1913 $rv.= "<div class=\"enclosure_title\">${entry['title']}</div>";
1914 }
1915 }
97b7d5c0
AD
1916 }
1917 }
1918 }
1919 }
1920
1921 if (count($entries_inline) > 0) {
1922 $rv .= "<hr clear='both'/>";
1923 foreach ($entries_inline as $entry) { $rv .= $entry; };
1924 $rv .= "<hr clear='both'/>";
1925 }
1926
6810a1de
AD
1927 $rv .= "<div class=\"attachments\" dojoType=\"dijit.form.DropDownButton\">".
1928 "<span>" . __('Attachments')."</span>";
1929
1930 $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
97b7d5c0
AD
1931
1932 foreach ($entries as $entry) {
1933 if ($entry["title"])
c606bd57 1934 $title = " &mdash; " . truncate_string($entry["title"], 30);
97b7d5c0
AD
1935 else
1936 $title = "";
1937
c606bd57
AD
1938 if ($entry["filename"])
1939 $filename = truncate_middle(htmlspecialchars($entry["filename"]), 60);
1940 else
1941 $filename = "";
1942
829d478f 1943 $rv .= "<div onclick='openUrlPopup(\"".htmlspecialchars($entry["url"])."\")'
c606bd57 1944 dojoType=\"dijit.MenuItem\">".$filename . $title."</div>";
97b7d5c0
AD
1945
1946 };
1947
6810a1de
AD
1948 $rv .= "</div>";
1949 $rv .= "</div>";
97b7d5c0
AD
1950 }
1951
1952 return $rv;
1953 }
1954
1955 function getLastArticleId() {
8458a312 1956 $result = db_query("SELECT ref_id AS id FROM ttrss_user_entries
1957 WHERE owner_uid = " . $_SESSION["uid"] . " ORDER BY ref_id DESC LIMIT 1");
97b7d5c0
AD
1958
1959 if (db_num_rows($result) == 1) {
1960 return db_fetch_result($result, 0, "id");
1961 } else {
1962 return -1;
1963 }
1964 }
1965
1966 function build_url($parts) {
1967 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
1968 }
1969
4a23031f
AD
1970 function cleanup_url_path($path) {
1971 $path = str_replace("/./", "/", $path);
1972 $path = str_replace("//", "/", $path);
1973
1974 return $path;
1975 }
1976
97b7d5c0
AD
1977 /**
1978 * Converts a (possibly) relative URL to a absolute one.
1979 *
1980 * @param string $url Base URL (i.e. from where the document is)
1981 * @param string $rel_url Possibly relative URL in the document
1982 *
1983 * @return string Absolute URL
1984 */
1985 function rewrite_relative_url($url, $rel_url) {
94d425fe 1986 if (strpos($rel_url, "://") !== false) {
97b7d5c0
AD
1987 return $rel_url;
1988 } else if (strpos($rel_url, "//") === 0) {
1989 # protocol-relative URL (rare but they exist)
1990 return $rel_url;
94d425fe
AD
1991 } else if (preg_match("/^[a-z]+:/i", $rel_url)) {
1992 # magnet:, feed:, etc
1993 return $rel_url;
1994 } else if (strpos($rel_url, "/") === 0) {
97b7d5c0
AD
1995 $parts = parse_url($url);
1996 $parts['path'] = $rel_url;
4a23031f 1997 $parts['path'] = cleanup_url_path($parts['path']);
97b7d5c0
AD
1998
1999 return build_url($parts);
2000
2001 } else {
2002 $parts = parse_url($url);
2003 if (!isset($parts['path'])) {
2004 $parts['path'] = '/';
2005 }
2006 $dir = $parts['path'];
2007 if (substr($dir, -1) !== '/') {
2008 $dir = dirname($parts['path']);
2009 $dir !== '/' && $dir .= '/';
2010 }
2011 $parts['path'] = $dir . $rel_url;
4a23031f 2012 $parts['path'] = cleanup_url_path($parts['path']);
97b7d5c0
AD
2013
2014 return build_url($parts);
2015 }
2016 }
2017
97b7d5c0
AD
2018 function cleanup_tags($days = 14, $limit = 1000) {
2019
2020 if (DB_TYPE == "pgsql") {
2021 $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
2022 } else if (DB_TYPE == "mysql") {
2023 $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
2024 }
2025
2026 $tags_deleted = 0;
2027
2028 while ($limit > 0) {
2029 $limit_part = 500;
2030
2031 $query = "SELECT ttrss_tags.id AS id
2032 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
2033 WHERE post_int_id = int_id AND $interval_query AND
2034 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
2035
2036 $result = db_query($query);
2037
2038 $ids = array();
2039
2040 while ($line = db_fetch_assoc($result)) {
2041 array_push($ids, $line['id']);
2042 }
2043
2044 if (count($ids) > 0) {
2045 $ids = join(",", $ids);
2046
2047 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
2048 $tags_deleted += db_affected_rows($tmp_result);
2049 } else {
2050 break;
2051 }
2052
2053 $limit -= $limit_part;
2054 }
2055
2056 return $tags_deleted;
2057 }
2058
2059 function print_user_stylesheet() {
2060 $value = get_pref('USER_STYLESHEET');
2061
2062 if ($value) {
2063 print "<style type=\"text/css\">";
2064 print str_replace("<br/>", "\n", $value);
2065 print "</style>";
2066 }
2067
2068 }
2069
2070 function filter_to_sql($filter, $owner_uid) {
2071 $query = array();
2072
2073 if (DB_TYPE == "pgsql")
2074 $reg_qpart = "~";
2075 else
2076 $reg_qpart = "REGEXP";
2077
2078 foreach ($filter["rules"] AS $rule) {
2079 $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
2080 $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
2081 $rule['reg_exp']) !== FALSE;
2082
2083 if ($regexp_valid) {
2084
2085 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
2086
2087 switch ($rule["type"]) {
2088 case "title":
2089 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
2090 $rule['reg_exp'] . "')";
2091 break;
2092 case "content":
2093 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
2094 $rule['reg_exp'] . "')";
2095 break;
2096 case "both":
2097 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
2098 $rule['reg_exp'] . "') OR LOWER(" .
2099 "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
2100 break;
2101 case "tag":
2102 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
2103 $rule['reg_exp'] . "')";
2104 break;
2105 case "link":
2106 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
2107 $rule['reg_exp'] . "')";
2108 break;
2109 case "author":
2110 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
2111 $rule['reg_exp'] . "')";
2112 break;
2113 }
2114
2115 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
2116
2117 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
2118 $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
2119 }
2120
2121 if (isset($rule["cat_id"])) {
2122
2123 if ($rule["cat_id"] > 0) {
2124 $children = getChildCategories($rule["cat_id"], $owner_uid);
2125 array_push($children, $rule["cat_id"]);
2126
2127 $children = join(",", $children);
2128
2129 $cat_qpart = "cat_id IN ($children)";
2130 } else {
2131 $cat_qpart = "cat_id IS NULL";
2132 }
2133
2134 $qpart .= " AND $cat_qpart";
2135 }
2136
2137 $qpart .= " AND feed_id IS NOT NULL";
2138
2139 array_push($query, "($qpart)");
2140
2141 }
2142 }
2143
2144 if (count($query) > 0) {
2145 $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
2146 } else {
2147 $fullquery = "(false)";
2148 }
2149
2150 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
2151
2152 return $fullquery;
2153 }
2154
2155 if (!function_exists('gzdecode')) {
2156 function gzdecode($string) { // no support for 2nd argument
2157 return file_get_contents('compress.zlib://data:who/cares;base64,'.
2158 base64_encode($string));
2159 }
2160 }
2161
2162 function get_random_bytes($length) {
2163 if (function_exists('openssl_random_pseudo_bytes')) {
2164 return openssl_random_pseudo_bytes($length);
2165 } else {
2166 $output = "";
2167
2168 for ($i = 0; $i < $length; $i++)
2169 $output .= chr(mt_rand(0, 255));
2170
2171 return $output;
2172 }
2173 }
2174
2175 function read_stdin() {
2176 $fp = fopen("php://stdin", "r");
2177
2178 if ($fp) {
2179 $line = trim(fgets($fp));
2180 fclose($fp);
2181 return $line;
2182 }
2183
2184 return null;
2185 }
2186
97b7d5c0
AD
2187 function getFeedCategory($feed) {
2188 $result = db_query("SELECT cat_id FROM ttrss_feeds
2189 WHERE id = '$feed'");
2190
2191 if (db_num_rows($result) > 0) {
2192 return db_fetch_result($result, 0, "cat_id");
2193 } else {
2194 return false;
2195 }
2196
2197 }
2198
2199 function implements_interface($class, $interface) {
2200 return in_array($interface, class_implements($class));
2201 }
2202
97b7d5c0
AD
2203 function get_minified_js($files) {
2204 require_once 'lib/jshrink/Minifier.php';
2205
2206 $rv = '';
2207
2208 foreach ($files as $js) {
2209 if (!isset($_GET['debug'])) {
2210 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
2211
aa9f7d44 2212 if (file_exists($cached_file) && is_readable($cached_file) && filemtime($cached_file) >= filemtime("js/$js.js")) {
97b7d5c0 2213
aa9f7d44 2214 list($header, $contents) = explode("\n", file_get_contents($cached_file), 2);
97b7d5c0 2215
aa9f7d44
AD
2216 if ($header && $contents) {
2217 list($htag, $hversion) = explode(":", $header);
2218
2219 if ($htag == "tt-rss" && $hversion == VERSION) {
2220 $rv .= $contents;
2221 continue;
2222 }
2223 }
97b7d5c0 2224 }
aa9f7d44
AD
2225
2226 $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
2227 file_put_contents($cached_file, "tt-rss:" . VERSION . "\n" . $minified);
2228 $rv .= $minified;
2229
97b7d5c0 2230 } else {
aa9f7d44 2231 $rv .= file_get_contents("js/$js.js"); // no cache in debug mode
97b7d5c0
AD
2232 }
2233 }
2234
2235 return $rv;
2236 }
2237
97b7d5c0
AD
2238 function calculate_dep_timestamp() {
2239 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
2240
2241 $max_ts = -1;
2242
2243 foreach ($files as $file) {
2244 if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
2245 }
2246
2247 return $max_ts;
2248 }
2249
2250 function T_js_decl($s1, $s2) {
2251 if ($s1 && $s2) {
2252 $s1 = preg_replace("/\n/", "", $s1);
2253 $s2 = preg_replace("/\n/", "", $s2);
2254
2255 $s1 = preg_replace("/\"/", "\\\"", $s1);
2256 $s2 = preg_replace("/\"/", "\\\"", $s2);
2257
2258 return "T_messages[\"$s1\"] = \"$s2\";\n";
2259 }
2260 }
2261
2262 function init_js_translations() {
2263
2264 print 'var T_messages = new Object();
2265
2266 function __(msg) {
2267 if (T_messages[msg]) {
2268 return T_messages[msg];
2269 } else {
2270 return msg;
2271 }
2272 }
2273
2274 function ngettext(msg1, msg2, n) {
2275 return __((parseInt(n) > 1) ? msg2 : msg1);
2276 }';
2277
2278 $l10n = _get_reader();
2279
2280 for ($i = 0; $i < $l10n->total; $i++) {
2281 $orig = $l10n->get_original_string($i);
2282 if(strpos($orig, "\000") !== FALSE) { // Plural forms
2283 $key = explode(chr(0), $orig);
2284 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
2285 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
2286 } else {
2287 $translation = __($orig);
2288 print T_js_decl($orig, $translation);
2289 }
2290 }
2291 }
2292
2293 function label_to_feed_id($label) {
2294 return LABEL_BASE_INDEX - 1 - abs($label);
2295 }
2296
2297 function feed_to_label_id($feed) {
2298 return LABEL_BASE_INDEX - 1 + abs($feed);
2299 }
2300
b9634eb8
AD
2301 function get_theme_path($theme) {
2302 $check = "themes/$theme";
2303 if (file_exists($check)) return $check;
2304
2305 $check = "themes.local/$theme";
2306 if (file_exists($check)) return $check;
2307 }
2308
2309 function theme_valid($theme) {
181c8285
AD
2310 $bundled_themes = [ "default.php", "night.css", "compact.css" ];
2311
2312 if (in_array($theme, $bundled_themes)) return true;
2313
b9634eb8
AD
2314 $file = "themes/" . basename($theme);
2315
2316 if (!file_exists($file)) $file = "themes.local/" . basename($theme);
f6cbe9a5
AD
2317
2318 if (file_exists($file) && is_readable($file)) {
2319 $fh = fopen($file, "r");
2320
2321 if ($fh) {
2322 $header = fgets($fh);
2323 fclose($fh);
2324
2325 return strpos($header, "supports-version:" . VERSION_STATIC) !== FALSE;
2326 }
2327 }
2328
2329 return false;
2330 }
27f7b593 2331
7b55001e
AD
2332 /**
2333 * @SuppressWarnings(unused)
2334 */
27f7b593
AD
2335 function error_json($code) {
2336 require_once "errors.php";
2337
2338 @$message = $ERRORS[$code];
2339
2340 return json_encode(array("error" =>
2341 array("code" => $code, "message" => $message)));
2342
2343 }
7c0a2ab2
AD
2344
2345 function abs_to_rel_path($dir) {
2346 $tmp = str_replace(dirname(__DIR__), "", $dir);
2347
2348 if (strlen($tmp) > 0 && substr($tmp, 0, 1) == "/") $tmp = substr($tmp, 1);
2349
2350 return $tmp;
2351 }
1a322ff3
AD
2352
2353 function get_upload_error_message($code) {
2354
2355 $errors = array(
2356 0 => __('There is no error, the file uploaded with success'),
2357 1 => __('The uploaded file exceeds the upload_max_filesize directive in php.ini'),
2358 2 => __('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form'),
2359 3 => __('The uploaded file was only partially uploaded'),
2360 4 => __('No file was uploaded'),
2361 6 => __('Missing a temporary folder'),
2362 7 => __('Failed to write file to disk.'),
2363 8 => __('A PHP extension stopped the file upload.'),
2364 );
2365
2366 return $errors[$code];
2367 }
70c0a8c2
AD
2368
2369 function base64_img($filename) {
2370 if (file_exists($filename)) {
2371 $ext = pathinfo($filename, PATHINFO_EXTENSION);
2372
2373 return "data:image/$ext;base64," . base64_encode(file_get_contents($filename));
2374 } else {
2375 return "";
2376 }
2377 }
ea79a0e0 2378