]>
Commit | Line | Data |
---|---|---|
1 | <?php | |
2 | class Article extends Handler_Protected { | |
3 | ||
4 | function csrf_ignore($method) { | |
5 | $csrf_ignored = array("redirect", "editarticletags"); | |
6 | ||
7 | return array_search($method, $csrf_ignored) !== false; | |
8 | } | |
9 | ||
10 | function redirect() { | |
11 | $id = $this->dbh->escape_string($_REQUEST['id']); | |
12 | ||
13 | $result = $this->dbh->query("SELECT link FROM ttrss_entries, ttrss_user_entries | |
14 | WHERE id = '$id' AND id = ref_id AND owner_uid = '".$_SESSION['uid']."' | |
15 | LIMIT 1"); | |
16 | ||
17 | if ($this->dbh->num_rows($result) == 1) { | |
18 | $article_url = $this->dbh->fetch_result($result, 0, 'link'); | |
19 | $article_url = str_replace("\n", "", $article_url); | |
20 | ||
21 | header("Location: $article_url"); | |
22 | return; | |
23 | ||
24 | } else { | |
25 | print_error(__("Article not found.")); | |
26 | } | |
27 | } | |
28 | ||
29 | function view() { | |
30 | $id = $this->dbh->escape_string($_REQUEST["id"]); | |
31 | $cids = explode(",", $this->dbh->escape_string($_REQUEST["cids"])); | |
32 | $mode = $this->dbh->escape_string($_REQUEST["mode"]); | |
33 | $omode = $this->dbh->escape_string($_REQUEST["omode"]); | |
34 | ||
35 | // in prefetch mode we only output requested cids, main article | |
36 | // just gets marked as read (it already exists in client cache) | |
37 | ||
38 | $articles = array(); | |
39 | ||
40 | if ($mode == "") { | |
41 | array_push($articles, format_article($id, false)); | |
42 | } else if ($mode == "zoom") { | |
43 | array_push($articles, format_article($id, true, true)); | |
44 | } else if ($mode == "raw") { | |
45 | if ($_REQUEST['html']) { | |
46 | header("Content-Type: text/html"); | |
47 | print '<link rel="stylesheet" type="text/css" href="tt-rss.css"/>'; | |
48 | } | |
49 | ||
50 | $article = format_article($id, false); | |
51 | print $article['content']; | |
52 | return; | |
53 | } | |
54 | ||
55 | $this->catchupArticleById($id, 0); | |
56 | ||
57 | if (!$_SESSION["bw_limit"]) { | |
58 | foreach ($cids as $cid) { | |
59 | if ($cid) { | |
60 | array_push($articles, format_article($cid, false, false)); | |
61 | } | |
62 | } | |
63 | } | |
64 | ||
65 | print json_encode($articles); | |
66 | } | |
67 | ||
68 | private function catchupArticleById($id, $cmode) { | |
69 | ||
70 | if ($cmode == 0) { | |
71 | $this->dbh->query("UPDATE ttrss_user_entries SET | |
72 | unread = false,last_read = NOW() | |
73 | WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); | |
74 | } else if ($cmode == 1) { | |
75 | $this->dbh->query("UPDATE ttrss_user_entries SET | |
76 | unread = true | |
77 | WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); | |
78 | } else { | |
79 | $this->dbh->query("UPDATE ttrss_user_entries SET | |
80 | unread = NOT unread,last_read = NOW() | |
81 | WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); | |
82 | } | |
83 | ||
84 | $feed_id = getArticleFeed($id); | |
85 | ccache_update($feed_id, $_SESSION["uid"]); | |
86 | } | |
87 | ||
88 | static function create_published_article($title, $url, $content, $labels_str, | |
89 | $owner_uid) { | |
90 | ||
91 | $guid = 'SHA1:' . sha1("ttshared:" . $url . $owner_uid); // include owner_uid to prevent global GUID clash | |
92 | $content_hash = sha1($content); | |
93 | ||
94 | if ($labels_str != "") { | |
95 | $labels = explode(",", $labels_str); | |
96 | } else { | |
97 | $labels = array(); | |
98 | } | |
99 | ||
100 | $rc = false; | |
101 | ||
102 | if (!$title) $title = $url; | |
103 | if (!$title && !$url) return false; | |
104 | ||
105 | if (filter_var($url, FILTER_VALIDATE_URL) === FALSE) return false; | |
106 | ||
107 | db_query("BEGIN"); | |
108 | ||
109 | // only check for our user data here, others might have shared this with different content etc | |
110 | $result = db_query("SELECT id FROM ttrss_entries, ttrss_user_entries WHERE | |
111 | link = '$url' AND ref_id = id AND owner_uid = '$owner_uid' LIMIT 1"); | |
112 | ||
113 | if (db_num_rows($result) != 0) { | |
114 | $ref_id = db_fetch_result($result, 0, "id"); | |
115 | ||
116 | $result = db_query("SELECT int_id FROM ttrss_user_entries WHERE | |
117 | ref_id = '$ref_id' AND owner_uid = '$owner_uid' LIMIT 1"); | |
118 | ||
119 | if (db_num_rows($result) != 0) { | |
120 | $int_id = db_fetch_result($result, 0, "int_id"); | |
121 | ||
122 | db_query("UPDATE ttrss_entries SET | |
123 | content = '$content', content_hash = '$content_hash' WHERE id = '$ref_id'"); | |
124 | ||
125 | db_query("UPDATE ttrss_user_entries SET published = true, | |
126 | last_published = NOW() WHERE | |
127 | int_id = '$int_id' AND owner_uid = '$owner_uid'"); | |
128 | } else { | |
129 | ||
130 | db_query("INSERT INTO ttrss_user_entries | |
131 | (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, | |
132 | last_read, note, unread, last_published) | |
133 | VALUES | |
134 | ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false, NOW())"); | |
135 | } | |
136 | ||
137 | if (count($labels) != 0) { | |
138 | foreach ($labels as $label) { | |
139 | label_add_article($ref_id, trim($label), $owner_uid); | |
140 | } | |
141 | } | |
142 | ||
143 | $rc = true; | |
144 | ||
145 | } else { | |
146 | $result = db_query("INSERT INTO ttrss_entries | |
147 | (title, guid, link, updated, content, content_hash, date_entered, date_updated) | |
148 | VALUES | |
149 | ('$title', '$guid', '$url', NOW(), '$content', '$content_hash', NOW(), NOW())"); | |
150 | ||
151 | $result = db_query("SELECT id FROM ttrss_entries WHERE guid = '$guid'"); | |
152 | ||
153 | if (db_num_rows($result) != 0) { | |
154 | $ref_id = db_fetch_result($result, 0, "id"); | |
155 | ||
156 | db_query("INSERT INTO ttrss_user_entries | |
157 | (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, | |
158 | last_read, note, unread, last_published) | |
159 | VALUES | |
160 | ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false, NOW())"); | |
161 | ||
162 | if (count($labels) != 0) { | |
163 | foreach ($labels as $label) { | |
164 | label_add_article($ref_id, trim($label), $owner_uid); | |
165 | } | |
166 | } | |
167 | ||
168 | $rc = true; | |
169 | } | |
170 | } | |
171 | ||
172 | db_query("COMMIT"); | |
173 | ||
174 | return $rc; | |
175 | } | |
176 | ||
177 | function editArticleTags() { | |
178 | ||
179 | print __("Tags for this article (separated by commas):")."<br>"; | |
180 | ||
181 | $param = $this->dbh->escape_string($_REQUEST['param']); | |
182 | ||
183 | $tags = get_article_tags($this->dbh->escape_string($param)); | |
184 | ||
185 | $tags_str = join(", ", $tags); | |
186 | ||
187 | print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"id\" value=\"$param\">"; | |
188 | print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"article\">"; | |
189 | print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"setArticleTags\">"; | |
190 | ||
191 | print "<table width='100%'><tr><td>"; | |
192 | ||
193 | print "<textarea dojoType=\"dijit.form.SimpleTextarea\" rows='4' | |
194 | style='font-size : 12px; width : 100%' id=\"tags_str\" | |
195 | name='tags_str'>$tags_str</textarea> | |
196 | <div class=\"autocomplete\" id=\"tags_choices\" | |
197 | style=\"display:none\"></div>"; | |
198 | ||
199 | print "</td></tr></table>"; | |
200 | ||
201 | print "<div class='dlgButtons'>"; | |
202 | ||
203 | print "<button dojoType=\"dijit.form.Button\" | |
204 | onclick=\"dijit.byId('editTagsDlg').execute()\">".__('Save')."</button> "; | |
205 | print "<button dojoType=\"dijit.form.Button\" | |
206 | onclick=\"dijit.byId('editTagsDlg').hide()\">".__('Cancel')."</button>"; | |
207 | print "</div>"; | |
208 | ||
209 | } | |
210 | ||
211 | function setScore() { | |
212 | $ids = $this->dbh->escape_string($_REQUEST['id']); | |
213 | $score = (int)$this->dbh->escape_string($_REQUEST['score']); | |
214 | ||
215 | $this->dbh->query("UPDATE ttrss_user_entries SET | |
216 | score = '$score' WHERE ref_id IN ($ids) AND owner_uid = " . $_SESSION["uid"]); | |
217 | ||
218 | print json_encode(array("id" => $id, | |
219 | "score_pic" => get_score_pic($score))); | |
220 | } | |
221 | ||
222 | ||
223 | function setArticleTags() { | |
224 | ||
225 | $id = $this->dbh->escape_string($_REQUEST["id"]); | |
226 | ||
227 | $tags_str = $this->dbh->escape_string($_REQUEST["tags_str"]); | |
228 | $tags = array_unique(trim_array(explode(",", $tags_str))); | |
229 | ||
230 | $this->dbh->query("BEGIN"); | |
231 | ||
232 | $result = $this->dbh->query("SELECT int_id FROM ttrss_user_entries WHERE | |
233 | ref_id = '$id' AND owner_uid = '".$_SESSION["uid"]."' LIMIT 1"); | |
234 | ||
235 | if ($this->dbh->num_rows($result) == 1) { | |
236 | ||
237 | $tags_to_cache = array(); | |
238 | ||
239 | $int_id = $this->dbh->fetch_result($result, 0, "int_id"); | |
240 | ||
241 | $this->dbh->query("DELETE FROM ttrss_tags WHERE | |
242 | post_int_id = $int_id AND owner_uid = '".$_SESSION["uid"]."'"); | |
243 | ||
244 | foreach ($tags as $tag) { | |
245 | $tag = sanitize_tag($tag); | |
246 | ||
247 | if (!tag_is_valid($tag)) { | |
248 | continue; | |
249 | } | |
250 | ||
251 | if (preg_match("/^[0-9]*$/", $tag)) { | |
252 | continue; | |
253 | } | |
254 | ||
255 | // print "<!-- $id : $int_id : $tag -->"; | |
256 | ||
257 | if ($tag != '') { | |
258 | $this->dbh->query("INSERT INTO ttrss_tags | |
259 | (post_int_id, owner_uid, tag_name) VALUES ('$int_id', '".$_SESSION["uid"]."', '$tag')"); | |
260 | } | |
261 | ||
262 | array_push($tags_to_cache, $tag); | |
263 | } | |
264 | ||
265 | /* update tag cache */ | |
266 | ||
267 | sort($tags_to_cache); | |
268 | $tags_str = join(",", $tags_to_cache); | |
269 | ||
270 | $this->dbh->query("UPDATE ttrss_user_entries | |
271 | SET tag_cache = '$tags_str' WHERE ref_id = '$id' | |
272 | AND owner_uid = " . $_SESSION["uid"]); | |
273 | } | |
274 | ||
275 | $this->dbh->query("COMMIT"); | |
276 | ||
277 | $tags = get_article_tags($id); | |
278 | $tags_str = format_tags_string($tags, $id); | |
279 | $tags_str_full = join(", ", $tags); | |
280 | ||
281 | if (!$tags_str_full) $tags_str_full = __("no tags"); | |
282 | ||
283 | print json_encode(array("id" => (int)$id, | |
284 | "content" => $tags_str, "content_full" => $tags_str_full)); | |
285 | } | |
286 | ||
287 | ||
288 | function completeTags() { | |
289 | $search = $this->dbh->escape_string($_REQUEST["search"]); | |
290 | ||
291 | $result = $this->dbh->query("SELECT DISTINCT tag_name FROM ttrss_tags | |
292 | WHERE owner_uid = '".$_SESSION["uid"]."' AND | |
293 | tag_name LIKE '$search%' ORDER BY tag_name | |
294 | LIMIT 10"); | |
295 | ||
296 | print "<ul>"; | |
297 | while ($line = $this->dbh->fetch_assoc($result)) { | |
298 | print "<li>" . $line["tag_name"] . "</li>"; | |
299 | } | |
300 | print "</ul>"; | |
301 | } | |
302 | ||
303 | function assigntolabel() { | |
304 | return $this->labelops(true); | |
305 | } | |
306 | ||
307 | function removefromlabel() { | |
308 | return $this->labelops(false); | |
309 | } | |
310 | ||
311 | private function labelops($assign) { | |
312 | $reply = array(); | |
313 | ||
314 | $ids = explode(",", $this->dbh->escape_string($_REQUEST["ids"])); | |
315 | $label_id = $this->dbh->escape_string($_REQUEST["lid"]); | |
316 | ||
317 | $label = $this->dbh->escape_string(label_find_caption($label_id, | |
318 | $_SESSION["uid"])); | |
319 | ||
320 | $reply["info-for-headlines"] = array(); | |
321 | ||
322 | if ($label) { | |
323 | ||
324 | foreach ($ids as $id) { | |
325 | ||
326 | if ($assign) | |
327 | label_add_article($id, $label, $_SESSION["uid"]); | |
328 | else | |
329 | label_remove_article($id, $label, $_SESSION["uid"]); | |
330 | ||
331 | $labels = get_article_labels($id, $_SESSION["uid"]); | |
332 | ||
333 | array_push($reply["info-for-headlines"], | |
334 | array("id" => $id, "labels" => format_article_labels($labels, $id))); | |
335 | ||
336 | } | |
337 | } | |
338 | ||
339 | $reply["message"] = "UPDATE_COUNTERS"; | |
340 | ||
341 | print json_encode($reply); | |
342 | } | |
343 | ||
344 | ||
345 | ||
346 | } |