backend.php

   1 <?
   2         require_once "sessions.php";
   3
   4         header("Cache-Control: no-cache, must-revalidate");
   5         header("Pragma: no-cache");
   6         header("Expires: -1");
   7
   8 /*      if ($_GET["debug"]) {
   9                 define('DEFAULT_ERROR_LEVEL', E_ALL);
  10         } else {
  11                 define('DEFAULT_ERROR_LEVEL', E_ERROR | E_WARNING | E_PARSE);
  12         }
  13
  14         error_reporting(DEFAULT_ERROR_LEVEL); */
  15
  16         $op = $_REQUEST["op"];
  17
  18         if ((!$op || $op == "rpc" || $op == "globalUpdateFeeds") && !$_REQUEST["noxml"]) {
  19                 header("Content-Type: application/xml");
  20         }
  21
  22         if (!$_SESSION["uid"] && $op != "globalUpdateFeeds") {
  23
  24                 if ($op == "rpc") {
  25                         print "<error error-code=\"6\"/>";
  26                 } else {
  27                         print "
  28                         <html><body>
  29                                 <p>Error: Not logged in.</p>
  30                                 <script type=\"text/javascript\">
  31                                         if (parent.window != 'undefined') {
  32                                                 parent.window.location = \"login.php\";
  33                                         } else {
  34                                                 window.location = \"login.php\";
  35                                         }
  36                                 </script>
  37                         </body></html>
  38                         ";
  39                 }
  40                 exit;
  41         }
  42
  43         if (!$op) {
  44                 print "<error error-code=\"7\"/>";
  45                 exit;
  46         }
  47
  48         define('SCHEMA_VERSION', 7);
  49
  50         require_once "sanity_check.php";
  51         require_once "config.php";
  52         require_once "db.php";
  53         require_once "db-prefs.php";
  54         require_once "functions.php";
  55         require_once "magpierss/rss_fetch.inc";
  56
  57         $purge_intervals = array(
  58                 0  => "Default",
  59                 -1 => "Never purge",
  60                 5  => "1 week",
  61                 14 => "2 weeks",
  62                 31 => "1 month",
  63                 60 => "2 months",
  64                 90 => "3 months");
  65
  66         $update_intervals = array(
  67                 0   => "Default",
  68                 -1  => "Disable updates",
  69                 30  => "30 minutes",
  70                 60  => "1 hour",
  71                 240 => "4 hours",
  72                 720 => "12 hours",
  73                 1440 => "Daily",
  74                 10080 => "Weekly");
  75
  76         $script_started = getmicrotime();
  77
  78         $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
  79
  80         if (!$link) {
  81                 if (DB_TYPE == "mysql") {
  82                         print mysql_error();
  83                 }
  84                 // PG seems to display its own errors just fine by default.
  85                 return;
  86         }
  87
  88         if (DB_TYPE == "pgsql") {
  89                 pg_query("set client_encoding = 'utf-8'");
  90         }
  91
  92         if ($_SESSION["uid"]) {
  93                 if (get_pref($link, "HIDE_READ_FEEDS") == "true") {
  94                         setcookie("ttrss_vf_hreadf", 1);
  95                 } else {
  96                         setcookie("ttrss_vf_hreadf", 0);
  97                 }
  98
  99                 setcookie('ttrss_vf_refresh', FEEDS_FRAME_REFRESH);
 100                 setcookie('ttrss_vf_daemon', ENABLE_UPDATE_DAEMON);
 101         }
 102
 103         $fetch = $_GET["fetch"];
 104
 105 //      setcookie("ttrss_icons_url", ICONS_URL);
 106
 107         if (!sanity_check($link)) { return; }
 108
 109         function getAllCounters($link) {
 110                 getLabelCounters($link);
 111                 getFeedCounters($link);
 112                 getTagCounters($link);
 113                 getGlobalCounters($link);
 114                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
 115                         getCategoryCounters($link);
 116                 }
 117         }
 118
 119         function getCategoryCounters($link) {
 120                 $result = db_query($link, "SELECT cat_id,SUM((SELECT COUNT(int_id)
 121                                 FROM ttrss_user_entries WHERE feed_id = ttrss_feeds.id
 122                                         AND unread = true)) AS unread FROM ttrss_feeds
 123                         WHERE
 124                                 owner_uid = ".$_SESSION["uid"]." GROUP BY cat_id");
 125
 126                 while ($line = db_fetch_assoc($result)) {
 127                         $line["cat_id"] = sprintf("%d", $line["cat_id"]);
 128                         print "<counter type=\"category\" id=\"".$line["cat_id"]."\" counter=\"".
 129                                 $line["unread"]."\"/>";
 130                 }
 131         }
 132
 133         function getFeedUnread($link, $feed) {
 134                 $n_feed = sprintf("%d", $feed);
 135
 136                 if ($n_feed == -1) {
 137                         $match_part = "marked = true";
 138                 } else if ($feed > 0) {
 139                         $match_part = "feed_id = '$n_feed'";
 140                 } else if ($feed < -10) {
 141                         $label_id = -$feed - 11;
 142
 143                         $result = db_query($link, "SELECT sql_exp FROM ttrss_labels WHERE
 144                                 id = '$label_id' AND owner_uid = " . $_SESSION["uid"]);
 145
 146                         $match_part = db_fetch_result($result, 0, "sql_exp");
 147                 }
 148
 149                 if ($match_part) {
 150
 151                         $result = db_query($link, "SELECT count(int_id) AS unread
 152                                 FROM ttrss_user_entries
 153                                 WHERE   unread = true AND $match_part AND owner_uid = " . $_SESSION["uid"]);
 154
 155                 } else {
 156
 157                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
 158                                 FROM ttrss_tags,ttrss_user_entries
 159                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND unread = true AND
 160                                         ttrss_tags.owner_uid = " . $_SESSION["uid"]);
 161                 }
 162
 163                 $unread = db_fetch_result($result, 0, "unread");
 164                 return $unread;
 165         }
 166
 167         /* FIXME this needs reworking */
 168
 169         function getGlobalUnread($link) {
 170                 $result = db_query($link, "SELECT count(id) as c_id FROM ttrss_entries,ttrss_user_entries
 171                         WHERE unread = true AND
 172                         ttrss_user_entries.ref_id = ttrss_entries.id AND
 173                         owner_uid = " . $_SESSION["uid"]);
 174                 $c_id = db_fetch_result($result, 0, "c_id");
 175                 return $c_id;
 176         }
 177
 178         function getGlobalCounters($link, $global_unread = -1) {
 179                 if ($global_unread == -1) {
 180                         $global_unread = getGlobalUnread($link);
 181                 }
 182                 print "<counter type=\"global\" id='global-unread' counter='$global_unread'/>";
 183         }
 184
 185         function getTagCounters($link, $smart_mode = SMART_RPC_COUNTERS) {
 186
 187                 if ($smart_mode) {
 188                         if (!$_SESSION["tctr_last_value"]) {
 189                                 $_SESSION["tctr_last_value"] = array();
 190                         }
 191                 }
 192
 193                 $old_counters = $_SESSION["tctr_last_value"];
 194
 195                 $tctrs_modified = false;
 196
 197 /*              $result = db_query($link, "SELECT tag_name,count(ttrss_entries.id) AS count
 198                         FROM ttrss_tags,ttrss_entries,ttrss_user_entries WHERE
 199                         ttrss_user_entries.ref_id = ttrss_entries.id AND
 200                         ttrss_tags.owner_uid = ".$_SESSION["uid"]." AND
 201                         post_int_id = ttrss_user_entries.int_id AND unread = true GROUP BY tag_name
 202                 UNION
 203                         select tag_name,0 as count FROM ttrss_tags
 204                         WHERE ttrss_tags.owner_uid = ".$_SESSION["uid"]); */
 205
 206                 $result = db_query($link, "SELECT tag_name,SUM((SELECT COUNT(int_id)
 207                         FROM ttrss_user_entries WHERE int_id = post_int_id
 208                                 AND unread = true)) AS count FROM ttrss_tags
 209                         WHERE owner_uid = 2 GROUP BY tag_name ORDER BY tag_name");
 210
 211                 $tags = array();
 212
 213                 while ($line = db_fetch_assoc($result)) {
 214                         $tags[$line["tag_name"]] += $line["count"];
 215                 }
 216
 217                 foreach (array_keys($tags) as $tag) {
 218                         $unread = $tags[$tag];
 219
 220                         $tag = htmlspecialchars($tag);
 221
 222                         if (!$smart_mode || $old_counters[$tag] != $unread) {
 223                                 $old_counters[$tag] = $unread;
 224                                 $tctrs_modified = true;
 225                                 print "<counter type=\"tag\" id=\"$tag\" counter=\"$unread\"/>";
 226                         }
 227
 228                 }
 229
 230                 if ($smart_mode && $tctrs_modified) {
 231                         $_SESSION["tctr_last_value"] = $old_counters;
 232                 }
 233
 234         }
 235
 236         function getLabelCounters($link, $smart_mode = SMART_RPC_COUNTERS) {
 237
 238                 if ($smart_mode) {
 239                         if (!$_SESSION["lctr_last_value"]) {
 240                                 $_SESSION["lctr_last_value"] = array();
 241                         }
 242                 }
 243
 244                 $old_counters = $_SESSION["lctr_last_value"];
 245                 $lctrs_modified = false;
 246
 247                 $result = db_query($link, "SELECT count(id) as count FROM ttrss_entries,ttrss_user_entries
 248                         WHERE marked = true AND ttrss_user_entries.ref_id = ttrss_entries.id AND
 249                         unread = true AND owner_uid = ".$_SESSION["uid"]);
 250
 251                 $count = db_fetch_result($result, 0, "count");
 252
 253                 print "<counter type=\"label\" id=\"-1\" counter=\"$count\"/>";
 254
 255                 $result = db_query($link, "SELECT owner_uid,id,sql_exp,description FROM
 256                         ttrss_labels WHERE owner_uid = ".$_SESSION["uid"]." ORDER by description");
 257
 258                 while ($line = db_fetch_assoc($result)) {
 259
 260                         $id = -$line["id"] - 11;
 261
 262                         error_reporting (0);
 263
 264                         $tmp_result = db_query($link, "SELECT count(id) as count FROM ttrss_user_entries,ttrss_entries
 265                                 WHERE (" . $line["sql_exp"] . ") AND unread = true AND
 266                                 ttrss_user_entries.ref_id = ttrss_entries.id AND
 267                                 owner_uid = ".$_SESSION["uid"]);
 268
 269                         $count = db_fetch_result($tmp_result, 0, "count");
 270
 271                         if (!$smart_mode || $old_counters[$id] != $count) {
 272                                 $old_counters[$id] = $count;
 273                                 $lctrs_modified = true;
 274                                 print "<counter type=\"label\" id=\"$id\" counter=\"$count\"/>";
 275                         }
 276
 277                         error_reporting (DEFAULT_ERROR_LEVEL);
 278                 }
 279
 280                 if ($smart_mode && $lctrs_modified) {
 281                         $_SESSION["lctr_last_value"] = $old_counters;
 282                 }
 283         }
 284
 285 /*      function getFeedCounter($link, $id) {
 286
 287                 $result = db_query($link, "SELECT
 288                                 count(id) as count,last_error
 289                         FROM ttrss_entries,ttrss_user_entries,ttrss_feeds
 290                         WHERE feed_id = '$id' AND unread = true
 291                         AND ttrss_user_entries.feed_id = ttrss_feeds.id
 292                         AND ttrss_user_entries.ref_id = ttrss_entries.id");
 293
 294                         $count = db_fetch_result($result, 0, "count");
 295                         $last_error = htmlspecialchars(db_fetch_result($result, 0, "last_error"));
 296
 297                         print "<counter type=\"feed\" id=\"$id\" counter=\"$count\" error=\"$last_error\"/>";
 298         } */
 299
 300         function getFeedCounters($link, $smart_mode = SMART_RPC_COUNTERS) {
 301
 302                 if ($smart_mode) {
 303                         if (!$_SESSION["fctr_last_value"]) {
 304                                 $_SESSION["fctr_last_value"] = array();
 305                         }
 306                 }
 307
 308                 $old_counters = $_SESSION["fctr_last_value"];
 309
 310                 $result = db_query($link, "SELECT id,last_error,parent_feed,
 311                         (SELECT count(id)
 312                                 FROM ttrss_entries,ttrss_user_entries
 313                                 WHERE feed_id = ttrss_feeds.id AND
 314                                         ttrss_user_entries.ref_id = ttrss_entries.id
 315                                 AND unread = true AND owner_uid = ".$_SESSION["uid"].") as count
 316                         FROM ttrss_feeds WHERE owner_uid = ".$_SESSION["uid"] . "
 317                                 AND parent_feed IS NULL");
 318
 319                 $fctrs_modified = false;
 320
 321                 while ($line = db_fetch_assoc($result)) {
 322
 323                         $id = $line["id"];
 324                         $count = $line["count"];
 325                         $last_error = htmlspecialchars($line["last_error"]);
 326
 327                         $has_img = is_file(ICONS_DIR . "/$id.ico");
 328
 329                         $tmp_result = db_query($link,
 330                                 "SELECT id,COUNT(unread) AS unread
 331                                 FROM ttrss_feeds LEFT JOIN ttrss_user_entries
 332                                         ON (ttrss_feeds.id = ttrss_user_entries.feed_id)
 333                                 WHERE parent_feed = '$id' AND unread = true GROUP BY ttrss_feeds.id");
 334
 335                         if (db_num_rows($tmp_result) > 0) {
 336                                 while ($l = db_fetch_assoc($tmp_result)) {
 337                                         $count += $l["unread"];
 338                                 }
 339                         }
 340
 341                         if (!$smart_mode || $old_counters[$id] != $count) {
 342                                 $old_counters[$id] = $count;
 343                                 $fctrs_modified = true;
 344
 345                                 if ($last_error) {
 346                                         $error_part = "error=\"$last_error\"";
 347                                 } else {
 348                                         $error_part = "";
 349                                 }
 350
 351                                 if ($has_img) {
 352                                         $has_img_part = "hi=\"$has_img\"";
 353                                 } else {
 354                                         $has_img_part = "";
 355                                 }
 356
 357                                 print "<counter type=\"feed\" id=\"$id\" counter=\"$count\" $has_img_part $error_part/>";
 358                         }
 359                 }
 360
 361                 if ($smart_mode && $fctrs_modified) {
 362                         $_SESSION["fctr_last_value"] = $old_counters;
 363                 }
 364         }
 365
 366         function outputFeedList($link, $tags = false) {
 367
 368                 print "<html><head>
 369                         <title>Tiny Tiny RSS : Feedlist</title>
 370                         <link rel=\"stylesheet\" href=\"tt-rss.css\" type=\"text/css\">";
 371
 372                 $user_theme = $_SESSION["theme"];
 373                 if ($user_theme) {
 374                         print "<link rel=\"stylesheet\" type=\"text/css\"
 375                                 href=\"themes/$user_theme/theme.css\">";
 376                 }
 377
 378                 if (get_pref($link, 'USE_COMPACT_STYLESHEET')) {
 379                         print "<link rel=\"stylesheet\" type=\"text/css\"
 380                                 href=\"tt-rss_compact.css\"/>";
 381                 } else {
 382                         print "<link title=\"Compact Stylesheet\" rel=\"alternate stylesheet\"
 383                                         type=\"text/css\" href=\"tt-rss_compact.css\"/>";
 384                 }
 385
 386                 print "<script type=\"text/javascript\" src=\"functions.js\"></script>
 387                         <script type=\"text/javascript\" src=\"feedlist.js\"></script>
 388                         <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
 389                         <!--[if gte IE 5.5000]>
 390                         <script type=\"text/javascript\" src=\"pngfix.js\"></script>
 391                         <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss-ie.css\">
 392                         <![endif]-->
 393                         </head><body>
 394                         <script type=\"text/javascript\">
 395                                 if (document.addEventListener) {
 396                                         document.addEventListener(\"DOMContentLoaded\", init, null);
 397                                 }
 398                                 window.onload = init;
 399                         </script>";
 400
 401                 print "<ul class=\"feedList\" id=\"feedList\">\n";
 402
 403                 $owner_uid = $_SESSION["uid"];
 404
 405                 if (!$tags) {
 406
 407                         /* virtual feeds */
 408
 409                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
 410                                 print "<li class=\"feedCat\">Special</li>";
 411                                 print "<li id=\"feedCatHolder\"><ul class=\"feedCatList\">";
 412                         }
 413
 414                         $result = db_query($link, "SELECT count(id) as num_starred
 415                                 FROM ttrss_entries,ttrss_user_entries
 416                                 WHERE marked = true AND
 417                                 ttrss_user_entries.ref_id = ttrss_entries.id AND
 418                                 unread = true AND owner_uid = '$owner_uid'");
 419                         $num_starred = db_fetch_result($result, 0, "num_starred");
 420
 421                         $class = "virt";
 422
 423                         if ($num_starred > 0) $class .= "Unread";
 424
 425                         printFeedEntry(-1, $class, "Starred articles", $num_starred,
 426                                 "images/mark_set.png", $link);
 427
 428                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
 429                                 print "</ul>\n";
 430                         }
 431
 432                         if (GLOBAL_ENABLE_LABELS && get_pref($link, 'ENABLE_LABELS')) {
 433
 434                                 $result = db_query($link, "SELECT id,sql_exp,description FROM
 435                                         ttrss_labels WHERE owner_uid = '$owner_uid' ORDER by description");
 436
 437                                 if (db_num_rows($result) > 0) {
 438                                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
 439                                                 print "<li class=\"feedCat\">Labels</li>";
 440                                                 print "<li id=\"feedCatHolder\"><ul class=\"feedCatList\">";
 441                                         } else {
 442                                                 print "<li><hr></li>";
 443                                         }
 444                                 }
 445
 446                                 while ($line = db_fetch_assoc($result)) {
 447
 448                                         error_reporting (0);
 449
 450                                         $tmp_result = db_query($link, "SELECT count(id) as count
 451                                                 FROM ttrss_entries,ttrss_user_entries
 452                                                 WHERE (" . $line["sql_exp"] . ") AND unread = true AND
 453                                                 ttrss_user_entries.ref_id = ttrss_entries.id
 454                                                 AND owner_uid = '$owner_uid'");
 455
 456                                         $count = db_fetch_result($tmp_result, 0, "count");
 457
 458                                         $class = "label";
 459
 460                                         if ($count > 0) {
 461                                                 $class .= "Unread";
 462                                         }
 463
 464                                         error_reporting (DEFAULT_ERROR_LEVEL);
 465
 466                                         printFeedEntry(-$line["id"]-11,
 467                                                 $class, $line["description"], $count, "images/label.png", $link);
 468
 469                                 }
 470
 471                                 if (db_num_rows($result) > 0) {
 472                                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
 473                                                 print "</ul>";
 474                                         }
 475                                 }
 476
 477                         }
 478
 479 //                      if (!get_pref($link, 'ENABLE_FEED_CATS')) {
 480                                 print "<li><hr></li>";
 481 //                      }
 482
 483                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
 484                                 $order_by_qpart = "category,title";
 485                         } else {
 486                                 $order_by_qpart = "title";
 487                         }
 488
 489                         $result = db_query($link, "SELECT ttrss_feeds.*,
 490                                 (SELECT COUNT(id) FROM ttrss_entries,ttrss_user_entries
 491                                         WHERE feed_id = ttrss_feeds.id AND
 492                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
 493                                         owner_uid = '$owner_uid') AS total,
 494                                 (SELECT COUNT(id) FROM ttrss_entries,ttrss_user_entries
 495                                         WHERE feed_id = ttrss_feeds.id AND unread = true
 496                                                 AND ttrss_user_entries.ref_id = ttrss_entries.id
 497                                                 AND owner_uid = '$owner_uid') as unread,
 498                                 cat_id,last_error,
 499                                 ttrss_feed_categories.title AS category,
 500                                 ttrss_feed_categories.collapsed
 501                                 FROM ttrss_feeds LEFT JOIN ttrss_feed_categories
 502                                         ON (ttrss_feed_categories.id = cat_id)
 503                                 WHERE
 504                                         ttrss_feeds.owner_uid = '$owner_uid' AND parent_feed IS NULL
 505                                 ORDER BY $order_by_qpart");
 506
 507                         $actid = $_GET["actid"];
 508
 509                         /* real feeds */
 510
 511                         $lnum = 0;
 512
 513                         $total_unread = 0;
 514
 515                         $category = "";
 516
 517                         while ($line = db_fetch_assoc($result)) {
 518
 519                                 $feed = db_unescape_string($line["title"]);
 520                                 $feed_id = $line["id"];
 521
 522                                 $subop = $_GET["subop"];
 523
 524                                 $total = $line["total"];
 525                                 $unread = $line["unread"];
 526
 527                                 $rtl_content = sql_bool_to_bool($line["rtl_content"]);
 528
 529                                 if ($rtl_content) {
 530                                         $rtl_tag = "dir=\"RTL\"";
 531                                 } else {
 532                                         $rtl_tag = "";
 533                                 }
 534
 535                                 $tmp_result = db_query($link,
 536                                         "SELECT id,COUNT(unread) AS unread
 537                                         FROM ttrss_feeds LEFT JOIN ttrss_user_entries
 538                                                 ON (ttrss_feeds.id = ttrss_user_entries.feed_id)
 539                                         WHERE parent_feed = '$feed_id' AND unread = true
 540                                         GROUP BY ttrss_feeds.id");
 541
 542                                 if (db_num_rows($tmp_result) > 0) {
 543                                         while ($l = db_fetch_assoc($tmp_result)) {
 544                                                 $unread += $l["unread"];
 545                                         }
 546                                 }
 547
 548                                 $cat_id = $line["cat_id"];
 549
 550                                 $tmp_category = $line["category"];
 551
 552                                 if (!$tmp_category) {
 553                                         $tmp_category = "Uncategorized";
 554                                 }
 555
 556         //                      $class = ($lnum % 2) ? "even" : "odd";
 557
 558                                 if ($line["last_error"]) {
 559                                         $class = "error";
 560                                 } else {
 561                                         $class = "feed";
 562                                 }
 563
 564                                 if ($unread > 0) $class .= "Unread";
 565
 566                                 if ($actid == $feed_id) {
 567                                         $class .= "Selected";
 568                                 }
 569
 570                                 $total_unread += $unread;
 571
 572                                 if ($category != $tmp_category && get_pref($link, 'ENABLE_FEED_CATS')) {
 573
 574                                         if ($category) {
 575                                                 print "</ul></li>";
 576                                         }
 577
 578                                         $category = $tmp_category;
 579
 580                                         $collapsed = $line["collapsed"];
 581
 582                                         // workaround for NULL category
 583                                         if ($category == "Uncategorized") {
 584                                                 if ($_COOKIE["ttrss_vf_uclps"] == 1) {
 585                                                         $collapsed = "t";
 586                                                 }
 587                                         }
 588
 589                                         if ($collapsed == "t" || $collapsed == "1") {
 590                                                 $holder_class = "invisible";
 591                                                 $ellipsis = "...";
 592                                         } else {
 593                                                 $holder_class = "";
 594                                                 $ellipsis = "";
 595                                         }
 596
 597                                         if ($cat_id) {
 598                                                 $cat_id_qpart = "cat_id = '$cat_id'";
 599                                         } else {
 600                                                 $cat_id_qpart = "cat_id IS NULL";
 601                                         }
 602
 603                                         $tmp_result = db_query($link, "SELECT count(int_id) AS unread
 604                                                 FROM ttrss_user_entries,ttrss_feeds WHERE
 605                                                         unread = true AND
 606                                                         feed_id = ttrss_feeds.id AND $cat_id_qpart AND
 607                                                         ttrss_user_entries.owner_uid = " . $_SESSION["uid"]);
 608
 609                                         $cat_unread = db_fetch_result($tmp_result, 0, "unread");
 610
 611                                         $cat_id = sprintf("%d", $cat_id);
 612
 613                                         print "<li class=\"feedCat\" id=\"FCAT-$cat_id\">
 614                                                 <a href=\"javascript:toggleCollapseCat($cat_id)\">$tmp_category</a>
 615                                                         <a href=\"javascript:viewCategory($cat_id)\" id=\"FCAP-$cat_id\">
 616                                                         <span id=\"FCATCTR-$cat_id\"
 617                                                         class=\"$catctr_class\">($cat_unread unread)$ellipsis</span></a></li>";
 618
 619                                         // !!! NO SPACE before <ul...feedCatList - breaks firstChild DOM function
 620                                         // -> keyboard navigation, etc.
 621                                         print "<li id=\"feedCatHolder\" class=\"$holder_class\"><ul class=\"feedCatList\" id=\"FCATLIST-$cat_id\">";
 622                                 }
 623
 624                                 printFeedEntry($feed_id, $class, $feed, $unread,
 625                                         "icons/$feed_id.ico", $link, $rtl_content);
 626
 627                                 ++$lnum;
 628                         }
 629
 630                 } else {
 631
 632                         // tags
 633
 634 /*                      $result = db_query($link, "SELECT tag_name,count(ttrss_entries.id) AS count
 635                                 FROM ttrss_tags,ttrss_entries,ttrss_user_entries WHERE
 636                                 post_int_id = ttrss_user_entries.int_id AND
 637                                 unread = true AND ref_id = ttrss_entries.id
 638                                 AND ttrss_tags.owner_uid = '$owner_uid' GROUP BY tag_name
 639                         UNION
 640                                 select tag_name,0 as count FROM ttrss_tags WHERE owner_uid = '$owner_uid'
 641                         ORDER BY tag_name"); */
 642
 643                         $result = db_query($link, "SELECT tag_name,SUM((SELECT COUNT(int_id)
 644                                 FROM ttrss_user_entries WHERE int_id = post_int_id
 645                                         AND unread = true)) AS count FROM ttrss_tags
 646                                 WHERE owner_uid = 2 GROUP BY tag_name ORDER BY tag_name");
 647
 648                         $tags = array();
 649
 650                         while ($line = db_fetch_assoc($result)) {
 651                                 $tags[$line["tag_name"]] += $line["count"];
 652                         }
 653
 654                         foreach (array_keys($tags) as $tag) {
 655
 656                                 $unread = $tags[$tag];
 657
 658                                 $class = "tag";
 659
 660                                 if ($unread > 0) {
 661                                         $class .= "Unread";
 662                                 }
 663
 664                                 printFeedEntry($tag, $class, $tag, $unread, "images/tag.png", $link);
 665
 666                         }
 667
 668                 }
 669
 670                 if (db_num_rows($result) == 0) {
 671                         if ($tags) {
 672                                 $what = "tags";
 673                         } else {
 674                                 $what = "feeds";
 675                         }
 676                         print "<li>No $what to display.</li>";
 677                 }
 678
 679                 print "</ul>";
 680
 681                 print '
 682                         <script type="text/javascript">
 683                                 /* for IE */
 684                                 function statechange() {
 685                                         if (document.readyState == "interactive") init();
 686                                 }
 687
 688                                 if (document.readyState) {
 689                                         if (document.readyState == "interactive" || document.readyState == "complete") {
 690                                                 init();
 691                                         } else {
 692                                                 document.onreadystatechange = statechange;
 693                                         }
 694                                 }
 695                         </script></body></html>';
 696         }
 697
 698
 699         if ($op == "rpc") {
 700
 701                 $subop = $_GET["subop"];
 702
 703                 if ($subop == "setpref") {
 704                         if (WEB_DEMO_MODE) {
 705                                 return;
 706                         }
 707
 708                         print "<rpc-reply>";
 709
 710                         $key = db_escape_string($_GET["key"]);
 711                         $value = db_escape_string($_GET["value"]);
 712
 713                         set_pref($link, $key, $value);
 714
 715                         print "<param-set key=\"$key\" value=\"$value\"/>";
 716
 717                         print "</rpc-reply>";
 718
 719                 }
 720
 721                 if ($subop == "getLabelCounters") {
 722                         $aid = $_GET["aid"];
 723                         print "<rpc-reply>";
 724                         getLabelCounters($link);
 725                         if ($aid) {
 726                                 getFeedCounter($link, $aid);
 727                         }
 728                         print "</rpc-reply>";
 729                 }
 730
 731                 if ($subop == "getFeedCounters") {
 732                         print "<rpc-reply>";
 733                         getFeedCounters($link);
 734                         print "</rpc-reply>";
 735                 }
 736
 737                 if ($subop == "getAllCounters") {
 738                         print "<rpc-reply>";
 739                         getAllCounters($link);
 740                         print "</rpc-reply>";
 741                 }
 742
 743                 if ($subop == "mark") {
 744                         $mark = $_GET["mark"];
 745                         $id = db_escape_string($_GET["id"]);
 746
 747                         if ($mark == "1") {
 748                                 $mark = "true";
 749                         } else {
 750                                 $mark = "false";
 751                         }
 752
 753                         // FIXME this needs collision testing
 754
 755                         $result = db_query($link, "UPDATE ttrss_user_entries SET marked = $mark
 756                                 WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 757                 }
 758
 759                 if ($subop == "updateFeed") {
 760                         $feed_id = db_escape_string($_GET["feed"]);
 761
 762                         $result = db_query($link,
 763                                 "SELECT feed_url FROM ttrss_feeds WHERE id = '$feed_id'
 764                                         AND owner_uid = " . $_SESSION["uid"]);
 765
 766                         if (db_num_rows($result) > 0) {
 767                                 $feed_url = db_fetch_result($result, 0, "feed_url");
 768                                 update_rss_feed($link, $feed_url, $feed_id);
 769                         }
 770
 771                         print "<rpc-reply>";
 772                         getFeedCounter($link, $feed_id);
 773                         print "</rpc-reply>";
 774
 775                         return;
 776                 }
 777
 778                 if ($subop == "forceUpdateAllFeeds" || $subop == "updateAllFeeds") {
 779
 780                         if (ENABLE_UPDATE_DAEMON) {
 781
 782                                 if ($subop == "forceUpdateAllFeeds") {
 783
 784                                         $result = db_query($link, "SELECT count(id) AS cid FROM
 785                                                 ttrss_scheduled_updates WHERE feed_id IS NULL AND
 786                                                         owner_uid = " . $_SESSION["uid"]);
 787
 788                                         $cid = db_fetch_result($result, 0, "cid");
 789
 790 #                                       print "<rpc-reply>";
 791
 792                                         if ($cid == 0) {
 793
 794                                                 db_query($link, "INSERT INTO ttrss_scheduled_updates
 795                                                         (owner_uid, feed_id, entered) VALUES
 796                                                         (".$_SESSION["uid"].", NULL, NOW())");
 797
 798 //                                              print "<!-- ScheduledOK -->";
 799
 800                                         } else {
 801 //                                              print "<!-- RequestAlreadyInQueue -->";
 802                                         }
 803
 804 #                                       print "</rpc-reply>";
 805                                 }
 806
 807                         } else {
 808                                 update_all_feeds($link, $subop == "forceUpdateAllFeeds");
 809                         }
 810
 811                         $global_unread_caller = sprintf("%d", $_GET["uctr"]);
 812                         $global_unread = getGlobalUnread($link);
 813
 814                         print "<rpc-reply>";
 815
 816                         if ($global_unread_caller != $global_unread) {
 817
 818                                 $omode = $_GET["omode"];
 819
 820                                 if (!$omode) $omode = "tflc";
 821
 822                                 if (strchr($omode, "l")) getLabelCounters($link);
 823                                 if (strchr($omode, "f")) getFeedCounters($link);
 824                                 if (strchr($omode, "t")) getTagCounters($link);
 825                                 if (strchr($omode, "c")) {
 826                                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
 827                                                 getCategoryCounters($link);
 828                                         }
 829                                 }
 830                         }
 831
 832                         getGlobalCounters($link, $global_unread);
 833
 834                         print "</rpc-reply>";
 835
 836                 }
 837
 838                 /* GET["cmode"] = 0 - mark as read, 1 - as unread, 2 - toggle */
 839                 if ($subop == "catchupSelected") {
 840
 841                         $ids = split(",", db_escape_string($_GET["ids"]));
 842
 843                         $cmode = sprintf("%d", $_GET["cmode"]);
 844
 845                         foreach ($ids as $id) {
 846
 847                                 if ($cmode == 0) {
 848                                         db_query($link, "UPDATE ttrss_user_entries SET
 849                                         unread = false,last_read = NOW()
 850                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 851                                 } else if ($cmode == 1) {
 852                                         db_query($link, "UPDATE ttrss_user_entries SET
 853                                         unread = true
 854                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 855                                 } else {
 856                                         db_query($link, "UPDATE ttrss_user_entries SET
 857                                         unread = NOT unread,last_read = NOW()
 858                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 859                                 }
 860                         }
 861                         print "<rpc-reply>";
 862                         getAllCounters($link);
 863                         print "</rpc-reply>";
 864                 }
 865
 866                 if ($subop == "markSelected") {
 867
 868                         $ids = split(",", db_escape_string($_GET["ids"]));
 869
 870                         $cmode = sprintf("%d", $_GET["cmode"]);
 871
 872                         foreach ($ids as $id) {
 873
 874                                 if ($cmode == 0) {
 875                                         db_query($link, "UPDATE ttrss_user_entries SET
 876                                         marked = false
 877                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 878                                 } else if ($cmode == 1) {
 879                                         db_query($link, "UPDATE ttrss_user_entries SET
 880                                         marked = true
 881                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 882                                 } else {
 883                                         db_query($link, "UPDATE ttrss_user_entries SET
 884                                         marked = NOT marked
 885                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 886                                 }
 887                         }
 888                         print "<rpc-reply>";
 889                         getAllCounters($link);
 890                         print "</rpc-reply>";
 891                 }
 892
 893                 if ($subop == "sanityCheck") {
 894                         if (sanity_check($link)) {
 895                                 print "<error error-code=\"0\"/>";
 896                         }
 897                 }
 898
 899                 if ($subop == "globalPurge") {
 900
 901                         print "<rpc-reply>";
 902                         global_purge_old_posts($link, true);
 903                         print "</rpc-reply>";
 904
 905                 }
 906
 907         }
 908
 909         if ($op == "feeds") {
 910
 911                 $tags = $_GET["tags"];
 912
 913                 $subop = $_GET["subop"];
 914
 915                 if ($subop == "catchupAll") {
 916                         db_query($link, "UPDATE ttrss_user_entries SET
 917                                 last_read = NOW(),unread = false WHERE owner_uid = " . $_SESSION["uid"]);
 918                 }
 919
 920                 if ($subop == "collapse") {
 921                         $cat_id = db_escape_string($_GET["cid"]);
 922
 923                         db_query($link, "UPDATE ttrss_feed_categories SET
 924                                 collapsed = NOT collapsed WHERE id = '$cat_id' AND owner_uid = " .
 925                                 $_SESSION["uid"]);
 926                         return;
 927                 }
 928
 929                 outputFeedList($link, $tags);
 930
 931         }
 932
 933         if ($op == "view") {
 934
 935                 $id = db_escape_string($_GET["id"]);
 936                 $feed_id = db_escape_string($_GET["feed"]);
 937
 938                 $result = db_query($link, "SELECT rtl_content FROM ttrss_feeds
 939                         WHERE id = '$feed_id' AND owner_uid = " . $_SESSION["uid"]);
 940
 941                 if (db_num_rows($result) == 1) {
 942                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
 943                 } else {
 944                         $rtl_content = false;
 945                 }
 946
 947                 if ($rtl_content) {
 948                         $rtl_tag = "dir=\"RTL\"";
 949                 } else {
 950                         $rtl_tag = "";
 951                 }
 952
 953                 $result = db_query($link, "UPDATE ttrss_user_entries
 954                         SET unread = false,last_read = NOW()
 955                         WHERE ref_id = '$id' AND feed_id = '$feed_id' AND owner_uid = " . $_SESSION["uid"]);
 956
 957                 $result = db_query($link, "SELECT title,link,content,feed_id,comments,int_id,
 958                         SUBSTRING(updated,1,16) as updated,
 959                         (SELECT icon_url FROM ttrss_feeds WHERE id = feed_id) as icon_url,
 960                         num_comments,
 961                         author
 962                         FROM ttrss_entries,ttrss_user_entries
 963                         WHERE   id = '$id' AND ref_id = id");
 964
 965                 print "<html><head>
 966                         <title>Tiny Tiny RSS : Article $id</title>
 967                         <link rel=\"stylesheet\" href=\"tt-rss.css\" type=\"text/css\">";
 968
 969                 $user_theme = $_SESSION["theme"];
 970                 if ($user_theme) {
 971                         print "<link rel=\"stylesheet\" type=\"text/css\"
 972                                 href=\"themes/$user_theme/theme.css\">";
 973                 }
 974
 975                 if (get_pref($link, 'USE_COMPACT_STYLESHEET')) {
 976                         print "<link rel=\"stylesheet\" type=\"text/css\"
 977                                 href=\"tt-rss_compact.css\"/>";
 978                 } else {
 979                         print "<link title=\"Compact Stylesheet\" rel=\"alternate stylesheet\"
 980                                         type=\"text/css\" href=\"tt-rss_compact.css\"/>";
 981                 }
 982
 983                 print "<script type=\"text/javascript\" src=\"functions.js\"></script>
 984                         <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
 985                         </head><body $rtl_tag>";
 986
 987                 if ($result) {
 988
 989                         $line = db_fetch_assoc($result);
 990
 991                         if ($line["icon_url"]) {
 992                                 $feed_icon = "<img class=\"feedIcon\" src=\"" . $line["icon_url"] . "\">";
 993                         } else {
 994                                 $feed_icon = "&nbsp;";
 995                         }
 996
 997 /*                      if ($line["comments"] && $line["link"] != $line["comments"]) {
 998                                 $entry_comments = "(<a href=\"".$line["comments"]."\">Comments</a>)";
 999                         } else {
1000                                 $entry_comments = "";
1001                         } */
1002
1003                         $num_comments = $line["num_comments"];
1004                         $entry_comments = "";
1005
1006                         if ($num_comments > 0) {
1007                                 if ($line["comments"]) {
1008                                         $comments_url = $line["comments"];
1009                                 } else {
1010                                         $comments_url = $line["link"];
1011                                 }
1012                                 $entry_comments = "<a href=\"$comments_url\">$num_comments comments</a>";
1013                         } else {
1014                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
1015                                         $entry_comments = "<a href=\"".$line["comments"]."\">comments</a>";
1016                                 }
1017                         }
1018
1019                         print "<div class=\"postReply\">";
1020
1021                         print "<div class=\"postHeader\"><table width=\"100%\">";
1022
1023                         $entry_author = $line["author"];
1024
1025                         if ($entry_author) {
1026                                 $entry_author = " - by $entry_author";
1027                         }
1028
1029                         print "<tr><td><a href=\"" . $line["link"] . "\">" . $line["title"] .
1030                                 "</a>$entry_author</td>";
1031
1032                         $parsed_updated = date(get_pref($link, 'LONG_DATE_FORMAT'),
1033                                 strtotime($line["updated"]));
1034
1035                         print "<td class=\"postDate\">$parsed_updated</td>";
1036
1037                         print "</tr>";
1038
1039                         $tmp_result = db_query($link, "SELECT DISTINCT tag_name FROM
1040                                 ttrss_tags WHERE post_int_id = " . $line["int_id"] . "
1041                                 ORDER BY tag_name");
1042
1043                         $tags_str = "";
1044                         $f_tags_str = "";
1045
1046                         $num_tags = 0;
1047
1048                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
1049                                 $num_tags++;
1050                                 $tag = $tmp_line["tag_name"];
1051                                 $tag_str = "<a href=\"javascript:parent.viewfeed('$tag')\">$tag</a>, ";
1052
1053                                 if ($num_tags == 5) {
1054                                         $tags_str .= "<a href=\"javascript:showBlockElement('allEntryTags')\">...</a>";
1055                                 } else if ($num_tags < 5) {
1056                                         $tags_str .= $tag_str;
1057                                 }
1058                                 $f_tags_str .= $tag_str;
1059                         }
1060
1061                         $tags_str = preg_replace("/, $/", "", $tags_str);
1062                         $f_tags_str = preg_replace("/, $/", "", $f_tags_str);
1063
1064 //                      $truncated_link = truncate_string($line["link"], 60);
1065
1066                         if ($tags_str || $entry_comments) {
1067                                 print "<tr><td width='50%'>
1068                                         $entry_comments</td>
1069                                         <td align=\"right\">$tags_str</td></tr>";
1070                         }
1071
1072                         print "</table></div>";
1073
1074                         print "<div class=\"postIcon\">" . $feed_icon . "</div>";
1075                         print "<div class=\"postContent\">";
1076
1077                         if (db_num_rows($tmp_result) > 5) {
1078                                 print "<div id=\"allEntryTags\">Tags: $f_tags_str</div>";
1079                         }
1080
1081                         if (get_pref($link, 'OPEN_LINKS_IN_NEW_WINDOW')) {
1082                                 $line["content"] = preg_replace("/href=/i", "target=\"_new\" href=", $line["content"]);
1083                         }
1084
1085                         print $line["content"] . "</div>";
1086
1087                         print "</div>";
1088
1089                         print "<script type=\"text/javascript\">
1090                                 update_all_counters('$feed_id');
1091                         </script>";
1092                 }
1093
1094                 print "</body></html>";
1095         }
1096
1097         if ($op == "viewfeed") {
1098
1099                 $feed = $_GET["feed"];
1100                 $skip = $_GET["skip"];
1101                 $subop = $_GET["subop"];
1102                 $view_mode = $_GET["view"];
1103                 $limit = $_GET["limit"];
1104                 $cat_view = $_GET["cat"];
1105
1106                 if (!$skip) $skip = 0;
1107
1108                 if ($subop == "undefined") $subop = "";
1109
1110                 print "<html><head>
1111                         <title>Tiny Tiny RSS : Feed $feed</title>
1112                         <link rel=\"stylesheet\" href=\"tt-rss.css\" type=\"text/css\">";
1113
1114                 $user_theme = $_SESSION["theme"];
1115                 if ($user_theme) {
1116                         print "<link rel=\"stylesheet\" type=\"text/css\"
1117                                 href=\"themes/$user_theme/theme.css\">";
1118                 }
1119
1120                 if (get_pref($link, 'USE_COMPACT_STYLESHEET')) {
1121                         print "<link rel=\"stylesheet\"
1122                                         type=\"text/css\" href=\"tt-rss_compact.css\"/>";
1123
1124                 } else {
1125                         print "<link title=\"Compact Stylesheet\" rel=\"alternate stylesheet\"
1126                                         type=\"text/css\" href=\"tt-rss_compact.css\"/>";
1127                 }
1128
1129                 $result = db_query($link, "SELECT rtl_content FROM ttrss_feeds
1130                         WHERE id = '$feed' AND owner_uid = " . $_SESSION["uid"]);
1131
1132                 if (db_num_rows($result) == 1) {
1133                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
1134                 } else {
1135                         $rtl_content = false;
1136                 }
1137
1138                 if ($rtl_content) {
1139                         $rtl_tag = "dir=\"RTL\"";
1140                 } else {
1141                         $rtl_tag = "";
1142                 }
1143
1144                 print "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
1145                         <script type=\"text/javascript\" src=\"functions.js\"></script>
1146                         <script type=\"text/javascript\" src=\"viewfeed.js\"></script>
1147                         <!--[if gte IE 5.5000]>
1148                         <script type=\"text/javascript\" src=\"pngfix.js\"></script>
1149                         <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss-ie.css\">
1150                         <![endif]-->
1151                         </head><body $rtl_tag>
1152                         <script type=\"text/javascript\">
1153                         if (document.addEventListener) {
1154                                 document.addEventListener(\"DOMContentLoaded\", init, null);
1155                         }
1156                         window.onload = init;
1157                         </script>";
1158
1159                 if ($subop == "ForceUpdate" && sprintf("%d", $feed) > 0) {
1160
1161 /*                      if (ENABLE_UPDATE_DAEMON) {
1162
1163                                 if ($cid == 0) {
1164
1165                                         db_query($link, "INSERT INTO ttrss_scheduled_updates
1166                                                 (owner_uid, feed_id, entered) VALUES
1167                                                 (".$_SESSION["uid"].", '$feed', NOW())");
1168                                 }
1169
1170                         } else {
1171                                 // fixme update_rss_feed...
1172                         } */
1173
1174                         if ($cat_view) {
1175
1176                                 if ($feed > 0) {
1177                                         $cat_qpart = "cat_id = '$feed'";
1178                                 } else {
1179                                         $cat_qpart = "cat_id IS NULL";
1180                                 }
1181
1182                                 $tmp_result = db_query($link, "SELECT feed_url FROM ttrss_feeds
1183                                         WHERE $cat_qpart AND owner_uid = " . $_SESSION["uid"]);
1184
1185                                 while ($tmp_line = db_fetch_assoc($tmp_result)) {
1186                                         $feed_url = $tmp_line["feed_url"];
1187                                         update_rss_feed($link, $feed_url, $feed, ENABLE_UPDATE_DAEMON);
1188                                 }
1189
1190                         } else {
1191                                 $tmp_result = db_query($link, "SELECT feed_url FROM ttrss_feeds
1192                                         WHERE id = '$feed'");
1193                                 $feed_url = db_fetch_result($tmp_result, 0, "feed_url");
1194                                 update_rss_feed($link, $feed_url, $feed, ENABLE_UPDATE_DAEMON);
1195                         }
1196                 }
1197
1198                 if ($subop == "MarkAllRead")  {
1199
1200                         if (preg_match("/^[0-9][0-9]*$/", $feed) != false && $feed >= 0) {
1201
1202                                 if ($cat_view) {
1203
1204                                         if ($feed > 0) {
1205                                                 $cat_qpart = "cat_id = '$feed'";
1206                                         } else {
1207                                                 $cat_qpart = "cat_id IS NULL";
1208                                         }
1209
1210                                         $tmp_result = db_query($link, "SELECT id
1211                                                 FROM ttrss_feeds WHERE $cat_qpart AND owner_uid = " .
1212                                                 $_SESSION["uid"]);
1213
1214                                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
1215
1216                                                 $tmp_feed = $tmp_line["id"];
1217
1218                                                 db_query($link, "UPDATE ttrss_user_entries
1219                                                         SET unread = false,last_read = NOW()
1220                                                         WHERE feed_id = '$tmp_feed' AND owner_uid = " . $_SESSION["uid"]);
1221                                         }
1222
1223                                 } else if ($feed > 0) {
1224
1225                                         $tmp_result = db_query($link, "SELECT id
1226                                                 FROM ttrss_feeds WHERE parent_feed = '$feed'
1227                                                 ORDER BY cat_id,title");
1228
1229                                         $parent_ids = array();
1230
1231                                         if (db_num_rows($tmp_result) > 0) {
1232                                                 while ($p = db_fetch_assoc($tmp_result)) {
1233                                                         array_push($parent_ids, "feed_id = " . $p["id"]);
1234                                                 }
1235
1236                                                 $children_qpart = implode(" OR ", $parent_ids);
1237
1238                                                 db_query($link, "UPDATE ttrss_user_entries
1239                                                         SET unread = false,last_read = NOW()
1240                                                         WHERE (feed_id = '$feed' OR $children_qpart)
1241                                                         AND owner_uid = " . $_SESSION["uid"]);
1242
1243                                         } else {
1244                                                 db_query($link, "UPDATE ttrss_user_entries
1245                                                         SET unread = false,last_read = NOW()
1246                                                         WHERE feed_id = '$feed' AND owner_uid = " . $_SESSION["uid"]);
1247                                         }
1248
1249                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1250
1251                                         if ($feed == -1) {
1252                                                 db_query($link, "UPDATE ttrss_user_entries
1253                                                         SET unread = false,last_read = NOW()
1254                                                         WHERE marked = true AND owner_uid = ".$_SESSION["uid"]);
1255                                         }
1256
1257                                 } else if ($feed < -10) { // label
1258
1259                                         // TODO make this more efficient
1260
1261                                         $label_id = -$feed - 11;
1262
1263                                         $tmp_result = db_query($link, "SELECT sql_exp FROM ttrss_labels
1264                                                 WHERE id = '$label_id'");
1265
1266                                         if ($tmp_result) {
1267                                                 $sql_exp = db_fetch_result($tmp_result, 0, "sql_exp");
1268
1269                                                 db_query($link, "BEGIN");
1270
1271                                                 $tmp2_result = db_query($link,
1272                                                         "SELECT
1273                                                                 int_id
1274                                                         FROM
1275                                                                 ttrss_user_entries,ttrss_entries
1276                                                         WHERE
1277                                                                 ref_id = id AND
1278                                                                 $sql_exp AND
1279                                                                 owner_uid = " . $_SESSION["uid"]);
1280
1281                                                 while ($tmp_line = db_fetch_assoc($tmp2_result)) {
1282                                                         db_query($link, "UPDATE
1283                                                                 ttrss_user_entries
1284                                                         SET
1285                                                                 unread = false, last_read = NOW()
1286                                                         WHERE
1287                                                                 int_id = " . $tmp_line["int_id"]);
1288                                                 }
1289
1290                                                 db_query($link, "COMMIT");
1291
1292 /*                                              db_query($link, "UPDATE ttrss_user_entries,ttrss_entries
1293                                                         SET unread = false,last_read = NOW()
1294                                                         WHERE $sql_exp
1295                                                         AND ref_id = id
1296                                                         AND owner_uid = ".$_SESSION["uid"]); */
1297                                         }
1298                                 }
1299                         } else { // tag
1300                                 db_query($link, "BEGIN");
1301
1302                                 $tag_name = db_escape_string($feed);
1303
1304                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1305                                         WHERE tag_name = '$tag_name' AND owner_uid = " . $_SESSION["uid"]);
1306
1307                                 while ($line = db_fetch_assoc($result)) {
1308                                         db_query($link, "UPDATE ttrss_user_entries SET
1309                                                 unread = false, last_read = NOW()
1310                                                 WHERE int_id = " . $line["post_int_id"]);
1311                                 }
1312                                 db_query($link, "COMMIT");
1313                         }
1314
1315                 }
1316
1317                 $search = db_escape_string($_GET["search"]);
1318                 $search_mode = db_escape_string($_GET["smode"]);
1319
1320                 if ($search) {
1321                         $search_query_part = "(upper(ttrss_entries.title) LIKE upper('%$search%')
1322                                 OR ttrss_entries.content LIKE '%$search%') AND";
1323                 } else {
1324                         $search_query_part = "";
1325                 }
1326
1327                 $view_query_part = "";
1328
1329                 if ($view_mode == "Adaptive") {
1330                         if ($search) {
1331                                 $view_query_part = " ";
1332                         } else if ($feed != -1) {
1333                                 $unread = getFeedUnread($link, $feed);
1334                                 if ($unread > 0) {
1335                                         $view_query_part = " unread = true AND ";
1336                                 }
1337                         }
1338                 }
1339
1340                 if ($view_mode == "Starred") {
1341                         $view_query_part = " marked = true AND ";
1342                 }
1343
1344                 if ($view_mode == "Unread") {
1345                         $view_query_part = " unread = true AND ";
1346                 }
1347
1348                 if ($limit && $limit != "All") {
1349                         $limit_query_part = "LIMIT " . $limit;
1350                 }
1351
1352                 $vfeed_query_part = "";
1353
1354                 // override query strategy and enable feed display when searching globally
1355                 if ($search && $search_mode == "All feeds") {
1356                         $query_strategy_part = "ttrss_entries.id > 0";
1357                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
1358                 } else if (preg_match("/^-?[0-9][0-9]*$/", $feed) == false) {
1359                         $query_strategy_part = "ttrss_entries.id > 0";
1360                         $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
1361                                 id = feed_id) as feed_title,";
1362                 } else if ($feed >= 0 && $search && $search_mode == "This category") {
1363
1364                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
1365
1366                         $tmp_result = db_query($link, "SELECT id
1367                                 FROM ttrss_feeds WHERE cat_id =
1368                                         (SELECT cat_id FROM ttrss_feeds WHERE id = '$feed') AND id != '$feed'");
1369
1370                         $cat_siblings = array();
1371
1372                         if (db_num_rows($tmp_result) > 0) {
1373                                 while ($p = db_fetch_assoc($tmp_result)) {
1374                                         array_push($cat_siblings, "feed_id = " . $p["id"]);
1375                                 }
1376
1377                                 $query_strategy_part = sprintf("(feed_id = %d OR %s)",
1378                                         $feed, implode(" OR ", $cat_siblings));
1379
1380                         } else {
1381                                 $query_strategy_part = "ttrss_entries.id > 0";
1382                         }
1383
1384                 } else if ($feed >= 0) {
1385
1386                         if ($cat_view) {
1387
1388                                 if ($feed > 0) {
1389                                         $query_strategy_part = "cat_id = '$feed'";
1390                                 } else {
1391                                         $query_strategy_part = "cat_id IS NULL";
1392                                 }
1393
1394                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
1395
1396                         } else {
1397                                 $tmp_result = db_query($link, "SELECT id
1398                                         FROM ttrss_feeds WHERE parent_feed = '$feed'
1399                                         ORDER BY cat_id,title");
1400
1401                                 $parent_ids = array();
1402
1403                                 if (db_num_rows($tmp_result) > 0) {
1404                                         while ($p = db_fetch_assoc($tmp_result)) {
1405                                                 array_push($parent_ids, "feed_id = " . $p["id"]);
1406                                         }
1407
1408                                         $query_strategy_part = sprintf("(feed_id = %d OR %s)",
1409                                                 $feed, implode(" OR ", $parent_ids));
1410
1411                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
1412                                 } else {
1413                                         $query_strategy_part = "feed_id = '$feed'";
1414                                 }
1415                         }
1416                 } else if ($feed == -1) { // starred virtual feed
1417                         $query_strategy_part = "marked = true";
1418                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
1419                 } else if ($feed <= -10) { // labels
1420                         $label_id = -$feed - 11;
1421
1422                         $tmp_result = db_query($link, "SELECT sql_exp FROM ttrss_labels
1423                                 WHERE id = '$label_id'");
1424
1425                         $query_strategy_part = db_fetch_result($tmp_result, 0, "sql_exp");
1426
1427                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
1428                 } else {
1429                         $query_strategy_part = "id > 0"; // dumb
1430                 }
1431
1432                 $order_by = "updated DESC";
1433
1434 //              if ($feed < -10) {
1435 //                      $order_by = "feed_id,updated DESC";
1436 //              }
1437
1438                 $feed_title = "";
1439
1440                 if ($search && $search_mode == "All feeds") {
1441                         $feed_title = "Global search results ($search)";
1442                 } else if ($search && preg_match('/^-?[0-9][0-9]*$/', $feed) == false) {
1443                         $feed_title = "Feed search results ($search, $feed)";
1444                 } else if (preg_match('/^-?[0-9][0-9]*$/', $feed) == false) {
1445                         $feed_title = $feed;
1446                 } else if (preg_match('/^-?[0-9][0-9]*$/', $feed) != false && $feed >= 0) {
1447
1448                         if ($cat_view) {
1449
1450                                 if ($feed != 0) {
1451                                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories
1452                                                 WHERE id = '$feed' AND owner_uid = " . $_SESSION["uid"]);
1453                                         $feed_title = db_fetch_result($result, 0, "title");
1454                                 } else {
1455                                         $feed_title = "Uncategorized";
1456                                 }
1457                         } else {
1458
1459                                 $result = db_query($link, "SELECT title,site_url,last_error FROM ttrss_feeds
1460                                         WHERE id = '$feed' AND owner_uid = " . $_SESSION["uid"]);
1461
1462                                 $feed_title = db_fetch_result($result, 0, "title");
1463                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
1464                                 $last_error = db_fetch_result($result, 0, "last_error");
1465
1466                         }
1467
1468                 } else if ($feed == -1) {
1469                         $feed_title = "Starred articles";
1470                 } else if ($feed < -10) {
1471                         $label_id = -$feed - 11;
1472                         $result = db_query($link, "SELECT description FROM ttrss_labels
1473                                 WHERE id = '$label_id'");
1474                         $feed_title = db_fetch_result($result, 0, "description");
1475                 } else {
1476                         $feed_title = "?";
1477                 }
1478
1479                 if ($feed < -10) error_reporting (0);
1480
1481                 print "<div id=\"headlinesContainer\">";
1482
1483                 if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1484
1485                         if ($feed >= 0) {
1486                                 $feed_kind = "Feeds";
1487                         } else {
1488                                 $feed_kind = "Labels";
1489                         }
1490
1491 //                      if (!$vfeed_query_part) {
1492                         $content_query_part = "content as content_preview,";
1493 //                      } else {
1494 //                              $content_query_part = "";
1495 //                      }
1496
1497                         $query = "SELECT
1498                                         ttrss_entries.id,ttrss_entries.title,
1499                                         SUBSTRING(updated,1,16) as updated,
1500                                         unread,feed_id,marked,link,last_read,
1501                                         SUBSTRING(last_read,1,19) as last_read_noms,
1502                                         $vfeed_query_part
1503                                         $content_query_part
1504                                         SUBSTRING(updated,1,19) as updated_noms
1505                                 FROM
1506                                         ttrss_entries,ttrss_user_entries,ttrss_feeds
1507                                 WHERE
1508                                 ttrss_user_entries.feed_id = ttrss_feeds.id AND
1509                                 ttrss_user_entries.ref_id = ttrss_entries.id AND
1510                                 ttrss_user_entries.owner_uid = '".$_SESSION["uid"]."' AND
1511                                 $search_query_part
1512                                 $view_query_part
1513                                 $query_strategy_part ORDER BY $order_by
1514                                 $limit_query_part";
1515
1516                         $result = db_query($link, $query);
1517
1518                         if ($_GET["debug"]) print $query;
1519
1520                 } else {
1521                         // browsing by tag
1522
1523                         $feed_kind = "Tags";
1524
1525                         $result = db_query($link, "SELECT
1526                                 ttrss_entries.id as id,title,
1527                                 SUBSTRING(updated,1,16) as updated,
1528                                 unread,feed_id,
1529                                 marked,link,last_read,
1530                                 SUBSTRING(last_read,1,19) as last_read_noms,
1531                                 $vfeed_query_part
1532                                 $content_query_part
1533                                 SUBSTRING(updated,1,19) as updated_noms
1534                                 FROM
1535                                         ttrss_entries,ttrss_user_entries,ttrss_tags
1536                                 WHERE
1537                                         ref_id = ttrss_entries.id AND
1538                                         ttrss_user_entries.owner_uid = '".$_SESSION["uid"]."' AND
1539                                         post_int_id = int_id AND tag_name = '$feed' AND
1540                                         $view_query_part
1541                                         $search_query_part
1542                                         $query_strategy_part ORDER BY $order_by
1543                                 $limit_query_part");
1544                 }
1545
1546                 if (!$result) {
1547                         print "<div align='center'>
1548                                 Could not display feed (query failed). Please check label match syntax or local configuration.</div>";
1549                         return;
1550                 }
1551
1552                 function print_headline_subtoolbar($link, $feed_site_url, $feed_title,
1553                                                 $bottom = false) {
1554
1555                         if (!$bottom) {
1556                                 $class = "headlinesSubToolbar";
1557                                 $tid = "headlineActionsTop";
1558                         } else {
1559                                 $class = "invisible";
1560                                 $tid = "headlineActionsBottom";
1561                         }
1562
1563                         print "<table class=\"$class\" id=\"$tid\"
1564                                 width=\"100%\" cellspacing=\"0\" cellpadding=\"0\"><tr>";
1565
1566                         if (!get_pref($link, 'COMBINED_DISPLAY_MODE')) {
1567
1568                                 print "<td class=\"headlineActions\">
1569                                         Select:
1570                                                                 <a href='#' onclick=\"javascript:selectTableRowsByIdPrefix('headlinesList', 'RROW-', 'RCHK-', true, '', true)\">All</a>,
1571                                                                 <a href='#' onclick=\"javascript:selectTableRowsByIdPrefix('headlinesList', 'RROW-', 'RCHK-', true, 'Unread', true)\">Unread</a>,
1572                                                                 <a href='#' onclick=\"javascript:selectTableRowsByIdPrefix('headlinesList', 'RROW-', 'RCHK-', false)\">None</a>
1573                                                 &nbsp;&nbsp;
1574                                                 Toggle: <a href='#' onclick=\"javascript:selectionToggleUnread()\">Unread</a>,
1575                                                                 <a href='#' onclick=\"javascript:selectionToggleMarked()\">Starred</a>";
1576                                 print "</td>";
1577
1578                         } else {
1579
1580                                 print "<td class=\"headlineActions\">
1581                                         Select:
1582                                                                 <a href=\"#\" onclick=\"javascript:cdmSelectArticles('all')\">All</a>,
1583                                                                 <a href=\"#\" onclick=\"javascript:cdmSelectArticles('unread')\">Unread</a>,
1584                                                                 <a href=\"#\" onclick=\"javascript:cdmSelectArticles('none')\">None</a>
1585                                                 &nbsp;&nbsp;
1586                                                 Toggle: <a href=\"#\" onclick=\"javascript:selectionToggleUnread(true)\">Unread</a>,
1587                                                                 <a href=\"#\" onclick=\"javascript:selectionToggleMarked(true)\">Starred</a>";
1588
1589                                 print "</td>";
1590
1591                         }
1592
1593                         print "<td class=\"headlineTitle\">";
1594
1595                         if ($feed_site_url) {
1596                                 if (!$bottom) {
1597                                         $target = "target=\"_blank\"";
1598                                 }
1599                                 print "<a $target href=\"$feed_site_url\">$feed_title</a>";
1600                         } else {
1601                                 print $feed_title;
1602                         }
1603
1604                         print "</td>";
1605                         print "</tr></table>";
1606
1607                 }
1608
1609                 if (db_num_rows($result) > 0) {
1610
1611                         print_headline_subtoolbar($link, $feed_site_url, $feed_title);
1612
1613                         if (!get_pref($link, 'COMBINED_DISPLAY_MODE')) {
1614                                 print "<table class=\"headlinesList\" id=\"headlinesList\"
1615                                         cellspacing=\"0\" width=\"100%\">";
1616                         }
1617
1618                         $lnum = 0;
1619
1620                         error_reporting (DEFAULT_ERROR_LEVEL);
1621
1622                         $num_unread = 0;
1623
1624                         while ($line = db_fetch_assoc($result)) {
1625
1626                                 $class = ($lnum % 2) ? "even" : "odd";
1627
1628                                 $id = $line["id"];
1629                                 $feed_id = $line["feed_id"];
1630
1631                                 if ($line["last_read"] == "" &&
1632                                                 ($line["unread"] != "t" && $line["unread"] != "1")) {
1633
1634                                         $update_pic = "<img id='FUPDPIC-$id' src=\"images/updated.png\"
1635                                                 alt=\"Updated\">";
1636                                 } else {
1637                                         $update_pic = "<img id='FUPDPIC-$id' src=\"images/blank_icon.gif\"
1638                                                 alt=\"Updated\">";
1639                                 }
1640
1641                                 if ($line["unread"] == "t" || $line["unread"] == "1") {
1642                                         $class .= "Unread";
1643                                         ++$num_unread;
1644                                         $is_unread = true;
1645                                 } else {
1646                                         $is_unread = false;
1647                                 }
1648
1649                                 if ($line["marked"] == "t" || $line["marked"] == "1") {
1650                                         $marked_pic = "<img id=\"FMARKPIC-$id\" src=\"images/mark_set.png\"
1651                                                 alt=\"Reset mark\" onclick='javascript:toggleMark($id)'>";
1652                                 } else {
1653                                         $marked_pic = "<img id=\"FMARKPIC-$id\" src=\"images/mark_unset.png\"
1654                                                 alt=\"Set mark\" onclick='javascript:toggleMark($id)'>";
1655                                 }
1656
1657                                 $content_link = "<a href=\"javascript:view($id,$feed_id);\">" .
1658                                         $line["title"] . "</a>";
1659
1660                                 if (get_pref($link, 'HEADLINES_SMART_DATE')) {
1661                                         $updated_fmt = smart_date_time(strtotime($line["updated"]));
1662                                 } else {
1663                                         $short_date = get_pref($link, 'SHORT_DATE_FORMAT');
1664                                         $updated_fmt = date($short_date, strtotime($line["updated"]));
1665                                 }
1666
1667                                 if (get_pref($link, 'SHOW_CONTENT_PREVIEW')) {
1668                                         $content_preview = truncate_string(strip_tags($line["content_preview"]),
1669                                                 100);
1670                                 }
1671
1672                                 if (!get_pref($link, 'COMBINED_DISPLAY_MODE')) {
1673
1674                                         print "<tr class='$class' id='RROW-$id'>";
1675
1676                                         print "<td class='hlUpdatePic'>$update_pic</td>";
1677
1678                                         print "<td class='hlSelectRow'>
1679                                                 <input type=\"checkbox\" onclick=\"toggleSelectRow(this)\"
1680                                                         class=\"feedCheckBox\" id=\"RCHK-$id\">
1681                                                 </td>";
1682
1683                                         print "<td class='hlMarkedPic'>$marked_pic</td>";
1684
1685                                         if ($line["feed_title"]) {
1686                                                 print "<td class='hlContent'>$content_link</td>";
1687                                                 print "<td class='hlFeed'>
1688                                                         <a href='javascript:viewfeed($feed_id)'>".
1689                                                                 $line["feed_title"]."</a>&nbsp;</td>";
1690                                         } else {
1691                                                 print "<td class='hlContent' valign='middle'>";
1692
1693                                                 print "<a href=\"javascript:view($id,$feed_id);\">" .
1694                                                         $line["title"];
1695
1696                                                 if (get_pref($link, 'SHOW_CONTENT_PREVIEW') && !$rtl_tag) {
1697                                                         if ($content_preview) {
1698                                                                 print "<span class=\"contentPreview\"> - $content_preview</span>";
1699                                                         }
1700                                                 }
1701
1702                                                 print "</a>";
1703                                                 print "</td>";
1704                                         }
1705
1706                                         print "<td class=\"hlUpdated\"><nobr>$updated_fmt&nbsp;</nobr></td>";
1707
1708                                         print "</tr>";
1709
1710                                 } else {
1711
1712                                         if ($is_unread) {
1713                                                 $add_class = "Unread";
1714                                         } else {
1715                                                 $add_class = "";
1716                                         }
1717
1718                                         print "<div class=\"cdmArticle$add_class\" id=\"RROW-$id\">";
1719
1720                                         print "<div class=\"cdmHeader\">";
1721
1722                                         print "<div style=\"float : right\">$updated_fmt</div>";
1723
1724                                         print "<a target=\"new\" href=\"".$line["link"]."\">".$line["title"]."</a>";
1725
1726                                         if ($line["feed_title"]) {
1727                                                 print "&nbsp;(<a href='javascript:viewfeed($feed_id)'>".$line["feed_title"]."</a>)";
1728                                         }
1729
1730                                         print "</div>";
1731
1732                                         print "<div class=\"cdmContent\">" . $line["content_preview"] . "</div>";
1733
1734                                         print "<div style=\"float : right\">$marked_pic</div>
1735                                                 <div class=\"cdmFooter\">
1736                                                         <input type=\"checkbox\" onclick=\"toggleSelectRowById(this,
1737                                                         'RROW-$id')\" class=\"feedCheckBox\" id=\"RCHK-$id\"></div>";
1738
1739                                         print "</div>";
1740
1741                                 }
1742
1743                                 ++$lnum;
1744                         }
1745
1746                         if (!get_pref($link, 'COMBINED_DISPLAY_MODE')) {
1747                                 print "</table>";
1748                         }
1749
1750                         print_headline_subtoolbar($link,
1751                                 "javascript:catchupPage()", "Mark page as read", true);
1752
1753
1754                 } else {
1755                         print "<div width='100%' align='center'>No articles found.</div>";
1756                 }
1757
1758                 print "</div>";
1759
1760                 print "<script type=\"text/javascript\">
1761                         document.onkeydown = hotkey_handler;
1762                         // if (parent.daemon_enabled) parent.updateTitle('$feed_title');
1763                         update_all_counters('$feed');
1764                 </script>";
1765
1766                 print '
1767                         <script type="text/javascript">
1768                                 /* for IE */
1769                                 function statechange() {
1770                                         if (document.readyState == "interactive") init();
1771                                 }
1772
1773                                 if (document.readyState) {
1774                                         if (document.readyState == "interactive" || document.readyState == "complete") {
1775                                                 init();
1776                                         } else {
1777                                                 document.onreadystatechange = statechange;
1778                                         }
1779                                 }
1780                         </script>';
1781
1782                 print "</body></html>";
1783         }
1784
1785         if ($op == "pref-rpc") {
1786
1787                 $subop = $_GET["subop"];
1788
1789                 if ($subop == "unread") {
1790                         $ids = split(",", db_escape_string($_GET["ids"]));
1791                         foreach ($ids as $id) {
1792                                 db_query($link, "UPDATE ttrss_user_entries SET unread = true
1793                                         WHERE feed_id = '$id' AND owner_uid = ".$_SESSION["uid"]);
1794                         }
1795
1796                         print "Marked selected feeds as unread.";
1797                 }
1798
1799                 if ($subop == "read") {
1800                         $ids = split(",", db_escape_string($_GET["ids"]));
1801                         foreach ($ids as $id) {
1802                                 db_query($link, "UPDATE ttrss_user_entries
1803                                         SET unread = false,last_read = NOW() WHERE
1804                                                 feed_id = '$id' AND owner_uid = ".$_SESSION["uid"]);
1805                         }
1806
1807                         print "Marked selected feeds as read.";
1808
1809                 }
1810
1811         }
1812
1813         if ($op == "pref-feeds") {
1814
1815                 $subop = $_REQUEST["subop"];
1816                 $quiet = $_REQUEST["quiet"];
1817
1818                 if ($subop == "massSubscribe") {
1819                         $ids = split(",", db_escape_string($_GET["ids"]));
1820
1821                         $subscribed = array();
1822
1823                         foreach ($ids as $id) {
1824                                 $result = db_query($link, "SELECT feed_url,title FROM ttrss_feeds
1825                                         WHERE id = '$id'");
1826
1827                                 $feed_url = db_fetch_result($result, 0, "feed_url");
1828                                 $title = db_fetch_result($result, 0, "title");
1829
1830                                 $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
1831                                         feed_url = '$feed_url' AND owner_uid = " . $_SESSION["uid"]);
1832
1833                                 if (db_num_rows($result) == 0) {
1834                                         $result = db_query($link,
1835                                                 "INSERT INTO ttrss_feeds (owner_uid,feed_url,title,cat_id)
1836                                                 VALUES ('".$_SESSION["uid"]."', '$feed_url', '$title', NULL)");
1837
1838                                         array_push($subscribed, $title);
1839                                 }
1840                         }
1841
1842                         if (count($subscribed) > 0) {
1843                                 print "<div class=\"notice\">";
1844                                 print "<b>Subscribed to feeds:</b>";
1845                                 print "<ul class=\"nomarks\">";
1846                                 foreach ($subscribed as $title) {
1847                                         print "<li>$title</li>";
1848                                 }
1849                                 print "</ul>";
1850                                 print "</div>";
1851                         }
1852                 }
1853
1854                 if ($subop == "browse") {
1855
1856                         if (!ENABLE_FEED_BROWSER) {
1857                                 print "Feed browser is administratively disabled.";
1858                                 return;
1859                         }
1860
1861                         print "<div class=\"infoBoxContents\">";
1862
1863                         print "<h1>Feed browser</h1>";
1864
1865                         print "<p>Showing top 50 registered feeds, sorted by popularity:</p>";
1866
1867                         $result = db_query($link, "SELECT feed_url,count(id) AS subscribers
1868                                 FROM ttrss_feeds
1869                                 WHERE auth_login = '' AND auth_pass = '' AND private = false
1870                                 GROUP BY feed_url ORDER BY subscribers DESC LIMIT 50");
1871
1872                         print "<ul class='browseFeedList' id='browseFeedList'>";
1873
1874                         $feedctr = 0;
1875
1876                         while ($line = db_fetch_assoc($result)) {
1877                                 $feed_url = $line["feed_url"];
1878                                 $subscribers = $line["subscribers"];
1879
1880                                 $sub_result = db_query($link, "SELECT id
1881                                         FROM ttrss_feeds WHERE feed_url = '$feed_url' AND owner_uid =" .
1882                                         $_SESSION["uid"]);
1883
1884                                 if (db_num_rows($sub_result) > 0) {
1885                                         continue; // already subscribed
1886                                 }
1887
1888                                 $det_result = db_query($link, "SELECT site_url,title,id
1889                                         FROM ttrss_feeds WHERE feed_url = '$feed_url' LIMIT 1");
1890
1891                                 $details = db_fetch_assoc($det_result);
1892
1893                                 $icon_file = ICONS_DIR . "/" . $details["id"] . ".ico";
1894
1895                                 if (file_exists($icon_file) && filesize($icon_file) > 0) {
1896                                                 $feed_icon = "<img class=\"tinyFeedIcon\"       src=\"" . ICONS_URL .
1897                                                         "/".$details["id"].".ico\">";
1898                                 } else {
1899                                         $feed_icon = "<img class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">";
1900                                 }
1901
1902                                 $check_box = "<input onclick='toggleSelectListRow(this)' class='feedBrowseCB'
1903                                         type=\"checkbox\" id=\"FBCHK-" . $details["id"] . "\">";
1904
1905                                 $class = ($feedctr % 2) ? "even" : "odd";
1906
1907                                 print "<li class='$class' id=\"FBROW-".$details["id"]."\">$check_box".
1908                                         "$feed_icon " . db_unescape_string($details["title"]) .
1909                                         "&nbsp;<span class='subscribers'>($subscribers)</span></li>";
1910
1911                                         ++$feedctr;
1912                         }
1913
1914                         if ($feedctr == 0) {
1915                                 print "<li>No feeds found to subscribe.</li>";
1916                         }
1917
1918                         print "</ul>";
1919
1920                         print "<div align='center'>
1921                                 <input type=\"submit\" class=\"button\"
1922                                 onclick=\"feedBrowserSubscribe()\" value=\"Subscribe\">
1923                                 <input type='submit' class='button'
1924                                 onclick=\"closeInfoBox()\" value=\"Cancel\"></div>";
1925
1926                         print "</div>";
1927                         return;
1928                 }
1929
1930                 if ($subop == "editfeed") {
1931                         $feed_id = db_escape_string($_GET["id"]);
1932
1933                         $result = db_query($link,
1934                                 "SELECT * FROM ttrss_feeds WHERE id = '$feed_id' AND
1935                                         owner_uid = " . $_SESSION["uid"]);
1936
1937                         $title = htmlspecialchars(db_unescape_string(db_fetch_result($result,
1938                                 0, "title")));
1939
1940                         print "<div class=\"infoBoxContents\">";
1941
1942                         $icon_file = ICONS_DIR . "/$feed_id.ico";
1943
1944                         if (file_exists($icon_file) && filesize($icon_file) > 0) {
1945                                         $feed_icon = "<img width=\"16\" height=\"16\"
1946                                                 src=\"" . ICONS_URL . "/$feed_id.ico\">";
1947                         } else {
1948                                 $feed_icon = "";
1949                         }
1950
1951                         print "<h1>$feed_icon $title</h1>";
1952
1953                         print "<table width='100%'>";
1954
1955                         $row_class = "odd";
1956
1957                         print "<tr class='$row_class'><td>Title:</td>";
1958                         print "<td><input id=\"iedit_title\" value=\"$title\"></td></tr>";
1959
1960                         $feed_url = db_fetch_result($result, 0, "feed_url");
1961                         $feed_url = htmlspecialchars(db_unescape_string(db_fetch_result($result,
1962                                 0, "feed_url")));
1963                         $row_class = toggleEvenOdd($row_class);
1964
1965                         print "<tr class='$row_class'><td>Feed URL:</td>";
1966                         print "<td><input id=\"iedit_link\" value=\"$feed_url\"></td></tr>";
1967
1968                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
1969
1970                                 $cat_id = db_fetch_result($result, 0, "cat_id");
1971
1972                                 $row_class = toggleEvenOdd($row_class);
1973
1974                                 print "<tr class='$row_class'><td>Category:</td>";
1975                                 print "<td>";
1976                                 print "<select id=\"iedit_fcat\">";
1977                                 print "<option id=\"0\">Uncategorized</option>";
1978
1979                                 $tmp_result = db_query($link, "SELECT id,title FROM ttrss_feed_categories
1980                                         WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1981
1982                                 if (db_num_rows($tmp_result) > 0) {
1983                                         print "<option disabled>--------</option>";
1984                                 }
1985
1986                                 while ($tmp_line = db_fetch_assoc($tmp_result)) {
1987                                         if ($tmp_line["id"] == $cat_id) {
1988                                                 $is_selected = "selected";
1989                                         } else {
1990                                                 $is_selected = "";
1991                                         }
1992                                         printf("<option $is_selected id='%d'>%s</option>",
1993                                                 $tmp_line["id"], $tmp_line["title"]);
1994                                 }
1995
1996                                 print "</select></td>";
1997                                 print "</td></tr>";
1998
1999                         }
2000
2001                         $update_interval = db_fetch_result($result, 0, "update_interval");
2002                         $row_class = toggleEvenOdd($row_class);
2003
2004                         print "<tr class='$row_class'><td>Update Interval:</td>";
2005 //                      print "<td><input id=\"iedit_updintl\"
2006 //                              value=\"$update_interval\"></td></tr>";
2007
2008                         print "<td>";
2009
2010                         print "<select id=\"iedit_updintl\">";
2011
2012                         foreach (array_keys($update_intervals) as $i) {
2013
2014                                 if ($i == $update_interval) {
2015                                         $selected = "selected";
2016                                 } else {
2017                                         $selected = "";
2018                                 }
2019                                 print "<option $selected id=\"$i\">" . $update_intervals[$i] . "</option>";
2020                         }
2021
2022                         print "</select>";
2023
2024                         print "</td>";
2025
2026                         $row_class = toggleEvenOdd($row_class);
2027                         print "<tr class='$row_class'><td>Link to:</td>";
2028
2029                         $tmp_result = db_query($link, "SELECT COUNT(id) AS count
2030                                 FROM ttrss_feeds WHERE parent_feed = '$feed_id'");
2031
2032                         $linked_count = db_fetch_result($tmp_result, 0, "count");
2033
2034                         $parent_feed = db_fetch_result($result, 0, "parent_feed");
2035
2036                         if ($linked_count > 0) {
2037                                 $disabled = "disabled";
2038                         }
2039
2040                         print "<select $disabled  id=\"iedit_parent_feed\">";
2041
2042                         print "<option id=\"0\">Not linked</option>";
2043
2044                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
2045                                 if ($cat_id) {
2046                                         $cat_qpart = "AND cat_id = '$cat_id'";
2047                                 } else {
2048                                         $cat_qpart = "AND cat_id IS NULL";
2049                                 }
2050                         }
2051
2052                         $tmp_result = db_query($link, "SELECT id,title FROM ttrss_feeds
2053                                 WHERE id != '$feed_id' AND owner_uid = ".$_SESSION["uid"]."
2054                                         $cat_qpart ORDER BY title");
2055
2056                                 if (db_num_rows($tmp_result) > 0) {
2057                                         print "<option disabled>--------</option>";
2058                                 }
2059
2060                                 while ($tmp_line = db_fetch_assoc($tmp_result)) {
2061                                         if ($tmp_line["id"] == $parent_feed) {
2062                                                 $is_selected = "selected";
2063                                         } else {
2064                                                 $is_selected = "";
2065                                         }
2066                                         printf("<option $is_selected id='%d'>%s</option>",
2067                                                 $tmp_line["id"], $tmp_line["title"]);
2068                                 }
2069
2070                                 print "</select></td>";
2071                                 print "</td></tr>";
2072
2073                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
2074                         $row_class = toggleEvenOdd($row_class);
2075
2076                         print "<tr class='$row_class'><td>Purge Days:</td>";
2077 //                      print "<td><input id=\"iedit_purgintl\"
2078 //                              value=\"$purge_interval\"></td></tr>";
2079
2080                         print "<td>";
2081
2082                         print "<select id=\"iedit_purgintl\">";
2083
2084                         foreach (array_keys($purge_intervals) as $i) {
2085
2086                                 if ($i == $purge_interval) {
2087                                         $selected = "selected";
2088                                 } else {
2089                                         $selected = "";
2090                                 }
2091                                 print "<option $selected id=\"$i\">" . $purge_intervals[$i] . "</option>";
2092                         }
2093
2094                         print "</select>";
2095
2096                         print "</td>";
2097
2098 //                      print "<tr><td colspan=\"2\"><b>Authentication</b></td></tr>";
2099
2100                         $row_class = toggleEvenOdd($row_class);
2101                         $auth_login = db_fetch_result($result, 0, "auth_login");
2102
2103                         print "<tr class='$row_class'><td>Login:</td>";
2104                         print "<td><input id=\"iedit_login\"
2105                                 value=\"$auth_login\"></td></tr>";
2106
2107                         $row_class = toggleEvenOdd($row_class);
2108                         $auth_pass = db_fetch_result($result, 0, "auth_pass");
2109
2110                         print "<tr class='$row_class'><td>Password:</td>";
2111                         print "<td><input type=\"password\" id=\"iedit_pass\"
2112                                 value=\"$auth_pass\"></td></tr>";
2113
2114                         $row_class = toggleEvenOdd($row_class);
2115                         $private = sql_bool_to_bool(db_fetch_result($result, 0, "private"));
2116
2117                         if ($private) {
2118                                 $checked = "checked";
2119                         } else {
2120                                 $checked = "";
2121                         }
2122
2123                         print "<tr class='$row_class'><td valign='top'>Options:</td>";
2124                         print "<td><input type=\"checkbox\" id=\"iedit_private\"
2125                                 $checked><label for=\"iedit_private\">Hide from feed browser</label>";
2126
2127                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
2128
2129                         if ($rtl_content) {
2130                                 $checked = "checked";
2131                         } else {
2132                                 $checked = "";
2133                         }
2134
2135                         print "<br><input type=\"checkbox\" id=\"iedit_rtl\"
2136                                 $checked><label for=\"iedit_rtl\">Right-to-left content</label>";
2137
2138                         print "</td></tr>";
2139
2140                         print "</table>";
2141                         print "</div>";
2142
2143                         print "<div align='center'>
2144                                 <input type=\"submit\" class=\"button\"
2145                                 onclick=\"feedEditSave()\" value=\"Save\">
2146                                 <input type='submit' class='button'
2147                                 onclick=\"feedEditCancel()\" value=\"Cancel\"></div>";
2148                         return;
2149                 }
2150
2151                 if ($subop == "editSave") {
2152                         $feed_title = db_escape_string($_POST["t"]);
2153                         $feed_link = db_escape_string($_POST["l"]);
2154                         $upd_intl = db_escape_string($_POST["ui"]);
2155                         $purge_intl = db_escape_string($_POST["pi"]);
2156                         $feed_id = db_escape_string($_POST["id"]);
2157                         $cat_id = db_escape_string($_POST["catid"]);
2158                         $auth_login = db_escape_string($_POST["login"]);
2159                         $auth_pass = db_escape_string($_POST["pass"]);
2160                         $parent_feed = db_escape_string($_POST["pfeed"]);
2161                         $private = db_escape_string($_POST["is_pvt"]);
2162                         $rtl_content = db_escape_string($_POST["is_rtl"]);
2163
2164                         if (strtoupper($upd_intl) == "DEFAULT")
2165                                 $upd_intl = 0;
2166
2167                         if (strtoupper($upd_intl) == "DISABLED")
2168                                 $upd_intl = -1;
2169
2170                         if (strtoupper($purge_intl) == "DEFAULT")
2171                                 $purge_intl = 0;
2172
2173                         if (strtoupper($purge_intl) == "DISABLED")
2174                                 $purge_intl = -1;
2175
2176                         if ($cat_id != 0) {
2177                                 $category_qpart = "cat_id = '$cat_id'";
2178                         } else {
2179                                 $category_qpart = 'cat_id = NULL';
2180                         }
2181
2182                         if ($parent_feed != 0) {
2183                                 $parent_qpart = "parent_feed = '$parent_feed'";
2184                         } else {
2185                                 $parent_qpart = 'parent_feed = NULL';
2186                         }
2187
2188                         $result = db_query($link, "UPDATE ttrss_feeds SET
2189                                 $category_qpart,
2190                                 $parent_qpart,
2191                                 title = '$feed_title', feed_url = '$feed_link',
2192                                 update_interval = '$upd_intl',
2193                                 purge_interval = '$purge_intl',
2194                                 auth_login = '$auth_login',
2195                                 auth_pass = '$auth_pass',
2196                                 private = $private,
2197                                 rtl_content = $rtl_content
2198                                 WHERE id = '$feed_id' AND owner_uid = " . $_SESSION["uid"]);
2199                 }
2200
2201                 if ($subop == "saveCat") {
2202                         $cat_title = db_escape_string($_GET["title"]);
2203                         $cat_id = db_escape_string($_GET["id"]);
2204
2205                         $result = db_query($link, "UPDATE ttrss_feed_categories SET
2206                                 title = '$cat_title' WHERE id = '$cat_id' AND owner_uid = ".$_SESSION["uid"]);
2207
2208                 }
2209
2210                 if ($subop == "remove") {
2211
2212                         if (!WEB_DEMO_MODE) {
2213
2214                                 $ids = split(",", db_escape_string($_GET["ids"]));
2215
2216                                 foreach ($ids as $id) {
2217                                         db_query($link, "DELETE FROM ttrss_feeds
2218                                                 WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]);
2219
2220                                         $icons_dir = ICONS_DIR;
2221
2222                                         if (file_exists($icons_dir . "/$id.ico")) {
2223                                                 unlink($icons_dir . "/$id.ico");
2224                                         }
2225                                 }
2226                         }
2227                 }
2228
2229                 if ($subop == "add") {
2230
2231                         if (!WEB_DEMO_MODE) {
2232
2233                                 $feed_link = db_escape_string(trim($_GET["link"]));
2234                                 $cat_id = db_escape_string($_GET["cid"]);
2235
2236                                 if ($cat_id == "0" || !$cat_id) {
2237                                         $cat_qpart = "NULL";
2238                                 } else {
2239                                         $cat_qpart = "'$cat_id'";
2240                                 }
2241
2242                                 $result = db_query($link,
2243                                         "SELECT id FROM ttrss_feeds
2244                                         WHERE feed_url = '$feed_link' AND owner_uid = ".$_SESSION["uid"]);
2245
2246                                 if (db_num_rows($result) == 0) {
2247
2248                                         $result = db_query($link,
2249                                                 "INSERT INTO ttrss_feeds (owner_uid,feed_url,title,cat_id)
2250                                                 VALUES ('".$_SESSION["uid"]."', '$feed_link',
2251                                                 '[Unknown]', $cat_qpart)");
2252
2253                                         $result = db_query($link,
2254                                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$feed_link'
2255                                                 AND owner_uid = " . $_SESSION["uid"]);
2256
2257                                         $feed_id = db_fetch_result($result, 0, "id");
2258
2259                                         if ($feed_id) {
2260                                                 update_rss_feed($link, $feed_link, $feed_id, true);
2261                                         }
2262                                 } else {
2263
2264                                         print "<div class=\"warning\">
2265                                                 Feed <b>$feed_link</b> already exists in the database.
2266                                         </div>";
2267                                 }
2268                         }
2269                 }
2270
2271                 if ($subop == "addCat") {
2272
2273                         if (!WEB_DEMO_MODE) {
2274
2275                                 $feed_cat = db_escape_string(trim($_GET["cat"]));
2276
2277                                 $result = db_query($link,
2278                                         "SELECT id FROM ttrss_feed_categories
2279                                         WHERE title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
2280
2281                                 if (db_num_rows($result) == 0) {
2282
2283                                         $result = db_query($link,
2284                                                 "INSERT INTO ttrss_feed_categories (owner_uid,title)
2285                                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat')");
2286
2287                                 } else {
2288
2289                                         print "<div class=\"warning\">
2290                                                 Category <b>$feed_cat</b> already exists in the database.
2291                                         </div>";
2292                                 }
2293
2294
2295                         }
2296                 }
2297
2298                 if ($subop == "removeCats") {
2299
2300                         if (!WEB_DEMO_MODE) {
2301
2302                                 $ids = split(",", db_escape_string($_GET["ids"]));
2303
2304                                 foreach ($ids as $id) {
2305
2306                                         db_query($link, "BEGIN");
2307
2308                                         $result = db_query($link,
2309                                                 "SELECT count(id) as num_feeds FROM ttrss_feeds
2310                                                         WHERE cat_id = '$id'");
2311
2312                                         $num_feeds = db_fetch_result($result, 0, "num_feeds");
2313
2314                                         if ($num_feeds == 0) {
2315                                                 db_query($link, "DELETE FROM ttrss_feed_categories
2316                                                         WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]);
2317                                         } else {
2318
2319                                                 print "<div class=\"warning\">
2320                                                         Unable to delete non empty feed categories.</div>";
2321
2322                                         }
2323
2324                                         db_query($link, "COMMIT");
2325                                 }
2326                         }
2327                 }
2328
2329                 if ($subop == "categorize") {
2330
2331                         if (!WEB_DEMO_MODE) {
2332
2333                                 $ids = split(",", db_escape_string($_GET["ids"]));
2334
2335                                 $cat_id = db_escape_string($_GET["cat_id"]);
2336
2337                                 if ($cat_id == 0) {
2338                                         $cat_id_qpart = 'NULL';
2339                                 } else {
2340                                         $cat_id_qpart = "'$cat_id'";
2341                                 }
2342
2343                                 db_query($link, "BEGIN");
2344
2345                                 foreach ($ids as $id) {
2346
2347                                         db_query($link, "UPDATE ttrss_feeds SET cat_id = $cat_id_qpart
2348                                                 WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]);
2349                                 }
2350
2351                                 db_query($link, "COMMIT");
2352                         }
2353
2354                 }
2355
2356                 if ($quiet) return;
2357
2358 //              print "<h3>Edit Feeds</h3>";
2359
2360                 $result = db_query($link, "SELECT id,title,feed_url,last_error
2361                         FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]);
2362
2363                 if (db_num_rows($result) > 0) {
2364
2365                         print "<div class=\"warning\">";
2366
2367 //                      print"<img class=\"closeButton\"
2368 //                              onclick=\"javascript:hideParentElement(this);\" src=\"images/close.png\">";
2369
2370                         print "<a href=\"javascript:showBlockElement('feedUpdateErrors')\">
2371                                 <b>Feeds with update errors</b> (click to expand)</a>";
2372
2373                         print "<ul id=\"feedUpdateErrors\" class=\"nomarks\">";
2374
2375                         while ($line = db_fetch_assoc($result)) {
2376                                 print "<li>" . $line["title"] . " (" . $line["feed_url"] . "): " .
2377                                         $line["last_error"];
2378                         }
2379
2380                         print "</ul>";
2381                         print "</div>";
2382
2383                 }
2384
2385                 $feed_search = db_escape_string($_GET["search"]);
2386
2387                 if (array_key_exists("search", $_GET)) {
2388                         $_SESSION["prefs_feed_search"] = $feed_search;
2389                 } else {
2390                         $feed_search = $_SESSION["prefs_feed_search"];
2391                 }
2392
2393                 print "<table width='100%' class=\"prefGenericAddBox\"
2394                         cellspacing='0' cellpadding='0'><tr>
2395                         <td>
2396                                 <input id=\"fadd_link\"
2397                                 onchange=\"javascript:addFeed()\"
2398                                 size=\"40\">
2399                                 <input type=\"submit\" class=\"button\"
2400                                 onclick=\"javascript:addFeed()\" value=\"Add feed\">";
2401
2402                 if (ENABLE_FEED_BROWSER) {
2403                         print "&nbsp;(<a href='javascript:browseFeeds()'>Top 50</a>)";
2404                 }
2405
2406                 print "</td><td align='right'>
2407                                 <input id=\"feed_search\" size=\"20\"
2408                                 onchange=\"javascript:updateFeedList()\"
2409                                 value=\"$feed_search\">
2410                                 <input type=\"submit\" class=\"button\"
2411                                 onclick=\"javascript:updateFeedList()\" value=\"Search\">
2412                         </td>
2413                         </tr></table>";
2414
2415                 $feeds_sort = db_escape_string($_GET["sort"]);
2416
2417                 if (!$feeds_sort || $feeds_sort == "undefined") {
2418                         $feeds_sort = $_SESSION["pref_sort_feeds"];
2419                         if (!$feeds_sort) $feeds_sort = "title";
2420                 }
2421
2422                 $_SESSION["pref_sort_feeds"] = $feeds_sort;
2423
2424                 if ($feed_search) {
2425                         $search_qpart = "(UPPER(F1.title) LIKE UPPER('%$feed_search%') OR
2426                                 UPPER(F1.feed_url) LIKE UPPER('%$feed_search%')) AND";
2427                 } else {
2428                         $search_qpart = "";
2429                 }
2430
2431                 $result = db_query($link, "SELECT
2432                                 F1.id,
2433                                 F1.title,
2434                                 F1.feed_url,
2435                                 substring(F1.last_updated,1,16) AS last_updated,
2436                                 F1.parent_feed,
2437                                 F1.update_interval,
2438                                 F1.purge_interval,
2439                                 F1.cat_id,
2440                                 F2.title AS parent_title,
2441                                 C1.title AS category
2442                         FROM
2443                                 ttrss_feeds AS F1
2444                                 LEFT JOIN ttrss_feeds AS F2
2445                                         ON (F1.parent_feed = F2.id)
2446                                 LEFT JOIN ttrss_feed_categories AS C1
2447                                         ON (F1.cat_id = C1.id)
2448                         WHERE
2449                                 $search_qpart F1.owner_uid = '".$_SESSION["uid"]."'
2450                         ORDER by category,$feeds_sort,title");
2451
2452                 if (db_num_rows($result) != 0) {
2453
2454                         print "<div id=\"infoBoxShadow\"><div id=\"infoBox\">PLACEHOLDER</div></div>";
2455
2456                         print "<p><table width=\"100%\" cellspacing=\"0\"
2457                                 class=\"prefFeedList\" id=\"prefFeedList\">";
2458                         print "<tr><td class=\"selectPrompt\" colspan=\"8\">
2459                                 Select:
2460                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefFeedList',
2461                                                 'FEEDR-', 'FRCHK-', true)\">All</a>,
2462                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefFeedList',
2463                                                 'FEEDR-', 'FRCHK-', false)\">None</a>
2464                                 </td</tr>";
2465
2466                         if (!get_pref($link, 'ENABLE_FEED_CATS')) {
2467                                 print "<tr class=\"title\">
2468                                         <td width='5%' align='center'>&nbsp;</td>
2469                                         <td width='30%'><a href=\"javascript:updateFeedList('title')\">Title</a></td>
2470                                         <td width='30%'><a href=\"javascript:updateFeedList('feed_url')\">Feed</a></td>
2471                                         <td width='15%'><a href=\"javascript:updateFeedList('update_interval')\">Update Interval</a></td>
2472                                         <td width='15%'><a href=\"javascript:updateFeedList('purge_interval')\">Purge Interval</a></td></tr>";
2473                         }
2474
2475                         $lnum = 0;
2476
2477                         $cur_cat_id = -1;
2478
2479                         while ($line = db_fetch_assoc($result)) {
2480
2481                                 $feed_id = $line["id"];
2482                                 $cat_id = $line["cat_id"];
2483
2484                                 $edit_title = htmlspecialchars(db_unescape_string($line["title"]));
2485                                 $edit_link = htmlspecialchars(db_unescape_string($line["feed_url"]));
2486                                 $edit_cat = htmlspecialchars(db_unescape_string($line["category"]));
2487
2488 //                              if ($line["update_interval"] == "0") $line["update_interval"] = "Default";
2489 //                              if ($line["update_interval"] == "-1") $line["update_interval"] = "Disabled";
2490 //                              if ($line["purge_interval"] == "0") $line["purge_interval"] = "Default";
2491 //                              if ($line["purge_interval"] < 0)        $line["purge_interval"] = "Disabled";
2492
2493                                 if (!$edit_cat) $edit_cat = "Uncategorized";
2494
2495                                 if (get_pref($link, 'ENABLE_FEED_CATS') && $cur_cat_id != $cat_id) {
2496                                         $lnum = 0;
2497
2498                                         print "<tr><td colspan=\"6\" class=\"feedEditCat\">$edit_cat</td></tr>";
2499
2500                                         print "<tr class=\"title\">
2501                                                 <td width='5%' align='center'>&nbsp;</td>
2502                                                 <td width='30%'><a href=\"javascript:updateFeedList('title')\">Title</a></td>
2503                                                 <td width='30%'><a href=\"javascript:updateFeedList('feed_url')\">Feed</a></td>
2504                                                 <td width='15%'><a href=\"javascript:updateFeedList('update_interval')\">Update Interval</a></td>
2505                                                 <td width='15%'><a href=\"javascript:updateFeedList('purge_interval')\">Purge Interval</a></td></tr>";
2506
2507                                         $cur_cat_id = $cat_id;
2508                                 }
2509
2510                                 $class = ($lnum % 2) ? "even" : "odd";
2511                                 $this_row_id = "id=\"FEEDR-$feed_id\"";
2512
2513                                 print "<tr class=\"$class\" $this_row_id>";
2514
2515                                 $icon_file = ICONS_DIR . "/$feed_id.ico";
2516
2517                                 if (file_exists($icon_file) && filesize($icon_file) > 0) {
2518                                                 $feed_icon = "<img class=\"tinyFeedIcon\"       src=\"" . ICONS_URL . "/$feed_id.ico\">";
2519                                 } else {
2520                                         $feed_icon = "<img class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">";
2521                                 }
2522 //                              print "<td class='feedIcon'>$feed_icon</td>";
2523
2524                                 print "<td class='feedSelect'><input onclick='toggleSelectRow(this);'
2525                                 type=\"checkbox\" id=\"FRCHK-".$line["id"]."\"></td>";
2526
2527                                 $edit_title = truncate_string($edit_title, 40);
2528                                 $edit_link = truncate_string($edit_link, 60);
2529
2530                                 $parent_title = $line["parent_title"];
2531                                 if ($parent_title) {
2532                                         $parent_title = "<span class='groupPrompt'>(linked to
2533                                                 $parent_title)</span>";
2534                                 }
2535
2536                                 print "<td><a href=\"javascript:editFeed($feed_id);\">" .
2537                                         "$feed_icon $edit_title $parent_title" . "</a></td>";
2538
2539                                 print "<td><a href=\"javascript:editFeed($feed_id);\">" .
2540                                         $edit_link . "</a></td>";
2541
2542 /*                              if (get_pref($link, 'ENABLE_FEED_CATS')) {
2543                                         print "<td><a href=\"javascript:editFeed($feed_id);\">" .
2544                                                 $edit_cat . "</a></td>";
2545                                 } */
2546
2547                                 print "<td><a href=\"javascript:editFeed($feed_id);\">" .
2548                                         $update_intervals[$line["update_interval"]] . "</a></td>";
2549
2550                                 print "<td><a href=\"javascript:editFeed($feed_id);\">" .
2551                                         $purge_intervals[$line["purge_interval"]] . "</a></td>";
2552
2553                                 print "</tr>";
2554
2555                                 ++$lnum;
2556                         }
2557
2558                         print "</table>";
2559
2560                         print "<p>";
2561
2562                         if ($subop == "edit") {
2563                                 print "Edit feed:&nbsp;
2564                                         <input type=\"submit\" class=\"button\"
2565                                                 onclick=\"javascript:feedEditCancel()\" value=\"Cancel\">
2566                                         <input type=\"submit\" class=\"button\"
2567                                                 onclick=\"javascript:feedEditSave()\" value=\"Save\">";
2568                         } else {
2569
2570                                 print "
2571                                         Selection:&nbsp;
2572                                 <input type=\"submit\" class=\"button\"
2573                                         onclick=\"javascript:selectedFeedDetails()\" value=\"Details\">
2574                                 <input type=\"submit\" class=\"button\"
2575                                         onclick=\"javascript:editSelectedFeed()\" value=\"Edit\">
2576                                 <input type=\"submit\" class=\"button\"
2577                                         onclick=\"javascript:removeSelectedFeeds()\" value=\"Remove\">";
2578
2579                                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
2580
2581                                         print "&nbsp;&nbsp;";
2582
2583                                         $result = db_query($link, "SELECT title,id FROM ttrss_feed_categories
2584                                                 WHERE owner_uid = ".$_SESSION["uid"]."
2585                                                 ORDER BY title");
2586
2587                                         print "<select id=\"sfeed_set_fcat\">";
2588                                         print "<option id=\"0\">Uncategorized</option>";
2589
2590                                         if (db_num_rows($result) != 0) {
2591
2592                                                 print "<option disabled>--------</option>";
2593
2594                                                 while ($line = db_fetch_assoc($result)) {
2595                                                         printf("<option id='%d'>%s</option>",
2596                                                                 $line["id"], $line["title"]);
2597                                                 }
2598                                         }
2599
2600                                         print "</select>";
2601
2602                                         print " <input type=\"submit\" class=\"button\"
2603                                         onclick=\"javascript:categorizeSelectedFeeds()\" value=\"Set category\">";
2604
2605                                 }
2606
2607                                 if (get_pref($link, 'ENABLE_PREFS_CATCHUP_UNCATCHUP')) {
2608                                         print "
2609                                         <input type=\"submit\" class=\"button\"
2610                                                 onclick=\"javascript:readSelectedFeeds(true)\" value=\"Mark as read\">
2611                                         <input type=\"submit\" class=\"button\"
2612                                                 onclick=\"javascript:readSelectedFeeds(false)\"
2613                                                 value=\"Mark as unread\">&nbsp;";
2614                                 }
2615
2616                                 print "
2617                                         &nbsp;All feeds: <input type=\"submit\"
2618                                                         class=\"button\" onclick=\"gotoExportOpml()\"
2619                                                         value=\"Export OPML\">";
2620                                 }
2621                 } else {
2622
2623                         print "<p>No feeds defined.</p>";
2624
2625                 }
2626
2627                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
2628
2629                         print "<h3>Edit Categories</h3>";
2630
2631         //              print "<h3>Categories</h3>";
2632
2633                         print "<div class=\"prefGenericAddBox\">
2634                                 <input id=\"fadd_cat\"
2635                                         onchange=\"javascript:addFeedCat()\"
2636                                         size=\"40\">&nbsp;
2637                                 <input
2638                                         type=\"submit\" class=\"button\"
2639                                         onclick=\"javascript:addFeedCat()\" value=\"Add category\"></div>";
2640
2641                         $result = db_query($link, "SELECT title,id FROM ttrss_feed_categories
2642                                 WHERE owner_uid = ".$_SESSION["uid"]."
2643                                 ORDER BY title");
2644
2645                         if (db_num_rows($result) != 0) {
2646
2647                                 print "<p><table width=\"100%\" class=\"prefFeedCatList\"
2648                                         cellspacing=\"0\" id=\"prefFeedCatList\">";
2649
2650                                 print "<tr><td class=\"selectPrompt\" colspan=\"8\">
2651                                 Select:
2652                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefFeedCatList',
2653                                                 'FCATR-', 'FCCHK-', true)\">All</a>,
2654                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefFeedCatList',
2655                                                 'FCATR-', 'FCCHK-', false)\">None</a>
2656                                 </td</tr>";
2657
2658                                 print "<tr class=\"title\">
2659                                                         <td width=\"5%\"></td><td width=\"80%\">Title</td>
2660                                                 </tr>";
2661
2662                                 $lnum = 0;
2663
2664                                 while ($line = db_fetch_assoc($result)) {
2665
2666                                         $class = ($lnum % 2) ? "even" : "odd";
2667
2668                                         $cat_id = $line["id"];
2669
2670                                         $edit_cat_id = $_GET["id"];
2671
2672                                         if ($subop == "editCat" && $cat_id != $edit_cat_id) {
2673                                                 $class .= "Grayed";
2674                                                 $this_row_id = "";
2675                                         } else {
2676                                                 $this_row_id = "id=\"FCATR-$cat_id\"";
2677                                         }
2678
2679                                         print "<tr class=\"$class\" $this_row_id>";
2680
2681                                         $edit_title = htmlspecialchars(db_unescape_string($line["title"]));
2682
2683                                         if (!$edit_cat_id || $subop != "editCat") {
2684
2685                                                 print "<td align='center'><input onclick='toggleSelectRow(this);'
2686                                                 type=\"checkbox\" id=\"FCCHK-".$line["id"]."\"></td>";
2687
2688                                                 print "<td><a href=\"javascript:editFeedCat($cat_id);\">" .
2689                                                         $edit_title . "</a></td>";
2690
2691                                         } else if ($cat_id != $edit_cat_id) {
2692
2693                                                 print "<td><input disabled=\"true\" type=\"checkbox\"
2694                                                         id=\"FRCHK-".$line["id"]."\"></td>";
2695
2696                                                 print "<td>$edit_title</td>";
2697
2698                                         } else {
2699
2700                                                 print "<td><input disabled=\"true\" type=\"checkbox\" checked></td>";
2701
2702                                                 print "<td><input id=\"iedit_title\" value=\"$edit_title\"></td>";
2703
2704                                         }
2705
2706                                         print "</tr>";
2707
2708                                         ++$lnum;
2709                                 }
2710
2711                                 print "</table>";
2712
2713                                 print "<p>";
2714
2715                                 if ($subop == "editCat") {
2716                                         print "Edit category:&nbsp;
2717                                                 <input type=\"submit\" class=\"button\"
2718                                                         onclick=\"javascript:feedCatEditCancel()\" value=\"Cancel\">
2719                                                 <input type=\"submit\" class=\"button\"
2720                                                         onclick=\"javascript:feedCatEditSave()\" value=\"Save\">";
2721                                         } else {
2722
2723                                         print "
2724                                                 Selection:&nbsp;
2725                                         <input type=\"submit\" class=\"button\"
2726                                                 onclick=\"javascript:editSelectedFeedCat()\" value=\"Edit\">
2727                                         <input type=\"submit\" class=\"button\"
2728                                                 onclick=\"javascript:removeSelectedFeedCats()\" value=\"Remove\">";
2729
2730                                 }
2731
2732                         } else {
2733                                 print "<p>No feed categories defined.</p>";
2734                         }
2735                 }
2736
2737                 print "<h3>Import OPML</h3>
2738                 <form   enctype=\"multipart/form-data\" method=\"POST\" action=\"opml.php\">
2739                         File: <input id=\"opml_file\" name=\"opml_file\" type=\"file\">&nbsp;
2740                         <input class=\"button\" name=\"op\" onclick=\"return validateOpmlImport();\"
2741                                 type=\"submit\" value=\"Import\">
2742                         </form>";
2743
2744         }
2745
2746         if ($op == "pref-filters") {
2747
2748                 $subop = $_GET["subop"];
2749                 $quiet = $_GET["quiet"];
2750
2751                 if ($subop == "editSave") {
2752
2753                         $regexp = db_escape_string($_GET["r"]);
2754                         $descr = db_escape_string($_GET["d"]);
2755                         $match = db_escape_string($_GET["m"]);
2756                         $filter_id = db_escape_string($_GET["id"]);
2757                         $feed_id = db_escape_string($_GET["fid"]);
2758                         $action_id = db_escape_string($_GET["aid"]);
2759
2760                         if (!$feed_id) {
2761                                 $feed_id = 'NULL';
2762                         } else {
2763                                 $feed_id = sprintf("'%s'", db_escape_string($feed_id));
2764                         }
2765
2766                         $result = db_query($link, "UPDATE ttrss_filters SET
2767                                 reg_exp = '$regexp',
2768                                 description = '$descr',
2769                                 feed_id = $feed_id,
2770                                 action_id = '$action_id',
2771                                 filter_type = (SELECT id FROM ttrss_filter_types WHERE
2772                                         description = '$match')
2773                                 WHERE id = '$filter_id'");
2774                 }
2775
2776                 if ($subop == "remove") {
2777
2778                         if (!WEB_DEMO_MODE) {
2779
2780                                 $ids = split(",", db_escape_string($_GET["ids"]));
2781
2782                                 foreach ($ids as $id) {
2783                                         db_query($link, "DELETE FROM ttrss_filters WHERE id = '$id'");
2784
2785                                 }
2786                         }
2787                 }
2788
2789                 if ($subop == "add") {
2790
2791                         if (!WEB_DEMO_MODE) {
2792
2793                                 $regexp = db_escape_string(trim($_GET["regexp"]));
2794                                 $match = db_escape_string(trim($_GET["match"]));
2795                                 $feed_id = db_escape_string($_GET["fid"]);
2796                                 $action_id = db_escape_string($_GET["aid"]);
2797
2798                                 if (!$feed_id) {
2799                                         $feed_id = 'NULL';
2800                                 } else {
2801                                         $feed_id = sprintf("'%s'", db_escape_string($feed_id));
2802                                 }
2803
2804                                 $result = db_query($link,
2805                                         "INSERT INTO ttrss_filters (reg_exp,filter_type,owner_uid,feed_id,
2806                                                 action_id)
2807                                         VALUES
2808                                                 ('$regexp', (SELECT id FROM ttrss_filter_types WHERE
2809                                                         description = '$match'),'".$_SESSION["uid"]."',
2810                                                         $feed_id, '$action_id')");
2811                         }
2812                 }
2813
2814                 if ($quiet) return;
2815
2816                 $result = db_query($link, "SELECT description
2817                         FROM ttrss_filter_types ORDER BY description");
2818
2819                 $filter_types = array();
2820
2821                 while ($line = db_fetch_assoc($result)) {
2822                         array_push($filter_types, $line["description"]);
2823                 }
2824
2825                 print "<div class=\"prefGenericAddBox\">
2826                 <input id=\"fadd_regexp\" size=\"40\">&nbsp;";
2827
2828                 print_select("fadd_match", "Title", $filter_types);
2829
2830                 print "&nbsp;<select id=\"fadd_feed\">";
2831
2832                 print "<option selected id=\"0\">All feeds</option>";
2833
2834                 $result = db_query($link, "SELECT id,title FROM ttrss_feeds
2835                         WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
2836
2837                 if (db_num_rows($result) > 0) {
2838                         print "<option disabled>--------</option>";
2839                 }
2840
2841                 while ($line = db_fetch_assoc($result)) {
2842                         printf("<option id='%d'>%s</option>", $line["id"], $line["title"]);
2843                 }
2844
2845                 print "</select>&nbsp;";
2846
2847                 print "&nbsp;Action: ";
2848
2849                 print "<select id=\"fadd_action\">";
2850
2851                 $result = db_query($link, "SELECT id,description FROM ttrss_filter_actions
2852                         ORDER BY name");
2853
2854                 while ($line = db_fetch_assoc($result)) {
2855                         printf("<option id='%d'>%s</option>", $line["id"], $line["description"]);
2856                 }
2857
2858                 print "</select>&nbsp;";
2859
2860 /*              print "<input type=\"submit\"
2861                         class=\"button\" onclick=\"javascript:testFilter()\"
2862                         value=\"Test filter\"> "; */
2863
2864                 print "<input type=\"submit\"
2865                         class=\"button\" onclick=\"javascript:addFilter()\"
2866                         value=\"Add filter\">";
2867
2868                 print "</div>";
2869
2870                 $result = db_query($link, "SELECT
2871                                 ttrss_filters.id AS id,reg_exp,
2872                                 ttrss_filters.description AS description,
2873                                 ttrss_filter_types.name AS filter_type_name,
2874                                 ttrss_filter_types.description AS filter_type_descr,
2875                                 feed_id,
2876                                 ttrss_filter_actions.description AS action_description,
2877                                 ttrss_feeds.title AS feed_title
2878                         FROM
2879                                 ttrss_filter_types,ttrss_filter_actions,ttrss_filters LEFT JOIN
2880                                         ttrss_feeds ON (ttrss_filters.feed_id = ttrss_feeds.id)
2881                         WHERE
2882                                 filter_type = ttrss_filter_types.id AND
2883                                 ttrss_filter_actions.id = action_id AND
2884                                 ttrss_filters.owner_uid = ".$_SESSION["uid"]."
2885                         ORDER by reg_exp");
2886
2887                 if (db_num_rows($result) != 0) {
2888
2889                         print "<p><table width=\"100%\" cellspacing=\"0\" class=\"prefFilterList\"
2890                                 id=\"prefFilterList\">";
2891
2892                         print "<tr><td class=\"selectPrompt\" colspan=\"8\">
2893                                 Select:
2894                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefFilterList',
2895                                                 'FILRR-', 'FICHK-', true)\">All</a>,
2896                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefFilterList',
2897                                                 'FILRR-', 'FICHK-', false)\">None</a>
2898                                 </td</tr>";
2899
2900                         print "<tr class=\"title\">
2901                                                 <td align='center' width=\"5%\">&nbsp;</td>
2902                                                 <td width=\"20%\">Filter expression</td>
2903                                                 <td width=\"20%\">Feed</td>
2904                                                 <td width=\"15%\">Match</td>
2905                                                 <td width=\"15%\">Action</td>
2906                                                 <td width=\"30%\">Description</td></tr>";
2907
2908                         $lnum = 0;
2909
2910                         while ($line = db_fetch_assoc($result)) {
2911
2912                                 $class = ($lnum % 2) ? "even" : "odd";
2913
2914                                 $filter_id = $line["id"];
2915                                 $edit_filter_id = $_GET["id"];
2916
2917                                 if ($subop == "edit" && $filter_id != $edit_filter_id) {
2918                                         $class .= "Grayed";
2919                                         $this_row_id = "";
2920                                 } else {
2921                                         $this_row_id = "id=\"FILRR-$filter_id\"";
2922                                 }
2923
2924                                 print "<tr class=\"$class\" $this_row_id>";
2925
2926                                 $line["regexp"] = htmlspecialchars($line["reg_exp"]);
2927                                 $line["description"] = htmlspecialchars($line["description"]);
2928
2929                                 if (!$line["feed_title"]) $line["feed_title"] = "All feeds";
2930
2931                                 if (!$edit_filter_id || $subop != "edit") {
2932
2933                                         if (!$line["description"]) $line["description"] = "[No description]";
2934
2935                                         print "<td align='center'><input onclick='toggleSelectRow(this);'
2936                                         type=\"checkbox\" id=\"FICHK-".$line["id"]."\"></td>";
2937
2938                                         print "<td><a href=\"javascript:editFilter($filter_id);\">" .
2939                                                 $line["reg_exp"] . "</td>";
2940
2941                                         print "<td><a href=\"javascript:editFilter($filter_id);\">" .
2942                                                 $line["feed_title"] . "</td>";
2943
2944                                         print "<td><a href=\"javascript:editFilter($filter_id);\">" .
2945                                                 $line["filter_type_descr"] . "</td>";
2946
2947                                         print "<td><a href=\"javascript:editFilter($filter_id);\">" .
2948                                                 $line["action_description"] . "</td>";
2949
2950                                         print "<td><a href=\"javascript:editFilter($filter_id);\">" .
2951                                                 $line["description"] . "</td>";
2952
2953                                 } else if ($filter_id != $edit_filter_id) {
2954
2955                                         if (!$line["description"]) $line["description"] = "[No description]";
2956
2957                                         print "<td><input disabled=\"true\" type=\"checkbox\"
2958                                                 id=\"FICHK-".$line["id"]."\"></td>";
2959
2960                                         print "<td>".$line["reg_exp"]."</td>";
2961                                         print "<td>".$line["feed_title"]."</td>";
2962                                         print "<td>".$line["filter_type_descr"]."</td>";
2963                                         print "<td>".$line["action_description"]."</td>";
2964                                         print "<td>".$line["description"]."</td>";
2965
2966                                 } else {
2967
2968                                         print "<td><input disabled=\"true\" type=\"checkbox\" checked></td>";
2969
2970                                         print "<td><input id=\"iedit_regexp\" value=\"".$line["reg_exp"].
2971                                                 "\"></td>";
2972
2973                                         print "<td>";
2974                                         print "<select id=\"iedit_feed\">";
2975                                         print "<option id=\"0\">All feeds</option>";
2976
2977                                         $tmp_result = db_query($link, "SELECT id,title FROM ttrss_feeds
2978                                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
2979
2980                                         if (db_num_rows($tmp_result) > 0) {
2981                                                 print "<option disabled>--------</option>";
2982                                         }
2983
2984                                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2985                                                 if ($tmp_line["id"] == $line["feed_id"]) {
2986                                                         $is_selected = "selected";
2987                                                 } else {
2988                                                         $is_selected = "";
2989                                                 }
2990                                                 printf("<option $is_selected id='%d'>%s</option>",
2991                                                         $tmp_line["id"], $tmp_line["title"]);
2992                                         }
2993
2994                                         print "</select></td>";
2995
2996                                         print "<td>";
2997                                         print_select("iedit_match", $line["filter_type_descr"], $filter_types);
2998                                         print "</td>";
2999
3000                                         print "<td>";
3001                                         print "<select id=\"iedit_filter_action\">";
3002
3003                                         $tmp_result = db_query($link, "SELECT id,description FROM ttrss_filter_actions
3004                                                 ORDER BY description");
3005
3006                                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3007                                                 if ($tmp_line["description"] == $line["action_description"]) {
3008                                                         $is_selected = "selected";
3009                                                 } else {
3010                                                         $is_selected = "";
3011                                                 }
3012                                                 printf("<option $is_selected id='%d'>%s</option>",
3013                                                         $tmp_line["id"], $tmp_line["description"]);
3014                                         }
3015
3016                                         print "</select></td>";
3017
3018
3019                                         print "<td><input id=\"iedit_descr\" value=\"".$line["description"].
3020                                                 "\"></td>";
3021
3022                                         print "</td>";
3023                                 }
3024
3025                                 print "</tr>";
3026
3027                                 ++$lnum;
3028                         }
3029
3030                         if ($lnum == 0) {
3031                                 print "<tr><td colspan=\"4\" align=\"center\">No filters defined.</td></tr>";
3032                         }
3033
3034                         print "</table>";
3035
3036                         print "<p>";
3037
3038                         if ($subop == "edit") {
3039                                 print "Edit filter:
3040                                         <input type=\"submit\" class=\"button\"
3041                                                 onclick=\"javascript:filterEditSave()\" value=\"Save\">
3042                                         <input type=\"submit\" class=\"button\"
3043                                                 onclick=\"javascript:filterEditCancel()\" value=\"Cancel\">";
3044
3045                         } else {
3046
3047                                 print "
3048                                         Selection:
3049                                 <input type=\"submit\" class=\"button\"
3050                                         onclick=\"javascript:editSelectedFilter()\" value=\"Edit\">
3051                                 <input type=\"submit\" class=\"button\"
3052                                         onclick=\"javascript:removeSelectedFilters()\" value=\"Remove\">";
3053                         }
3054
3055                 } else {
3056
3057                         print "<p>No filters defined.</p>";
3058
3059                 }
3060         }
3061
3062         // We need to accept raw SQL data in label queries, so not everything is escaped
3063         // here, this is by design. If you don't like the whole idea, disable labels
3064         // altogether with GLOBAL_ENABLE_LABELS = false
3065
3066         if ($op == "pref-labels") {
3067
3068                 if (!GLOBAL_ENABLE_LABELS) {
3069                         return;
3070                 }
3071
3072                 $subop = $_GET["subop"];
3073
3074                 if ($subop == "test") {
3075
3076                         $expr = $_GET["expr"];
3077                         $descr = $_GET["descr"];
3078
3079                         print "<div class='infoBoxContents'>";
3080
3081                         print "<h1>Label &laquo;$descr&raquo;</h1>";
3082
3083 //                      print "<p><b>Expression</b>: $expr</p>";
3084
3085                         $result = db_query($link,
3086                                 "SELECT count(id) AS num_matches
3087                                         FROM ttrss_entries,ttrss_user_entries
3088                                         WHERE ($expr) AND
3089                                                 ttrss_user_entries.ref_id = ttrss_entries.id AND
3090                                                 owner_uid = " . $_SESSION["uid"]);
3091
3092                         $num_matches = db_fetch_result($result, 0, "num_matches");;
3093
3094                         if ($num_matches > 0) {
3095
3096                                 print "<p>Query returned <b>$num_matches</b> matches, first 5 follow:</p>";
3097
3098                                 $result = db_query($link,
3099                                         "SELECT title,
3100                                                 (SELECT title FROM ttrss_feeds WHERE id = feed_id) AS feed_title
3101                                         FROM ttrss_entries,ttrss_user_entries
3102                                                         WHERE ($expr) AND
3103                                                         ttrss_user_entries.ref_id = ttrss_entries.id
3104                                                         AND owner_uid = " . $_SESSION["uid"] . "
3105                                                         ORDER BY date_entered DESC LIMIT 5");
3106
3107                                 print "<ul class=\"nomarks\">";
3108                                 while ($line = db_fetch_assoc($result)) {
3109                                         print "<li>".$line["title"].
3110                                                 " <span class=\"insensitive\">(".$line["feed_title"].")</span></li>";
3111                                 }
3112                                 print "</ul>";
3113
3114                         } else {
3115                                 print "<p>Query didn't return any matches.</p>";
3116                         }
3117
3118                         print "</div>";
3119
3120                         print "<div align='center'>
3121                                 <input type='submit' class='button'
3122                                 onclick=\"closeInfoBox()\" value=\"Close this window\"></div>";
3123                         return;
3124                 }
3125
3126                 if ($subop == "editSave") {
3127
3128                         $sql_exp = $_GET["s"];
3129                         $descr = $_GET["d"];
3130                         $label_id = db_escape_string($_GET["id"]);
3131
3132 //                      print "$sql_exp : $descr : $label_id";
3133
3134                         $result = db_query($link, "UPDATE ttrss_labels SET
3135                                 sql_exp = '$sql_exp',
3136                                 description = '$descr'
3137                                 WHERE id = '$label_id'");
3138                 }
3139
3140                 if ($subop == "remove") {
3141
3142                         if (!WEB_DEMO_MODE) {
3143
3144                                 $ids = split(",", db_escape_string($_GET["ids"]));
3145
3146                                 foreach ($ids as $id) {
3147                                         db_query($link, "DELETE FROM ttrss_labels WHERE id = '$id'");
3148
3149                                 }
3150                         }
3151                 }
3152
3153                 if ($subop == "add") {
3154
3155                         if (!WEB_DEMO_MODE) {
3156
3157                                 // no escaping is done here on purpose
3158                                 $exp = trim($_GET["exp"]);
3159
3160                                 $result = db_query($link,
3161                                         "INSERT INTO ttrss_labels (sql_exp,description,owner_uid)
3162                                                 VALUES ('$exp', '$exp', '".$_SESSION["uid"]."')");
3163                         }
3164                 }
3165
3166                 print "<div class=\"prefGenericAddBox\">
3167                         <input size=\"40\" id=\"ladd_expr\">&nbsp;";
3168
3169                 print"<input type=\"submit\" class=\"button\"
3170                         onclick=\"javascript:addLabel()\" value=\"Add label\"></div>";
3171
3172                 $result = db_query($link, "SELECT
3173                                 id,sql_exp,description
3174                         FROM
3175                                 ttrss_labels
3176                         WHERE
3177                                 owner_uid = ".$_SESSION["uid"]."
3178                         ORDER by description");
3179
3180                 print "<div id=\"infoBoxShadow\"><div id=\"infoBox\">PLACEHOLDER</div></div>";
3181
3182                 if (db_num_rows($result) != 0) {
3183
3184                         print "<p><table width=\"100%\" cellspacing=\"0\"
3185                                 class=\"prefLabelList\" id=\"prefLabelList\">";
3186
3187                         print "<tr><td class=\"selectPrompt\" colspan=\"8\">
3188                                 Select:
3189                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefLabelList',
3190                                                 'LILRR-', 'LICHK-', true)\">All</a>,
3191                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefLabelList',
3192                                                 'LILRR-', 'LICHK-', false)\">None</a>
3193                                 </td</tr>";
3194
3195                         print "<tr class=\"title\">
3196                                                 <td align='center' width=\"5%\">&nbsp;</td>
3197                                                 <td width=\"40%\">SQL expression
3198                                                 <a class=\"helpLink\" href=\"javascript:displayHelpInfobox(1)\">(?)</a>
3199                                                 </td>
3200                                                 <td width=\"40%\">Caption</td></tr>";
3201
3202                         $lnum = 0;
3203
3204                         while ($line = db_fetch_assoc($result)) {
3205
3206                                 $class = ($lnum % 2) ? "even" : "odd";
3207
3208                                 $label_id = $line["id"];
3209                                 $edit_label_id = $_GET["id"];
3210
3211                                 if ($subop == "edit" && $label_id != $edit_label_id) {
3212                                         $class .= "Grayed";
3213                                         $this_row_id = "";
3214                                 } else {
3215                                         $this_row_id = "id=\"LILRR-$label_id\"";
3216                                 }
3217
3218                                 print "<tr class=\"$class\" $this_row_id>";
3219
3220                                 $line["sql_exp"] = htmlspecialchars($line["sql_exp"]);
3221                                 $line["description"] = htmlspecialchars($line["description"]);
3222
3223                                 if (!$edit_label_id || $subop != "edit") {
3224
3225                                         if (!$line["description"]) $line["description"] = "[No caption]";
3226
3227                                         print "<td align='center'><input onclick='toggleSelectRow(this);'
3228                                         type=\"checkbox\" id=\"LICHK-".$line["id"]."\"></td>";
3229
3230                                         print "<td><a href=\"javascript:editLabel($label_id);\">" .
3231                                                 $line["sql_exp"] . "</td>";
3232
3233                                         print "<td><a href=\"javascript:editLabel($label_id);\">" .
3234                                                 $line["description"] . "</td>";
3235
3236                                 } else if ($label_id != $edit_label_id) {
3237
3238                                         if (!$line["description"]) $line["description"] = "[No description]";
3239
3240                                         print "<td><input disabled=\"true\" type=\"checkbox\"
3241                                                 id=\"LICHK-".$line["id"]."\"></td>";
3242
3243                                         print "<td>".$line["sql_exp"]."</td>";
3244                                         print "<td>".$line["description"]."</td>";
3245
3246                                 } else {
3247
3248                                         print "<td><input disabled=\"true\" type=\"checkbox\" checked></td>";
3249
3250                                         print "<td><input id=\"iedit_expr\" value=\"".$line["sql_exp"].
3251                                                 "\"></td>";
3252
3253                                         print "<td><input id=\"iedit_descr\" value=\"".$line["description"].
3254                                                 "\"></td>";
3255
3256                                 }
3257
3258
3259                                 print "</tr>";
3260
3261                                 ++$lnum;
3262                         }
3263
3264                         if ($lnum == 0) {
3265                                 print "<tr><td colspan=\"4\" align=\"center\">No labels defined.</td></tr>";
3266                         }
3267
3268                         print "</table>";
3269
3270                         print "<p>";
3271
3272                         if ($subop == "edit") {
3273                                 print "Edit label:
3274                                         <input type=\"submit\" class=\"button\"
3275                                                 onclick=\"javascript:labelTest()\" value=\"Test\">
3276                                         <input type=\"submit\" class=\"button\"
3277                                                 onclick=\"javascript:labelEditSave()\" value=\"Save\">
3278                                         <input type=\"submit\" class=\"button\"
3279                                                 onclick=\"javascript:labelEditCancel()\" value=\"Cancel\">";
3280
3281                         } else {
3282
3283                                 print "
3284                                         Selection:
3285                                 <input type=\"submit\" class=\"button\"
3286                                         onclick=\"javascript:editSelectedLabel()\" value=\"Edit\">
3287                                 <input type=\"submit\" class=\"button\"
3288                                         onclick=\"javascript:removeSelectedLabels()\" value=\"Remove\">";
3289                         }
3290                 } else {
3291                         print "<p>No labels defined.</p>";
3292                 }
3293         }
3294
3295         if ($op == "error") {
3296                 print "<div width=\"100%\" align='center'>";
3297                 $msg = $_GET["msg"];
3298                 print $msg;
3299                 print "</div>";
3300         }
3301
3302         if ($op == "help") {
3303                 if (!$_GET["noheaders"]) {
3304                         print "<html><head>
3305                                 <title>Tiny Tiny RSS : Help</title>
3306                                 <link rel=\"stylesheet\" href=\"tt-rss.css\" type=\"text/css\">
3307                                 <script type=\"text/javascript\" src=\"functions.js\"></script>
3308                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
3309                                 </head><body>";
3310                 }
3311
3312                 $tid = sprintf("%d", $_GET["tid"]);
3313
3314                 print "<div class='infoBoxContents'>";
3315
3316                 if (file_exists("help/$tid.php")) {
3317                         include("help/$tid.php");
3318                 } else {
3319                         print "<p>Help topic not found.</p>";
3320                 }
3321
3322                 print "</div>";
3323
3324                 print "<div align='center'>
3325                         <input type='submit' class='button'
3326                         onclick=\"closeInfoBox()\" value=\"Close this window\"></div>";
3327
3328                 if (!$_GET["noheaders"]) {
3329                         print "</body></html>";
3330                 }
3331
3332         }
3333
3334         if ($op == "dlg") {
3335                 $id = $_GET["id"];
3336                 $param = $_GET["param"];
3337
3338                 if ($id == "quickAddFeed") {
3339                         print "
3340                         Feed URL: <input
3341                         onblur=\"javascript:enableHotkeys()\" onfocus=\"javascript:disableHotkeys()\"
3342                         id=\"qafInput\">";
3343
3344                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
3345                                 $result = db_query($link, "SELECT title,id FROM ttrss_feed_categories
3346                                         WHERE owner_uid = ".$_SESSION["uid"]."
3347                                         ORDER BY title");
3348
3349                                 print " <select id=\"qafCat\">";
3350                                 print "<option id=\"0\">Uncategorized</option>";
3351
3352                                 if (db_num_rows($result) != 0) {
3353
3354                                         print "<option disabled>--------</option>";
3355
3356                                         while ($line = db_fetch_assoc($result)) {
3357                                                 printf("<option id='%d'>%s</option>",
3358                                                         $line["id"], $line["title"]);
3359                                         }
3360                                 }
3361
3362                                 print "</select>";
3363                         }
3364
3365                         print "&nbsp;<input class=\"button\"
3366                                 type=\"submit\" onclick=\"javascript:qafAdd()\" value=\"Add feed\">
3367                         <input class=\"button\"
3368                                 type=\"submit\" onclick=\"javascript:closeDlg()\"
3369                                 value=\"Cancel\">";
3370                 }
3371
3372                 if ($id == "quickDelFeed") {
3373
3374                         $param = db_escape_string($param);
3375
3376                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$param'");
3377
3378                         if ($result) {
3379
3380                                 $f_title = db_fetch_result($result, 0, "title");
3381
3382                                 print "Remove current feed (<b>$f_title</b>)?&nbsp;
3383                                 <input class=\"button\"
3384                                         type=\"submit\" onclick=\"javascript:qfdDelete($param)\" value=\"Remove\">
3385                                 <input class=\"button\"
3386                                         type=\"submit\" onclick=\"javascript:closeDlg()\"
3387                                         value=\"Cancel\">";
3388                         } else {
3389                                 print "Error: Feed $param not found.&nbsp;
3390                                 <input class=\"button\"
3391                                         type=\"submit\" onclick=\"javascript:closeDlg()\"
3392                                         value=\"Cancel\">";
3393                         }
3394                 }
3395
3396                 if ($id == "search") {
3397
3398                         $active_feed_id = db_escape_string($_GET["param"]);
3399
3400                         print "<input id=\"searchbox\" class=\"extSearch\"
3401                         onblur=\"javascript:enableHotkeys()\" onfocus=\"javascript:disableHotkeys()\"
3402                         onchange=\"javascript:search()\">
3403                         <select id=\"searchmodebox\">
3404                                 <option selected>All feeds</option>";
3405
3406                         if ($active_feed_id) {
3407                                 print "<option>This feed</option>";
3408                         } else {
3409                                 print "<option disabled>This feed</option>";
3410                         }
3411
3412                         if (get_pref($link, 'ENABLE_FEED_CATS')) {
3413                                 print "<option>This category</option>";
3414                         }
3415
3416                         print "</select>
3417                         <input type=\"submit\"
3418                                 class=\"button\" onclick=\"javascript:search()\" value=\"Search\">
3419                         <input class=\"button\"
3420                                 type=\"submit\" onclick=\"javascript:closeDlg()\"
3421                                 value=\"Close\">";
3422
3423                 }
3424
3425                 if ($id == "quickAddFilter") {
3426
3427                         $result = db_query($link, "SELECT description
3428                                 FROM ttrss_filter_types ORDER BY description");
3429
3430                         $filter_types = array();
3431
3432                         while ($line = db_fetch_assoc($result)) {
3433                                 array_push($filter_types, $line["description"]);
3434                         }
3435
3436                         print "<table>";
3437
3438                         print "<tr><td>Match:</td><td><input id=\"fadd_regexp\" size=\"40\">&nbsp;";
3439
3440                         print_select("fadd_match", "Title", $filter_types);
3441
3442                         print "</td></tr>";
3443                         print "<tr><td>Feed:</td><td><select id=\"fadd_feed\">";
3444
3445                         print "<option selected id=\"0\">All feeds</option>";
3446
3447                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
3448                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
3449
3450                         if (db_num_rows($result) > 0) {
3451                                 print "<option disabled>--------</option>";
3452                         }
3453
3454                         while ($line = db_fetch_assoc($result)) {
3455                                 if ($param == $line["id"]) {
3456                                         $selected = "selected";
3457                                 } else {
3458                                         $selected = "";
3459                                 }
3460                                 printf("<option id='%d' %s>%s</option>", $line["id"], $selected, $line["title"]);
3461                         }
3462
3463                         print "</select></td></tr>";
3464
3465                         print "<tr><td>Action:</td>";
3466
3467                         print "<td><select id=\"fadd_action\">";
3468
3469                         $result = db_query($link, "SELECT id,description FROM ttrss_filter_actions
3470                                 ORDER BY name");
3471
3472                         while ($line = db_fetch_assoc($result)) {
3473                                 printf("<option id='%d'>%s</option>", $line["id"], $line["description"]);
3474                         }
3475
3476                         print "</select>";
3477
3478                         print "</td></tr><tr><td colspan=\"2\" align=\"right\">";
3479
3480                         print "<input type=\"submit\"
3481                                 class=\"button\" onclick=\"javascript:qaddFilter()\"
3482                                 value=\"Add filter\"> ";
3483
3484                         print "<input class=\"button\"
3485                                 type=\"submit\" onclick=\"javascript:closeDlg()\"
3486                                 value=\"Close\">";
3487
3488                         print "</td></tr></table>";
3489                 }
3490         }
3491
3492         // update feeds of all users, may be used anonymously
3493         if ($op == "globalUpdateFeeds") {
3494
3495                 $result = db_query($link, "SELECT id FROM ttrss_users");
3496
3497                 while ($line = db_fetch_assoc($result)) {
3498                         $user_id = $line["id"];
3499 //                      print "<!-- updating feeds of uid $user_id -->";
3500                         update_all_feeds($link, false, $user_id);
3501                 }
3502
3503                 print "<rpc-reply>
3504                         <message msg=\"All feeds updated\"/>
3505                 </rpc-reply>";
3506
3507         }
3508
3509         if ($op == "pref-prefs") {
3510
3511                 $subop = $_REQUEST["subop"];
3512
3513                 if ($subop == "Save configuration") {
3514
3515                         if (WEB_DEMO_MODE) {
3516                                 header("Location: prefs.php");
3517                                 return;
3518                         }
3519
3520                         $_SESSION["prefs_op_result"] = "save-config";
3521
3522                         $_SESSION["prefs_cache"] = false;
3523
3524                         foreach (array_keys($_POST) as $pref_name) {
3525
3526                                 $pref_name = db_escape_string($pref_name);
3527                                 $value = db_escape_string($_POST[$pref_name]);
3528
3529                                 $result = db_query($link, "SELECT type_name
3530                                         FROM ttrss_prefs,ttrss_prefs_types
3531                                         WHERE pref_name = '$pref_name' AND type_id = ttrss_prefs_types.id");
3532
3533                                 if (db_num_rows($result) > 0) {
3534
3535                                         $type_name = db_fetch_result($result, 0, "type_name");
3536
3537 //                                      print "$pref_name : $type_name : $value<br>";
3538
3539                                         if ($type_name == "bool") {
3540                                                 if ($value == "1") {
3541                                                         $value = "true";
3542                                                 } else {
3543                                                         $value = "false";
3544                                                 }
3545                                         } else if ($type_name == "integer") {
3546                                                 $value = sprintf("%d", $value);
3547                                         }
3548
3549 //                                      print "$pref_name : $type_name : $value<br>";
3550
3551                                         db_query($link, "UPDATE ttrss_user_prefs SET value = '$value'
3552                                                 WHERE pref_name = '$pref_name' AND owner_uid = ".$_SESSION["uid"]);
3553
3554                                 }
3555
3556                                 header("Location: prefs.php");
3557
3558                         }
3559
3560                 } else if ($subop == "getHelp") {
3561
3562                         $pref_name = db_escape_string($_GET["pn"]);
3563
3564                         $result = db_query($link, "SELECT help_text FROM ttrss_prefs
3565                                 WHERE pref_name = '$pref_name'");
3566
3567                         if (db_num_rows($result) > 0) {
3568                                 $help_text = db_fetch_result($result, 0, "help_text");
3569                                 print $help_text;
3570                         } else {
3571                                 print "Unknown option: $pref_name";
3572                         }
3573
3574                 } else if ($subop == "Change e-mail") {
3575
3576                         if (WEB_DEMO_MODE) {
3577                                 header("Location: prefs.php");
3578                                 return;
3579                         }
3580
3581                         $email = db_escape_string($_GET["email"]);
3582                         $active_uid = $_SESSION["uid"];
3583
3584                         if ($email) {
3585                                 db_query($link, "UPDATE ttrss_users SET email = '$email'
3586                                                 WHERE id = '$active_uid'");
3587                         }
3588
3589                         header("Location: prefs.php");
3590
3591                 } else if ($subop == "Change password") {
3592
3593                         if (WEB_DEMO_MODE) {
3594                                 header("Location: prefs.php");
3595                                 return;
3596                         }
3597
3598                         $old_pw = $_POST["OLD_PASSWORD"];
3599                         $new_pw = $_POST["OLD_PASSWORD"];
3600
3601                         $old_pw_hash = 'SHA1:' . sha1($_POST["OLD_PASSWORD"]);
3602                         $new_pw_hash = 'SHA1:' . sha1($_POST["NEW_PASSWORD"]);
3603
3604                         $active_uid = $_SESSION["uid"];
3605
3606                         if ($old_pw && $new_pw) {
3607
3608                                 $login = db_escape_string($_SERVER['PHP_AUTH_USER']);
3609
3610                                 $result = db_query($link, "SELECT id FROM ttrss_users WHERE
3611                                         id = '$active_uid' AND (pwd_hash = '$old_pw' OR
3612                                                 pwd_hash = '$old_pw_hash')");
3613
3614                                 if (db_num_rows($result) == 1) {
3615                                         db_query($link, "UPDATE ttrss_users SET pwd_hash = '$new_pw_hash'
3616                                                 WHERE id = '$active_uid'");
3617
3618                                         $_SESSION["pwd_change_result"] = "ok";
3619                                 } else {
3620                                         $_SESSION["pwd_change_result"] = "failed";
3621                                 }
3622                         }
3623
3624                         header("Location: prefs.php");
3625
3626                 } else if ($subop == "Reset to defaults") {
3627
3628                         if (WEB_DEMO_MODE) {
3629                                 header("Location: prefs.php");
3630                                 return;
3631                         }
3632
3633                         $_SESSION["prefs_op_result"] = "reset-to-defaults";
3634
3635                         if (DB_TYPE == "pgsql") {
3636                                 db_query($link,"UPDATE ttrss_user_prefs
3637                                         SET value = ttrss_prefs.def_value
3638                                         WHERE owner_uid = '".$_SESSION["uid"]."' AND
3639                                         ttrss_prefs.pref_name = ttrss_user_prefs.pref_name");
3640                         } else {
3641                                 db_query($link, "DELETE FROM ttrss_user_prefs
3642                                         WHERE owner_uid = ".$_SESSION["uid"]);
3643                                 initialize_user_prefs($link, $_SESSION["uid"]);
3644                         }
3645
3646                         header("Location: prefs.php");
3647
3648                 } else if ($subop == "Change theme") {
3649
3650                         $theme = db_escape_string($_POST["theme"]);
3651
3652                         if ($theme == "Default") {
3653                                 $theme_qpart = 'NULL';
3654                         } else {
3655                                 $theme_qpart = "'$theme'";
3656                         }
3657
3658                         $result = db_query($link, "SELECT id,theme_path FROM ttrss_themes
3659                                 WHERE theme_name = '$theme'");
3660
3661                         if (db_num_rows($result) == 1) {
3662                                 $theme_id = db_fetch_result($result, 0, "id");
3663                                 $theme_path = db_fetch_result($result, 0, "theme_path");
3664                         } else {
3665                                 $theme_id = "NULL";
3666                                 $theme_path = "";
3667                         }
3668
3669                         db_query($link, "UPDATE ttrss_users SET
3670                                 theme_id = $theme_id WHERE id = " . $_SESSION["uid"]);
3671
3672                         $_SESSION["theme"] = $theme_path;
3673
3674                         header("Location: prefs.php");
3675
3676                 } else {
3677
3678                         if (!SINGLE_USER_MODE) {
3679
3680                                 $result = db_query($link, "SELECT id,email FROM ttrss_users
3681                                         WHERE id = ".$_SESSION["uid"]." AND (pwd_hash = 'password' OR
3682                                                 pwd_hash = 'SHA1:".sha1("password")."')");
3683
3684                                 if (db_num_rows($result) != 0) {
3685                                         print "<div class=\"warning\">
3686                                                 Your password is at default value, please change it.
3687                                         </div>";
3688                                 }
3689
3690                                 if ($_SESSION["pwd_change_result"] == "failed") {
3691                                         print "<div class=\"warning\">
3692                                                         There was an error while changing your password.
3693                                                 </div>";
3694                                 }
3695
3696                                 if ($_SESSION["pwd_change_result"] == "ok") {
3697                                         print "<div class=\"notice\">
3698                                                         Password changed successfully.
3699                                                 </div>";
3700                                 }
3701
3702                                 $_SESSION["pwd_change_result"] = "";
3703
3704                                 if ($_SESSION["prefs_op_result"] == "reset-to-defaults") {
3705                                         print "<div class=\"notice\">
3706                                                         Your configuration was reset to defaults.
3707                                                 </div>";
3708                                 }
3709
3710                                 if ($_SESSION["prefs_op_result"] == "save-config") {
3711                                         print "<div class=\"notice\">
3712                                                         Your configuration was saved successfully.
3713                                                 </div>";
3714                                 }
3715
3716                                 $_SESSION["prefs_op_result"] = "";
3717
3718                                 print "<form action=\"backend.php\" method=\"GET\">";
3719
3720                                 print "<table width=\"100%\" class=\"prefPrefsList\">";
3721                                 print "<tr><td colspan='3'><h3>Personal data</h3></tr></td>";
3722
3723                                 $result = db_query($link, "SELECT email FROM ttrss_users
3724                                         WHERE id = ".$_SESSION["uid"]);
3725
3726                                 $email = db_fetch_result($result, 0, "email");
3727
3728                                 print "<tr><td width=\"40%\">E-mail</td>";
3729                                 print "<td><input class=\"editbox\" name=\"email\"
3730                                         value=\"$email\"></td></tr>";
3731
3732                                 print "</table>";
3733
3734                                 print "<input type=\"hidden\" name=\"op\" value=\"pref-prefs\">";
3735
3736                                 print "<p><input class=\"button\" type=\"submit\"
3737                                         value=\"Change e-mail\" name=\"subop\">";
3738
3739                                 print "</form>";
3740
3741                                 print "<form action=\"backend.php\" method=\"POST\">";
3742
3743                                 print "<table width=\"100%\" class=\"prefPrefsList\">";
3744                                 print "<tr><td colspan='3'><h3>Authentication</h3></tr></td>";
3745
3746                                 print "<tr><td width=\"40%\">Old password</td>";
3747                                 print "<td><input class=\"editbox\" type=\"password\"
3748                                         name=\"OLD_PASSWORD\"></td></tr>";
3749
3750                                 print "<tr><td width=\"40%\">New password</td>";
3751
3752                                 print "<td><input class=\"editbox\" type=\"password\"
3753                                         name=\"NEW_PASSWORD\"></td></tr>";
3754
3755                                 print "</table>";
3756
3757                                 print "<input type=\"hidden\" name=\"op\" value=\"pref-prefs\">";
3758
3759                                 print "<p><input class=\"button\" type=\"submit\"
3760                                         value=\"Change password\" name=\"subop\">";
3761
3762                                 print "</form>";
3763
3764                         }
3765
3766                         $result = db_query($link, "SELECT
3767                                 theme_id FROM ttrss_users WHERE id = " . $_SESSION["uid"]);
3768
3769                         $user_theme_id = db_fetch_result($result, 0, "theme_id");
3770
3771                         $result = db_query($link, "SELECT
3772                                 id,theme_name FROM ttrss_themes ORDER BY theme_name");
3773
3774                         if (db_num_rows($result) > 0) {
3775
3776                                 print "<form action=\"backend.php\" method=\"POST\">";
3777                                 print "<table width=\"100%\" class=\"prefPrefsList\">";
3778                                 print "<tr><td colspan='3'><h3>Themes</h3></tr></td>";
3779                                 print "<tr><td width=\"40%\">Select theme</td>";
3780                                 print "<td><select name=\"theme\">";
3781                                 print "<option>Default</option>";
3782                                 print "<option disabled>--------</option>";
3783
3784                                 while ($line = db_fetch_assoc($result)) {
3785                                         if ($line["id"] == $user_theme_id) {
3786                                                 $selected = "selected";
3787                                         } else {
3788                                                 $selected = "";
3789                                         }
3790                                         print "<option $selected>" . $line["theme_name"] . "</option>";
3791                                 }
3792                                 print "</select></td></tr>";
3793                                 print "</table>";
3794                                 print "<input type=\"hidden\" name=\"op\" value=\"pref-prefs\">";
3795                                 print "<p><input class=\"button\" type=\"submit\"
3796                                         value=\"Change theme\" name=\"subop\">";
3797                                 print "</form>";
3798                         }
3799
3800                         $result = db_query($link, "SELECT
3801                                 ttrss_user_prefs.pref_name,short_desc,help_text,value,type_name,
3802                                 section_name,def_value
3803                                 FROM ttrss_prefs,ttrss_prefs_types,ttrss_prefs_sections,ttrss_user_prefs
3804                                 WHERE type_id = ttrss_prefs_types.id AND
3805                                         section_id = ttrss_prefs_sections.id AND
3806                                         ttrss_user_prefs.pref_name = ttrss_prefs.pref_name AND
3807                                         owner_uid = ".$_SESSION["uid"]."
3808                                 ORDER BY section_id,short_desc");
3809
3810                         print "<form action=\"backend.php\" method=\"POST\">";
3811
3812                         $lnum = 0;
3813
3814                         $active_section = "";
3815
3816                         while ($line = db_fetch_assoc($result)) {
3817
3818                                 if ($active_section != $line["section_name"]) {
3819
3820                                         if ($active_section != "") {
3821                                                 print "</table>";
3822                                         }
3823
3824                                         print "<p><table width=\"100%\" class=\"prefPrefsList\">";
3825
3826                                         $active_section = $line["section_name"];
3827
3828                                         print "<tr><td colspan=\"3\"><h3>$active_section</h3></td></tr>";
3829 //                                      print "<tr class=\"title\">
3830 //                                              <td width=\"25%\">Option</td><td>Value</td></tr>";
3831
3832                                         $lnum = 0;
3833                                 }
3834
3835 //                              $class = ($lnum % 2) ? "even" : "odd";
3836
3837                                 print "<tr>";
3838
3839                                 $type_name = $line["type_name"];
3840                                 $pref_name = $line["pref_name"];
3841                                 $value = $line["value"];
3842                                 $def_value = $line["def_value"];
3843                                 $help_text = $line["help_text"];
3844
3845                                 print "<td width=\"40%\" id=\"$pref_name\">" . $line["short_desc"];
3846
3847                                 if ($help_text) print "<div class=\"prefHelp\">$help_text</div>";
3848
3849                                 print "</td>";
3850
3851                                 print "<td>";
3852
3853                                 if ($type_name == "bool") {
3854 //                                      print_select($pref_name, $value, array("true", "false"));
3855
3856                                         if ($value == "true") {
3857                                                 $value = "Yes";
3858                                         } else {
3859                                                 $value = "No";
3860                                         }
3861
3862                                         print_radio($pref_name, $value, array("Yes", "No"));
3863
3864                                 } else {
3865                                         print "<input class=\"editbox\" name=\"$pref_name\" value=\"$value\">";
3866                                 }
3867
3868                                 print "</td>";
3869
3870                                 print "</tr>";
3871
3872                                 $lnum++;
3873                         }
3874
3875                         print "</table>";
3876
3877                         print "<input type=\"hidden\" name=\"op\" value=\"pref-prefs\">";
3878
3879                         print "<p><input class=\"button\" type=\"submit\"
3880                                 name=\"subop\" value=\"Save configuration\">";
3881
3882                         print "&nbsp;<input class=\"button\" type=\"submit\"
3883                                 name=\"subop\" onclick=\"return validatePrefsReset()\"
3884                                 value=\"Reset to defaults\"></p>";
3885
3886                         print "</form>";
3887
3888                 }
3889
3890         }
3891
3892         if ($op == "pref-users") {
3893
3894                 $subop = $_GET["subop"];
3895
3896                 if ($subop == "editSave") {
3897
3898                         if (!WEB_DEMO_MODE) {
3899
3900                                 $login = db_escape_string($_GET["l"]);
3901                                 $uid = db_escape_string($_GET["id"]);
3902                                 $access_level = sprintf("%d", $_GET["al"]);
3903                                 $email = db_escape_string($_GET["e"]);
3904
3905                                 db_query($link, "UPDATE ttrss_users SET login = '$login',
3906                                         access_level = '$access_level', email = '$email' WHERE id = '$uid'");
3907
3908                         }
3909                 } else if ($subop == "remove") {
3910
3911                         if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) {
3912
3913                                 $ids = split(",", db_escape_string($_GET["ids"]));
3914
3915                                 foreach ($ids as $id) {
3916                                         db_query($link, "DELETE FROM ttrss_users WHERE id = '$id' AND id != " . $_SESSION["uid"]);
3917
3918                                 }
3919                         }
3920                 } else if ($subop == "add") {
3921
3922                         if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) {
3923
3924                                 $login = db_escape_string(trim($_GET["login"]));
3925                                 $tmp_user_pwd = make_password(8);
3926                                 $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd);
3927
3928                                 db_query($link, "INSERT INTO ttrss_users
3929                                         (login,pwd_hash,access_level,last_login)
3930                                         VALUES ('$login', '$pwd_hash', 0, NOW())");
3931
3932
3933                                 $result = db_query($link, "SELECT id FROM ttrss_users WHERE
3934                                         login = '$login' AND pwd_hash = '$pwd_hash'");
3935
3936                                 if (db_num_rows($result) == 1) {
3937
3938                                         $new_uid = db_fetch_result($result, 0, "id");
3939
3940                                         print "<div class=\"notice\">Added user <b>".$_GET["login"].
3941                                                 "</b> with password <b>$tmp_user_pwd</b>.</div>";
3942
3943                                         initialize_user($link, $new_uid);
3944
3945                                 } else {
3946
3947                                         print "<div class=\"warning\">Error while adding user <b>".
3948                                         $_GET["login"].".</b></div>";
3949
3950                                 }
3951                         }
3952                 } else if ($subop == "resetPass") {
3953
3954                         if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) {
3955
3956                                 $uid = db_escape_string($_GET["id"]);
3957
3958                                 $result = db_query($link, "SELECT login,email
3959                                         FROM ttrss_users WHERE id = '$uid'");
3960
3961                                 $login = db_fetch_result($result, 0, "login");
3962                                 $email = db_fetch_result($result, 0, "email");
3963                                 $tmp_user_pwd = make_password(8);
3964                                 $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd);
3965
3966                                 db_query($link, "UPDATE ttrss_users SET pwd_hash = '$pwd_hash'
3967                                         WHERE id = '$uid'");
3968
3969                                 print "<div class=\"notice\">Changed password of
3970                                         user <b>$login</b> to <b>$tmp_user_pwd</b>.";
3971
3972                                 if (MAIL_RESET_PASS && $email) {
3973                                         print " Notifying <b>$email</b>.";
3974
3975                                         mail("$login <$email>", "Password reset notification",
3976                                                 "Hi, $login.\n".
3977                                                 "\n".
3978                                                 "Your password for this TT-RSS installation was reset by".
3979                                                         " an administrator.\n".
3980                                                 "\n".
3981                                                 "Your new password is $tmp_user_pwd, please remember".
3982                                                         " it for later reference.\n".
3983                                                 "\n".
3984                                                 "Sincerely, TT-RSS Mail Daemon.", "From: " . MAIL_FROM);
3985                                 }
3986
3987                                 print "</div>";
3988
3989                         }
3990                 }
3991
3992                 print "<div class=\"prefGenericAddBox\">
3993                         <input id=\"uadd_box\" onchange=\"javascript:addUser()\" size=\"40\">&nbsp;";
3994
3995                 print"<input type=\"submit\" class=\"button\"
3996                         onclick=\"javascript:addUser()\" value=\"Add user\"></div>";
3997
3998                 $result = db_query($link, "SELECT
3999                                 id,login,access_level,email,
4000                                 SUBSTRING(last_login,1,16) as last_login
4001                         FROM
4002                                 ttrss_users
4003                         ORDER by login");
4004
4005                 print "<div id=\"infoBoxShadow\"><div id=\"infoBox\">PLACEHOLDER</div></div>";
4006
4007                 print "<p><table width=\"100%\" cellspacing=\"0\"
4008                         class=\"prefUserList\" id=\"prefUserList\">";
4009
4010                 print "<tr><td class=\"selectPrompt\" colspan=\"8\">
4011                                 Select:
4012                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefUserList',
4013                                                 'UMRR-', 'UMCHK-', true)\">All</a>,
4014                                         <a href=\"javascript:selectTableRowsByIdPrefix('prefUserList',
4015                                                 'UMRR-', 'UMCHK-', false)\">None</a>
4016                                 </td</tr>";
4017
4018                 print "<tr class=\"title\">
4019                                         <td align='center' width=\"5%\">&nbsp;</td>
4020                                         <td width='20%'>Username</td>
4021                                         <td width='20%'>E-mail</td>
4022                                         <td width='20%'>Access Level</td>
4023                                         <td width='20%'>Last login</td></tr>";
4024
4025                 $lnum = 0;
4026
4027                 while ($line = db_fetch_assoc($result)) {
4028
4029                         $class = ($lnum % 2) ? "even" : "odd";
4030
4031                         $uid = $line["id"];
4032                         $edit_uid = $_GET["id"];
4033
4034                         if ($subop == "edit" && $uid != $edit_uid) {
4035                                 $class .= "Grayed";
4036                                 $this_row_id = "";
4037                         } else {
4038                                 $this_row_id = "id=\"UMRR-$uid\"";
4039                         }
4040
4041                         print "<tr class=\"$class\" $this_row_id>";
4042
4043                         $line["login"] = htmlspecialchars($line["login"]);
4044
4045                         $line["last_login"] = date(get_pref($link, 'SHORT_DATE_FORMAT'),
4046                                 strtotime($line["last_login"]));
4047
4048                         $access_level_names = array(0 => "User", 10 => "Administrator");
4049
4050 /*                      if ($uid == $_SESSION["uid"]) {
4051
4052                                 print "<td align='center'><input disabled=\"true\" type=\"checkbox\"
4053                                         id=\"UMCHK-".$line["id"]."\"></td>";
4054
4055                                 print "<td>".$line["login"]."</td>";
4056                                 print "<td>".$line["email"]."</td>";
4057                                 print "<td>".$line["access_level"]."</td>";
4058
4059                         } else */ if (!$edit_uid || $subop != "edit") {
4060
4061                                 print "<td align='center'><input onclick='toggleSelectRow(this);'
4062                                 type=\"checkbox\" id=\"UMCHK-$uid\"></td>";
4063
4064                                 print "<td><a href=\"javascript:editUser($uid);\">" .
4065                                         $line["login"] . "</td>";
4066
4067                                 print "<td><a href=\"javascript:editUser($uid);\">" .
4068                                         $line["email"] . "</td>";
4069
4070                                 print "<td><a href=\"javascript:editUser($uid);\">" .
4071                                         $access_level_names[$line["access_level"]] . "</td>";
4072
4073                         } else if ($uid != $edit_uid) {
4074
4075                                 print "<td align='center'><input disabled=\"true\" type=\"checkbox\"
4076                                         id=\"UMCHK-".$line["id"]."\"></td>";
4077
4078                                 print "<td>".$line["login"]."</td>";
4079                                 print "<td>".$line["email"]."</td>";
4080                                 print "<td>".$access_level_names[$line["access_level"]]."</td>";
4081
4082                         } else {
4083
4084                                 print "<td align='center'>
4085                                         <input disabled=\"true\" type=\"checkbox\" checked></td>";
4086
4087                                 print "<td><input id=\"iedit_ulogin\" value=\"".$line["login"].
4088                                         "\"></td>";
4089
4090                                 print "<td><input id=\"iedit_email\" value=\"".$line["email"].
4091                                         "\"></td>";
4092
4093 //                              print "<td><input id=\"iedit_ulevel\" value=\"".$line["access_level"].
4094 //                                      "\"></td>";
4095
4096                                 print "<td>";
4097                                 print "<select id=\"iedit_ulevel\">";
4098                                 foreach (array_keys($access_level_names) as $al) {
4099                                         if ($al == $line["access_level"]) {
4100                                                 $selected = "selected";
4101                                         } else {
4102                                                 $selected = "";
4103                                         }
4104                                         print "<option $selected id=\"$al\">" .
4105                                                 $access_level_names[$al] . "</option>";
4106                                 }
4107                                 print "</select>";
4108                                 print "</td>";
4109
4110                         }
4111
4112                         print "<td>".$line["last_login"]."</td>";
4113
4114                         print "</tr>";
4115
4116                         ++$lnum;
4117                 }
4118
4119                 print "</table>";
4120
4121                 print "<p>";
4122
4123                 if ($subop == "edit") {
4124                         print "Edit user:
4125                                 <input type=\"submit\" class=\"button\"
4126                                         onclick=\"javascript:userEditSave()\" value=\"Save\">
4127                                 <input type=\"submit\" class=\"button\"
4128                                         onclick=\"javascript:userEditCancel()\" value=\"Cancel\">";
4129
4130                 } else {
4131
4132                         print "
4133                                 Selection:
4134                         <input type=\"submit\" class=\"button\"
4135                                 onclick=\"javascript:selectedUserDetails()\" value=\"User details\">
4136                         <input type=\"submit\" class=\"button\"
4137                                 onclick=\"javascript:editSelectedUser()\" value=\"Edit\">
4138                         <input type=\"submit\" class=\"button\"
4139                                 onclick=\"javascript:removeSelectedUsers()\" value=\"Remove\">
4140                         <input type=\"submit\" class=\"button\"
4141                                 onclick=\"javascript:resetSelectedUserPass()\" value=\"Reset password\">";
4142
4143                 }
4144         }
4145
4146         if ($op == "user-details") {
4147
4148                 if (WEB_DEMO_MODE || $_SESSION["access_level"] < 10) {
4149                         return;
4150                 }
4151
4152 /*              print "<html><head>
4153                         <title>Tiny Tiny RSS : User Details</title>
4154                         <link rel=\"stylesheet\" href=\"tt-rss.css\" type=\"text/css\">
4155                         <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
4156                         </head><body>"; */
4157
4158                 $uid = sprintf("%d", $_GET["id"]);
4159
4160                 print "<div class='infoBoxContents'>";
4161
4162                 $result = db_query($link, "SELECT login,
4163                         SUBSTRING(last_login,1,16) AS last_login,
4164                         access_level,
4165                         (SELECT COUNT(int_id) FROM ttrss_user_entries
4166                                 WHERE owner_uid = id) AS stored_articles
4167                         FROM ttrss_users
4168                         WHERE id = '$uid'");
4169
4170                 if (db_num_rows($result) == 0) {
4171                         print "<h1>User not found</h1>";
4172                         return;
4173                 }
4174
4175                 print "<h1>User Details</h1>";
4176
4177                 print "<table width='100%'>";
4178
4179                 $login = db_fetch_result($result, 0, "login");
4180                 $last_login = date(get_pref($link, 'LONG_DATE_FORMAT'),
4181                         strtotime(db_fetch_result($result, 0, "last_login")));
4182                 $access_level = db_fetch_result($result, 0, "access_level");
4183                 $stored_articles = db_fetch_result($result, 0, "stored_articles");
4184
4185                 print "<tr><td>Username</td><td>$login</td></tr>";
4186                 print "<tr><td>Access level</td><td>$access_level</td></tr>";
4187                 print "<tr><td>Last logged in</td><td>$last_login</td></tr>";
4188                 print "<tr><td>Stored articles</td><td>$stored_articles</td></tr>";
4189
4190                 $result = db_query($link, "SELECT COUNT(id) as num_feeds FROM ttrss_feeds
4191                         WHERE owner_uid = '$uid'");
4192
4193                 $num_feeds = db_fetch_result($result, 0, "num_feeds");
4194
4195                 print "<tr><td>Subscribed feeds count</td><td>$num_feeds</td></tr>";
4196
4197 /*              $result = db_query($link, "SELECT
4198                         SUM(LENGTH(content)+LENGTH(title)+LENGTH(link)+LENGTH(guid)) AS db_size
4199                         FROM ttrss_user_entries,ttrss_entries
4200                                 WHERE owner_uid = '$uid' AND ref_id = id");
4201
4202                 $db_size = round(db_fetch_result($result, 0, "db_size") / 1024);
4203
4204                 print "<tr><td>Approx. used DB size</td><td>$db_size KBytes</td></tr>";  */
4205
4206                 print "</table>";
4207
4208                 print "<h1>Subscribed feeds</h1>";
4209
4210                 $result = db_query($link, "SELECT id,title,site_url FROM ttrss_feeds
4211                         WHERE owner_uid = '$uid' ORDER BY title");
4212
4213                 print "<ul class=\"userFeedList\">";
4214
4215                 while ($line = db_fetch_assoc($result)) {
4216
4217                         $icon_file = ICONS_URL."/".$line["id"].".ico";
4218
4219                         if (file_exists($icon_file) && filesize($icon_file) > 0) {
4220                                 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"$icon_file\">";
4221                         } else {
4222                                 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">";
4223                         }
4224
4225                         print "<li>$feed_icon&nbsp;<a href=\"".$line["site_url"]."\">".$line["title"]."</a></li>";
4226                 }
4227
4228                 if (db_num_rows($result) < $num_feeds) {
4229                          // FIXME - add link to show ALL subscribed feeds here somewhere
4230                         print "<li><img
4231                                 class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">&nbsp;...</li>";
4232                 }
4233
4234                 print "</ul>";
4235
4236                 print "</div>";
4237
4238                 print "<div align='center'>
4239                         <input type='submit' class='button'
4240                         onclick=\"closeInfoBox()\" value=\"Close this window\"></div>";
4241
4242 //              print "</body></html>";
4243
4244         }
4245
4246         if ($op == "feed-details") {
4247
4248 //              $feed_id = $_GET["id"];
4249
4250                 $feed_ids = split(",", db_escape_string($_GET["id"]));
4251
4252                 print "<div class=\"infoBoxContents\">";
4253
4254                 foreach ($feed_ids as $feed_id) {
4255
4256                         $result = db_query($link,
4257                                 "SELECT
4258                                         title,feed_url,
4259                                         SUBSTRING(last_updated,1,16) as last_updated,
4260                                         icon_url,site_url,
4261                                         (SELECT COUNT(int_id) FROM ttrss_user_entries
4262                                                 WHERE feed_id = id) AS total,
4263                                         (SELECT COUNT(int_id) FROM ttrss_user_entries
4264                                                 WHERE feed_id = id AND unread = true) AS unread,
4265                                         (SELECT COUNT(int_id) FROM ttrss_user_entries
4266                                                 WHERE feed_id = id AND marked = true) AS marked
4267                                 FROM ttrss_feeds
4268                                 WHERE id = '$feed_id' AND owner_uid = ".$_SESSION["uid"]);
4269
4270                         if (db_num_rows($result) == 0) return;
4271
4272                         $title = db_unescape_string(db_fetch_result($result, 0, "title"));
4273                         $last_updated = date(get_pref($link, 'LONG_DATE_FORMAT'),
4274                                 strtotime(db_fetch_result($result, 0, "last_updated")));
4275                         $feed_url = db_fetch_result($result, 0, "feed_url");
4276                         $icon_url = db_fetch_result($result, 0, "icon_url");
4277                         $total = db_fetch_result($result, 0, "total");
4278                         $unread = db_fetch_result($result, 0, "unread");
4279                         $marked = db_fetch_result($result, 0, "marked");
4280                         $site_url = db_fetch_result($result, 0, "site_url");
4281
4282                         $result = db_query($link, "SELECT COUNT(id) AS subscribed
4283                                                 FROM ttrss_feeds WHERE feed_url = '$feed_url' AND private = false");
4284
4285                         $subscribed = db_fetch_result($result, 0, "subscribed");
4286
4287                         $icon_file = ICONS_DIR . "/$feed_id.ico";
4288
4289                         if (file_exists($icon_file) && filesize($icon_file) > 0) {
4290                                         $feed_icon = "<img width=\"16\" height=\"16\"
4291                                                 src=\"" . ICONS_URL . "/$feed_id.ico\">";
4292                         } else {
4293                                 $feed_icon = "";
4294                         }
4295
4296                         print "<h1>$feed_icon $title</h1>";
4297
4298                         print "<table width='100%'>";
4299
4300                         if ($site_url) {
4301                                 print "<tr><td width='30%'>Link</td>
4302                                         <td><a href=\"$site_url\">$site_url</a>
4303                                         <a href=\"$feed_url\">(feed)</a></td>
4304                                         </td></tr>";
4305                         } else {
4306                                 print "<tr><td width='30%'>Feed URL</td>
4307                                         <td><a href=\"$feed_url\">$feed_url</a></td></tr>";
4308                         }
4309                         print "<tr><td>Last updated</td><td>$last_updated</td></tr>";
4310                         print "<tr><td>Total articles</td><td>$total</td></tr>";
4311                         print "<tr><td>Unread articles</td><td>$unread</td></tr>";
4312                         print "<tr><td>Starred articles</td><td>$marked</td></tr>";
4313                         print "<tr><td>Subscribed users</td><td>$subscribed</td></tr>";
4314
4315                         print "</table>";
4316
4317 /*                      $result = db_query($link, "SELECT title,
4318                                 SUBSTRING(updated,1,16) AS updated,unread
4319                                 FROM ttrss_entries,ttrss_user_entries
4320                                 WHERE ref_id = id AND feed_id = '$feed_id'
4321                                 ORDER BY date_entered DESC LIMIT 5");
4322
4323                         if (db_num_rows($result) > 0) {
4324
4325                                 print "<h1>Latest headlines</h1>";
4326
4327                                 print "<ul class=\"nomarks\">";
4328
4329                                 while ($line = db_fetch_assoc($result)) {
4330                                         if ($line["unread"] == "t" || $line["unread"] == "1") {
4331                                                 $line["title"] = "<b>" . $line["title"] . "</b>";
4332                                         }
4333                                         print "<li>" . $line["title"].
4334                                         "&nbsp;<span class=\"insensitive\">(" .
4335                                                 date(get_pref($link, 'SHORT_DATE_FORMAT'),
4336                                                         strtotime($line["updated"])).
4337                                         ")</span></li>";
4338                                 }
4339
4340                                 print "</ul>";
4341
4342                         } */
4343                 }
4344
4345                 print "</div>";
4346
4347                 print "<div align='center'>
4348                         <input type='submit' class='button'
4349                         onclick=\"closeInfoBox()\" value=\"Close this window\"></div>";
4350         }
4351
4352         if ($op == "pref-feed-browser") {
4353
4354                 if (!ENABLE_FEED_BROWSER) {
4355                         print "Feed browser is administratively disabled.";
4356                         return;
4357                 }
4358
4359                 $subop = $_REQUEST["subop"];
4360
4361                 if ($subop == "details") {
4362                         $id = db_escape_string($_GET["id"]);
4363
4364                         print "<div class=\"browserFeedInfo\">";
4365                         print "<b>Feed information:</b>";
4366                         print "<div class=\"detailsPart\">";
4367
4368                         $result = db_query($link, "SELECT
4369                                         feed_url,site_url,
4370                                         SUBSTRING(last_updated,1,19) AS last_updated
4371                                 FROM ttrss_feeds WHERE id = '$id'");
4372
4373                         $feed_url = db_fetch_result($result, 0, "feed_url");
4374                         $site_url = db_fetch_result($result, 0, "site_url");
4375                         $last_updated = db_fetch_result($result, 0, "last_updated");
4376
4377                         if (get_pref($link, 'HEADLINES_SMART_DATE')) {
4378                                 $last_updated = smart_date_time(strtotime($last_updated));
4379                         } else {
4380                                 $short_date = get_pref($link, 'SHORT_DATE_FORMAT');
4381                                 $last_updated = date($short_date, strtotime($last_updated));
4382                         }
4383
4384                         print "Site: <a href='$site_url'>$site_url</a> ".
4385                                 "(<a href='$feed_url'>feed</a>), ".
4386                                 "Last updated: $last_updated";
4387
4388                         print "</div>";
4389
4390                         $result = db_query($link, "SELECT
4391                                         ttrss_entries.title,
4392                                         content,
4393                                         substring(date_entered,1,19) as date_entered,
4394                                         substring(updated,1,19) as updated
4395                                 FROM ttrss_entries,ttrss_user_entries
4396                                 WHERE   ttrss_entries.id = ref_id AND feed_id = '$id'
4397                                 ORDER BY updated DESC LIMIT 5");
4398
4399                         if (db_num_rows($result) > 0) {
4400
4401                                 print "<b>Last headlines:</b><br>";
4402
4403                                 print "<div class=\"detailsPart\">";
4404                                 print "<ul class=\"compact\">";
4405                                 while ($line = db_fetch_assoc($result)) {
4406
4407                                         if (get_pref($link, 'HEADLINES_SMART_DATE')) {
4408                                                 $entry_dt = smart_date_time(strtotime($line["updated"]));
4409                                         } else {
4410                                                 $short_date = get_pref($link, 'SHORT_DATE_FORMAT');
4411                                                 $entry_dt = date($short_date, strtotime($line["updated"]));
4412                                         }
4413
4414                                         print "<li>" . $line["title"] .
4415                                                 "&nbsp;<span class=\"insensitive\">($entry_dt)</span></li>";
4416                                 }
4417                                 print "</ul></div>";
4418                         }
4419
4420                         print "</div>";
4421
4422                         return;
4423                 }
4424
4425                 $result = db_query($link, "SELECT feed_url,count(id) AS subscribers
4426                         FROM ttrss_feeds
4427                         WHERE auth_login = '' AND auth_pass = '' AND private = false
4428                         GROUP BY feed_url ORDER BY subscribers DESC LIMIT 100");
4429
4430                 print "<ul class='nomarks' id='browseBigFeedList'>";
4431
4432                 $feedctr = 0;
4433
4434                 while ($line = db_fetch_assoc($result)) {
4435                         $feed_url = $line["feed_url"];
4436                         $subscribers = $line["subscribers"];
4437
4438                         $sub_result = db_query($link, "SELECT id
4439                                 FROM ttrss_feeds WHERE feed_url = '$feed_url' AND owner_uid =" .
4440                                 $_SESSION["uid"]);
4441
4442                         if (db_num_rows($sub_result) > 0) {
4443                                 continue; // already subscribed
4444                         }
4445
4446                         $det_result = db_query($link, "SELECT site_url,title,id
4447                                 FROM ttrss_feeds WHERE feed_url = '$feed_url' LIMIT 1");
4448
4449                         $details = db_fetch_assoc($det_result);
4450
4451                         $icon_file = ICONS_DIR . "/" . $details["id"] . ".ico";
4452
4453                         if (file_exists($icon_file) && filesize($icon_file) > 0) {
4454                                         $feed_icon = "<img class=\"tinyFeedIcon\"       src=\"" . ICONS_URL .
4455                                                 "/".$details["id"].".ico\">";
4456                         } else {
4457                                 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">";
4458                         }
4459
4460                         $check_box = "<input onclick='toggleSelectListRow(this)' class='feedBrowseCB'
4461                                 type=\"checkbox\" id=\"FBCHK-" . $details["id"] . "\">";
4462
4463                         $class = ($feedctr % 2) ? "even" : "odd";
4464
4465                         print "<li class='$class' id=\"FBROW-".$details["id"]."\">$check_box".
4466                                 "$feed_icon ";
4467
4468                         print "<a href=\"javascript:browserToggleExpand('".$details["id"]."')\">" .
4469                                 $details["title"] ."</a>&nbsp;" .
4470                                 "<span class='subscribers'>($subscribers)</span>";
4471
4472                         print "<div class=\"browserDetails\" id=\"BRDET-" . $details["id"] . "\">";
4473                         print "</div>";
4474
4475                         print "</li>";
4476
4477                                 ++$feedctr;
4478                 }
4479
4480                 if ($feedctr == 0) {
4481                         print "<li>No feeds found to subscribe.</li>";
4482                 }
4483
4484                 print "</ul>";
4485
4486                 print "<p>Selection:
4487                         <input type='submit' class='button' onclick=\"feedBrowserSubscribe()\"
4488                         value=\"Subscribe\"></p>";
4489
4490                 print "</div>";
4491
4492         }
4493
4494         db_close($link);
4495 ?>
4496
4497 <!-- <?= sprintf("Backend execution time: %.4f seconds", getmicrotime() - $script_started) ?> -->
4498