]> git.wh0rd.org Git - tt-rss.git/blob - backend.php
login system tweaks
[tt-rss.git] / backend.php
1 <?php
2         require_once "sessions.php";
3         require_once "modules/backend-rpc.php";
4         
5         header("Cache-Control: no-cache, must-revalidate");
6         header("Cache-Control: no-cache, must-revalidate");
7
8         header("Pragma: no-cache");
9         header("Expires: -1");
10         
11 /*      if ($_GET["debug"]) {
12                 define('DEFAULT_ERROR_LEVEL', E_ALL);
13         } else {
14                 define('DEFAULT_ERROR_LEVEL', E_ERROR | E_WARNING | E_PARSE);
15         }
16         
17         error_reporting(DEFAULT_ERROR_LEVEL); */
18
19         define('SCHEMA_VERSION', 13);
20
21         require_once "sanity_check.php";
22         require_once "config.php";
23         
24         require_once "db.php";
25         require_once "db-prefs.php";
26         require_once "functions.php";
27
28         $script_started = getmicrotime();
29
30         $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME); 
31
32         if (!$link) {
33                 if (DB_TYPE == "mysql") {
34                         print mysql_error();
35                 }
36                 // PG seems to display its own errors just fine by default.             
37                 return;
38         }
39
40         if (DB_TYPE == "pgsql") {
41                 pg_query("set client_encoding = 'UTF-8'");
42                 pg_set_client_encoding("UNICODE");
43         }
44
45         $op = $_REQUEST["op"];
46
47         $print_exec_time = false;
48
49         if ((!$op || $op == "rpc" || $op == "rss" || $op == "digestSend" ||
50                         $op == "globalUpdateFeeds") && !$_REQUEST["noxml"]) {
51                 header("Content-Type: application/xml; charset=utf-8");
52         } else {
53                 header("Content-Type: text/html; charset=utf-8");
54         }
55
56         if (!$op) {
57                 header("Content-Type: application/xml");
58                 print_error_xml(7); exit;
59         }
60
61         if (!($_SESSION["uid"] && validate_session($link)) && $op != "globalUpdateFeeds" 
62                         && $op != "rss" && $op != "getUnread") {
63
64                 if ($op == "rpc") {
65                         print_error_xml(6); die;
66                 } else {
67                         print "
68                         <html><body>
69                                 <p>Error: Not logged in.</p>
70                                 <script type=\"text/javascript\">
71                                         if (parent.window != 'undefined') {
72                                                 parent.window.location = \"tt-rss.php\";                
73                                         } else {
74                                                 window.location = \"tt-rss.php\";
75                                         }
76                                 </script>
77                         </body></html>
78                         ";
79                 }
80                 exit;
81         }
82
83         $purge_intervals = array(
84                 0  => _("Use default"),
85                 -1 => _("Never purge"),
86                 5  => _("1 week old"),
87                 14 => _("2 weeks old"),
88                 31 => _("1 month old"),
89                 60 => _("2 months old"),
90                 90 => _("3 months old"));
91
92         $update_intervals = array(
93                 0   => _("Use default"),
94                 -1  => _("Disable updates"),
95                 30  => _("Each 30 minutes"),
96                 60  => _("Hourly"),
97                 240 => _("Each 4 hours"),
98                 720 => _("Each 12 hours"),
99                 1440 => _("Daily"),
100                 10080 => _("Weekly"));
101
102
103         $access_level_names = array(
104                 0 => _("User"), 
105                 10 => _("Administrator"));
106
107         require_once "modules/pref-prefs.php";
108         require_once "modules/popup-dialog.php";
109         require_once "modules/help.php";
110         require_once "modules/pref-feeds.php";
111         require_once "modules/pref-filters.php";
112         require_once "modules/pref-labels.php";
113         require_once "modules/pref-users.php";
114         require_once "modules/pref-feed-browser.php"; 
115
116
117         if (!sanity_check($link)) { return; }
118
119         if ($op == "rpc") {
120                 handle_rpc_request($link);
121         }
122         
123         if ($op == "feeds") {
124
125                 $tags = $_GET["tags"];
126
127                 $subop = $_GET["subop"];
128
129                 if ($subop == "catchupAll") {
130                         db_query($link, "UPDATE ttrss_user_entries SET 
131                                 last_read = NOW(),unread = false WHERE owner_uid = " . $_SESSION["uid"]);
132                 }
133
134                 if ($subop == "collapse") {
135                         $cat_id = db_escape_string($_GET["cid"]);
136
137                         db_query($link, "UPDATE ttrss_feed_categories SET
138                                 collapsed = NOT collapsed WHERE id = '$cat_id' AND owner_uid = " . 
139                                 $_SESSION["uid"]);
140                         return;
141                 }
142
143                 outputFeedList($link, $tags);
144
145         }
146
147         if ($op == "view") {
148
149                 $id = db_escape_string($_GET["id"]);
150                 $feed_id = db_escape_string($_GET["feed"]);
151
152                 $result = db_query($link, "SELECT rtl_content FROM ttrss_feeds
153                         WHERE id = '$feed_id' AND owner_uid = " . $_SESSION["uid"]);
154
155                 if (db_num_rows($result) == 1) {
156                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
157                 } else {
158                         $rtl_content = false;
159                 }
160
161                 if ($rtl_content) {
162                         $rtl_tag = "dir=\"RTL\"";
163                         $rtl_class = "RTL";
164                 } else {
165                         $rtl_tag = "";
166                         $rtl_class = "";
167                 }
168
169                 $result = db_query($link, "UPDATE ttrss_user_entries 
170                         SET unread = false,last_read = NOW() 
171                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
172
173                 $result = db_query($link, "SELECT title,link,content,feed_id,comments,int_id,
174                         SUBSTRING(updated,1,16) as updated,
175                         (SELECT icon_url FROM ttrss_feeds WHERE id = feed_id) as icon_url,
176                         num_comments,
177                         author
178                         FROM ttrss_entries,ttrss_user_entries
179                         WHERE   id = '$id' AND ref_id = id AND owner_uid = " . $_SESSION["uid"]);
180
181                 if ($result) {
182
183                         $link_target = "";
184
185                         if (get_pref($link, 'OPEN_LINKS_IN_NEW_WINDOW')) {
186                                 $link_target = "target=\"_new\"";
187                         }
188
189                         $line = db_fetch_assoc($result);
190
191                         if ($line["icon_url"]) {
192                                 $feed_icon = "<img class=\"feedIcon\" src=\"" . $line["icon_url"] . "\">";
193                         } else {
194                                 $feed_icon = "&nbsp;";
195                         }
196
197 /*                      if ($line["comments"] && $line["link"] != $line["comments"]) {
198                                 $entry_comments = "(<a href=\"".$line["comments"]."\">Comments</a>)";
199                         } else {
200                                 $entry_comments = "";
201                         } */
202
203                         $num_comments = $line["num_comments"];
204                         $entry_comments = "";
205
206                         if ($num_comments > 0) {
207                                 if ($line["comments"]) {
208                                         $comments_url = $line["comments"];
209                                 } else {
210                                         $comments_url = $line["link"];
211                                 }
212                                 $entry_comments = "<a $link_target href=\"$comments_url\">$num_comments comments</a>";
213                         } else {
214                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
215                                         $entry_comments = "<a $link_target href=\"".$line["comments"]."\">comments</a>";
216                                 }                               
217                         }
218
219                         print "<div class=\"postReply\">";
220
221                         print "<div class=\"postHeader\">";
222
223                         $entry_author = $line["author"];
224
225                         if ($entry_author) {
226                                 $entry_author = _(" - by ") . $entry_author;
227                         }
228
229                         $parsed_updated = date(get_pref($link, 'LONG_DATE_FORMAT'), 
230                                 strtotime($line["updated"]));
231                 
232                         print "<div class=\"postDate$rtl_class\">$parsed_updated</div>";
233
234                         if ($line["link"]) {
235                                 print "<div clear='both'><a $link_target href=\"" . $line["link"] . "\">" . 
236                                         $line["title"] . "</a>$entry_author</div>";
237                         } else {
238                                 print "<div clear='both'>" . $line["title"] . "$entry_author</div>";
239                         }
240
241                         $tmp_result = db_query($link, "SELECT DISTINCT tag_name FROM
242                                 ttrss_tags WHERE post_int_id = " . $line["int_id"] . "
243                                 ORDER BY tag_name");
244         
245                         $tags_str = "";
246                         $f_tags_str = "";
247
248                         $num_tags = 0;
249
250                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
251                                 $num_tags++;
252                                 $tag = $tmp_line["tag_name"];                           
253                                 $tag_str = "<a href=\"javascript:viewfeed('$tag')\">$tag</a>, "; 
254                                 
255                                 if ($num_tags == 6) {
256                                         $tags_str .= "<a href=\"javascript:showBlockElement('allEntryTags')\">...</a>";
257                                 } else if ($num_tags < 6) {
258                                         $tags_str .= $tag_str;
259                                 }
260                                 $f_tags_str .= $tag_str;
261                         }
262
263                         $tags_str = preg_replace("/, $/", "", $tags_str);
264                         $f_tags_str = preg_replace("/, $/", "", $f_tags_str);
265
266                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
267
268                         if (!$tags_str) $tags_str = '<span class="tagList">'._('no tags').'</span>';
269
270                         print "<div style='float : right'>$tags_str 
271                                 <a title=\"Edit tags for this article\" 
272                                         href=\"javascript:editArticleTags($id, $feed_id)\">(+)</a></div>
273                                 <div clear='both'>$entry_comments</div>";
274
275                         print "</div>";
276
277                         print "<div class=\"postIcon\">" . $feed_icon . "</div>";
278                         print "<div class=\"postContent\">";
279                         
280                         if (db_num_rows($tmp_result) > 0) {
281                                 print "<div id=\"allEntryTags\">"._('Tags:')."$f_tags_str</div>";
282                         }
283
284                         if (get_pref($link, 'OPEN_LINKS_IN_NEW_WINDOW')) {
285                                 $line["content"] = preg_replace("/href=/i", "target=\"_new\" href=", $line["content"]);
286                         }
287
288                         $line["content"] = sanitize_rss($line["content"]);
289
290                         print $line["content"] . "</div>";
291                         
292                         print "</div>";
293
294                 }
295         }
296
297         if ($op == "viewfeed") {
298
299                 $feed = db_escape_string($_GET["feed"]);
300                 $subop = db_escape_string($_GET["subop"]);
301                 $view_mode = db_escape_string($_GET["view_mode"]);
302                 $limit = db_escape_string($_GET["limit"]);
303                 $cat_view = db_escape_string($_GET["cat"]);
304                 $next_unread_feed = db_escape_string($_GET["nuf"]);
305                 $offset = db_escape_string($_GET["skip"]);
306
307                 if (!$offset) $offset = 0;
308
309                 if ($subop == "undefined") $subop = "";
310
311                 if ($subop == "CatchupSelected") {
312                         $ids = split(",", db_escape_string($_GET["ids"]));
313                         $cmode = sprintf("%d", $_GET["cmode"]);
314
315                         catchupArticlesById($link, $ids, $cmode);
316                 }
317
318                 if ($subop == "ForceUpdate" && sprintf("%d", $feed) > 0) {
319                         update_generic_feed($link, $feed, $cat_view);
320                 }
321
322                 if ($subop == "MarkAllRead")  {
323                         catchup_feed($link, $feed, $cat_view);
324
325                         if (get_pref($link, 'ON_CATCHUP_SHOW_NEXT_FEED')) {
326                                 if ($next_unread_feed) {
327                                         $feed = $next_unread_feed;
328                                 }
329                         }
330                 }
331
332                 if ($feed_id > 0) {             
333                         $result = db_query($link,
334                                 "SELECT id FROM ttrss_feeds WHERE id = '$feed' LIMIT 1");
335                 
336                         if (db_num_rows($result) == 0) {
337                                 print "<div align='center'>"._('Feed not found.')."</div>";
338                                 return;
339                         }
340                 }
341
342                 if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
343         
344                         $result = db_query($link, "SELECT rtl_content FROM ttrss_feeds
345                                 WHERE id = '$feed' AND owner_uid = " . $_SESSION["uid"]);
346
347                         if (db_num_rows($result) == 1) {
348                                 $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
349                         } else {
350                                 $rtl_content = false;
351                         }
352         
353                         if ($rtl_content) {
354                                 $rtl_tag = "dir=\"RTL\"";
355                         } else {
356                                 $rtl_tag = "";
357                         }
358                 } else {
359                         $rtl_tag = "";
360                         $rtl_content = false;
361                 }
362
363                 $script_dt_add = get_script_dt_add();
364
365 /*              print "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">  
366                         <script type=\"text/javascript\" src=\"prototype.js\"></script>
367                         <script type=\"text/javascript\" src=\"functions.js?$script_dt_add\"></script>
368                         <script type=\"text/javascript\" src=\"viewfeed.js?$script_dt_add\"></script>
369                         <!--[if gte IE 5.5000]>
370                         <script type=\"text/javascript\" src=\"pngfix.js\"></script>
371                         <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss-ie.css\">
372                         <![endif]-->
373                         </head><body $rtl_tag>
374                         <script type=\"text/javascript\">
375                         if (document.addEventListener) {
376                                 document.addEventListener(\"DOMContentLoaded\", init, null);
377                         }
378                         window.onload = init;
379                         </script>"; */
380
381                 /// START /////////////////////////////////////////////////////////////////////////////////
382
383                 $search = db_escape_string($_GET["query"]);
384                 $search_mode = db_escape_string($_GET["search_mode"]);
385                 $match_on = db_escape_string($_GET["match_on"]);
386
387                 if (!$match_on) {
388                         $match_on = "both";
389                 }
390
391                 $real_offset = $offset * $limit;
392
393                 $qfh_ret = queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, 
394                         $search, $search_mode, $match_on, false, $real_offset);
395
396                 $result = $qfh_ret[0];
397                 $feed_title = $qfh_ret[1];
398                 $feed_site_url = $qfh_ret[2];
399                 $last_error = $qfh_ret[3];
400                 
401                 /// STOP //////////////////////////////////////////////////////////////////////////////////
402
403                 print "<div id=\"headlinesContainer\" $rtl_tag>";
404
405                 if (!$result) {
406                         print "<div align='center'>"._("Could not display feed (query failed). Please check label match syntax or local configuration.")."</div>";
407                         return;
408                 }
409
410                 print_headline_subtoolbar($link, $feed_site_url, $feed_title, false, 
411                         $rtl_content, $feed, $cat_view, $search, $match_on, $search_mode, 
412                         $offset, $limit);
413
414                 print "<div id=\"headlinesInnerContainer\">";
415
416                 if (db_num_rows($result) > 0) {
417
418 #                       print "\{$offset}";
419
420                         if (!get_pref($link, 'COMBINED_DISPLAY_MODE')) {
421                                 print "<table class=\"headlinesList\" id=\"headlinesList\" 
422                                         cellspacing=\"0\" width=\"100%\">";
423                         }
424
425                         $lnum = 0;
426         
427                         error_reporting (DEFAULT_ERROR_LEVEL);
428         
429                         $num_unread = 0;
430         
431                         while ($line = db_fetch_assoc($result)) {
432
433                                 $class = ($lnum % 2) ? "even" : "odd";
434         
435                                 $id = $line["id"];
436                                 $feed_id = $line["feed_id"];
437         
438                                 if ($line["last_read"] == "" && 
439                                                 ($line["unread"] != "t" && $line["unread"] != "1")) {
440         
441                                         $update_pic = "<img id='FUPDPIC-$id' src=\"images/updated.png\" 
442                                                 alt=\"Updated\">";
443                                 } else {
444                                         $update_pic = "<img id='FUPDPIC-$id' src=\"images/blank_icon.gif\" 
445                                                 alt=\"Updated\">";
446                                 }
447         
448                                 if ($line["unread"] == "t" || $line["unread"] == "1") {
449                                         $class .= "Unread";
450                                         ++$num_unread;
451                                         $is_unread = true;
452                                 } else {
453                                         $is_unread = false;
454                                 }
455         
456                                 if ($line["marked"] == "t" || $line["marked"] == "1") {
457                                         $marked_pic = "<img id=\"FMARKPIC-$id\" src=\"images/mark_set.png\" 
458                                                 class=\"markedPic\"
459                                                 alt=\"Reset mark\" onclick='javascript:toggleMark($id)'>";
460                                 } else {
461                                         $marked_pic = "<img id=\"FMARKPIC-$id\" src=\"images/mark_unset.png\" 
462                                                 class=\"markedPic\"
463                                                 alt=\"Set mark\" onclick='javascript:toggleMark($id)'>";
464                                 }
465
466 #                               $content_link = "<a target=\"_new\" href=\"".$line["link"]."\">" .
467 #                                       $line["title"] . "</a>";
468
469                                 $content_link = "<a href=\"javascript:view($id,$feed_id);\">" .
470                                         $line["title"] . "</a>";
471
472 #                               $content_link = "<a href=\"javascript:viewContentUrl('".$line["link"]."');\">" .
473 #                                       $line["title"] . "</a>";
474
475                                 if (get_pref($link, 'HEADLINES_SMART_DATE')) {
476                                         $updated_fmt = smart_date_time(strtotime($line["updated"]));
477                                 } else {
478                                         $short_date = get_pref($link, 'SHORT_DATE_FORMAT');
479                                         $updated_fmt = date($short_date, strtotime($line["updated"]));
480                                 }                               
481
482                                 if (get_pref($link, 'SHOW_CONTENT_PREVIEW')) {
483                                         $content_preview = truncate_string(strip_tags($line["content_preview"]), 
484                                                 100);
485                                 }
486
487                                 $entry_author = $line["author"];
488
489                                 if ($entry_author) {
490                                         $entry_author = " - by $entry_author";
491                                 }
492
493                                 if (!get_pref($link, 'COMBINED_DISPLAY_MODE')) {
494                                         
495                                         print "<tr class='$class' id='RROW-$id'>";
496                 
497                                         print "<td class='hlUpdatePic'>$update_pic</td>";
498                 
499                                         print "<td class='hlSelectRow'>
500                                                 <input type=\"checkbox\" onclick=\"toggleSelectRow(this)\"
501                                                         class=\"feedCheckBox\" id=\"RCHK-$id\">
502                                                 </td>";
503                 
504                                         print "<td class='hlMarkedPic'>$marked_pic</td>";
505
506                                         if ($line["feed_title"]) {                      
507                                                 print "<td class='hlContent'>$content_link</td>";
508                                                 print "<td class='hlFeed'>
509                                                         <a href=\"javascript:viewfeed($feed_id, '', false)\">".
510                                                                 $line["feed_title"]."</a>&nbsp;</td>";
511                                         } else {                        
512                                                 print "<td class='hlContent' valign='middle'>";
513
514                                                 print "<a href=\"javascript:view($id,$feed_id);\">" .
515                                                         $line["title"];
516
517                                                 if (get_pref($link, 'SHOW_CONTENT_PREVIEW')) {
518                                                         if ($content_preview) {
519                                                                 print "<span class=\"contentPreview\"> - $content_preview</span>";
520                                                         }
521                                                 }
522                 
523                                                 print "</a>";
524                                                 print "</td>";
525                                         }
526                                         
527                                         print "<td class=\"hlUpdated\"><nobr>$updated_fmt&nbsp;</nobr></td>";
528                 
529                                         print "</tr>";
530
531                                 } else {
532                                         
533                                         if ($is_unread) {
534                                                 $add_class = "Unread";
535                                         } else {
536                                                 $add_class = "";
537                                         }       
538                                         
539                                         print "<div class=\"cdmArticle$add_class\" id=\"RROW-$id\">";
540
541                                         print "<div class=\"cdmHeader\">";
542
543                                         print "<div class=\"articleUpdated\">$updated_fmt</div>";
544                                         
545                                         print "<a class=\"title\" 
546                                                 onclick=\"javascript:toggleUnread($id, 0)\"
547                                                 target=\"new\" href=\"".$line["link"]."\">".$line["title"]."</a>";
548
549                                         print $entry_author;
550
551                                         if ($line["feed_title"]) {      
552                                                 print "&nbsp;(<a href='javascript:viewfeed($feed_id)'>".$line["feed_title"]."</a>)";
553                                         }
554
555                                         print "</div>";
556
557                                         print "<div class=\"cdmContent\">" . $line["content_preview"] . "</div><br clear=\"all\">";
558
559                                         print "<div class=\"cdmFooter\">";
560
561                                         print "$marked_pic";
562
563                                         print "<input type=\"checkbox\" onclick=\"toggleSelectRowById(this, 
564                                                         'RROW-$id')\" class=\"feedCheckBox\" id=\"RCHK-$id\">";
565
566                                         $tags = get_article_tags($link, $id);
567
568                                         $tags_str = "";
569
570                                         foreach ($tags as $tag) {
571                                                 $num_tags++;
572                                                 $tags_str .= "<a href=\"javascript:viewfeed('$tag')\">$tag</a>, "; 
573                                         }
574
575                                         $tags_str = preg_replace("/, $/", "", $tags_str);
576
577                                         if ($tags_str == "") $tags_str = "no tags";
578         
579                                         print " $tags_str <a title=\"Edit tags for this article\" 
580                                                         href=\"javascript:editArticleTags($id, $feed_id, true)\">(+)</a>";
581
582                                         print "</div>";
583
584 #                                       print "<div align=\"center\"><a class=\"cdmToggleLink\"
585 #                                                       href=\"javascript:toggleUnread($id)\">
586 #                                                       Toggle unread</a></div>";
587
588                                         print "</div>"; 
589
590                                 }                               
591         
592                                 ++$lnum;
593                         }
594
595                         if (!get_pref($link, 'COMBINED_DISPLAY_MODE')) {                        
596                                 print "</table>";
597                         }
598
599 //                      print_headline_subtoolbar($link, 
600 //                              "javascript:catchupPage()", "Mark page as read", true, $rtl_content);
601
602
603                 } else {
604                         print "<div class='whiteBox'>"._('No articles found.')."</div>";
605                 }
606
607                 print "</div>";
608
609                 print "</div>";
610         }
611
612         if ($op == "pref-feeds") {
613                 module_pref_feeds($link);
614         }
615
616         if ($op == "pref-filters") {
617                 module_pref_filters($link);
618         }
619
620         if ($op == "pref-labels") {
621                 module_pref_labels($link);
622         }
623
624         if ($op == "pref-prefs") {
625                 module_pref_prefs($link);
626         }
627
628         if ($op == "pref-users") {
629                 module_pref_users($link);
630         }
631
632         if ($op == "help") {
633                 module_help($link);
634         }
635
636         if ($op == "dlg") {
637                 module_popup_dialog($link);
638         }
639
640         // update feeds of all users, may be used anonymously
641         if ($op == "globalUpdateFeeds") {
642
643                 $result = db_query($link, "SELECT id FROM ttrss_users");
644
645                 while ($line = db_fetch_assoc($result)) {
646                         $user_id = $line["id"];
647 //                      print "<!-- updating feeds of uid $user_id -->";
648                         update_all_feeds($link, false, $user_id);
649                 }
650
651                 print "<rpc-reply>
652                         <message msg=\"All feeds updated\"/>
653                 </rpc-reply>";
654
655         }
656
657         if ($op == "user-details") {
658
659                 if (WEB_DEMO_MODE || $_SESSION["access_level"] < 10) {
660                         return;
661                 }
662                           
663 /*              print "<html><head>
664                         <title>Tiny Tiny RSS : User Details</title>
665                         <link rel=\"stylesheet\" href=\"tt-rss.css\" type=\"text/css\">
666                         <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
667                         </head><body>"; */
668
669                 $uid = sprintf("%d", $_GET["id"]);
670
671                 print "<div id=\"infoBoxTitle\">User details</div>";
672
673                 print "<div class='infoBoxContents'>";
674
675                 $result = db_query($link, "SELECT login,
676                         SUBSTRING(last_login,1,16) AS last_login,
677                         access_level,
678                         (SELECT COUNT(int_id) FROM ttrss_user_entries 
679                                 WHERE owner_uid = id) AS stored_articles
680                         FROM ttrss_users 
681                         WHERE id = '$uid'");
682                         
683                 if (db_num_rows($result) == 0) {
684                         print "<h1>User not found</h1>";
685                         return;
686                 }
687                 
688 #               print "<h1>User Details</h1>";
689
690                 $login = db_fetch_result($result, 0, "login");
691
692 #               print "<h1>$login</h1>";
693
694                 print "<table width='100%'>";
695
696                 $last_login = date(get_pref($link, 'LONG_DATE_FORMAT'),
697                         strtotime(db_fetch_result($result, 0, "last_login")));
698                 $access_level = db_fetch_result($result, 0, "access_level");
699                 $stored_articles = db_fetch_result($result, 0, "stored_articles");
700
701 #               print "<tr><td>Username</td><td>$login</td></tr>";
702 #               print "<tr><td>Access level</td><td>$access_level</td></tr>";
703                 print "<tr><td>Last logged in</td><td>$last_login</td></tr>";
704                 print "<tr><td>Stored articles</td><td>$stored_articles</td></tr>";
705
706                 $result = db_query($link, "SELECT COUNT(id) as num_feeds FROM ttrss_feeds
707                         WHERE owner_uid = '$uid'");
708
709                 $num_feeds = db_fetch_result($result, 0, "num_feeds");
710
711                 print "<tr><td>Subscribed feeds count</td><td>$num_feeds</td></tr>";
712
713 /*              $result = db_query($link, "SELECT 
714                         SUM(LENGTH(content)+LENGTH(title)+LENGTH(link)+LENGTH(guid)) AS db_size 
715                         FROM ttrss_user_entries,ttrss_entries 
716                                 WHERE owner_uid = '$uid' AND ref_id = id");
717
718                 $db_size = round(db_fetch_result($result, 0, "db_size") / 1024);
719
720                 print "<tr><td>Approx. used DB size</td><td>$db_size KBytes</td></tr>";  */
721
722                 print "</table>";
723
724                 print "<h1>Subscribed feeds</h1>";
725
726                 $result = db_query($link, "SELECT id,title,site_url FROM ttrss_feeds
727                         WHERE owner_uid = '$uid' ORDER BY title");
728
729                 print "<ul class=\"userFeedList\">";
730
731                 $row_class = "odd";
732
733                 while ($line = db_fetch_assoc($result)) {
734
735                         $icon_file = ICONS_URL."/".$line["id"].".ico";
736
737                         if (file_exists($icon_file) && filesize($icon_file) > 0) {
738                                 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"$icon_file\">";
739                         } else {
740                                 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">";
741                         }
742
743                         print "<li class=\"$row_class\">$feed_icon&nbsp;<a href=\"".$line["site_url"]."\">".$line["title"]."</a></li>";
744
745                         $row_class = toggleEvenOdd($row_class);
746
747                 }
748
749                 if (db_num_rows($result) < $num_feeds) {
750                          // FIXME - add link to show ALL subscribed feeds here somewhere
751                         print "<li><img 
752                                 class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">&nbsp;...</li>";
753                 }
754                 
755                 print "</ul>";
756
757                 print "</div>";
758
759                 print "<div align='center'>
760                         <input type='submit' class='button'                     
761                         onclick=\"closeInfoBox()\" value=\"Close this window\"></div>";
762
763 //              print "</body></html>"; 
764
765         }
766
767         if ($op == "pref-feed-browser") {
768                 module_pref_feed_browser($link);
769         }
770
771         if ($op == "rss") {
772                 $feed = db_escape_string($_GET["id"]);
773                 $user = db_escape_string($_GET["user"]);
774                 $pass = db_escape_string($_GET["pass"]);
775                 $is_cat = $_GET["is_cat"] != false;
776
777                 $search = db_escape_string($_GET["q"]);
778                 $match_on = db_escape_string($_GET["m"]);
779                 $search_mode = db_escape_string($_GET["smode"]);
780
781                 if (!$_SESSION["uid"] && $user && $pass) {
782                         authenticate_user($link, $user, $pass);
783                 }
784
785                 if ($_SESSION["uid"] ||
786                         http_authenticate_user($link)) {
787
788                                 generate_syndicated_feed($link, $feed, $is_cat, 
789                                         $search, $search_mode, $match_on);
790                 }
791         }
792
793         if ($op == "labelFromSearch") {
794                 $search = db_escape_string($_GET["search"]);
795                 $search_mode = db_escape_string($_GET["smode"]);
796                 $match_on = db_escape_string($_GET["match"]);
797                 $is_cat = db_escape_string($_GET["is_cat"]);
798                 $title = db_escape_string($_GET["title"]);
799                 $feed = sprintf("%d", $_GET["feed"]);
800
801                 $label_qparts = array();
802
803                 $search_expr = getSearchSql($search, $match_on);
804
805                 if ($is_cat) {
806                         if ($feed != 0) {
807                                 $search_expr .= " AND ttrss_feeds.cat_id = $feed ";
808                         } else {
809                                 $search_expr .= " AND ttrss_feeds.cat_id IS NULL ";
810                         }
811                 } else {
812                         if ($search_mode == "all_feeds") {
813                                 // NOOP
814                         } else if ($search_mode == "this_cat") {
815
816                                 $tmp_result = db_query($link, "SELECT cat_id
817                                         FROM ttrss_feeds WHERE id = '$feed'");
818
819                                 $cat_id = db_fetch_result($tmp_result, 0, "cat_id");
820
821                                 if ($cat_id > 0) {
822                                         $search_expr .= " AND ttrss_feeds.cat_id = $cat_id ";
823                                 } else {
824                                         $search_expr .= " AND ttrss_feeds.cat_id IS NULL ";
825                                 }
826                         } else {
827                                 $search_expr .= " AND ttrss_feeds.id = $feed ";
828                         }
829
830                 }
831
832                 $search_expr = db_escape_string($search_expr);
833
834                 print $search_expr;
835
836                 if ($title) {
837                         $result = db_query($link,
838                                 "INSERT INTO ttrss_labels (sql_exp,description,owner_uid) 
839                                 VALUES ('$search_expr', '$title', '".$_SESSION["uid"]."')");
840                 }
841         }
842
843         if ($op == "getUnread") {
844                 $login = db_escape_string($_GET["login"]);
845
846                 header("Content-Type: text/plain; charset=utf-8");
847
848                 $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login'");
849
850                 if (db_num_rows($result) == 1) {
851                         $uid = db_fetch_result($result, 0, "id");
852                         print getGlobalUnread($link, $uid);
853                 } else {
854                         print "-1;User not found";
855                 }
856
857                 $print_exec_time = false;
858         }
859
860         if ($op == "digestTest") {
861                 header("Content-Type: text/plain");
862                 print_r(prepare_headlines_digest($link, $_SESSION["uid"]));
863                 $print_exec_time = false;
864
865         }
866
867         if ($op == "digestSend") {
868                 header("Content-Type: text/plain");
869                 send_headlines_digests($link);
870                 $print_exec_time = false;
871
872         }
873
874         db_close($link);
875 ?>
876
877 <?php if ($print_exec_time) { ?>
878 <!-- <?php echo sprintf("Backend execution time: %.4f seconds", getmicrotime() - $script_started) ?> -->
879 <?php } ?>