include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 115);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         $fetch_last_error = false;
   9         $fetch_last_error_code = false;
  10         $pluginhost = false;
  11
  12         function __autoload($class) {
  13                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  14
  15                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  16
  17                 if (file_exists($file)) {
  18                         require $file;
  19                 }
  20
  21         }
  22
  23         mb_internal_encoding("UTF-8");
  24         date_default_timezone_set('UTC');
  25         if (defined('E_DEPRECATED')) {
  26                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  27         } else {
  28                 error_reporting(E_ALL & ~E_NOTICE);
  29         }
  30
  31         require_once 'config.php';
  32
  33         /**
  34          * Define a constant if not already defined
  35          *
  36          * @param string $name The constant name.
  37          * @param mixed $value The constant value.
  38          * @access public
  39          * @return boolean True if defined successfully or not.
  40          */
  41         function define_default($name, $value) {
  42                 defined($name) or define($name, $value);
  43         }
  44
  45         ///// Some defaults that you can override in config.php //////
  46
  47         define_default('FEED_FETCH_TIMEOUT', 45);
  48         // How may seconds to wait for response when requesting feed from a site
  49         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  50         // How may seconds to wait for response when requesting feed from a
  51         // site when that feed wasn't cached before
  52         define_default('FILE_FETCH_TIMEOUT', 45);
  53         // Default timeout when fetching files from remote sites
  54         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  55         // How many seconds to wait for initial response from website when
  56         // fetching files from remote sites
  57
  58         if (DB_TYPE == "pgsql") {
  59                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  60         } else {
  61                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  62         }
  63
  64         /**
  65          * Return available translations names.
  66          *
  67          * @access public
  68          * @return array A array of available translations.
  69          */
  70         function get_translations() {
  71                 $tr = array(
  72                                         "auto"  => "Detect automatically",
  73                                         "ca_CA" => "Català",
  74                                         "cs_CZ" => "Česky",
  75                                         "en_US" => "English",
  76                                         "es_ES" => "Español",
  77                                         "de_DE" => "Deutsch",
  78                                         "fr_FR" => "Français",
  79                                         "hu_HU" => "Magyar (Hungarian)",
  80                                         "it_IT" => "Italiano",
  81                                         "ja_JP" => "日本語 (Japanese)",
  82                                         "lv_LV" => "Latviešu",
  83                                         "nb_NO" => "Norwegian bokmål",
  84                                         "nl_NL" => "Dutch",
  85                                         "pl_PL" => "Polski",
  86                                         "ru_RU" => "Русский",
  87                                         "pt_BR" => "Portuguese/Brazil",
  88                                         "zh_CN" => "Simplified Chinese",
  89                                         "sv_SE" => "Svenska",
  90                                         "fi_FI" => "Suomi");
  91
  92                 return $tr;
  93         }
  94
  95         require_once "lib/accept-to-gettext.php";
  96         require_once "lib/gettext/gettext.inc";
  97
  98
  99         function startup_gettext() {
 100
 101                 # Get locale from Accept-Language header
 102                 $lang = al2gt(array_keys(get_translations()), "text/html");
 103
 104                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
 105                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
 106                 }
 107
 108                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
 109                         $lang = $_SESSION["language"];
 110                 }
 111
 112                 if ($lang) {
 113                         if (defined('LC_MESSAGES')) {
 114                                 _setlocale(LC_MESSAGES, $lang);
 115                         } else if (defined('LC_ALL')) {
 116                                 _setlocale(LC_ALL, $lang);
 117                         }
 118
 119                         _bindtextdomain("messages", "locale");
 120
 121                         _textdomain("messages");
 122                         _bind_textdomain_codeset("messages", "UTF-8");
 123                 }
 124         }
 125
 126         startup_gettext();
 127
 128         require_once 'db-prefs.php';
 129         require_once 'version.php';
 130         require_once 'ccache.php';
 131         require_once 'labels.php';
 132
 133         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 134         ini_set('user_agent', SELF_USER_AGENT);
 135
 136         require_once 'lib/pubsubhubbub/publisher.php';
 137
 138         $tz_offset = -1;
 139         $utc_tz = new DateTimeZone('UTC');
 140         $schema_version = false;
 141
 142         /**
 143          * Print a timestamped debug message.
 144          *
 145          * @param string $msg The debug message.
 146          * @return void
 147          */
 148         function _debug($msg) {
 149                 $ts = strftime("%H:%M:%S", time());
 150                 if (function_exists('posix_getpid')) {
 151                         $ts = "$ts/" . posix_getpid();
 152                 }
 153
 154                 if (!(defined('QUIET') && QUIET)) {
 155                         print "[$ts] $msg\n";
 156                 }
 157
 158                 if (defined('LOGFILE'))  {
 159                         $fp = fopen(LOGFILE, 'a+');
 160
 161                         if ($fp) {
 162                                 fputs($fp, "[$ts] $msg\n");
 163                                 fclose($fp);
 164                         }
 165                 }
 166
 167         } // function _debug
 168
 169         /**
 170          * Purge a feed old posts.
 171          *
 172          * @param mixed $link A database connection.
 173          * @param mixed $feed_id The id of the purged feed.
 174          * @param mixed $purge_interval Olderness of purged posts.
 175          * @param boolean $debug Set to True to enable the debug. False by default.
 176          * @access public
 177          * @return void
 178          */
 179         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 180
 181                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 182
 183                 $rows = -1;
 184
 185                 $result = db_query($link,
 186                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 187
 188                 $owner_uid = false;
 189
 190                 if (db_num_rows($result) == 1) {
 191                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 192                 }
 193
 194                 if ($purge_interval == -1 || !$purge_interval) {
 195                         if ($owner_uid) {
 196                                 ccache_update($link, $feed_id, $owner_uid);
 197                         }
 198                         return;
 199                 }
 200
 201                 if (!$owner_uid) return;
 202
 203                 if (FORCE_ARTICLE_PURGE == 0) {
 204                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 205                                 $owner_uid, false);
 206                 } else {
 207                         $purge_unread = true;
 208                         $purge_interval = FORCE_ARTICLE_PURGE;
 209                 }
 210
 211                 if (!$purge_unread) $query_limit = " unread = false AND ";
 212
 213                 if (DB_TYPE == "pgsql") {
 214                         $pg_version = get_pgsql_version($link);
 215
 216                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 217
 218                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 219                                         ttrss_entries.id = ref_id AND
 220                                         marked = false AND
 221                                         feed_id = '$feed_id' AND
 222                                         $query_limit
 223                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 224
 225                         } else {
 226
 227                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 228                                         USING ttrss_entries
 229                                         WHERE ttrss_entries.id = ref_id AND
 230                                         marked = false AND
 231                                         feed_id = '$feed_id' AND
 232                                         $query_limit
 233                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 234                         }
 235
 236                         $rows = pg_affected_rows($result);
 237
 238                 } else {
 239
 240 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 241                                 marked = false AND feed_id = '$feed_id' AND
 242                                 (SELECT date_updated FROM ttrss_entries WHERE
 243                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 244
 245                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 246                                 USING ttrss_user_entries, ttrss_entries
 247                                 WHERE ttrss_entries.id = ref_id AND
 248                                 marked = false AND
 249                                 feed_id = '$feed_id' AND
 250                                 $query_limit
 251                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 252
 253                         $rows = mysql_affected_rows($link);
 254
 255                 }
 256
 257                 ccache_update($link, $feed_id, $owner_uid);
 258
 259                 if ($debug) {
 260                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 261                 }
 262
 263                 return $rows;
 264         } // function purge_feed
 265
 266         function feed_purge_interval($link, $feed_id) {
 267
 268                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 269                         WHERE id = '$feed_id'");
 270
 271                 if (db_num_rows($result) == 1) {
 272                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 273                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 274
 275                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 276                                 'PURGE_OLD_DAYS', $owner_uid);
 277
 278                         return $purge_interval;
 279
 280                 } else {
 281                         return -1;
 282                 }
 283         }
 284
 285         function purge_orphans($link, $do_output = false) {
 286
 287                 // purge orphaned posts in main content table
 288                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 289                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 290
 291                 if ($do_output) {
 292                         $rows = db_affected_rows($link, $result);
 293                         _debug("Purged $rows orphaned posts.");
 294                 }
 295         }
 296
 297         function get_feed_update_interval($link, $feed_id) {
 298                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 299                         ttrss_feeds WHERE id = '$feed_id'");
 300
 301                 if (db_num_rows($result) == 1) {
 302                         $update_interval = db_fetch_result($result, 0, "update_interval");
 303                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 304
 305                         if ($update_interval != 0) {
 306                                 return $update_interval;
 307                         } else {
 308                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 309                         }
 310
 311                 } else {
 312                         return -1;
 313                 }
 314         }
 315
 316         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 317
 318                 global $fetch_last_error;
 319                 global $fetch_last_error_code;
 320
 321                 if (!defined('NO_CURL') && !function_exists('curl_init') && !ini_get("open_basedir")) {
 322
 323                         if (ini_get("safe_mode")) {
 324                                 $ch = curl_init(geturl($url));
 325                         } else {
 326                                 $ch = curl_init($url);
 327                         }
 328
 329                         if ($timestamp) {
 330                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 331                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 332                         }
 333
 334                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 335                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 336                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode"));
 337                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 338                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 339                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 340                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 341                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 342                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 343                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 344                         curl_setopt($ch, CURLOPT_REFERER, $url);
 345
 346                         if ($post_query) {
 347                                 curl_setopt($ch, CURLOPT_POST, true);
 348                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 349                         }
 350
 351                         if ($login && $pass)
 352                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 353
 354                         $contents = @curl_exec($ch);
 355
 356                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 357                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 358                                 $contents = @curl_exec($ch);
 359                         }
 360
 361                         if ($contents === false) {
 362                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 363                                 curl_close($ch);
 364                                 return false;
 365                         }
 366
 367                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 368                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 369
 370                         $fetch_last_error_code = $http_code;
 371
 372                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 373                                 if (curl_errno($ch) != 0) {
 374                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 375                                 } else {
 376                                         $fetch_last_error = "HTTP Code: $http_code";
 377                                 }
 378                                 curl_close($ch);
 379                                 return false;
 380                         }
 381
 382                         curl_close($ch);
 383
 384                         return $contents;
 385                 } else {
 386                         if ($login && $pass){
 387                                 $url_parts = array();
 388
 389                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 390
 391                                 $pass = urlencode($pass);
 392
 393                                 if ($url_parts[1] && $url_parts[2]) {
 394                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 395                                 }
 396                         }
 397
 398                         $data = @file_get_contents($url);
 399
 400                         if (!$data && function_exists('error_get_last')) {
 401                                 $error = error_get_last();
 402                                 $fetch_last_error = $error["message"];
 403                         }
 404                         return $data;
 405                 }
 406
 407         }
 408
 409         /**
 410          * Try to determine the favicon URL for a feed.
 411          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 412          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 413          *
 414          * @param string $url A feed or page URL
 415          * @access public
 416          * @return mixed The favicon URL, or false if none was found.
 417          */
 418         function get_favicon_url($url) {
 419
 420                 $favicon_url = false;
 421
 422                 if ($html = @fetch_file_contents($url)) {
 423
 424                         libxml_use_internal_errors(true);
 425
 426                         $doc = new DOMDocument();
 427                         $doc->loadHTML($html);
 428                         $xpath = new DOMXPath($doc);
 429
 430                         $base = $xpath->query('/html/head/base');
 431                         foreach ($base as $b) {
 432                                 $url = $b->getAttribute("href");
 433                                 break;
 434                         }
 435
 436                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 437                         if (count($entries) > 0) {
 438                                 foreach ($entries as $entry) {
 439                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 440                                         break;
 441                                 }
 442                         }
 443                 }
 444
 445                 if (!$favicon_url)
 446                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 447
 448                 return $favicon_url;
 449         } // function get_favicon_url
 450
 451         function check_feed_favicon($site_url, $feed, $link) {
 452 #               print "FAVICON [$site_url]: $favicon_url\n";
 453
 454                 $icon_file = ICONS_DIR . "/$feed.ico";
 455
 456                 if (!file_exists($icon_file)) {
 457                         $favicon_url = get_favicon_url($site_url);
 458
 459                         if ($favicon_url) {
 460                                 // Limiting to "image" type misses those served with text/plain
 461                                 $contents = fetch_file_contents($favicon_url); // , "image");
 462
 463                                 if ($contents) {
 464                                         // Crude image type matching.
 465                                         // Patterns gleaned from the file(1) source code.
 466                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 467                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 468                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 469                                         }
 470                                         elseif (preg_match('/^GIF8/', $contents)) {
 471                                                 // 0       string          GIF8            GIF image data
 472                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 473                                         }
 474                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 475                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 476                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 477                                         }
 478                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 479                                                 // 0       beshort         0xffd8          JPEG image data
 480                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 481                                         }
 482                                         else {
 483                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 484                                                 $contents = "";
 485                                         }
 486                                 }
 487
 488                                 if ($contents) {
 489                                         $fp = @fopen($icon_file, "w");
 490
 491                                         if ($fp) {
 492                                                 fwrite($fp, $contents);
 493                                                 fclose($fp);
 494                                                 chmod($icon_file, 0644);
 495                                         }
 496                                 }
 497                         }
 498                 }
 499         }
 500
 501         function print_select($id, $default, $values, $attributes = "") {
 502                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 503                 foreach ($values as $v) {
 504                         if ($v == $default)
 505                                 $sel = "selected=\"1\"";
 506                          else
 507                                 $sel = "";
 508
 509                         $v = trim($v);
 510
 511                         print "<option value=\"$v\" $sel>$v</option>";
 512                 }
 513                 print "</select>";
 514         }
 515
 516         function print_select_hash($id, $default, $values, $attributes = "") {
 517                 print "<select name=\"$id\" id='$id' $attributes>";
 518                 foreach (array_keys($values) as $v) {
 519                         if ($v == $default)
 520                                 $sel = 'selected="selected"';
 521                          else
 522                                 $sel = "";
 523
 524                         $v = trim($v);
 525
 526                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 527                 }
 528
 529                 print "</select>";
 530         }
 531
 532         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 533                 foreach ($values as $v) {
 534
 535                         if ($v == $default)
 536                                 $sel = "checked";
 537                          else
 538                                 $sel = "";
 539
 540                         if ($v == $true_is) {
 541                                 $sel .= " value=\"1\"";
 542                         } else {
 543                                 $sel .= " value=\"0\"";
 544                         }
 545
 546                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 547                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 548
 549                 }
 550         }
 551
 552         function initialize_user_prefs($link, $uid, $profile = false) {
 553
 554                 $uid = db_escape_string($link, $uid);
 555
 556                 if (!$profile) {
 557                         $profile = "NULL";
 558                         $profile_qpart = "AND profile IS NULL";
 559                 } else {
 560                         $profile_qpart = "AND profile = '$profile'";
 561                 }
 562
 563                 if (get_schema_version($link) < 63) $profile_qpart = "";
 564
 565                 db_query($link, "BEGIN");
 566
 567                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 568
 569                 $u_result = db_query($link, "SELECT pref_name
 570                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 571
 572                 $active_prefs = array();
 573
 574                 while ($line = db_fetch_assoc($u_result)) {
 575                         array_push($active_prefs, $line["pref_name"]);
 576                 }
 577
 578                 while ($line = db_fetch_assoc($result)) {
 579                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 580 //                              print "adding " . $line["pref_name"] . "<br>";
 581
 582                                 $line["def_value"] = db_escape_string($link, $line["def_value"]);
 583                                 $line["pref_name"] = db_escape_string($link, $line["pref_name"]);
 584
 585                                 if (get_schema_version($link) < 63) {
 586                                         db_query($link, "INSERT INTO ttrss_user_prefs
 587                                                 (owner_uid,pref_name,value) VALUES
 588                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 589
 590                                 } else {
 591                                         db_query($link, "INSERT INTO ttrss_user_prefs
 592                                                 (owner_uid,pref_name,value, profile) VALUES
 593                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 594                                 }
 595
 596                         }
 597                 }
 598
 599                 db_query($link, "COMMIT");
 600
 601         }
 602
 603         function get_ssl_certificate_id() {
 604                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 605                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 606                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 607                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 608                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 609                 }
 610                 return "";
 611         }
 612
 613         function authenticate_user($link, $login, $password, $check_only = false) {
 614
 615                 if (!SINGLE_USER_MODE) {
 616                         $user_id = false;
 617
 618                         global $pluginhost;
 619                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 620
 621                                 $user_id = (int) $plugin->authenticate($login, $password);
 622
 623                                 if ($user_id) {
 624                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 625                                         break;
 626                                 }
 627                         }
 628
 629                         if ($user_id && !$check_only) {
 630                                 @session_start();
 631
 632                                 $_SESSION["uid"] = $user_id;
 633
 634                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 635                                         WHERE id = '$user_id'");
 636
 637                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 638                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 639                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 640
 641                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 642                                         $_SESSION["uid"]);
 643
 644                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 645                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 646                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 647
 648                                 $_SESSION["last_version_check"] = time();
 649
 650                                 initialize_user_prefs($link, $_SESSION["uid"]);
 651
 652                                 return true;
 653                         }
 654
 655                         return false;
 656
 657                 } else {
 658
 659                         $_SESSION["uid"] = 1;
 660                         $_SESSION["name"] = "admin";
 661                         $_SESSION["access_level"] = 10;
 662
 663                         $_SESSION["hide_hello"] = true;
 664                         $_SESSION["hide_logout"] = true;
 665
 666                         $_SESSION["auth_module"] = false;
 667
 668                         if (!$_SESSION["csrf_token"]) {
 669                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 670                         }
 671
 672                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 673
 674                         initialize_user_prefs($link, $_SESSION["uid"]);
 675
 676                         return true;
 677                 }
 678         }
 679
 680         function make_password($length = 8) {
 681
 682                 $password = "";
 683                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 684
 685         $i = 0;
 686
 687                 while ($i < $length) {
 688                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 689
 690                         if (!strstr($password, $char)) {
 691                                 $password .= $char;
 692                                 $i++;
 693                         }
 694                 }
 695                 return $password;
 696         }
 697
 698         // this is called after user is created to initialize default feeds, labels
 699         // or whatever else
 700
 701         // user preferences are checked on every login, not here
 702
 703         function initialize_user($link, $uid) {
 704
 705                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 706                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 707                         'http://tt-rss.org/releases.rss')");
 708
 709                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 710                         values ('$uid', 'Tiny Tiny RSS: Forum',
 711                                 'http://tt-rss.org/forum/rss.php')");
 712         }
 713
 714         function logout_user() {
 715                 session_destroy();
 716                 if (isset($_COOKIE[session_name()])) {
 717                    setcookie(session_name(), '', time()-42000, '/');
 718                 }
 719         }
 720
 721         function validate_csrf($csrf_token) {
 722                 return $csrf_token == $_SESSION['csrf_token'];
 723         }
 724
 725         function load_user_plugins($link, $owner_uid) {
 726                 if ($owner_uid) {
 727                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 728
 729                         global $pluginhost;
 730                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 731
 732                         if (get_schema_version($link) > 100) {
 733                                 $pluginhost->load_data();
 734                         }
 735                 }
 736         }
 737
 738         function login_sequence($link) {
 739                 $_SESSION["prefs_cache"] = false;
 740
 741                 if (SINGLE_USER_MODE) {
 742                         @session_start();
 743                         authenticate_user($link, "admin", null);
 744                         cache_prefs($link);
 745                         load_user_plugins($link, $_SESSION["uid"]);
 746                 } else {
 747                         if (!$_SESSION["uid"] || !validate_session($link)) {
 748
 749                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 750                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 751                                 } else {
 752                                          authenticate_user($link, null, null, true);
 753                                 }
 754
 755                                 if (!$_SESSION["uid"]) render_login_form($link);
 756
 757                                 @session_destroy();
 758                                 setcookie(session_name(), '', time()-42000, '/');
 759
 760                                 exit;
 761
 762                         } else {
 763                                 /* bump login timestamp */
 764                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 765                                         $_SESSION["uid"]);
 766                                 $_SESSION["last_login_update"] = time();
 767                         }
 768
 769                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 770                                 setcookie("ttrss_lang", $_SESSION["language"],
 771                                         time() + SESSION_COOKIE_LIFETIME);
 772                         }
 773
 774                         if ($_SESSION["uid"]) {
 775                                 cache_prefs($link);
 776                                 load_user_plugins($link, $_SESSION["uid"]);
 777
 778                                 /* cleanup ccache */
 779
 780                                 db_query($link, "DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 781                                         $_SESSION["uid"] . " AND
 782                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 783                                                         ttrss_feeds.id = feed_id) = 0");
 784
 785                                 db_query($link, "DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 786                                         $_SESSION["uid"] . " AND
 787                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 788                                                         ttrss_feed_categories.id = feed_id) = 0");
 789
 790                         }
 791
 792                 }
 793         }
 794
 795         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 796                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 797                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 798                 } else {
 799                         return $str;
 800                 }
 801         }
 802
 803         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 804
 805                 try {
 806                         $source_tz = new DateTimeZone($source_tz);
 807                 } catch (Exception $e) {
 808                         $source_tz = new DateTimeZone('UTC');
 809                 }
 810
 811                 try {
 812                         $dest_tz = new DateTimeZone($dest_tz);
 813                 } catch (Exception $e) {
 814                         $dest_tz = new DateTimeZone('UTC');
 815                 }
 816
 817                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 818                 return $dt->format('U') + $dest_tz->getOffset($dt);
 819         }
 820
 821         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 822                                         $no_smart_dt = false) {
 823
 824                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 825                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 826
 827                 global $utc_tz;
 828                 global $tz_offset;
 829
 830                 # We store date in UTC internally
 831                 $dt = new DateTime($timestamp, $utc_tz);
 832
 833                 if ($tz_offset == -1) {
 834
 835                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 836
 837                         try {
 838                                 $user_tz = new DateTimeZone($user_tz_string);
 839                         } catch (Exception $e) {
 840                                 $user_tz = $utc_tz;
 841                         }
 842
 843                         $tz_offset = $user_tz->getOffset($dt);
 844                 }
 845
 846                 $user_timestamp = $dt->format('U') + $tz_offset;
 847
 848                 if (!$no_smart_dt) {
 849                         return smart_date_time($link, $user_timestamp,
 850                                 $tz_offset, $owner_uid);
 851                 } else {
 852                         if ($long)
 853                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 854                         else
 855                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 856
 857                         return date($format, $user_timestamp);
 858                 }
 859         }
 860
 861         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 862                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 863
 864                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 865                         return date("G:i", $timestamp);
 866                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 867                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 868                         return date($format, $timestamp);
 869                 } else {
 870                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 871                         return date($format, $timestamp);
 872                 }
 873         }
 874
 875         function sql_bool_to_bool($s) {
 876                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 877                         return true;
 878                 } else {
 879                         return false;
 880                 }
 881         }
 882
 883         function bool_to_sql_bool($s) {
 884                 if ($s) {
 885                         return "true";
 886                 } else {
 887                         return "false";
 888                 }
 889         }
 890
 891         // Session caching removed due to causing wrong redirects to upgrade
 892         // script when get_schema_version() is called on an obsolete session
 893         // created on a previous schema version.
 894         function get_schema_version($link, $nocache = false) {
 895                 global $schema_version;
 896
 897                 if (!$schema_version) {
 898                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 899                         $version = db_fetch_result($result, 0, "schema_version");
 900                         $schema_version = $version;
 901                         return $version;
 902                 } else {
 903                         return $schema_version;
 904                 }
 905         }
 906
 907         function sanity_check($link) {
 908                 require_once 'errors.php';
 909
 910                 $error_code = 0;
 911                 $schema_version = get_schema_version($link, true);
 912
 913                 if ($schema_version != SCHEMA_VERSION) {
 914                         $error_code = 5;
 915                 }
 916
 917                 if (DB_TYPE == "mysql") {
 918                         $result = db_query($link, "SELECT true", false);
 919                         if (db_num_rows($result) != 1) {
 920                                 $error_code = 10;
 921                         }
 922                 }
 923
 924                 if (db_escape_string($link, "testTEST") != "testTEST") {
 925                         $error_code = 12;
 926                 }
 927
 928                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 929         }
 930
 931         function file_is_locked($filename) {
 932                 if (function_exists('flock')) {
 933                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 934                         if ($fp) {
 935                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 936                                         flock($fp, LOCK_UN);
 937                                         fclose($fp);
 938                                         return false;
 939                                 }
 940                                 fclose($fp);
 941                                 return true;
 942                         } else {
 943                                 return false;
 944                         }
 945                 }
 946                 return true; // consider the file always locked and skip the test
 947         }
 948
 949         function make_lockfile($filename) {
 950                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 951
 952                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 953                         if (function_exists('posix_getpid')) {
 954                                 fwrite($fp, posix_getpid() . "\n");
 955                         }
 956                         return $fp;
 957                 } else {
 958                         return false;
 959                 }
 960         }
 961
 962         function make_stampfile($filename) {
 963                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 964
 965                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 966                         fwrite($fp, time() . "\n");
 967                         flock($fp, LOCK_UN);
 968                         fclose($fp);
 969                         return true;
 970                 } else {
 971                         return false;
 972                 }
 973         }
 974
 975         function sql_random_function() {
 976                 if (DB_TYPE == "mysql") {
 977                         return "RAND()";
 978                 } else {
 979                         return "RANDOM()";
 980                 }
 981         }
 982
 983         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
 984
 985                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 986
 987                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 988
 989                         // Todo: all this interval stuff needs some generic generator function
 990
 991                         $date_qpart = "false";
 992
 993                         switch ($mode) {
 994                         case "1day":
 995                                 if (DB_TYPE == "pgsql") {
 996                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
 997                                 } else {
 998                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
 999                                 }
1000                                 break;
1001                         case "1week":
1002                                 if (DB_TYPE == "pgsql") {
1003                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1004                                 } else {
1005                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1006                                 }
1007                                 break;
1008                         case "2weeks":
1009                                 if (DB_TYPE == "pgsql") {
1010                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1011                                 } else {
1012                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1013                                 }
1014                                 break;
1015                         default:
1016                                 $date_qpart = "true";
1017                         }
1018
1019                         if (is_numeric($feed)) {
1020                                 if ($cat_view) {
1021
1022                                         if ($feed >= 0) {
1023
1024                                                 if ($feed > 0) {
1025                                                         $children = getChildCategories($link, $feed, $owner_uid);
1026                                                         array_push($children, $feed);
1027
1028                                                         $children = join(",", $children);
1029
1030                                                         $cat_qpart = "cat_id IN ($children)";
1031                                                 } else {
1032                                                         $cat_qpart = "cat_id IS NULL";
1033                                                 }
1034
1035                                                 db_query($link, "UPDATE ttrss_user_entries
1036                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1037                                                                 (SELECT id FROM
1038                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1039                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1040                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1041
1042                                         } else if ($feed == -2) {
1043
1044                                                 db_query($link, "UPDATE ttrss_user_entries
1045                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1046                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1047                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1048                                         }
1049
1050                                 } else if ($feed > 0) {
1051
1052                                         db_query($link, "UPDATE ttrss_user_entries
1053                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1054                                                         (SELECT id FROM
1055                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1056                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1057
1058                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1059
1060                                         if ($feed == -1) {
1061                                                 db_query($link, "UPDATE ttrss_user_entries
1062                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1063                                                                 (SELECT id FROM
1064                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1065                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1066                                         }
1067
1068                                         if ($feed == -2) {
1069                                                 db_query($link, "UPDATE ttrss_user_entries
1070                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1071                                                                 (SELECT id FROM
1072                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1073                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1074                                         }
1075
1076                                         if ($feed == -3) {
1077
1078                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1079
1080                                                 if (DB_TYPE == "pgsql") {
1081                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1082                                                 } else {
1083                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1084                                                                 INTERVAL $intl HOUR) ";
1085                                                 }
1086
1087                                                 db_query($link, "UPDATE ttrss_user_entries
1088                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1089                                                                 (SELECT id FROM
1090                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1091                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1092                                         }
1093
1094                                         if ($feed == -4) {
1095                                                 db_query($link, "UPDATE ttrss_user_entries
1096                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1097                                                                 (SELECT id FROM
1098                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1099                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1100                                         }
1101
1102                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1103
1104                                         $label_id = feed_to_label_id($feed);
1105
1106                                         db_query($link, "UPDATE ttrss_user_entries
1107                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1108                                                         (SELECT id FROM
1109                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1110                                                                         AND label_id = '$label_id' AND ref_id = article_id
1111                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1112
1113                                 }
1114
1115                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1116
1117                         } else { // tag
1118                                 db_query($link, "UPDATE ttrss_user_entries
1119                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1120                                                 (SELECT id FROM
1121                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1122                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1123                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1124
1125                         }
1126         }
1127
1128         function getAllCounters($link) {
1129                 $data = getGlobalCounters($link);
1130
1131                 $data = array_merge($data, getVirtCounters($link));
1132                 $data = array_merge($data, getLabelCounters($link));
1133                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1134                 $data = array_merge($data, getCategoryCounters($link));
1135
1136                 return $data;
1137         }
1138
1139         function getCategoryTitle($link, $cat_id) {
1140
1141                 if ($cat_id == -1) {
1142                         return __("Special");
1143                 } else if ($cat_id == -2) {
1144                         return __("Labels");
1145                 } else {
1146
1147                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1148                                 id = '$cat_id'");
1149
1150                         if (db_num_rows($result) == 1) {
1151                                 return db_fetch_result($result, 0, "title");
1152                         } else {
1153                                 return __("Uncategorized");
1154                         }
1155                 }
1156         }
1157
1158
1159         function getCategoryCounters($link) {
1160                 $ret_arr = array();
1161
1162                 /* Labels category */
1163
1164                 $cv = array("id" => -2, "kind" => "cat",
1165                         "counter" => getCategoryUnread($link, -2));
1166
1167                 array_push($ret_arr, $cv);
1168
1169                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1170                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1171                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1172                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1173                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1174                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1175                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1176
1177                 while ($line = db_fetch_assoc($result)) {
1178                         $line["cat_id"] = (int) $line["cat_id"];
1179
1180                         if ($line["num_children"] > 0) {
1181                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1182                         } else {
1183                                 $child_counter = 0;
1184                         }
1185
1186                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1187                                 "counter" => $line["unread"] + $child_counter);
1188
1189                         array_push($ret_arr, $cv);
1190                 }
1191
1192                 /* Special case: NULL category doesn't actually exist in the DB */
1193
1194                 $cv = array("id" => 0, "kind" => "cat",
1195                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1196
1197                 array_push($ret_arr, $cv);
1198
1199                 return $ret_arr;
1200         }
1201
1202         // only accepts real cats (>= 0)
1203         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1204                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1205
1206                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1207                                 AND owner_uid = $owner_uid");
1208
1209                 $unread = 0;
1210
1211                 while ($line = db_fetch_assoc($result)) {
1212                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1213                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1214                 }
1215
1216                 return $unread;
1217         }
1218
1219         function getCategoryUnread($link, $cat, $owner_uid = false) {
1220
1221                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1222
1223                 if ($cat >= 0) {
1224
1225                         if ($cat != 0) {
1226                                 $cat_query = "cat_id = '$cat'";
1227                         } else {
1228                                 $cat_query = "cat_id IS NULL";
1229                         }
1230
1231                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1232                                         AND owner_uid = " . $owner_uid);
1233
1234                         $cat_feeds = array();
1235                         while ($line = db_fetch_assoc($result)) {
1236                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1237                         }
1238
1239                         if (count($cat_feeds) == 0) return 0;
1240
1241                         $match_part = implode(" OR ", $cat_feeds);
1242
1243                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1244                                 FROM ttrss_user_entries
1245                                 WHERE   unread = true AND ($match_part)
1246                                 AND owner_uid = " . $owner_uid);
1247
1248                         $unread = 0;
1249
1250                         # this needs to be rewritten
1251                         while ($line = db_fetch_assoc($result)) {
1252                                 $unread += $line["unread"];
1253                         }
1254
1255                         return $unread;
1256                 } else if ($cat == -1) {
1257                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1258                 } else if ($cat == -2) {
1259
1260                         $result = db_query($link, "
1261                                 SELECT COUNT(unread) AS unread FROM
1262                                         ttrss_user_entries, ttrss_user_labels2
1263                                 WHERE article_id = ref_id AND unread = true
1264                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1265
1266                         $unread = db_fetch_result($result, 0, "unread");
1267
1268                         return $unread;
1269
1270                 }
1271         }
1272
1273         function getFeedUnread($link, $feed, $is_cat = false) {
1274                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1275         }
1276
1277         function getLabelUnread($link, $label_id, $owner_uid = false) {
1278                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1279
1280                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1281                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1282
1283                 if (db_num_rows($result) != 0) {
1284                         return db_fetch_result($result, 0, "unread");
1285                 } else {
1286                         return 0;
1287                 }
1288         }
1289
1290         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1291                 $owner_uid = false) {
1292
1293                 $n_feed = (int) $feed;
1294                 $need_entries = false;
1295
1296                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1297
1298                 if ($unread_only) {
1299                         $unread_qpart = "unread = true";
1300                 } else {
1301                         $unread_qpart = "true";
1302                 }
1303
1304                 if ($is_cat) {
1305                         return getCategoryUnread($link, $n_feed, $owner_uid);
1306                 } else if ($n_feed == -6) {
1307                         return 0;
1308                 } else if ($feed != "0" && $n_feed == 0) {
1309
1310                         $feed = db_escape_string($link, $feed);
1311
1312                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1313                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1314                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1315                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1316                         return db_fetch_result($result, 0, "count");
1317
1318                 } else if ($n_feed == -1) {
1319                         $match_part = "marked = true";
1320                 } else if ($n_feed == -2) {
1321                         $match_part = "published = true";
1322                 } else if ($n_feed == -3) {
1323                         $match_part = "unread = true AND score >= 0";
1324
1325                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1326
1327                         if (DB_TYPE == "pgsql") {
1328                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1329                         } else {
1330                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1331                         }
1332
1333                         $need_entries = true;
1334
1335                 } else if ($n_feed == -4) {
1336                         $match_part = "true";
1337                 } else if ($n_feed >= 0) {
1338
1339                         if ($n_feed != 0) {
1340                                 $match_part = "feed_id = '$n_feed'";
1341                         } else {
1342                                 $match_part = "feed_id IS NULL";
1343                         }
1344
1345                 } else if ($feed < LABEL_BASE_INDEX) {
1346
1347                         $label_id = feed_to_label_id($feed);
1348
1349                         return getLabelUnread($link, $label_id, $owner_uid);
1350
1351                 }
1352
1353                 if ($match_part) {
1354
1355                         if ($need_entries) {
1356                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1357                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1358                         } else {
1359                                 $from_qpart = "ttrss_user_entries";
1360                         }
1361
1362                         $query = "SELECT count(int_id) AS unread
1363                                 FROM $from_qpart WHERE
1364                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1365
1366                         //echo "[$feed/$query]\n";
1367
1368                         $result = db_query($link, $query);
1369
1370                 } else {
1371
1372                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1373                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1374                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1375                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1376                 }
1377
1378                 $unread = db_fetch_result($result, 0, "unread");
1379
1380                 return $unread;
1381         }
1382
1383         function getGlobalUnread($link, $user_id = false) {
1384
1385                 if (!$user_id) {
1386                         $user_id = $_SESSION["uid"];
1387                 }
1388
1389                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1390                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1391
1392                 $c_id = db_fetch_result($result, 0, "c_id");
1393
1394                 return $c_id;
1395         }
1396
1397         function getGlobalCounters($link, $global_unread = -1) {
1398                 $ret_arr = array();
1399
1400                 if ($global_unread == -1) {
1401                         $global_unread = getGlobalUnread($link);
1402                 }
1403
1404                 $cv = array("id" => "global-unread",
1405                         "counter" => (int) $global_unread);
1406
1407                 array_push($ret_arr, $cv);
1408
1409                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1410                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1411
1412                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1413
1414                 $cv = array("id" => "subscribed-feeds",
1415                         "counter" => (int) $subscribed_feeds);
1416
1417                 array_push($ret_arr, $cv);
1418
1419                 return $ret_arr;
1420         }
1421
1422         function getVirtCounters($link) {
1423
1424                 $ret_arr = array();
1425
1426                 for ($i = 0; $i >= -4; $i--) {
1427
1428                         $count = getFeedUnread($link, $i);
1429
1430                         $cv = array("id" => $i,
1431                                 "counter" => (int) $count);
1432
1433 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1434 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1435
1436                         array_push($ret_arr, $cv);
1437                 }
1438
1439                 global $pluginhost;
1440
1441                 if ($pluginhost) {
1442                         $feeds = $pluginhost->get_feeds(-1);
1443
1444                         if (is_array($feeds)) {
1445                                 foreach ($feeds as $feed) {
1446                                         $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1447                                                 "counter" => $feed['sender']->get_unread($feed['id']));
1448
1449                                         array_push($ret_arr, $cv);
1450                                 }
1451                         }
1452                 }
1453
1454                 return $ret_arr;
1455         }
1456
1457         function getLabelCounters($link, $descriptions = false) {
1458
1459                 $ret_arr = array();
1460
1461                 $owner_uid = $_SESSION["uid"];
1462
1463                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1464                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1465                                 (ttrss_labels2.id = label_id)
1466                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1467                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1468                                         ttrss_labels2.caption");
1469
1470                 while ($line = db_fetch_assoc($result)) {
1471
1472                         $id = label_to_feed_id($line["id"]);
1473
1474                         $label_name = $line["caption"];
1475                         $count = $line["unread"];
1476
1477                         $cv = array("id" => $id,
1478                                 "counter" => (int) $count);
1479
1480                         if ($descriptions)
1481                                 $cv["description"] = $label_name;
1482
1483 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1484 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1485
1486                         array_push($ret_arr, $cv);
1487                 }
1488
1489                 return $ret_arr;
1490         }
1491
1492         function getFeedCounters($link, $active_feed = false) {
1493
1494                 $ret_arr = array();
1495
1496                 $query = "SELECT ttrss_feeds.id,
1497                                 ttrss_feeds.title,
1498                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1499                                 last_error, value AS count
1500                         FROM ttrss_feeds, ttrss_counters_cache
1501                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1502                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1503                                 AND ttrss_counters_cache.feed_id = id";
1504
1505                 $result = db_query($link, $query);
1506                 $fctrs_modified = false;
1507
1508                 while ($line = db_fetch_assoc($result)) {
1509
1510                         $id = $line["id"];
1511                         $count = $line["count"];
1512                         $last_error = htmlspecialchars($line["last_error"]);
1513
1514                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1515
1516                         $has_img = feed_has_icon($id);
1517
1518                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1519                                 $last_updated = '';
1520
1521                         $cv = array("id" => $id,
1522                                 "updated" => $last_updated,
1523                                 "counter" => (int) $count,
1524                                 "has_img" => (int) $has_img);
1525
1526                         if ($last_error)
1527                                 $cv["error"] = $last_error;
1528
1529 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1530 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1531
1532                         if ($active_feed && $id == $active_feed)
1533                                 $cv["title"] = truncate_string($line["title"], 30);
1534
1535                         array_push($ret_arr, $cv);
1536
1537                 }
1538
1539                 return $ret_arr;
1540         }
1541
1542         function get_pgsql_version($link) {
1543                 $result = db_query($link, "SELECT version() AS version");
1544                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1545                 return $version[1];
1546         }
1547
1548         /**
1549          * @return array (code => Status code, message => error message if available)
1550          *
1551          *                 0 - OK, Feed already exists
1552          *                 1 - OK, Feed added
1553          *                 2 - Invalid URL
1554          *                 3 - URL content is HTML, no feeds available
1555          *                 4 - URL content is HTML which contains multiple feeds.
1556          *                     Here you should call extractfeedurls in rpc-backend
1557          *                     to get all possible feeds.
1558          *                 5 - Couldn't download the URL content.
1559          */
1560         function subscribe_to_feed($link, $url, $cat_id = 0,
1561                         $auth_login = '', $auth_pass = '') {
1562
1563                 global $fetch_last_error;
1564
1565                 require_once "include/rssfuncs.php";
1566
1567                 $url = fix_url($url);
1568
1569                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1570
1571                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1572
1573                 if (!$contents) {
1574                         return array("code" => 5, "message" => $fetch_last_error);
1575                 }
1576
1577                 if (is_html($contents)) {
1578                         $feedUrls = get_feeds_from_html($url, $contents);
1579
1580                         if (count($feedUrls) == 0) {
1581                                 return array("code" => 3);
1582                         } else if (count($feedUrls) > 1) {
1583                                 return array("code" => 4, "feeds" => $feedUrls);
1584                         }
1585                         //use feed url as new URL
1586                         $url = key($feedUrls);
1587                 }
1588
1589                 if ($cat_id == "0" || !$cat_id) {
1590                         $cat_qpart = "NULL";
1591                 } else {
1592                         $cat_qpart = "'$cat_id'";
1593                 }
1594
1595                 $result = db_query($link,
1596                         "SELECT id FROM ttrss_feeds
1597                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1598
1599                 if (db_num_rows($result) == 0) {
1600                         $result = db_query($link,
1601                                 "INSERT INTO ttrss_feeds
1602                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1603                                 VALUES ('".$_SESSION["uid"]."', '$url',
1604                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1605
1606                         $result = db_query($link,
1607                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1608                                         AND owner_uid = " . $_SESSION["uid"]);
1609
1610                         $feed_id = db_fetch_result($result, 0, "id");
1611
1612                         if ($feed_id) {
1613                                 update_rss_feed($link, $feed_id, true);
1614                         }
1615
1616                         return array("code" => 1);
1617                 } else {
1618                         return array("code" => 0);
1619                 }
1620         }
1621
1622         function print_feed_select($link, $id, $default_id = "",
1623                 $attributes = "", $include_all_feeds = true,
1624                 $root_id = false, $nest_level = 0) {
1625
1626                 if (!$root_id) {
1627                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1628                         if ($include_all_feeds) {
1629                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1630                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1631                         }
1632                 }
1633
1634                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1635
1636                         if ($root_id)
1637                                 $parent_qpart = "parent_cat = '$root_id'";
1638                         else
1639                                 $parent_qpart = "parent_cat IS NULL";
1640
1641                         $result = db_query($link, "SELECT id,title,
1642                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1643                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1644                                 FROM ttrss_feed_categories
1645                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1646
1647                         while ($line = db_fetch_assoc($result)) {
1648
1649                                 for ($i = 0; $i < $nest_level; $i++)
1650                                         $line["title"] = " - " . $line["title"];
1651
1652                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1653
1654                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1655                                         $line["id"], htmlspecialchars($line["title"]));
1656
1657                                 if ($line["num_children"] > 0)
1658                                         print_feed_select($link, $id, $default_id, $attributes,
1659                                                 $include_all_feeds, $line["id"], $nest_level+1);
1660
1661                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1662                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1663
1664                                 while ($fline = db_fetch_assoc($feed_result)) {
1665                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1666
1667                                         $fline["title"] = " + " . $fline["title"];
1668
1669                                         for ($i = 0; $i < $nest_level; $i++)
1670                                                 $fline["title"] = " - " . $fline["title"];
1671
1672                                         printf("<option $is_selected value='%d'>%s</option>",
1673                                                 $fline["id"], htmlspecialchars($fline["title"]));
1674                                 }
1675                         }
1676
1677                         if (!$root_id) {
1678                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1679
1680                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1681                                         __("Uncategorized"));
1682
1683                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1684                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1685
1686                                 while ($fline = db_fetch_assoc($feed_result)) {
1687                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1688
1689                                         $fline["title"] = " + " . $fline["title"];
1690
1691                                         for ($i = 0; $i < $nest_level; $i++)
1692                                                 $fline["title"] = " - " . $fline["title"];
1693
1694                                         printf("<option $is_selected value='%d'>%s</option>",
1695                                                 $fline["id"], htmlspecialchars($fline["title"]));
1696                                 }
1697                         }
1698
1699                 } else {
1700                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1701                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1702
1703                         while ($line = db_fetch_assoc($result)) {
1704
1705                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1706
1707                                 printf("<option $is_selected value='%d'>%s</option>",
1708                                         $line["id"], htmlspecialchars($line["title"]));
1709                         }
1710                 }
1711
1712                 if (!$root_id) {
1713                         print "</select>";
1714                 }
1715         }
1716
1717         function print_feed_cat_select($link, $id, $default_id,
1718                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1719
1720                         if (!$root_id) {
1721                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1722                         }
1723
1724                         if ($root_id)
1725                                 $parent_qpart = "parent_cat = '$root_id'";
1726                         else
1727                                 $parent_qpart = "parent_cat IS NULL";
1728
1729                         $result = db_query($link, "SELECT id,title,
1730                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1731                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1732                                 FROM ttrss_feed_categories
1733                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1734
1735                         while ($line = db_fetch_assoc($result)) {
1736                                 if ($line["id"] == $default_id) {
1737                                         $is_selected = "selected=\"1\"";
1738                                 } else {
1739                                         $is_selected = "";
1740                                 }
1741
1742                                 for ($i = 0; $i < $nest_level; $i++)
1743                                         $line["title"] = " - " . $line["title"];
1744
1745                                 if ($line["title"])
1746                                         printf("<option $is_selected value='%d'>%s</option>",
1747                                                 $line["id"], htmlspecialchars($line["title"]));
1748
1749                                 if ($line["num_children"] > 0)
1750                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1751                                                 $include_all_cats, $line["id"], $nest_level+1);
1752                         }
1753
1754                         if (!$root_id) {
1755                                 if ($include_all_cats) {
1756                                         if (db_num_rows($result) > 0) {
1757                                                 print "<option disabled=\"1\">--------</option>";
1758                                         }
1759
1760                                         if ($default_id == 0) {
1761                                                 $is_selected = "selected=\"1\"";
1762                                         } else {
1763                                                 $is_selected = "";
1764                                         }
1765
1766                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1767                                 }
1768                                 print "</select>";
1769                         }
1770                 }
1771
1772         function checkbox_to_sql_bool($val) {
1773                 return ($val == "on") ? "true" : "false";
1774         }
1775
1776         function getFeedCatTitle($link, $id) {
1777                 if ($id == -1) {
1778                         return __("Special");
1779                 } else if ($id < LABEL_BASE_INDEX) {
1780                         return __("Labels");
1781                 } else if ($id > 0) {
1782                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1783                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1784                                         cat_id = ttrss_feed_categories.id");
1785                         if (db_num_rows($result) == 1) {
1786                                 return db_fetch_result($result, 0, "title");
1787                         } else {
1788                                 return __("Uncategorized");
1789                         }
1790                 } else {
1791                         return "getFeedCatTitle($id) failed";
1792                 }
1793
1794         }
1795
1796         function getFeedIcon($id) {
1797                 switch ($id) {
1798                 case 0:
1799                         return "images/archive.png";
1800                         break;
1801                 case -1:
1802                         return "images/mark_set.svg";
1803                         break;
1804                 case -2:
1805                         return "images/pub_set.svg";
1806                         break;
1807                 case -3:
1808                         return "images/fresh.png";
1809                         break;
1810                 case -4:
1811                         return "images/tag.png";
1812                         break;
1813                 case -6:
1814                         return "images/recently_read.png";
1815                         break;
1816                 default:
1817                         if ($id < LABEL_BASE_INDEX) {
1818                                 return "images/label.png";
1819                         } else {
1820                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1821                                         return ICONS_URL . "/$id.ico";
1822                         }
1823                         break;
1824                 }
1825         }
1826
1827         function getFeedTitle($link, $id, $cat = false) {
1828                 if ($cat) {
1829                         return getCategoryTitle($link, $id);
1830                 } else if ($id == -1) {
1831                         return __("Starred articles");
1832                 } else if ($id == -2) {
1833                         return __("Published articles");
1834                 } else if ($id == -3) {
1835                         return __("Fresh articles");
1836                 } else if ($id == -4) {
1837                         return __("All articles");
1838                 } else if ($id === 0 || $id === "0") {
1839                         return __("Archived articles");
1840                 } else if ($id == -6) {
1841                         return __("Recently read");
1842                 } else if ($id < LABEL_BASE_INDEX) {
1843                         $label_id = feed_to_label_id($id);
1844                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1845                         if (db_num_rows($result) == 1) {
1846                                 return db_fetch_result($result, 0, "caption");
1847                         } else {
1848                                 return "Unknown label ($label_id)";
1849                         }
1850
1851                 } else if (is_numeric($id) && $id > 0) {
1852                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1853                         if (db_num_rows($result) == 1) {
1854                                 return db_fetch_result($result, 0, "title");
1855                         } else {
1856                                 return "Unknown feed ($id)";
1857                         }
1858                 } else {
1859                         return $id;
1860                 }
1861         }
1862
1863         function make_init_params($link) {
1864                 $params = array();
1865
1866                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1867                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1868                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1869                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1870
1871                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1872                  }
1873
1874                 $params["icons_url"] = ICONS_URL;
1875                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1876                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1877                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1878                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1879                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1880                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1881
1882                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1883                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1884
1885                 $max_feed_id = db_fetch_result($result, 0, "mid");
1886                 $num_feeds = db_fetch_result($result, 0, "nf");
1887
1888                 $params["max_feed_id"] = (int) $max_feed_id;
1889                 $params["num_feeds"] = (int) $num_feeds;
1890
1891                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1892                 $params["hotkeys"] = get_hotkeys_map($link);
1893
1894                 $params["csrf_token"] = $_SESSION["csrf_token"];
1895                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1896
1897                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1898
1899                 return $params;
1900         }
1901
1902         function get_hotkeys_info($link) {
1903                 $hotkeys = array(
1904                         __("Navigation") => array(
1905                                 "next_feed" => __("Open next feed"),
1906                                 "prev_feed" => __("Open previous feed"),
1907                                 "next_article" => __("Open next article"),
1908                                 "prev_article" => __("Open previous article"),
1909                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1910                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1911                                 "search_dialog" => __("Show search dialog")),
1912                         __("Article") => array(
1913                                 "toggle_mark" => __("Toggle starred"),
1914                                 "toggle_publ" => __("Toggle published"),
1915                                 "toggle_unread" => __("Toggle unread"),
1916                                 "edit_tags" => __("Edit tags"),
1917                                 "dismiss_selected" => __("Dismiss selected"),
1918                                 "dismiss_read" => __("Dismiss read"),
1919                                 "open_in_new_window" => __("Open in new window"),
1920                                 "catchup_below" => __("Mark below as read"),
1921                                 "catchup_above" => __("Mark above as read"),
1922                                 "article_scroll_down" => __("Scroll down"),
1923                                 "article_scroll_up" => __("Scroll up"),
1924                                 "select_article_cursor" => __("Select article under cursor"),
1925                                 "email_article" => __("Email article"),
1926                                 "close_article" => __("Close/collapse article"),
1927                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1928                                 "toggle_embed_original" => __("Toggle embed original")),
1929                         __("Article selection") => array(
1930                                 "select_all" => __("Select all articles"),
1931                                 "select_unread" => __("Select unread"),
1932                                 "select_marked" => __("Select starred"),
1933                                 "select_published" => __("Select published"),
1934                                 "select_invert" => __("Invert selection"),
1935                                 "select_none" => __("Deselect everything")),
1936                         __("Feed") => array(
1937                                 "feed_refresh" => __("Refresh current feed"),
1938                                 "feed_unhide_read" => __("Un/hide read feeds"),
1939                                 "feed_subscribe" => __("Subscribe to feed"),
1940                                 "feed_edit" => __("Edit feed"),
1941                                 "feed_catchup" => __("Mark as read"),
1942                                 "feed_reverse" => __("Reverse headlines"),
1943                                 "feed_debug_update" => __("Debug feed update"),
1944                                 "catchup_all" => __("Mark all feeds as read"),
1945                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1946                                 "toggle_combined_mode" => __("Toggle combined mode"),
1947                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
1948                         __("Go to") => array(
1949                                 "goto_all" => __("All articles"),
1950                                 "goto_fresh" => __("Fresh"),
1951                                 "goto_marked" => __("Starred"),
1952                                 "goto_published" => __("Published"),
1953                                 "goto_tagcloud" => __("Tag cloud"),
1954                                 "goto_prefs" => __("Preferences")),
1955                         __("Other") => array(
1956                                 "create_label" => __("Create label"),
1957                                 "create_filter" => __("Create filter"),
1958                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1959                                 "help_dialog" => __("Show help dialog"))
1960                         );
1961
1962                 global $pluginhost;
1963                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_INFO) as $plugin) {
1964                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
1965                 }
1966
1967                 return $hotkeys;
1968         }
1969
1970         function get_hotkeys_map($link) {
1971                 $hotkeys = array(
1972 //                      "navigation" => array(
1973                                 "k" => "next_feed",
1974                                 "j" => "prev_feed",
1975                                 "n" => "next_article",
1976                                 "p" => "prev_article",
1977                                 "(38)|up" => "prev_article",
1978                                 "(40)|down" => "next_article",
1979 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1980 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1981                                 "(191)|/" => "search_dialog",
1982 //                      "article" => array(
1983                                 "s" => "toggle_mark",
1984                                 "*s" => "toggle_publ",
1985                                 "u" => "toggle_unread",
1986                                 "*t" => "edit_tags",
1987                                 "*d" => "dismiss_selected",
1988                                 "*x" => "dismiss_read",
1989                                 "o" => "open_in_new_window",
1990                                 "c p" => "catchup_below",
1991                                 "c n" => "catchup_above",
1992                                 "*n" => "article_scroll_down",
1993                                 "*p" => "article_scroll_up",
1994                                 "*(38)|Shift+up" => "article_scroll_up",
1995                                 "*(40)|Shift+down" => "article_scroll_down",
1996                                 "a *w" => "toggle_widescreen",
1997                                 "a e" => "toggle_embed_original",
1998                                 "e" => "email_article",
1999                                 "a q" => "close_article",
2000 //                      "article_selection" => array(
2001                                 "a a" => "select_all",
2002                                 "a u" => "select_unread",
2003                                 "a *u" => "select_marked",
2004                                 "a p" => "select_published",
2005                                 "a i" => "select_invert",
2006                                 "a n" => "select_none",
2007 //                      "feed" => array(
2008                                 "f r" => "feed_refresh",
2009                                 "f a" => "feed_unhide_read",
2010                                 "f s" => "feed_subscribe",
2011                                 "f e" => "feed_edit",
2012                                 "f q" => "feed_catchup",
2013                                 "f x" => "feed_reverse",
2014                                 "f *d" => "feed_debug_update",
2015                                 "f *c" => "toggle_combined_mode",
2016                                 "f c" => "toggle_cdm_expanded",
2017                                 "*q" => "catchup_all",
2018                                 "x" => "cat_toggle_collapse",
2019 //                      "goto" => array(
2020                                 "g a" => "goto_all",
2021                                 "g f" => "goto_fresh",
2022                                 "g s" => "goto_marked",
2023                                 "g p" => "goto_published",
2024                                 "g t" => "goto_tagcloud",
2025                                 "g *p" => "goto_prefs",
2026 //                      "other" => array(
2027                                 "(9)|Tab" => "select_article_cursor", // tab
2028                                 "c l" => "create_label",
2029                                 "c f" => "create_filter",
2030                                 "c s" => "collapse_sidebar",
2031                                 "^(191)|Ctrl+/" => "help_dialog",
2032                         );
2033
2034                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
2035                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2036                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2037                 }
2038
2039                 global $pluginhost;
2040                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2041                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2042                 }
2043
2044                 $prefixes = array();
2045
2046                 foreach (array_keys($hotkeys) as $hotkey) {
2047                         $pair = explode(" ", $hotkey, 2);
2048
2049                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2050                                 array_push($prefixes, $pair[0]);
2051                         }
2052                 }
2053
2054                 return array($prefixes, $hotkeys);
2055         }
2056
2057         function make_runtime_info($link) {
2058                 $data = array();
2059
2060                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2061                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2062
2063                 $max_feed_id = db_fetch_result($result, 0, "mid");
2064                 $num_feeds = db_fetch_result($result, 0, "nf");
2065
2066                 $data["max_feed_id"] = (int) $max_feed_id;
2067                 $data["num_feeds"] = (int) $num_feeds;
2068
2069                 $data['last_article_id'] = getLastArticleId($link);
2070                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2071
2072                 $data['dep_ts'] = calculate_dep_timestamp();
2073                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2074
2075                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2076
2077                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2078
2079                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2080
2081                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2082
2083                                 if ($stamp) {
2084                                         $stamp_delta = time() - $stamp;
2085
2086                                         if ($stamp_delta > 1800) {
2087                                                 $stamp_check = 0;
2088                                         } else {
2089                                                 $stamp_check = 1;
2090                                                 $_SESSION["daemon_stamp_check"] = time();
2091                                         }
2092
2093                                         $data['daemon_stamp_ok'] = $stamp_check;
2094
2095                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2096
2097                                         $data['daemon_stamp'] = $stamp_fmt;
2098                                 }
2099                         }
2100                 }
2101
2102                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2103                                 $new_version_details = @check_for_update($link);
2104
2105                                 $data['new_version_available'] = (int) ($new_version_details != false);
2106
2107                                 $_SESSION["last_version_check"] = time();
2108                                 $_SESSION["version_data"] = $new_version_details;
2109                 }
2110
2111                 return $data;
2112         }
2113
2114         function search_to_sql($link, $search) {
2115
2116                 $search_query_part = "";
2117
2118                 $keywords = explode(" ", $search);
2119                 $query_keywords = array();
2120
2121                 foreach ($keywords as $k) {
2122                         if (strpos($k, "-") === 0) {
2123                                 $k = substr($k, 1);
2124                                 $not = "NOT";
2125                         } else {
2126                                 $not = "";
2127                         }
2128
2129                         $commandpair = explode(":", mb_strtolower($k), 2);
2130
2131                         if ($commandpair[0] == "note" && $commandpair[1]) {
2132
2133                                 if ($commandpair[1] == "true")
2134                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2135                                 else
2136                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2137
2138                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2139
2140                                 if ($commandpair[1] == "true")
2141                                         array_push($query_keywords, "($not (marked = true))");
2142                                 else
2143                                         array_push($query_keywords, "($not (marked = false))");
2144
2145                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2146
2147                                 if ($commandpair[1] == "true")
2148                                         array_push($query_keywords, "($not (published = true))");
2149                                 else
2150                                         array_push($query_keywords, "($not (published = false))");
2151
2152                         } else if (strpos($k, "@") === 0) {
2153
2154                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2155                                 $orig_ts = strtotime(substr($k, 1));
2156                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2157
2158                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2159
2160                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2161                         } else {
2162                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2163                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2164                         }
2165                 }
2166
2167                 $search_query_part = implode("AND", $query_keywords);
2168
2169                 return $search_query_part;
2170         }
2171
2172         function getParentCategories($link, $cat, $owner_uid) {
2173                 $rv = array();
2174
2175                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2176                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2177
2178                 while ($line = db_fetch_assoc($result)) {
2179                         array_push($rv, $line["parent_cat"]);
2180                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2181                 }
2182
2183                 return $rv;
2184         }
2185
2186         function getChildCategories($link, $cat, $owner_uid) {
2187                 $rv = array();
2188
2189                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2190                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2191
2192                 while ($line = db_fetch_assoc($result)) {
2193                         array_push($rv, $line["id"]);
2194                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2195                 }
2196
2197                 return $rv;
2198         }
2199
2200         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2201
2202                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2203
2204                 $ext_tables_part = "";
2205
2206                         if ($search) {
2207
2208                                 if (SPHINX_ENABLED) {
2209                                         $ids = join(",", @sphinx_search($search, 0, 500));
2210
2211                                         if ($ids)
2212                                                 $search_query_part = "ref_id IN ($ids) AND ";
2213                                         else
2214                                                 $search_query_part = "ref_id = -1 AND ";
2215
2216                                 } else {
2217                                         $search_query_part = search_to_sql($link, $search);
2218                                         $search_query_part .= " AND ";
2219                                 }
2220
2221                         } else {
2222                                 $search_query_part = "";
2223                         }
2224
2225                         if ($filter) {
2226
2227                                 if (DB_TYPE == "pgsql") {
2228                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2229                                 } else {
2230                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2231                                 }
2232
2233                                 $override_order = "updated DESC";
2234
2235                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2236
2237                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2238                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2239                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2240                                         WHERE $filter_query_part LIMIT 1", false);
2241
2242                                 if ($result) {
2243                                         $test = db_fetch_result($result, 0, "true_val");
2244
2245                                         if (!$test) {
2246                                                 $filter_query_part = "false AND";
2247                                         } else {
2248                                                 $filter_query_part .= " AND";
2249                                         }
2250                                 } else {
2251                                         $filter_query_part = "false AND";
2252                                 }
2253
2254                         } else {
2255                                 $filter_query_part = "";
2256                         }
2257
2258                         if ($since_id) {
2259                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2260                         } else {
2261                                 $since_id_part = "";
2262                         }
2263
2264                         $view_query_part = "";
2265
2266                         if ($view_mode == "adaptive") {
2267                                 if ($search) {
2268                                         $view_query_part = " ";
2269                                 } else if ($feed != -1) {
2270
2271                                         $unread = getFeedUnread($link, $feed, $cat_view);
2272
2273                                         if ($cat_view && $feed > 0 && $include_children)
2274                                                 $unread += getCategoryChildrenUnread($link, $feed);
2275
2276                                         if ($unread > 0)
2277                                 $view_query_part = " unread = true AND ";
2278
2279                                 }
2280                         }
2281
2282                         if ($view_mode == "marked") {
2283                                 $view_query_part = " marked = true AND ";
2284                         }
2285
2286                         if ($view_mode == "has_note") {
2287                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2288                         }
2289
2290                         if ($view_mode == "published") {
2291                                 $view_query_part = " published = true AND ";
2292                         }
2293
2294                         if ($view_mode == "unread" && $feed != -6) {
2295                                 $view_query_part = " unread = true AND ";
2296                         }
2297
2298                         if ($limit > 0) {
2299                                 $limit_query_part = "LIMIT " . $limit;
2300                         }
2301
2302                         $allow_archived = false;
2303
2304                         $vfeed_query_part = "";
2305
2306                         // override query strategy and enable feed display when searching globally
2307                         if ($search && $search_mode == "all_feeds") {
2308                                 $query_strategy_part = "true";
2309                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2310                         /* tags */
2311                         } else if (!is_numeric($feed)) {
2312                                 $query_strategy_part = "true";
2313                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2314                                         id = feed_id) as feed_title,";
2315                         } else if ($search && $search_mode == "this_cat") {
2316                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2317
2318                                 if ($feed > 0) {
2319                                         if ($include_children) {
2320                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2321                                                 array_push($subcats, $feed);
2322                                                 $cats_qpart = join(",", $subcats);
2323                                         } else {
2324                                                 $cats_qpart = $feed;
2325                                         }
2326
2327                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2328
2329                                 } else {
2330                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2331                                 }
2332
2333                         } else if ($feed > 0) {
2334
2335                                 if ($cat_view) {
2336
2337                                         if ($feed > 0) {
2338                                                 if ($include_children) {
2339                                                         # sub-cats
2340                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2341
2342                                                         array_push($subcats, $feed);
2343                                                         $query_strategy_part = "cat_id IN (".
2344                                                                         implode(",", $subcats).")";
2345
2346                                                 } else {
2347                                                         $query_strategy_part = "cat_id = '$feed'";
2348                                                 }
2349
2350                                         } else {
2351                                                 $query_strategy_part = "cat_id IS NULL";
2352                                         }
2353
2354                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2355
2356                                 } else {
2357                                         $query_strategy_part = "feed_id = '$feed'";
2358                                 }
2359                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2360                                 $query_strategy_part = "feed_id IS NULL";
2361                                 $allow_archived = true;
2362                         } else if ($feed == 0 && $cat_view) { // uncategorized
2363                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2364                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2365                         } else if ($feed == -1) { // starred virtual feed
2366                                 $query_strategy_part = "marked = true";
2367                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2368                                 $allow_archived = true;
2369
2370                                 if (!$override_order) {
2371                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2372                                 }
2373
2374                         } else if ($feed == -2) { // published virtual feed OR labels category
2375
2376                                 if (!$cat_view) {
2377                                         $query_strategy_part = "published = true";
2378                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2379                                         $allow_archived = true;
2380
2381                                         if (!$override_order) {
2382                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2383                                         }
2384
2385                                 } else {
2386                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2387
2388                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2389
2390                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2391                                                 ttrss_user_labels2.article_id = ref_id";
2392
2393                                 }
2394                         } else if ($feed == -6) { // recently read
2395                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2396                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2397                                 $allow_archived = true;
2398
2399                                 if (!$override_order) $override_order = "last_read DESC";
2400                         } else if ($feed == -3) { // fresh virtual feed
2401                                 $query_strategy_part = "unread = true AND score >= 0";
2402
2403                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2404
2405                                 if (DB_TYPE == "pgsql") {
2406                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2407                                 } else {
2408                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2409                                 }
2410
2411                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2412                         } else if ($feed == -4) { // all articles virtual feed
2413                                 $query_strategy_part = "true";
2414                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2415                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2416                                 $label_id = feed_to_label_id($feed);
2417
2418                                 $query_strategy_part = "label_id = '$label_id' AND
2419                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2420                                         ttrss_user_labels2.article_id = ref_id";
2421
2422                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2423                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2424                                 $allow_archived = true;
2425
2426                         } else {
2427                                 $query_strategy_part = "true";
2428                         }
2429
2430                         $order_by = "score DESC, date_entered DESC, updated DESC";
2431
2432                         if ($view_mode == "unread_first") {
2433                                 $order_by = "unread DESC, $order_by";
2434                         }
2435
2436                         if ($override_order) {
2437                                 $order_by = $override_order;
2438                         }
2439
2440                         $feed_title = "";
2441
2442                         if ($search) {
2443                                 $feed_title = T_sprintf("Search results: %s", $search);
2444                         } else {
2445                                 if ($cat_view) {
2446                                         $feed_title = getCategoryTitle($link, $feed);
2447                                 } else {
2448                                         if (is_numeric($feed) && $feed > 0) {
2449                                                 $result = db_query($link, "SELECT title,site_url,last_error
2450                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2451
2452                                                 $feed_title = db_fetch_result($result, 0, "title");
2453                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2454                                                 $last_error = db_fetch_result($result, 0, "last_error");
2455                                         } else {
2456                                                 $feed_title = getFeedTitle($link, $feed);
2457                                         }
2458                                 }
2459                         }
2460
2461                         $content_query_part = "content as content_preview, cached_content, ";
2462
2463                         if (is_numeric($feed)) {
2464
2465                                 if ($feed >= 0) {
2466                                         $feed_kind = "Feeds";
2467                                 } else {
2468                                         $feed_kind = "Labels";
2469                                 }
2470
2471                                 if ($limit_query_part) {
2472                                         $offset_query_part = "OFFSET $offset";
2473                                 }
2474
2475                                 // proper override_order applied above
2476                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2477                                         if (!$override_order) {
2478                                                 $order_by = "ttrss_feeds.title, $order_by";
2479                                         } else {
2480                                                 $order_by = "ttrss_feeds.title, $override_order";
2481                                         }
2482                                 }
2483
2484                                 if (!$allow_archived) {
2485                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2486                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2487
2488                                 } else {
2489                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2490                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2491                                 }
2492
2493                                 $query = "SELECT DISTINCT
2494                                                 date_entered,
2495                                                 guid,
2496                                                 ttrss_entries.id,ttrss_entries.title,
2497                                                 updated,
2498                                                 label_cache,
2499                                                 tag_cache,
2500                                                 always_display_enclosures,
2501                                                 site_url,
2502                                                 note,
2503                                                 num_comments,
2504                                                 comments,
2505                                                 int_id,
2506                                                 hide_images,
2507                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2508                                                 last_marked, last_published,
2509                                                 $vfeed_query_part
2510                                                 $content_query_part
2511                                                 author,score
2512                                         FROM
2513                                                 $from_qpart
2514                                         WHERE
2515                                         $feed_check_qpart
2516                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2517                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2518                                         $search_query_part
2519                                         $filter_query_part
2520                                         $view_query_part
2521                                         $since_id_part
2522                                         $query_strategy_part ORDER BY $order_by
2523                                         $limit_query_part $offset_query_part";
2524
2525                                 if ($_REQUEST["debug"]) print $query;
2526
2527                                 $result = db_query($link, $query);
2528
2529                         } else {
2530                                 // browsing by tag
2531
2532                                 $select_qpart = "SELECT DISTINCT " .
2533                                                                 "date_entered," .
2534                                                                 "guid," .
2535                                                                 "note," .
2536                                                                 "ttrss_entries.id as id," .
2537                                                                 "title," .
2538                                                                 "updated," .
2539                                                                 "unread," .
2540                                                                 "feed_id," .
2541                                                                 "orig_feed_id," .
2542                                                                 "marked," .
2543                                                                 "num_comments, " .
2544                                                                 "comments, " .
2545                                                                 "tag_cache," .
2546                                                                 "label_cache," .
2547                                                                 "link," .
2548                                                                 "last_read," .
2549                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2550                                                                 "last_marked, last_published, " .
2551                                                                 $since_id_part .
2552                                                                 $vfeed_query_part .
2553                                                                 $content_query_part .
2554                                                                 "score ";
2555
2556                                 $feed_kind = "Tags";
2557                                 $all_tags = explode(",", $feed);
2558                                 if ($search_mode == 'any') {
2559                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2560                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2561                                         $where_qpart = " WHERE " .
2562                                                                    "ref_id = ttrss_entries.id AND " .
2563                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2564                                                                    "post_int_id = int_id AND $tag_sql AND " .
2565                                                                    $view_query_part .
2566                                                                    $search_query_part .
2567                                                                    $query_strategy_part . " ORDER BY $order_by " .
2568                                                                    $limit_query_part;
2569
2570                                 } else {
2571                                         $i = 1;
2572                                         $sub_selects = array();
2573                                         $sub_ands = array();
2574                                         foreach ($all_tags as $term) {
2575                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2576                                                 $i++;
2577                                         }
2578                                         if ($i > 2) {
2579                                                 $x = 1;
2580                                                 $y = 2;
2581                                                 do {
2582                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2583                                                         $x++;
2584                                                         $y++;
2585                                                 } while ($y < $i);
2586                                         }
2587                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2588                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2589                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2590                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2591                                 }
2592                                 //                              error_log("TAG SQL: " . $tag_sql);
2593                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2594
2595                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2596                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2597                         }
2598
2599                         return array($result, $feed_title, $feed_site_url, $last_error);
2600
2601         }
2602
2603         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2604                 if (!$owner) $owner = $_SESSION["uid"];
2605
2606                 $res = trim($str); if (!$res) return '';
2607
2608                 if (strpos($res, "href=") === false)
2609                         $res = rewrite_urls($res);
2610
2611                 $charset_hack = '<head>
2612                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2613                 </head>';
2614
2615                 $res = trim($res); if (!$res) return '';
2616
2617                 libxml_use_internal_errors(true);
2618
2619                 $doc = new DOMDocument();
2620                 $doc->loadHTML($charset_hack . $res);
2621                 $xpath = new DOMXPath($doc);
2622
2623                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2624
2625                 foreach ($entries as $entry) {
2626
2627                         if ($site_url) {
2628
2629                                 if ($entry->hasAttribute('href'))
2630                                         $entry->setAttribute('href',
2631                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2632
2633                                 if ($entry->hasAttribute('src')) {
2634                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2635
2636                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2637
2638                                         if (file_exists($cached_filename)) {
2639                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2640                                         }
2641
2642                                         $entry->setAttribute('src', $src);
2643                                 }
2644
2645                                 if ($entry->nodeName == 'img') {
2646                                         if (($owner && get_pref($link, "STRIP_IMAGES", $owner)) ||
2647                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2648
2649                                                 $p = $doc->createElement('p');
2650
2651                                                 $a = $doc->createElement('a');
2652                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2653
2654                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2655                                                 $a->setAttribute('target', '_blank');
2656
2657                                                 $p->appendChild($a);
2658
2659                                                 $entry->parentNode->replaceChild($p, $entry);
2660                                         }
2661                                 }
2662                         }
2663
2664                         if (strtolower($entry->nodeName) == "a") {
2665                                 $entry->setAttribute("target", "_blank");
2666                         }
2667                 }
2668
2669                 $entries = $xpath->query('//iframe');
2670                 foreach ($entries as $entry) {
2671                         $entry->setAttribute('sandbox', 'allow-scripts');
2672
2673                 }
2674
2675                 $allowed_elements = array('a', 'address', 'audio', 'article',
2676                         'b', 'big', 'blockquote', 'body', 'br', 'cite', 'center',
2677                         'code', 'dd', 'del', 'details', 'div', 'dl', 'font',
2678                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2679                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2680                         'li', 'nav', 'noscript', 'ol', 'p', 'pre', 'q', 's','small',
2681                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2682                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2683                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2684
2685                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2686
2687                 $disallowed_attributes = array('id', 'style', 'class');
2688
2689                 global $pluginhost;
2690
2691                 if (isset($pluginhost)) {
2692                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2693                                 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2694                                 if (is_array($retval)) {
2695                                         $doc = $retval[0];
2696                                         $allowed_elements = $retval[1];
2697                                         $disallowed_attributes = $retval[2];
2698                                 } else {
2699                                         $doc = $retval;
2700                                 }
2701                         }
2702                 }
2703
2704                 $doc->removeChild($doc->firstChild); //remove doctype
2705                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2706                 $res = $doc->saveHTML();
2707                 return $res;
2708         }
2709
2710         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2711                 $entries = $doc->getElementsByTagName("*");
2712
2713                 foreach ($entries as $entry) {
2714                         if (!in_array($entry->nodeName, $allowed_elements)) {
2715                                 $entry->parentNode->removeChild($entry);
2716                         }
2717
2718                         if ($entry->hasAttributes()) {
2719                                 $attrs_to_remove = array();
2720
2721                                 foreach ($entry->attributes as $attr) {
2722
2723                                         if (strpos($attr->nodeName, 'on') === 0) {
2724                                                 array_push($attrs_to_remove, $attr);
2725                                         }
2726
2727                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2728                                                 array_push($attrs_to_remove, $attr);
2729                                         }
2730                                 }
2731
2732                                 foreach ($attrs_to_remove as $attr) {
2733                                         $entry->removeAttributeNode($attr);
2734                                 }
2735                         }
2736                 }
2737
2738                 return $doc;
2739         }
2740
2741         function check_for_update($link) {
2742                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2743                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2744                                 "&iid=" . sha1(SELF_URL_PATH);
2745
2746                         $version_data = @fetch_file_contents($version_url);
2747
2748                         if ($version_data) {
2749                                 $version_data = json_decode($version_data, true);
2750                                 if ($version_data && $version_data['version']) {
2751
2752                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2753                                                 return $version_data;
2754                                         }
2755                                 }
2756                         }
2757                 }
2758                 return false;
2759         }
2760
2761         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2762
2763                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2764                 if (count($ids) == 0) return;
2765
2766                 $tmp_ids = array();
2767
2768                 foreach ($ids as $id) {
2769                         array_push($tmp_ids, "ref_id = '$id'");
2770                 }
2771
2772                 $ids_qpart = join(" OR ", $tmp_ids);
2773
2774                 if ($cmode == 0) {
2775                         db_query($link, "UPDATE ttrss_user_entries SET
2776                         unread = false,last_read = NOW()
2777                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2778                 } else if ($cmode == 1) {
2779                         db_query($link, "UPDATE ttrss_user_entries SET
2780                         unread = true
2781                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2782                 } else {
2783                         db_query($link, "UPDATE ttrss_user_entries SET
2784                         unread = NOT unread,last_read = NOW()
2785                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2786                 }
2787
2788                 /* update ccache */
2789
2790                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2791                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2792
2793                 while ($line = db_fetch_assoc($result)) {
2794                         ccache_update($link, $line["feed_id"], $owner_uid);
2795                 }
2796         }
2797
2798         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2799
2800                 $a_id = db_escape_string($link, $id);
2801
2802                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2803
2804                 $query = "SELECT DISTINCT tag_name,
2805                         owner_uid as owner FROM
2806                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2807                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2808
2809                 $obj_id = md5("TAGS:$owner_uid:$id");
2810                 $tags = array();
2811
2812                 /* check cache first */
2813
2814                 if ($tag_cache === false) {
2815                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2816                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2817
2818                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2819                 }
2820
2821                 if ($tag_cache) {
2822                         $tags = explode(",", $tag_cache);
2823                 } else {
2824
2825                         /* do it the hard way */
2826
2827                         $tmp_result = db_query($link, $query);
2828
2829                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2830                                 array_push($tags, $tmp_line["tag_name"]);
2831                         }
2832
2833                         /* update the cache */
2834
2835                         $tags_str = db_escape_string($link, join(",", $tags));
2836
2837                         db_query($link, "UPDATE ttrss_user_entries
2838                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2839                                 AND owner_uid = $owner_uid");
2840                 }
2841
2842                 return $tags;
2843         }
2844
2845         function trim_array($array) {
2846                 $tmp = $array;
2847                 array_walk($tmp, 'trim');
2848                 return $tmp;
2849         }
2850
2851         function tag_is_valid($tag) {
2852                 if ($tag == '') return false;
2853                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2854                 if (mb_strlen($tag) > 250) return false;
2855
2856                 if (function_exists('iconv')) {
2857                         $tag = iconv("utf-8", "utf-8", $tag);
2858                 }
2859
2860                 if (!$tag) return false;
2861
2862                 return true;
2863         }
2864
2865         function render_login_form($link) {
2866                 require_once "login_form.php";
2867                 exit;
2868         }
2869
2870         // from http://developer.apple.com/internet/safari/faq.html
2871         function no_cache_incantation() {
2872                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2873                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2874                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2875                 header("Cache-Control: post-check=0, pre-check=0", false);
2876                 header("Pragma: no-cache"); // HTTP/1.0
2877         }
2878
2879         function format_warning($msg, $id = "") {
2880                 global $link;
2881                 return "<div class=\"warning\" id=\"$id\">
2882                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2883         }
2884
2885         function format_notice($msg, $id = "") {
2886                 global $link;
2887                 return "<div class=\"notice\" id=\"$id\">
2888                         <img src=\"images/sign_info.svg\"><div class='inner'>$msg</div></div>";
2889         }
2890
2891         function format_error($msg, $id = "") {
2892                 global $link;
2893                 return "<div class=\"error\" id=\"$id\">
2894                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2895         }
2896
2897         function print_notice($msg) {
2898                 return print format_notice($msg);
2899         }
2900
2901         function print_warning($msg) {
2902                 return print format_warning($msg);
2903         }
2904
2905         function print_error($msg) {
2906                 return print format_error($msg);
2907         }
2908
2909
2910         function T_sprintf() {
2911                 $args = func_get_args();
2912                 return vsprintf(__(array_shift($args)), $args);
2913         }
2914
2915         function format_inline_player($link, $url, $ctype) {
2916
2917                 $entry = "";
2918
2919                 $url = htmlspecialchars($url);
2920
2921                 if (strpos($ctype, "audio/") === 0) {
2922
2923                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2924                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2925                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2926
2927                                 $id = 'AUDIO-' . uniqid();
2928
2929                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2930                                         <source type=\"$ctype\" src=\"$url\"></source>
2931                                         </audio>";
2932
2933                                 $entry .= "<span onclick=\"player(this)\"
2934                                         title=\"".__("Click to play")."\" status=\"0\"
2935                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2936
2937                         } else {
2938
2939                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2940                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2941                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2942                                         <param name=\"movie\"
2943                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2944                                         </object>";
2945                         }
2946
2947                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2948                                 href=\"$url\">" . basename($url) . "</a>";
2949
2950                         return $entry;
2951
2952                 }
2953
2954                 return "";
2955
2956 /*              $filename = substr($url, strrpos($url, "/")+1);
2957
2958                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2959                         $filename . " (" . $ctype . ")" . "</a>"; */
2960
2961         }
2962
2963         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2964                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2965
2966                 $rv = array();
2967
2968                 $rv['id'] = $id;
2969
2970                 /* we can figure out feed_id from article id anyway, why do we
2971                  * pass feed_id here? let's ignore the argument :( */
2972
2973                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2974                         WHERE ref_id = '$id'");
2975
2976                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2977
2978                 $rv['feed_id'] = $feed_id;
2979
2980                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2981
2982                 if ($mark_as_read) {
2983                         $result = db_query($link, "UPDATE ttrss_user_entries
2984                                 SET unread = false,last_read = NOW()
2985                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2986
2987                         ccache_update($link, $feed_id, $owner_uid);
2988                 }
2989
2990                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2991                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2992                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2993                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
2994                         num_comments,
2995                         tag_cache,
2996                         author,
2997                         orig_feed_id,
2998                         note,
2999                         cached_content
3000                         FROM ttrss_entries,ttrss_user_entries
3001                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3002
3003                 if ($result) {
3004
3005                         $line = db_fetch_assoc($result);
3006
3007                         $tag_cache = $line["tag_cache"];
3008
3009                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
3010                         unset($line["tag_cache"]);
3011
3012                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
3013
3014                         global $pluginhost;
3015
3016                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
3017                                 $line = $p->hook_render_article($line);
3018                         }
3019
3020                         $num_comments = $line["num_comments"];
3021                         $entry_comments = "";
3022
3023                         if ($num_comments > 0) {
3024                                 if ($line["comments"]) {
3025                                         $comments_url = htmlspecialchars($line["comments"]);
3026                                 } else {
3027                                         $comments_url = htmlspecialchars($line["link"]);
3028                                 }
3029                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3030                         } else {
3031                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3032                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3033                                 }
3034                         }
3035
3036                         if ($zoom_mode) {
3037                                 header("Content-Type: text/html");
3038                                 $rv['content'] .= "<html><head>
3039                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3040                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3041                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3042                                         </head><body id=\"ttrssZoom\">";
3043                         }
3044
3045                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3046
3047                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3048
3049                         $entry_author = $line["author"];
3050
3051                         if ($entry_author) {
3052                                 $entry_author = __(" - ") . $entry_author;
3053                         }
3054
3055                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3056                                 $owner_uid, true);
3057
3058                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3059
3060                         if ($line["link"]) {
3061                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3062                                         title=\"".htmlspecialchars($line['title'])."\"
3063                                         href=\"" .
3064                                         htmlspecialchars($line["link"]) . "\">" .
3065                                         $line["title"] . "</a>" .
3066                                         "<span class='author'>$entry_author</span></div>";
3067                         } else {
3068                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3069                         }
3070
3071                         $tags_str = format_tags_string($line["tags"], $id);
3072                         $tags_str_full = join(", ", $line["tags"]);
3073
3074                         if (!$tags_str_full) $tags_str_full = __("no tags");
3075
3076                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3077
3078                         $rv['content'] .= "<div class='postTags' style='float : right'>
3079                                 <img src='images/tag.png'
3080                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3081
3082                         if (!$zoom_mode) {
3083                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3084                                         <a title=\"".__('Edit tags for this article')."\"
3085                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3086
3087                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3088                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3089                                         position=\"below\">$tags_str_full</div>";
3090
3091                                 global $pluginhost;
3092
3093                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3094                                         $rv['content'] .= $p->hook_article_button($line);
3095                                 }
3096
3097
3098                         } else {
3099                                 $tags_str = strip_tags($tags_str);
3100                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3101                         }
3102                         $rv['content'] .= "</div>";
3103                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3104
3105                         if ($line["orig_feed_id"]) {
3106
3107                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3108                                         WHERE id = ".$line["orig_feed_id"]);
3109
3110                                 if (db_num_rows($tmp_result) != 0) {
3111
3112                                         $rv['content'] .= "<div clear='both'>";
3113                                         $rv['content'] .= __("Originally from:");
3114
3115                                         $rv['content'] .= "&nbsp;";
3116
3117                                         $tmp_line = db_fetch_assoc($tmp_result);
3118
3119                                         $rv['content'] .= "<a target='_blank'
3120                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3121                                                 $tmp_line['title'] . "</a>";
3122
3123                                         $rv['content'] .= "&nbsp;";
3124
3125                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3126                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3127
3128                                         $rv['content'] .= "</div>";
3129                                 }
3130                         }
3131
3132                         $rv['content'] .= "</div>";
3133
3134                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3135                                 if ($line['note']) {
3136                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3137                                 }
3138                         $rv['content'] .= "</div>";
3139
3140                         $rv['content'] .= "<div class=\"postContent\">";
3141
3142                         $rv['content'] .= $line["content"];
3143
3144                         $rv['content'] .= format_article_enclosures($link, $id,
3145                                 $always_display_enclosures, $line["content"], $line["hide_images"]);
3146
3147                         $rv['content'] .= "</div>";
3148
3149                         $rv['content'] .= "</div>";
3150
3151                 }
3152
3153                 if ($zoom_mode) {
3154                         $rv['content'] .= "
3155                                 <div class='footer'>
3156                                 <button onclick=\"return window.close()\">".
3157                                         __("Close this window")."</button></div>";
3158                         $rv['content'] .= "</body></html>";
3159                 }
3160
3161                 return $rv;
3162
3163         }
3164
3165         function print_checkpoint($n, $s) {
3166                 $ts = microtime(true);
3167                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3168                 return $ts;
3169         }
3170
3171         function sanitize_tag($tag) {
3172                 $tag = trim($tag);
3173
3174                 $tag = mb_strtolower($tag, 'utf-8');
3175
3176                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3177
3178 //              $tag = str_replace('"', "", $tag);
3179 //              $tag = str_replace("+", " ", $tag);
3180                 $tag = str_replace("technorati tag: ", "", $tag);
3181
3182                 return $tag;
3183         }
3184
3185         function get_self_url_prefix() {
3186                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3187                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3188                 } else {
3189                         return SELF_URL_PATH;
3190                 }
3191         }
3192
3193         /**
3194          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3195          *
3196          * @return string The Mozilla Firefox feed adding URL.
3197          */
3198         function add_feed_url() {
3199                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3200
3201                 $url_path = get_self_url_prefix() .
3202                         "/public.php?op=subscribe&feed_url=%s";
3203                 return $url_path;
3204         } // function add_feed_url
3205
3206         function encrypt_password($pass, $salt = '', $mode2 = false) {
3207                 if ($salt && $mode2) {
3208                         return "MODE2:" . hash('sha256', $salt . $pass);
3209                 } else if ($salt) {
3210                         return "SHA1X:" . sha1("$salt:$pass");
3211                 } else {
3212                         return "SHA1:" . sha1($pass);
3213                 }
3214         } // function encrypt_password
3215
3216         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3217                 $filters = array();
3218
3219                 $cat_id = (int)getFeedCategory($link, $feed_id);
3220
3221                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3222                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3223
3224                 $check_cats = join(",", array_merge(
3225                         getParentCategories($link, $cat_id, $owner_uid),
3226                         array($cat_id)));
3227
3228                 while ($line = db_fetch_assoc($result)) {
3229                         $filter_id = $line["id"];
3230
3231                         $result2 = db_query($link, "SELECT
3232                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3233                                 FROM ttrss_filters2_rules AS r,
3234                                 ttrss_filter_types AS t
3235                                 WHERE
3236                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3237                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3238                                         filter_type = t.id AND filter_id = '$filter_id'");
3239
3240                         $rules = array();
3241                         $actions = array();
3242
3243                         while ($rule_line = db_fetch_assoc($result2)) {
3244 #                               print_r($rule_line);
3245
3246                                 $rule = array();
3247                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3248                                 $rule["type"] = $rule_line["type_name"];
3249                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3250
3251                                 array_push($rules, $rule);
3252                         }
3253
3254                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3255                                 FROM ttrss_filters2_actions AS a,
3256                                 ttrss_filter_actions AS t
3257                                 WHERE
3258                                         action_id = t.id AND filter_id = '$filter_id'");
3259
3260                         while ($action_line = db_fetch_assoc($result2)) {
3261 #                               print_r($action_line);
3262
3263                                 $action = array();
3264                                 $action["type"] = $action_line["type_name"];
3265                                 $action["param"] = $action_line["action_param"];
3266
3267                                 array_push($actions, $action);
3268                         }
3269
3270
3271                         $filter = array();
3272                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3273                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3274                         $filter["rules"] = $rules;
3275                         $filter["actions"] = $actions;
3276
3277                         if (count($rules) > 0 && count($actions) > 0) {
3278                                 array_push($filters, $filter);
3279                         }
3280                 }
3281
3282                 return $filters;
3283         }
3284
3285         function get_score_pic($score) {
3286                 if ($score > 100) {
3287                         return "score_high.png";
3288                 } else if ($score > 0) {
3289                         return "score_half_high.png";
3290                 } else if ($score < -100) {
3291                         return "score_low.png";
3292                 } else if ($score < 0) {
3293                         return "score_half_low.png";
3294                 } else {
3295                         return "score_neutral.png";
3296                 }
3297         }
3298
3299         function feed_has_icon($id) {
3300                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3301         }
3302
3303         function init_connection($link) {
3304                 if ($link) {
3305
3306                         if (DB_TYPE == "pgsql") {
3307                                 pg_query($link, "set client_encoding = 'UTF-8'");
3308                                 pg_set_client_encoding("UNICODE");
3309                                 pg_query($link, "set datestyle = 'ISO, european'");
3310                                 pg_query($link, "set TIME ZONE 0");
3311                         } else {
3312                                 db_query($link, "SET time_zone = '+0:0'");
3313
3314                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3315                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3316                                 }
3317                         }
3318
3319                         global $pluginhost;
3320
3321                         $pluginhost = new PluginHost($link);
3322                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3323
3324                         return true;
3325                 } else {
3326                         print "Unable to connect to database:" . db_last_error();
3327                         return false;
3328                 }
3329         }
3330
3331         function format_tags_string($tags, $id) {
3332
3333                 $tags_str = "";
3334                 $tags_nolinks_str = "";
3335
3336                 $num_tags = 0;
3337
3338                 $tag_limit = 6;
3339
3340                 $formatted_tags = array();
3341
3342                 foreach ($tags as $tag) {
3343                         $num_tags++;
3344                         $tag_escaped = str_replace("'", "\\'", $tag);
3345
3346                         if (mb_strlen($tag) > 30) {
3347                                 $tag = truncate_string($tag, 30);
3348                         }
3349
3350                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3351
3352                         array_push($formatted_tags, $tag_str);
3353
3354                         $tmp_tags_str = implode(", ", $formatted_tags);
3355
3356                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3357                                 break;
3358                         }
3359                 }
3360
3361                 $tags_str = implode(", ", $formatted_tags);
3362
3363                 if ($num_tags < count($tags)) {
3364                         $tags_str .= ", &hellip;";
3365                 }
3366
3367                 if ($num_tags == 0) {
3368                         $tags_str = __("no tags");
3369                 }
3370
3371                 return $tags_str;
3372
3373         }
3374
3375         function format_article_labels($labels, $id) {
3376
3377                 $labels_str = "";
3378
3379                 foreach ($labels as $l) {
3380                         $labels_str .= sprintf("<span class='hlLabelRef'
3381                                 style='color : %s; background-color : %s'>%s</span>",
3382                                         $l[2], $l[3], $l[1]);
3383                         }
3384
3385                 return $labels_str;
3386
3387         }
3388
3389         function format_article_note($id, $note, $allow_edit = true) {
3390
3391                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3392                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3393                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3394
3395                 return $str;
3396         }
3397
3398
3399         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3400                 if ($parent_cat_id) {
3401                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3402                         $parent_insert = "'$parent_cat_id'";
3403                 } else {
3404                         $parent_qpart = "parent_cat IS NULL";
3405                         $parent_insert = "NULL";
3406                 }
3407
3408                 $result = db_query($link,
3409                         "SELECT id FROM ttrss_feed_categories
3410                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3411
3412                 if (db_num_rows($result) == 0) {
3413                         return false;
3414                 } else {
3415                         return db_fetch_result($result, 0, "id");
3416                 }
3417         }
3418
3419         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3420
3421                 if (!$feed_cat) return false;
3422
3423                 db_query($link, "BEGIN");
3424
3425                 if ($parent_cat_id) {
3426                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3427                         $parent_insert = "'$parent_cat_id'";
3428                 } else {
3429                         $parent_qpart = "parent_cat IS NULL";
3430                         $parent_insert = "NULL";
3431                 }
3432
3433                 $feed_cat = mb_substr($feed_cat, 0, 250);
3434
3435                 $result = db_query($link,
3436                         "SELECT id FROM ttrss_feed_categories
3437                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3438
3439                 if (db_num_rows($result) == 0) {
3440
3441                         $result = db_query($link,
3442                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3443                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3444
3445                         db_query($link, "COMMIT");
3446
3447                         return true;
3448                 }
3449
3450                 return false;
3451         }
3452
3453         function getArticleFeed($link, $id) {
3454                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3455                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3456
3457                 if (db_num_rows($result) != 0) {
3458                         return db_fetch_result($result, 0, "feed_id");
3459                 } else {
3460                         return 0;
3461                 }
3462         }
3463
3464         /**
3465          * Fixes incomplete URLs by prepending "http://".
3466          * Also replaces feed:// with http://, and
3467          * prepends a trailing slash if the url is a domain name only.
3468          *
3469          * @param string $url Possibly incomplete URL
3470          *
3471          * @return string Fixed URL.
3472          */
3473         function fix_url($url) {
3474                 if (strpos($url, '://') === false) {
3475                         $url = 'http://' . $url;
3476                 } else if (substr($url, 0, 5) == 'feed:') {
3477                         $url = 'http:' . substr($url, 5);
3478                 }
3479
3480                 //prepend slash if the URL has no slash in it
3481                 // "http://www.example" -> "http://www.example/"
3482                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3483                         $url .= '/';
3484                 }
3485
3486                 if ($url != "http:///")
3487                         return $url;
3488                 else
3489                         return '';
3490         }
3491
3492         function validate_feed_url($url) {
3493                 $parts = parse_url($url);
3494
3495                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3496
3497         }
3498
3499         function get_article_enclosures($link, $id) {
3500
3501                 $query = "SELECT * FROM ttrss_enclosures
3502                         WHERE post_id = '$id' AND content_url != ''";
3503
3504                 $rv = array();
3505
3506                 $result = db_query($link, $query);
3507
3508                 if (db_num_rows($result) > 0) {
3509                         while ($line = db_fetch_assoc($result)) {
3510                                 array_push($rv, $line);
3511                         }
3512                 }
3513
3514                 return $rv;
3515         }
3516
3517         function save_email_address($link, $email) {
3518                 // FIXME: implement persistent storage of emails
3519
3520                 if (!$_SESSION['stored_emails'])
3521                         $_SESSION['stored_emails'] = array();
3522
3523                 if (!in_array($email, $_SESSION['stored_emails']))
3524                         array_push($_SESSION['stored_emails'], $email);
3525         }
3526
3527
3528         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3529
3530                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3531
3532                 $sql_is_cat = bool_to_sql_bool($is_cat);
3533
3534                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3535                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3536                         AND owner_uid = " . $owner_uid);
3537
3538                 if (db_num_rows($result) == 1) {
3539                         return db_fetch_result($result, 0, "access_key");
3540                 } else {
3541                         $key = db_escape_string($link, sha1(uniqid(rand(), true)));
3542
3543                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3544                                 (access_key, feed_id, is_cat, owner_uid)
3545                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3546
3547                         return $key;
3548                 }
3549                 return false;
3550         }
3551
3552         function get_feeds_from_html($url, $content)
3553         {
3554                 $url     = fix_url($url);
3555                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3556
3557                 libxml_use_internal_errors(true);
3558
3559                 $doc = new DOMDocument();
3560                 $doc->loadHTML($content);
3561                 $xpath = new DOMXPath($doc);
3562                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3563                 $feedUrls = array();
3564                 foreach ($entries as $entry) {
3565                         if ($entry->hasAttribute('href')) {
3566                                 $title = $entry->getAttribute('title');
3567                                 if ($title == '') {
3568                                         $title = $entry->getAttribute('type');
3569                                 }
3570                                 $feedUrl = rewrite_relative_url(
3571                                         $baseUrl, $entry->getAttribute('href')
3572                                 );
3573                                 $feedUrls[$feedUrl] = $title;
3574                         }
3575                 }
3576                 return $feedUrls;
3577         }
3578
3579         function is_html($content) {
3580                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3581         }
3582
3583         function url_is_html($url, $login = false, $pass = false) {
3584                 return is_html(fetch_file_contents($url, false, $login, $pass));
3585         }
3586
3587         function print_label_select($link, $name, $value, $attributes = "") {
3588
3589                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3590                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3591
3592                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3593                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3594
3595                 while ($line = db_fetch_assoc($result)) {
3596
3597                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3598
3599                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3600                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3601
3602                 }
3603
3604 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3605
3606                 print "</select>";
3607
3608
3609         }
3610
3611         function format_article_enclosures($link, $id, $always_display_enclosures,
3612                                         $article_content, $hide_images = false) {
3613
3614                 $result = get_article_enclosures($link, $id);
3615                 $rv = '';
3616
3617                 if (count($result) > 0) {
3618
3619                         $entries_html = array();
3620                         $entries = array();
3621                         $entries_inline = array();
3622
3623                         foreach ($result as $line) {
3624
3625                                 $url = $line["content_url"];
3626                                 $ctype = $line["content_type"];
3627
3628                                 if (!$ctype) $ctype = __("unknown type");
3629
3630                                 $filename = substr($url, strrpos($url, "/")+1);
3631
3632                                 $player = format_inline_player($link, $url, $ctype);
3633
3634                                 if ($player) array_push($entries_inline, $player);
3635
3636 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3637 #                                       $filename . " (" . $ctype . ")" . "</a>";
3638
3639                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3640                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3641
3642                                 array_push($entries_html, $entry);
3643
3644                                 $entry = array();
3645
3646                                 $entry["type"] = $ctype;
3647                                 $entry["filename"] = $filename;
3648                                 $entry["url"] = $url;
3649
3650                                 array_push($entries, $entry);
3651                         }
3652
3653                         if ($_SESSION['uid'] && !get_pref($link, "STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3654                                 if ($always_display_enclosures ||
3655                                                         !preg_match("/<img/i", $article_content)) {
3656
3657                                         foreach ($entries as $entry) {
3658
3659                                                 if (preg_match("/image/", $entry["type"]) ||
3660                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3661
3662                                                                 if (!$hide_images) {
3663                                                                         $rv .= "<p><img
3664                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3665                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3666                                                                 } else {
3667                                                                         $rv .= "<p><a target=\"_blank\"
3668                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3669                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3670
3671                                                                 }
3672                                                 }
3673                                         }
3674                                 }
3675                         }
3676
3677                         if (count($entries_inline) > 0) {
3678                                 $rv .= "<hr clear='both'/>";
3679                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3680                                 $rv .= "<hr clear='both'/>";
3681                         }
3682
3683                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3684                                 "<option value=''>" . __('Attachments')."</option>";
3685
3686                         foreach ($entries as $entry) {
3687                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3688
3689                         };
3690
3691                         $rv .= "</select>";
3692                 }
3693
3694                 return $rv;
3695         }
3696
3697         function getLastArticleId($link) {
3698                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3699                         WHERE owner_uid = " . $_SESSION["uid"]);
3700
3701                 if (db_num_rows($result) == 1) {
3702                         return db_fetch_result($result, 0, "id");
3703                 } else {
3704                         return -1;
3705                 }
3706         }
3707
3708         function build_url($parts) {
3709                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3710         }
3711
3712         /**
3713          * Converts a (possibly) relative URL to a absolute one.
3714          *
3715          * @param string $url     Base URL (i.e. from where the document is)
3716          * @param string $rel_url Possibly relative URL in the document
3717          *
3718          * @return string Absolute URL
3719          */
3720         function rewrite_relative_url($url, $rel_url) {
3721                 if (strpos($rel_url, "magnet:") === 0) {
3722                         return $rel_url;
3723                 } else if (strpos($rel_url, "://") !== false) {
3724                         return $rel_url;
3725                 } else if (strpos($rel_url, "//") === 0) {
3726                         # protocol-relative URL (rare but they exist)
3727                         return $rel_url;
3728                 } else if (strpos($rel_url, "/") === 0)
3729                 {
3730                         $parts = parse_url($url);
3731                         $parts['path'] = $rel_url;
3732
3733                         return build_url($parts);
3734
3735                 } else {
3736                         $parts = parse_url($url);
3737                         if (!isset($parts['path'])) {
3738                                 $parts['path'] = '/';
3739                         }
3740                         $dir = $parts['path'];
3741                         if (substr($dir, -1) !== '/') {
3742                                 $dir = dirname($parts['path']);
3743                                 $dir !== '/' && $dir .= '/';
3744                         }
3745                         $parts['path'] = $dir . $rel_url;
3746
3747                         return build_url($parts);
3748                 }
3749         }
3750
3751         function sphinx_search($query, $offset = 0, $limit = 30) {
3752                 require_once 'lib/sphinxapi.php';
3753
3754                 $sphinxClient = new SphinxClient();
3755
3756                 $sphinxClient->SetServer('localhost', 9312);
3757                 $sphinxClient->SetConnectTimeout(1);
3758
3759                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3760                         'feed_title' => 20));
3761
3762                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3763                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3764                 $sphinxClient->SetLimits($offset, $limit, 1000);
3765                 $sphinxClient->SetArrayResult(false);
3766                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3767
3768                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3769
3770                 $ids = array();
3771
3772                 if (is_array($result['matches'])) {
3773                         foreach (array_keys($result['matches']) as $int_id) {
3774                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3775                                 array_push($ids, $ref_id);
3776                         }
3777                 }
3778
3779                 return $ids;
3780         }
3781
3782         function cleanup_tags($link, $days = 14, $limit = 1000) {
3783
3784                 if (DB_TYPE == "pgsql") {
3785                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3786                 } else if (DB_TYPE == "mysql") {
3787                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3788                 }
3789
3790                 $tags_deleted = 0;
3791
3792                 while ($limit > 0) {
3793                         $limit_part = 500;
3794
3795                         $query = "SELECT ttrss_tags.id AS id
3796                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3797                                 WHERE post_int_id = int_id AND $interval_query AND
3798                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3799
3800                         $result = db_query($link, $query);
3801
3802                         $ids = array();
3803
3804                         while ($line = db_fetch_assoc($result)) {
3805                                 array_push($ids, $line['id']);
3806                         }
3807
3808                         if (count($ids) > 0) {
3809                                 $ids = join(",", $ids);
3810
3811                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3812                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3813                         } else {
3814                                 break;
3815                         }
3816
3817                         $limit -= $limit_part;
3818                 }
3819
3820                 return $tags_deleted;
3821         }
3822
3823         function print_user_stylesheet($link) {
3824                 $value = get_pref($link, 'USER_STYLESHEET');
3825
3826                 if ($value) {
3827                         print "<style type=\"text/css\">";
3828                         print str_replace("<br/>", "\n", $value);
3829                         print "</style>";
3830                 }
3831
3832         }
3833
3834         function rewrite_urls($html) {
3835                 libxml_use_internal_errors(true);
3836
3837                 $charset_hack = '<head>
3838                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3839                 </head>';
3840
3841                 $doc = new DOMDocument();
3842                 $doc->loadHTML($charset_hack . $html);
3843                 $xpath = new DOMXPath($doc);
3844
3845                 $entries = $xpath->query('//*/text()');
3846
3847                 foreach ($entries as $entry) {
3848                         if (strstr($entry->wholeText, "://") !== false) {
3849                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3850                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3851
3852                                 if ($text != $entry->wholeText) {
3853                                         $cdoc = new DOMDocument();
3854                                         $cdoc->loadHTML($charset_hack . $text);
3855
3856
3857                                         foreach ($cdoc->childNodes as $cnode) {
3858                                                 $cnode = $doc->importNode($cnode, true);
3859
3860                                                 if ($cnode) {
3861                                                         $entry->parentNode->insertBefore($cnode);
3862                                                 }
3863                                         }
3864
3865                                         $entry->parentNode->removeChild($entry);
3866
3867                                 }
3868                         }
3869                 }
3870
3871                 $node = $doc->getElementsByTagName('body')->item(0);
3872
3873                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3874                 if ($node)
3875                         return $doc->saveXML($node);
3876                 else
3877                         return $html;
3878         }
3879
3880         function filter_to_sql($link, $filter, $owner_uid) {
3881                 $query = array();
3882
3883                 if (DB_TYPE == "pgsql")
3884                         $reg_qpart = "~";
3885                 else
3886                         $reg_qpart = "REGEXP";
3887
3888                 foreach ($filter["rules"] AS $rule) {
3889                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3890                                 $rule['reg_exp']) !== FALSE;
3891
3892                         if ($regexp_valid) {
3893
3894                                 $rule['reg_exp'] = db_escape_string($link, $rule['reg_exp']);
3895
3896                                         switch ($rule["type"]) {
3897                                         case "title":
3898                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3899                                                         $rule['reg_exp'] . "')";
3900                                                 break;
3901                                         case "content":
3902                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3903                                                         $rule['reg_exp'] . "')";
3904                                                 break;
3905                                         case "both":
3906                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3907                                                         $rule['reg_exp'] . "') OR LOWER(" .
3908                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3909                                                 break;
3910                                         case "tag":
3911                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3912                                                         $rule['reg_exp'] . "')";
3913                                                 break;
3914                                         case "link":
3915                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3916                                                         $rule['reg_exp'] . "')";
3917                                                 break;
3918                                         case "author":
3919                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3920                                                         $rule['reg_exp'] . "')";
3921                                                 break;
3922                                 }
3923
3924                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3925
3926                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3927                                         $qpart .= " AND feed_id = " . db_escape_string($link, $rule["feed_id"]);
3928                                 }
3929
3930                                 if (isset($rule["cat_id"])) {
3931
3932                                         if ($rule["cat_id"] > 0) {
3933                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3934                                                 array_push($children, $rule["cat_id"]);
3935
3936                                                 $children = join(",", $children);
3937
3938                                                 $cat_qpart = "cat_id IN ($children)";
3939                                         } else {
3940                                                 $cat_qpart = "cat_id IS NULL";
3941                                         }
3942
3943                                         $qpart .= " AND $cat_qpart";
3944                                 }
3945
3946                                 array_push($query, "($qpart)");
3947
3948                         }
3949                 }
3950
3951                 if (count($query) > 0) {
3952                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3953                 } else {
3954                         $fullquery = "(false)";
3955                 }
3956
3957                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
3958
3959                 return $fullquery;
3960         }
3961
3962         if (!function_exists('gzdecode')) {
3963                 function gzdecode($string) { // no support for 2nd argument
3964                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3965                                 base64_encode($string));
3966                 }
3967         }
3968
3969         function get_random_bytes($length) {
3970                 if (function_exists('openssl_random_pseudo_bytes')) {
3971                         return openssl_random_pseudo_bytes($length);
3972                 } else {
3973                         $output = "";
3974
3975                         for ($i = 0; $i < $length; $i++)
3976                                 $output .= chr(mt_rand(0, 255));
3977
3978                         return $output;
3979                 }
3980         }
3981
3982         function read_stdin() {
3983                 $fp = fopen("php://stdin", "r");
3984
3985                 if ($fp) {
3986                         $line = trim(fgets($fp));
3987                         fclose($fp);
3988                         return $line;
3989                 }
3990
3991                 return null;
3992         }
3993
3994         function tmpdirname($path, $prefix) {
3995                 // Use PHP's tmpfile function to create a temporary
3996                 // directory name. Delete the file and keep the name.
3997                 $tempname = tempnam($path,$prefix);
3998                 if (!$tempname)
3999                         return false;
4000
4001                 if (!unlink($tempname))
4002                         return false;
4003
4004        return $tempname;
4005         }
4006
4007         function getFeedCategory($link, $feed) {
4008                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
4009                         WHERE id = '$feed'");
4010
4011                 if (db_num_rows($result) > 0) {
4012                         return db_fetch_result($result, 0, "cat_id");
4013                 } else {
4014                         return false;
4015                 }
4016
4017         }
4018
4019         function implements_interface($class, $interface) {
4020                 return in_array($interface, class_implements($class));
4021         }
4022
4023         function geturl($url){
4024
4025                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4026
4027                 $curl = curl_init();
4028                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4029                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4030                 $header[] = "Cache-Control: max-age=0";
4031                 $header[] = "Connection: keep-alive";
4032                 $header[] = "Keep-Alive: 300";
4033                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4034                 $header[] = "Accept-Language: en-us,en;q=0.5";
4035                 $header[] = "Pragma: ";
4036
4037                 curl_setopt($curl, CURLOPT_URL, $url);
4038                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4039                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4040                 curl_setopt($curl, CURLOPT_HEADER, true);
4041                 curl_setopt($curl, CURLOPT_REFERER, $url);
4042                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4043                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4044                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4045                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4046                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4047
4048                 $html = curl_exec($curl);
4049
4050                 $status = curl_getinfo($curl);
4051                 curl_close($curl);
4052
4053                 if($status['http_code']!=200){
4054                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4055                                 list($header) = explode("\r\n\r\n", $html, 2);
4056                                 $matches = array();
4057                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4058                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4059                                 $url_parsed = parse_url($url);
4060                                 return (isset($url_parsed))? geturl($url, $referer):'';
4061                         }
4062                         $oline='';
4063                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4064                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4065 #                       $handle = @fopen('./curl.error.log', 'a');
4066 #                       fwrite($handle, $line);
4067                         return FALSE;
4068                 }
4069                 return $url;
4070         }
4071
4072         function get_minified_js($files) {
4073                 require_once 'lib/jshrink/Minifier.php';
4074
4075                 $rv = '';
4076
4077                 foreach ($files as $js) {
4078                         if (!isset($_GET['debug'])) {
4079                                 $cached_file = CACHE_DIR . "/js/$js.js";
4080
4081                                 if (file_exists($cached_file) &&
4082                                                 is_readable($cached_file) &&
4083                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4084
4085                                         $rv .= file_get_contents($cached_file);
4086
4087                                 } else {
4088                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4089                                         file_put_contents($cached_file, $minified);
4090                                         $rv .= $minified;
4091                                 }
4092                         } else {
4093                                 $rv .= file_get_contents("js/$js.js");
4094                         }
4095                 }
4096
4097                 return $rv;
4098         }
4099
4100         function stylesheet_tag($filename) {
4101                 $timestamp = filemtime($filename);
4102
4103                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4104         }
4105
4106         function javascript_tag($filename) {
4107                 $query = "";
4108
4109                 if (!(strpos($filename, "?") === FALSE)) {
4110                         $query = substr($filename, strpos($filename, "?")+1);
4111                         $filename = substr($filename, 0, strpos($filename, "?"));
4112                 }
4113
4114                 $timestamp = filemtime($filename);
4115
4116                 if ($query) $timestamp .= "&$query";
4117
4118                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4119         }
4120
4121         function calculate_dep_timestamp() {
4122                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4123
4124                 $max_ts = -1;
4125
4126                 foreach ($files as $file) {
4127                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4128                 }
4129
4130                 return $max_ts;
4131         }
4132
4133         function T_js_decl($s1, $s2) {
4134                 if ($s1 && $s2) {
4135                         $s1 = preg_replace("/\n/", "", $s1);
4136                         $s2 = preg_replace("/\n/", "", $s2);
4137
4138                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4139                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4140
4141                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4142                 }
4143         }
4144
4145         function init_js_translations() {
4146
4147         print 'var T_messages = new Object();
4148
4149                 function __(msg) {
4150                         if (T_messages[msg]) {
4151                                 return T_messages[msg];
4152                         } else {
4153                                 return msg;
4154                         }
4155                 }
4156
4157                 function ngettext(msg1, msg2, n) {
4158                         return (parseInt(n) > 1) ? msg2 : msg1;
4159                 }';
4160
4161                 $l10n = _get_reader();
4162
4163                 for ($i = 0; $i < $l10n->total; $i++) {
4164                         $orig = $l10n->get_original_string($i);
4165                         $translation = __($orig);
4166
4167                         print T_js_decl($orig, $translation);
4168                 }
4169         }
4170
4171         function label_to_feed_id($label) {
4172                 return LABEL_BASE_INDEX - 1 - abs($label);
4173         }
4174
4175         function feed_to_label_id($feed) {
4176                 return LABEL_BASE_INDEX - 1 + abs($feed);
4177         }
4178
4179 ?>