include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 25);
   3         define('SCHEMA_VERSION', 94);
   4
   5         mb_internal_encoding("UTF-8");
   6         date_default_timezone_set('UTC');
   7         if (defined('E_DEPRECATED')) {
   8                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
   9         } else {
  10                 error_reporting(E_ALL & ~E_NOTICE);
  11         }
  12
  13         require_once 'config.php';
  14
  15         if (DB_TYPE == "pgsql") {
  16                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  17         } else {
  18                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  19         }
  20
  21         define('THEME_VERSION_REQUIRED', 1.1);
  22
  23         /**
  24          * Return available translations names.
  25          *
  26          * @access public
  27          * @return array A array of available translations.
  28          */
  29         function get_translations() {
  30                 $tr = array(
  31                                         "auto"  => "Detect automatically",
  32                                         "ca_CA" => "Català",
  33                                         "en_US" => "English",
  34                                         "es_ES" => "Español",
  35                                         "de_DE" => "Deutsch",
  36                                         "fr_FR" => "Français",
  37                                         "hu_HU" => "Magyar (Hungarian)",
  38                                         "it_IT" => "Italiano",
  39                                         "ja_JP" => "日本語 (Japanese)",
  40                                         "nb_NO" => "Norwegian bokmål",
  41                                         "ru_RU" => "Русский",
  42                                         "pt_BR" => "Portuguese/Brazil",
  43                                         "zh_CN" => "Simplified Chinese");
  44
  45                 return $tr;
  46         }
  47
  48         require_once "lib/accept-to-gettext.php";
  49         require_once "lib/gettext/gettext.inc";
  50
  51         function startup_gettext() {
  52
  53                 # Get locale from Accept-Language header
  54                 $lang = al2gt(array_keys(get_translations()), "text/html");
  55
  56                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  57                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  58                 }
  59
  60                 if ($_COOKIE["ttrss_lang"] && $_COOKIE["ttrss_lang"] != "auto") {
  61                         $lang = $_COOKIE["ttrss_lang"];
  62                 }
  63
  64                 /* In login action of mobile version */
  65                 if ($_POST["language"] && defined('MOBILE_VERSION')) {
  66                         $lang = $_POST["language"];
  67                         $_COOKIE["ttrss_lang"] = $lang;
  68                 }
  69
  70                 if ($lang) {
  71                         if (defined('LC_MESSAGES')) {
  72                                 _setlocale(LC_MESSAGES, $lang);
  73                         } else if (defined('LC_ALL')) {
  74                                 _setlocale(LC_ALL, $lang);
  75                         }
  76
  77                         if (defined('MOBILE_VERSION')) {
  78                                 _bindtextdomain("messages", "../locale");
  79                         } else {
  80                                 _bindtextdomain("messages", "locale");
  81                         }
  82
  83                         _textdomain("messages");
  84                         _bind_textdomain_codeset("messages", "UTF-8");
  85                 }
  86         }
  87
  88         startup_gettext();
  89
  90         require_once 'db-prefs.php';
  91         require_once 'version.php';
  92
  93         define('MAGPIE_OUTPUT_ENCODING', 'UTF-8');
  94
  95         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
  96         define('MAGPIE_USER_AGENT', SELF_USER_AGENT);
  97
  98         ini_set('user_agent', SELF_USER_AGENT);
  99
 100         require_once 'lib/pubsubhubbub/publisher.php';
 101
 102         $purifier = false;
 103
 104         $tz_offset = -1;
 105         $utc_tz = new DateTimeZone('UTC');
 106         $schema_version = false;
 107
 108         /**
 109          * Print a timestamped debug message.
 110          *
 111          * @param string $msg The debug message.
 112          * @return void
 113          */
 114         function _debug($msg) {
 115                 if (defined('QUIET') && QUIET) {
 116                         return;
 117                 }
 118                 $ts = strftime("%H:%M:%S", time());
 119                 if (function_exists('posix_getpid')) {
 120                         $ts = "$ts/" . posix_getpid();
 121                 }
 122                 print "[$ts] $msg\n";
 123         } // function _debug
 124
 125         /**
 126          * Purge a feed old posts.
 127          *
 128          * @param mixed $link A database connection.
 129          * @param mixed $feed_id The id of the purged feed.
 130          * @param mixed $purge_interval Olderness of purged posts.
 131          * @param boolean $debug Set to True to enable the debug. False by default.
 132          * @access public
 133          * @return void
 134          */
 135         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 136
 137                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 138
 139                 $rows = -1;
 140
 141                 $result = db_query($link,
 142                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 143
 144                 $owner_uid = false;
 145
 146                 if (db_num_rows($result) == 1) {
 147                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 148                 }
 149
 150                 if ($purge_interval == -1 || !$purge_interval) {
 151                         if ($owner_uid) {
 152                                 ccache_update($link, $feed_id, $owner_uid);
 153                         }
 154                         return;
 155                 }
 156
 157                 if (!$owner_uid) return;
 158
 159                 if (FORCE_ARTICLE_PURGE == 0) {
 160                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 161                                 $owner_uid, false);
 162                 } else {
 163                         $purge_unread = true;
 164                         $purge_interval = FORCE_ARTICLE_PURGE;
 165                 }
 166
 167                 if (!$purge_unread) $query_limit = " unread = false AND ";
 168
 169                 if (DB_TYPE == "pgsql") {
 170                         $pg_version = get_pgsql_version($link);
 171
 172                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 173
 174                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 175                                         ttrss_entries.id = ref_id AND
 176                                         marked = false AND
 177                                         feed_id = '$feed_id' AND
 178                                         $query_limit
 179                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 180
 181                         } else {
 182
 183                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 184                                         USING ttrss_entries
 185                                         WHERE ttrss_entries.id = ref_id AND
 186                                         marked = false AND
 187                                         feed_id = '$feed_id' AND
 188                                         $query_limit
 189                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 190                         }
 191
 192                         $rows = pg_affected_rows($result);
 193
 194                 } else {
 195
 196 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 197                                 marked = false AND feed_id = '$feed_id' AND
 198                                 (SELECT date_updated FROM ttrss_entries WHERE
 199                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 200
 201                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 202                                 USING ttrss_user_entries, ttrss_entries
 203                                 WHERE ttrss_entries.id = ref_id AND
 204                                 marked = false AND
 205                                 feed_id = '$feed_id' AND
 206                                 $query_limit
 207                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 208
 209                         $rows = mysql_affected_rows($link);
 210
 211                 }
 212
 213                 ccache_update($link, $feed_id, $owner_uid);
 214
 215                 if ($debug) {
 216                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 217                 }
 218         } // function purge_feed
 219
 220         function feed_purge_interval($link, $feed_id) {
 221
 222                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 223                         WHERE id = '$feed_id'");
 224
 225                 if (db_num_rows($result) == 1) {
 226                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 227                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 228
 229                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 230                                 'PURGE_OLD_DAYS', $owner_uid);
 231
 232                         return $purge_interval;
 233
 234                 } else {
 235                         return -1;
 236                 }
 237         }
 238
 239         function purge_orphans($link, $do_output = false) {
 240
 241                 // purge orphaned posts in main content table
 242                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 243                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 244
 245                 if ($do_output) {
 246                         $rows = db_affected_rows($link, $result);
 247                         _debug("Purged $rows orphaned posts.");
 248                 }
 249         }
 250
 251         function get_feed_update_interval($link, $feed_id) {
 252                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 253                         ttrss_feeds WHERE id = '$feed_id'");
 254
 255                 if (db_num_rows($result) == 1) {
 256                         $update_interval = db_fetch_result($result, 0, "update_interval");
 257                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 258
 259                         if ($update_interval != 0) {
 260                                 return $update_interval;
 261                         } else {
 262                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 263                         }
 264
 265                 } else {
 266                         return -1;
 267                 }
 268         }
 269
 270         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false) {
 271                 $login = urlencode($login);
 272                 $pass = urlencode($pass);
 273
 274                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 275                         $ch = curl_init($url);
 276
 277                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15);
 278                         curl_setopt($ch, CURLOPT_TIMEOUT, 45);
 279                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 280                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 281                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 282                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 283                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 284                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 285                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 286                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 287
 288                         if ($post_query) {
 289                                 curl_setopt($ch, CURLOPT_POST, true);
 290                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 291                         }
 292
 293                         if ($login && $pass)
 294                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 295
 296                         $contents = @curl_exec($ch);
 297
 298                         if ($contents === false) {
 299                                 curl_close($ch);
 300                                 return false;
 301                         }
 302
 303                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 304                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 305                         curl_close($ch);
 306
 307                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 308                                 return false;
 309                         }
 310
 311                         return $contents;
 312                 } else {
 313                         if ($login && $pass ){
 314                                 $url_parts = array();
 315
 316                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 317
 318                                 if ($url_parts[1] && $url_parts[2]) {
 319                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 320                                 }
 321                         }
 322
 323                         return @file_get_contents($url);
 324                 }
 325
 326         }
 327
 328         /**
 329          * Try to determine the favicon URL for a feed.
 330          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 331          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 332          *
 333          * @param string $url A feed or page URL
 334          * @access public
 335          * @return mixed The favicon URL, or false if none was found.
 336          */
 337         function get_favicon_url($url) {
 338
 339                 $favicon_url = false;
 340
 341                 if ($html = @fetch_file_contents($url)) {
 342
 343                         libxml_use_internal_errors(true);
 344
 345                         $doc = new DOMDocument();
 346                         $doc->loadHTML($html);
 347                         $xpath = new DOMXPath($doc);
 348
 349                         $base = $xpath->query('/html/head/base');
 350                         foreach ($base as $b) {
 351                                 $url = $b->getAttribute("href");
 352                                 break;
 353                         }
 354
 355                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 356                         if (count($entries) > 0) {
 357                                 foreach ($entries as $entry) {
 358                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 359                                         break;
 360                                 }
 361                         }
 362                 }
 363
 364                 if (!$favicon_url)
 365                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 366
 367                 return $favicon_url;
 368         } // function get_favicon_url
 369
 370         function check_feed_favicon($site_url, $feed, $link) {
 371 #               print "FAVICON [$site_url]: $favicon_url\n";
 372
 373                 $icon_file = ICONS_DIR . "/$feed.ico";
 374
 375                 if (!file_exists($icon_file)) {
 376                         $favicon_url = get_favicon_url($site_url);
 377
 378                         if ($favicon_url) {
 379                                 // Limiting to "image" type misses those served with text/plain
 380                                 $contents = fetch_file_contents($favicon_url); // , "image");
 381
 382                                 if ($contents) {
 383                                         // Crude image type matching.
 384                                         // Patterns gleaned from the file(1) source code.
 385                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 386                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 387                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 388                                         }
 389                                         elseif (preg_match('/^GIF8/', $contents)) {
 390                                                 // 0       string          GIF8            GIF image data
 391                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 392                                         }
 393                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 394                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 395                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 396                                         }
 397                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 398                                                 // 0       beshort         0xffd8          JPEG image data
 399                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 400                                         }
 401                                         else {
 402                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 403                                                 $contents = "";
 404                                         }
 405                                 }
 406
 407                                 if ($contents) {
 408                                         $fp = @fopen($icon_file, "w");
 409
 410                                         if ($fp) {
 411                                                 fwrite($fp, $contents);
 412                                                 fclose($fp);
 413                                                 chmod($icon_file, 0644);
 414                                         }
 415                                 }
 416                         }
 417                 }
 418         }
 419
 420         function print_select($id, $default, $values, $attributes = "") {
 421                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 422                 foreach ($values as $v) {
 423                         if ($v == $default)
 424                                 $sel = "selected=\"1\"";
 425                          else
 426                                 $sel = "";
 427
 428                         print "<option value=\"$v\" $sel>$v</option>";
 429                 }
 430                 print "</select>";
 431         }
 432
 433         function print_select_hash($id, $default, $values, $attributes = "") {
 434                 print "<select name=\"$id\" id='$id' $attributes>";
 435                 foreach (array_keys($values) as $v) {
 436                         if ($v == $default)
 437                                 $sel = 'selected="selected"';
 438                          else
 439                                 $sel = "";
 440
 441                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 442                 }
 443
 444                 print "</select>";
 445         }
 446
 447         function get_article_filters($filters, $title, $content, $link, $timestamp, $author, $tags) {
 448                 $matches = array();
 449
 450                 if ($filters["title"]) {
 451                         foreach ($filters["title"] as $filter) {
 452                                 $reg_exp = $filter["reg_exp"];
 453                                 $inverse = $filter["inverse"];
 454                                 if ((!$inverse && @preg_match("/$reg_exp/i", $title)) ||
 455                                                 ($inverse && !@preg_match("/$reg_exp/i", $title))) {
 456
 457                                         array_push($matches, array($filter["action"], $filter["action_param"]));
 458                                 }
 459                         }
 460                 }
 461
 462                 if ($filters["content"]) {
 463                         foreach ($filters["content"] as $filter) {
 464                                 $reg_exp = $filter["reg_exp"];
 465                                 $inverse = $filter["inverse"];
 466
 467                                 if ((!$inverse && @preg_match("/$reg_exp/i", $content)) ||
 468                                                 ($inverse && !@preg_match("/$reg_exp/i", $content))) {
 469
 470                                         array_push($matches, array($filter["action"], $filter["action_param"]));
 471                                 }
 472                         }
 473                 }
 474
 475                 if ($filters["both"]) {
 476                         foreach ($filters["both"] as $filter) {
 477                                 $reg_exp = $filter["reg_exp"];
 478                                 $inverse = $filter["inverse"];
 479
 480                                 if ($inverse) {
 481                                         if (!@preg_match("/$reg_exp/i", $title) && !preg_match("/$reg_exp/i", $content)) {
 482                                                 array_push($matches, array($filter["action"], $filter["action_param"]));
 483                                         }
 484                                 } else {
 485                                         if (@preg_match("/$reg_exp/i", $title) || preg_match("/$reg_exp/i", $content)) {
 486                                                 array_push($matches, array($filter["action"], $filter["action_param"]));
 487                                         }
 488                                 }
 489                         }
 490                 }
 491
 492                 if ($filters["link"]) {
 493                         $reg_exp = $filter["reg_exp"];
 494                         foreach ($filters["link"] as $filter) {
 495                                 $reg_exp = $filter["reg_exp"];
 496                                 $inverse = $filter["inverse"];
 497
 498                                 if ((!$inverse && @preg_match("/$reg_exp/i", $link)) ||
 499                                                 ($inverse && !@preg_match("/$reg_exp/i", $link))) {
 500
 501                                         array_push($matches, array($filter["action"], $filter["action_param"]));
 502                                 }
 503                         }
 504                 }
 505
 506                 if ($filters["date"]) {
 507                         $reg_exp = $filter["reg_exp"];
 508                         foreach ($filters["date"] as $filter) {
 509                                 $date_modifier = $filter["filter_param"];
 510                                 $inverse = $filter["inverse"];
 511                                 $check_timestamp = strtotime($filter["reg_exp"]);
 512
 513                                 # no-op when timestamp doesn't parse to prevent misfires
 514
 515                                 if ($check_timestamp) {
 516                                         $match_ok = false;
 517
 518                                         if ($date_modifier == "before" && $timestamp < $check_timestamp ||
 519                                                 $date_modifier == "after" && $timestamp > $check_timestamp) {
 520                                                         $match_ok = true;
 521                                         }
 522
 523                                         if ($inverse) $match_ok = !$match_ok;
 524
 525                                         if ($match_ok) {
 526                                                 array_push($matches, array($filter["action"], $filter["action_param"]));
 527                                         }
 528                                 }
 529                         }
 530                 }
 531
 532                 if ($filters["author"]) {
 533                         foreach ($filters["author"] as $filter) {
 534                                 $reg_exp = $filter["reg_exp"];
 535                                 $inverse = $filter["inverse"];
 536                                 if ((!$inverse && @preg_match("/$reg_exp/i", $author)) ||
 537                                                 ($inverse && !@preg_match("/$reg_exp/i", $author))) {
 538
 539                                         array_push($matches, array($filter["action"], $filter["action_param"]));
 540                                 }
 541                         }
 542                 }
 543
 544                 if ($filters["tag"]) {
 545
 546                         $tag_string = join(",", $tags);
 547
 548                         foreach ($filters["tag"] as $filter) {
 549                                 $reg_exp = $filter["reg_exp"];
 550                                 $inverse = $filter["inverse"];
 551
 552                                 if ((!$inverse && @preg_match("/$reg_exp/i", $tag_string)) ||
 553                                                 ($inverse && !@preg_match("/$reg_exp/i", $tag_string))) {
 554
 555                                         array_push($matches, array($filter["action"], $filter["action_param"]));
 556                                 }
 557                         }
 558                 }
 559
 560
 561                 return $matches;
 562         }
 563
 564         function find_article_filter($filters, $filter_name) {
 565                 foreach ($filters as $f) {
 566                         if ($f[0] == $filter_name) {
 567                                 return $f;
 568                         };
 569                 }
 570                 return false;
 571         }
 572
 573         function calculate_article_score($filters) {
 574                 $score = 0;
 575
 576                 foreach ($filters as $f) {
 577                         if ($f[0] == "score") {
 578                                 $score += $f[1];
 579                         };
 580                 }
 581                 return $score;
 582         }
 583
 584         function assign_article_to_labels($link, $id, $filters, $owner_uid) {
 585                 foreach ($filters as $f) {
 586                         if ($f[0] == "label") {
 587                                 label_add_article($link, $id, $f[1], $owner_uid);
 588                         };
 589                 }
 590         }
 591
 592         function getmicrotime() {
 593                 list($usec, $sec) = explode(" ",microtime());
 594                 return ((float)$usec + (float)$sec);
 595         }
 596
 597         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 598                 foreach ($values as $v) {
 599
 600                         if ($v == $default)
 601                                 $sel = "checked";
 602                          else
 603                                 $sel = "";
 604
 605                         if ($v == $true_is) {
 606                                 $sel .= " value=\"1\"";
 607                         } else {
 608                                 $sel .= " value=\"0\"";
 609                         }
 610
 611                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 612                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 613
 614                 }
 615         }
 616
 617         function initialize_user_prefs($link, $uid, $profile = false) {
 618
 619                 $uid = db_escape_string($uid);
 620
 621                 if (!$profile) {
 622                         $profile = "NULL";
 623                         $profile_qpart = "AND profile IS NULL";
 624                 } else {
 625                         $profile_qpart = "AND profile = '$profile'";
 626                 }
 627
 628                 if (get_schema_version($link) < 63) $profile_qpart = "";
 629
 630                 db_query($link, "BEGIN");
 631
 632                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 633
 634                 $u_result = db_query($link, "SELECT pref_name
 635                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 636
 637                 $active_prefs = array();
 638
 639                 while ($line = db_fetch_assoc($u_result)) {
 640                         array_push($active_prefs, $line["pref_name"]);
 641                 }
 642
 643                 while ($line = db_fetch_assoc($result)) {
 644                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 645 //                              print "adding " . $line["pref_name"] . "<br>";
 646
 647                                 if (get_schema_version($link) < 63) {
 648                                         db_query($link, "INSERT INTO ttrss_user_prefs
 649                                                 (owner_uid,pref_name,value) VALUES
 650                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 651
 652                                 } else {
 653                                         db_query($link, "INSERT INTO ttrss_user_prefs
 654                                                 (owner_uid,pref_name,value, profile) VALUES
 655                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 656                                 }
 657
 658                         }
 659                 }
 660
 661                 db_query($link, "COMMIT");
 662
 663         }
 664
 665         function get_ssl_certificate_id() {
 666                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 667                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 668                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 669                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 670                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 671                 }
 672                 return "";
 673         }
 674
 675         function get_login_by_ssl_certificate($link) {
 676
 677                 $cert_serial = db_escape_string(get_ssl_certificate_id());
 678
 679                 if ($cert_serial) {
 680                         $result = db_query($link, "SELECT login FROM ttrss_user_prefs, ttrss_users
 681                                 WHERE pref_name = 'SSL_CERT_SERIAL' AND value = '$cert_serial' AND
 682                                 owner_uid = ttrss_users.id");
 683
 684                         if (db_num_rows($result) != 0) {
 685                                 return db_escape_string(db_fetch_result($result, 0, "login"));
 686                         }
 687                 }
 688
 689                 return "";
 690         }
 691
 692         function get_remote_user($link) {
 693
 694                 if (defined('ALLOW_REMOTE_USER_AUTH') && ALLOW_REMOTE_USER_AUTH) {
 695                         return db_escape_string($_SERVER["REMOTE_USER"]);
 696                 }
 697
 698                 return db_escape_string(get_login_by_ssl_certificate($link));
 699         }
 700
 701         function get_remote_fakepass($link) {
 702                 if (get_remote_user($link))
 703                         return "******";
 704                 else
 705                         return "";
 706         }
 707
 708         function authenticate_user($link, $login, $password, $force_auth = false) {
 709
 710                 if (!SINGLE_USER_MODE) {
 711
 712                         $pwd_hash1 = encrypt_password($password);
 713                         $pwd_hash2 = encrypt_password($password, $login);
 714                         $login = db_escape_string($login);
 715
 716                         $remote_user = get_remote_user($link);
 717
 718                         if ($remote_user && $remote_user == $login && $login != "admin") {
 719
 720                                 $login = $remote_user;
 721
 722                                 $query = "SELECT id,login,access_level,pwd_hash
 723                     FROM ttrss_users WHERE
 724                                         login = '$login'";
 725
 726                                 if (defined('AUTO_CREATE_USER') && AUTO_CREATE_USER
 727                                                 && $_SERVER["REMOTE_USER"]) {
 728                                         $result = db_query($link, $query);
 729
 730                                         // First login ?
 731                                         if (db_num_rows($result) == 0) {
 732                                                 $salt = substr(bin2hex(get_random_bytes(125)), 0, 250);
 733                                                 $pwd_hash = encrypt_password($password, $salt, true);
 734
 735                                                 $query2 = "INSERT INTO ttrss_users
 736                                                                 (login,access_level,last_login,created,pwd_hash,salt)
 737                                                                 VALUES ('$login', 0, null, NOW(), '$pwd_hash','$salt')";
 738                                                 db_query($link, $query2);
 739                                         }
 740                                 }
 741
 742                         } else if (get_schema_version($link) > 87) {
 743                                 $result = db_query($link, "SELECT salt FROM ttrss_users WHERE
 744                                         login = '$login'");
 745
 746                                 if (db_num_rows($result) != 1) {
 747                                         return false;
 748                                 }
 749
 750                                 $salt = db_fetch_result($result, 0, "salt");
 751
 752                                 if ($salt == "") {
 753
 754                                         $query = "SELECT id,login,access_level,pwd_hash
 755                             FROM ttrss_users WHERE
 756                                                 login = '$login' AND (pwd_hash = '$pwd_hash1' OR
 757                                                 pwd_hash = '$pwd_hash2')";
 758
 759                                         // verify and upgrade password to new salt base
 760
 761                                         $result = db_query($link, $query);
 762
 763                                         if (db_num_rows($result) == 1) {
 764                                                 // upgrade password to MODE2
 765
 766                                                 $salt = substr(bin2hex(get_random_bytes(125)), 0, 250);
 767                                                 $pwd_hash = encrypt_password($password, $salt, true);
 768
 769                                                 db_query($link, "UPDATE ttrss_users SET
 770                                                         pwd_hash = '$pwd_hash', salt = '$salt' WHERE login = '$login'");
 771
 772                                                 $query = "SELECT id,login,access_level,pwd_hash
 773                                     FROM ttrss_users WHERE
 774                                                         login = '$login' AND pwd_hash = '$pwd_hash'";
 775
 776                                         } else {
 777                                                 return false;
 778                                         }
 779
 780                                 } else {
 781
 782                                         $pwd_hash = encrypt_password($password, $salt, true);
 783
 784                                         $query = "SELECT id,login,access_level,pwd_hash
 785                                  FROM ttrss_users WHERE
 786                                                 login = '$login' AND pwd_hash = '$pwd_hash'";
 787
 788                                 }
 789                         } else {
 790                                 $query = "SELECT id,login,access_level,pwd_hash
 791                          FROM ttrss_users WHERE
 792                                         login = '$login' AND (pwd_hash = '$pwd_hash1' OR
 793                                                 pwd_hash = '$pwd_hash2')";
 794                         }
 795
 796                         $result = db_query($link, $query);
 797
 798                         if (db_num_rows($result) == 1) {
 799                                 $_SESSION["uid"] = db_fetch_result($result, 0, "id");
 800                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 801                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 802                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 803
 804                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 805                                         $_SESSION["uid"]);
 806
 807
 808                                 // LemonLDAP can send user informations via HTTP HEADER
 809                                 if (defined('AUTO_CREATE_USER') && AUTO_CREATE_USER){
 810                                         // update user name
 811                                         $fullname = $_SERVER['HTTP_USER_NAME'] ? $_SERVER['HTTP_USER_NAME'] : $_SERVER['AUTHENTICATE_CN'];
 812                                         if ($fullname){
 813                                                 $fullname = db_escape_string($fullname);
 814                                                 db_query($link, "UPDATE ttrss_users SET full_name = '$fullname' WHERE id = " .
 815                                                         $_SESSION["uid"]);
 816                                         }
 817                                         // update user mail
 818                                         $email = $_SERVER['HTTP_USER_MAIL'] ? $_SERVER['HTTP_USER_MAIL'] : $_SERVER['AUTHENTICATE_MAIL'];
 819                                         if ($email){
 820                                                 $email = db_escape_string($email);
 821                                                 db_query($link, "UPDATE ttrss_users SET email = '$email' WHERE id = " .
 822                                                         $_SESSION["uid"]);
 823                                         }
 824                                 }
 825
 826                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 827                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 828
 829                                 $_SESSION["last_version_check"] = time();
 830
 831                                 initialize_user_prefs($link, $_SESSION["uid"]);
 832
 833                                 return true;
 834                         }
 835
 836                         return false;
 837
 838                 } else {
 839
 840                         $_SESSION["uid"] = 1;
 841                         $_SESSION["name"] = "admin";
 842                         $_SESSION["access_level"] = 10;
 843
 844                         if (!$_SESSION["csrf_token"]) {
 845                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 846                         }
 847
 848                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 849
 850                         initialize_user_prefs($link, $_SESSION["uid"]);
 851
 852                         return true;
 853                 }
 854         }
 855
 856         function make_password($length = 8) {
 857
 858                 $password = "";
 859                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 860
 861         $i = 0;
 862
 863                 while ($i < $length) {
 864                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 865
 866                         if (!strstr($password, $char)) {
 867                                 $password .= $char;
 868                                 $i++;
 869                         }
 870                 }
 871                 return $password;
 872         }
 873
 874         // this is called after user is created to initialize default feeds, labels
 875         // or whatever else
 876
 877         // user preferences are checked on every login, not here
 878
 879         function initialize_user($link, $uid) {
 880
 881                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 882                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 883                         'http://tt-rss.org/releases.rss')");
 884
 885                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 886                         values ('$uid', 'Tiny Tiny RSS: Forum',
 887                                 'http://tt-rss.org/forum/rss.php')");
 888         }
 889
 890         function logout_user() {
 891                 session_destroy();
 892                 if (isset($_COOKIE[session_name()])) {
 893                    setcookie(session_name(), '', time()-42000, '/');
 894                 }
 895         }
 896
 897         function validate_csrf($csrf_token) {
 898                 return $csrf_token == $_SESSION['csrf_token'];
 899         }
 900
 901         function validate_session($link) {
 902                 if (SINGLE_USER_MODE) return true;
 903
 904                 $check_ip = $_SESSION['ip_address'];
 905
 906                 switch (SESSION_CHECK_ADDRESS) {
 907                 case 0:
 908                         $check_ip = '';
 909                         break;
 910                 case 1:
 911                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 912                         break;
 913                 case 2:
 914                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 915                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 916                         break;
 917                 };
 918
 919                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 920                         $_SESSION["login_error_msg"] =
 921                                 __("Session failed to validate (incorrect IP)");
 922                         return false;
 923                 }
 924
 925                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 926                         return false;
 927
 928                 if ($_SESSION["uid"]) {
 929
 930                         $result = db_query($link,
 931                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 932
 933                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 934
 935                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 936                                 return false;
 937                         }
 938                 }
 939
 940 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 941
 942                         //print_r($_SESSION);
 943
 944                         if (time() > $_SESSION["cookie_lifetime"]) {
 945                                 return false;
 946                         }
 947                 } */
 948
 949                 return true;
 950         }
 951
 952         function login_sequence($link, $mobile = false) {
 953                 $_SESSION["prefs_cache"] = array();
 954
 955                 if (!SINGLE_USER_MODE) {
 956
 957                         $login_action = $_POST["login_action"];
 958
 959                         # try to authenticate user if called from login form
 960                         if ($login_action == "do_login") {
 961                                 $login = db_escape_string($_POST["login"]);
 962                                 $password = $_POST["password"];
 963                                 $remember_me = $_POST["remember_me"];
 964
 965                                 if (authenticate_user($link, $login, $password)) {
 966                                         $_POST["password"] = "";
 967
 968                                         $_SESSION["language"] = $_POST["language"];
 969                                         $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 970                                         $_SESSION["bw_limit"] = !!$_POST["bw_limit"];
 971
 972                                         if ($_POST["profile"]) {
 973
 974                                                 $profile = db_escape_string($_POST["profile"]);
 975
 976                                                 $result = db_query($link, "SELECT id FROM ttrss_settings_profiles
 977                                                         WHERE id = '$profile' AND owner_uid = " . $_SESSION["uid"]);
 978
 979                                                 if (db_num_rows($result) != 0) {
 980                                                         $_SESSION["profile"] = $profile;
 981                                                         $_SESSION["prefs_cache"] = array();
 982                                                 }
 983                                         }
 984
 985                                         if ($_REQUEST['return']) {
 986                                                 header("Location: " . $_REQUEST['return']);
 987                                         } else {
 988                                                 header("Location: " . $_SERVER["REQUEST_URI"]);
 989                                         }
 990
 991                                         exit;
 992
 993                                         return;
 994                                 } else {
 995                                         $_SESSION["login_error_msg"] = __("Incorrect username or password");
 996                                 }
 997                         }
 998
 999                         if (!$_SESSION["uid"] || !validate_session($link)) {
1000
1001                                 if (get_remote_user($link) && AUTO_LOGIN) {
1002                                     authenticate_user($link, get_remote_user($link), null);
1003                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
1004                                 } else {
1005                                     render_login_form($link, $mobile);
1006                                     //header("Location: login.php");
1007                                     exit;
1008                                 }
1009                         } else {
1010                                 /* bump login timestamp */
1011                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
1012                                         $_SESSION["uid"]);
1013
1014                                 if ($_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
1015                                         setcookie("ttrss_lang", $_SESSION["language"],
1016                                                 time() + SESSION_COOKIE_LIFETIME);
1017                                 }
1018
1019                                 // try to remove possible duplicates from feed counter cache
1020 //                              ccache_cleanup($link, $_SESSION["uid"]);
1021                         }
1022
1023                 } else {
1024                         return authenticate_user($link, "admin", null);
1025                 }
1026         }
1027
1028         function truncate_string($str, $max_len, $suffix = '&hellip;') {
1029                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
1030                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
1031                 } else {
1032                         return $str;
1033                 }
1034         }
1035
1036         function theme_image($link, $filename) {
1037                 if ($link) {
1038                         $theme_path = get_user_theme_path($link);
1039
1040                         if ($theme_path && is_file($theme_path.$filename)) {
1041                                 return $theme_path.$filename;
1042                         } else {
1043                                 return $filename;
1044                         }
1045                 } else {
1046                         return $filename;
1047                 }
1048         }
1049
1050         function get_user_theme($link) {
1051
1052                 if (get_schema_version($link) >= 63 && $_SESSION["uid"]) {
1053                         $theme_name = get_pref($link, "_THEME_ID");
1054                         if (is_dir("themes/$theme_name")) {
1055                                 return $theme_name;
1056                         } else {
1057                                 return '';
1058                         }
1059                 } else {
1060                         return '';
1061                 }
1062
1063         }
1064
1065         function get_user_theme_path($link) {
1066                 $theme_path = '';
1067
1068                 if (get_schema_version($link) >= 63 && $_SESSION["uid"]) {
1069                         $theme_name = get_pref($link, "_THEME_ID");
1070
1071                         if ($theme_name && is_dir("themes/$theme_name")) {
1072                                 $theme_path = "themes/$theme_name/";
1073                         } else {
1074                                 $theme_name = '';
1075                         }
1076                 } else {
1077                         $theme_path = '';
1078                 }
1079
1080                 if ($theme_path) {
1081                         if (is_file("$theme_path/theme.ini")) {
1082                                 $ini = parse_ini_file("$theme_path/theme.ini", true);
1083                                 if ($ini['theme']['version'] >= THEME_VERSION_REQUIRED) {
1084                                         return $theme_path;
1085                                 }
1086                         }
1087                 }
1088                 return '';
1089         }
1090
1091         function get_user_theme_options($link) {
1092                 $t = get_user_theme_path($link);
1093
1094                 if ($t) {
1095                         if (is_file("$t/theme.ini")) {
1096                                 $ini = parse_ini_file("$t/theme.ini", true);
1097                                 if ($ini['theme']['version']) {
1098                                         return $ini['theme']['options'];
1099                                 }
1100                         }
1101                 }
1102                 return '';
1103         }
1104
1105         function print_theme_includes($link) {
1106
1107                 $t = get_user_theme_path($link);
1108                 $time = time();
1109
1110                 if ($t) {
1111                         print "<link rel=\"stylesheet\" type=\"text/css\"
1112                                 href=\"$t/theme.css?$time \">";
1113                         if (file_exists("$t/theme.js")) {
1114                                 print "<script type=\"text/javascript\" src=\"$t/theme.js?$time\">
1115                                         </script>";
1116                         }
1117                 }
1118         }
1119
1120         function get_all_themes() {
1121                 $themes = glob("themes/*");
1122
1123                 asort($themes);
1124
1125                 $rv = array();
1126
1127                 foreach ($themes as $t) {
1128                         if (is_file("$t/theme.ini")) {
1129                                 $ini = parse_ini_file("$t/theme.ini", true);
1130                                 if ($ini['theme']['version'] >= THEME_VERSION_REQUIRED &&
1131                                                         !$ini['theme']['disabled']) {
1132                                         $entry = array();
1133                                         $entry["path"] = $t;
1134                                         $entry["base"] = basename($t);
1135                                         $entry["name"] = $ini['theme']['name'];
1136                                         $entry["version"] = $ini['theme']['version'];
1137                                         $entry["author"] = $ini['theme']['author'];
1138                                         $entry["options"] = $ini['theme']['options'];
1139                                         array_push($rv, $entry);
1140                                 }
1141                         }
1142                 }
1143
1144                 return $rv;
1145         }
1146
1147         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
1148
1149                 try {
1150                         $source_tz = new DateTimeZone($source_tz);
1151                 } catch (Exception $e) {
1152                         $source_tz = new DateTimeZone('UTC');
1153                 }
1154
1155                 try {
1156                         $dest_tz = new DateTimeZone($dest_tz);
1157                 } catch (Exception $e) {
1158                         $dest_tz = new DateTimeZone('UTC');
1159                 }
1160
1161                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
1162                 return $dt->format('U') + $dest_tz->getOffset($dt);
1163         }
1164
1165         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
1166                                         $no_smart_dt = false) {
1167
1168                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1169                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
1170
1171                 global $utc_tz;
1172                 global $tz_offset;
1173
1174                 # We store date in UTC internally
1175                 $dt = new DateTime($timestamp, $utc_tz);
1176
1177                 if ($tz_offset == -1) {
1178
1179                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
1180
1181                         try {
1182                                 $user_tz = new DateTimeZone($user_tz_string);
1183                         } catch (Exception $e) {
1184                                 $user_tz = $utc_tz;
1185                         }
1186
1187                         $tz_offset = $user_tz->getOffset($dt);
1188                 }
1189
1190                 $user_timestamp = $dt->format('U') + $tz_offset;
1191
1192                 if (!$no_smart_dt) {
1193                         return smart_date_time($link, $user_timestamp,
1194                                 $tz_offset, $owner_uid);
1195                 } else {
1196                         if ($long)
1197                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
1198                         else
1199                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
1200
1201                         return date($format, $user_timestamp);
1202                 }
1203         }
1204
1205         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
1206                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1207
1208                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
1209                         return date("G:i", $timestamp);
1210                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
1211                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
1212                         return date($format, $timestamp);
1213                 } else {
1214                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
1215                         return date($format, $timestamp);
1216                 }
1217         }
1218
1219         function sql_bool_to_bool($s) {
1220                 if ($s == "t" || $s == "1" || $s == "true") {
1221                         return true;
1222                 } else {
1223                         return false;
1224                 }
1225         }
1226
1227         function bool_to_sql_bool($s) {
1228                 if ($s) {
1229                         return "true";
1230                 } else {
1231                         return "false";
1232                 }
1233         }
1234
1235         // Session caching removed due to causing wrong redirects to upgrade
1236         // script when get_schema_version() is called on an obsolete session
1237         // created on a previous schema version.
1238         function get_schema_version($link, $nocache = false) {
1239                 global $schema_version;
1240
1241                 if (!$schema_version) {
1242                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
1243                         $version = db_fetch_result($result, 0, "schema_version");
1244                         $schema_version = $version;
1245                         return $version;
1246                 } else {
1247                         return $schema_version;
1248                 }
1249         }
1250
1251         function sanity_check($link) {
1252                 require_once 'errors.php';
1253
1254                 $error_code = 0;
1255                 $schema_version = get_schema_version($link, true);
1256
1257                 if ($schema_version != SCHEMA_VERSION) {
1258                         $error_code = 5;
1259                 }
1260
1261                 if (DB_TYPE == "mysql") {
1262                         $result = db_query($link, "SELECT true", false);
1263                         if (db_num_rows($result) != 1) {
1264                                 $error_code = 10;
1265                         }
1266                 }
1267
1268                 if (db_escape_string("testTEST") != "testTEST") {
1269                         $error_code = 12;
1270                 }
1271
1272                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
1273         }
1274
1275         function file_is_locked($filename) {
1276                 if (function_exists('flock')) {
1277                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
1278                         if ($fp) {
1279                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1280                                         flock($fp, LOCK_UN);
1281                                         fclose($fp);
1282                                         return false;
1283                                 }
1284                                 fclose($fp);
1285                                 return true;
1286                         } else {
1287                                 return false;
1288                         }
1289                 }
1290                 return true; // consider the file always locked and skip the test
1291         }
1292
1293         function make_lockfile($filename) {
1294                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1295
1296                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1297                         if (function_exists('posix_getpid')) {
1298                                 fwrite($fp, posix_getpid() . "\n");
1299                         }
1300                         return $fp;
1301                 } else {
1302                         return false;
1303                 }
1304         }
1305
1306         function make_stampfile($filename) {
1307                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1308
1309                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1310                         fwrite($fp, time() . "\n");
1311                         flock($fp, LOCK_UN);
1312                         fclose($fp);
1313                         return true;
1314                 } else {
1315                         return false;
1316                 }
1317         }
1318
1319         function sql_random_function() {
1320                 if (DB_TYPE == "mysql") {
1321                         return "RAND()";
1322                 } else {
1323                         return "RANDOM()";
1324                 }
1325         }
1326
1327         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
1328
1329                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1330
1331                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1332
1333                         $ref_check_qpart = ($max_id &&
1334                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
1335
1336                         if (is_numeric($feed)) {
1337                                 if ($cat_view) {
1338
1339                                         if ($feed >= 0) {
1340
1341                                                 if ($feed > 0) {
1342                                                         $cat_qpart = "cat_id = '$feed'";
1343                                                 } else {
1344                                                         $cat_qpart = "cat_id IS NULL";
1345                                                 }
1346
1347                                                 $tmp_result = db_query($link, "SELECT id
1348                                                         FROM ttrss_feeds WHERE $cat_qpart AND owner_uid = $owner_uid");
1349
1350                                                 while ($tmp_line = db_fetch_assoc($tmp_result)) {
1351
1352                                                         $tmp_feed = $tmp_line["id"];
1353
1354                                                         db_query($link, "UPDATE ttrss_user_entries
1355                                                                 SET unread = false,last_read = NOW()
1356                                                                 WHERE feed_id = '$tmp_feed'
1357                                                                 AND $ref_check_qpart
1358                                                                 AND owner_uid = $owner_uid");
1359                                                 }
1360                                         } else if ($feed == -2) {
1361
1362                                                 db_query($link, "UPDATE ttrss_user_entries
1363                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1364                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1365                                                                 AND $ref_check_qpart
1366                                                                 AND unread = true AND owner_uid = $owner_uid");
1367                                         }
1368
1369                                 } else if ($feed > 0) {
1370
1371                                         db_query($link, "UPDATE ttrss_user_entries
1372                                                         SET unread = false,last_read = NOW()
1373                                                         WHERE feed_id = '$feed'
1374                                                         AND $ref_check_qpart
1375                                                         AND owner_uid = $owner_uid");
1376
1377                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1378
1379                                         if ($feed == -1) {
1380                                                 db_query($link, "UPDATE ttrss_user_entries
1381                                                         SET unread = false,last_read = NOW()
1382                                                         WHERE marked = true
1383                                                         AND $ref_check_qpart
1384                                                         AND owner_uid = $owner_uid");
1385                                         }
1386
1387                                         if ($feed == -2) {
1388                                                 db_query($link, "UPDATE ttrss_user_entries
1389                                                         SET unread = false,last_read = NOW()
1390                                                         WHERE published = true
1391                                                         AND $ref_check_qpart
1392                                                         AND owner_uid = $owner_uid");
1393                                         }
1394
1395                                         if ($feed == -3) {
1396
1397                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1398
1399                                                 if (DB_TYPE == "pgsql") {
1400                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1401                                                 } else {
1402                                                         $match_part = "updated > DATE_SUB(NOW(),
1403                                                                 INTERVAL $intl HOUR) ";
1404                                                 }
1405
1406                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1407                                                         ttrss_user_entries WHERE $match_part AND
1408                                                         unread = true AND
1409                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1410                                                         owner_uid = $owner_uid");
1411
1412                                                 $affected_ids = array();
1413
1414                                                 while ($line = db_fetch_assoc($result)) {
1415                                                         array_push($affected_ids, $line["id"]);
1416                                                 }
1417
1418                                                 catchupArticlesById($link, $affected_ids, 0);
1419                                         }
1420
1421                                         if ($feed == -4) {
1422                                                 db_query($link, "UPDATE ttrss_user_entries
1423                                                         SET unread = false,last_read = NOW()
1424                                                         WHERE $ref_check_qpart AND owner_uid = $owner_uid");
1425                                         }
1426
1427                                 } else if ($feed < -10) { // label
1428
1429                                         $label_id = -$feed - 11;
1430
1431                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1432                                                 SET unread = false, last_read = NOW()
1433                                                         WHERE label_id = '$label_id' AND unread = true
1434                                                         AND $ref_check_qpart
1435                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1436
1437                                 }
1438
1439                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1440
1441                         } else { // tag
1442                                 db_query($link, "BEGIN");
1443
1444                                 $tag_name = db_escape_string($feed);
1445
1446                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1447                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1448
1449                                 while ($line = db_fetch_assoc($result)) {
1450                                         db_query($link, "UPDATE ttrss_user_entries SET
1451                                                 unread = false, last_read = NOW()
1452                                                 WHERE $ref_check_qpart AND int_id = " . $line["post_int_id"]);
1453                                 }
1454                                 db_query($link, "COMMIT");
1455                         }
1456         }
1457
1458         function getAllCounters($link, $omode = "flc", $active_feed = false) {
1459
1460                 if (!$omode) $omode = "flc";
1461
1462                 $data = getGlobalCounters($link);
1463
1464                 $data = array_merge($data, getVirtCounters($link));
1465
1466                 if (strchr($omode, "l")) $data = array_merge($data, getLabelCounters($link));
1467                 if (strchr($omode, "f")) $data = array_merge($data, getFeedCounters($link, $active_feed));
1468                 if (strchr($omode, "t")) $data = array_merge($data, getTagCounters($link));
1469                 if (strchr($omode, "c")) $data = array_merge($data, getCategoryCounters($link));
1470
1471                 return $data;
1472         }
1473
1474         function getCategoryTitle($link, $cat_id) {
1475
1476                 if ($cat_id == -1) {
1477                         return __("Special");
1478                 } else if ($cat_id == -2) {
1479                         return __("Labels");
1480                 } else {
1481
1482                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1483                                 id = '$cat_id'");
1484
1485                         if (db_num_rows($result) == 1) {
1486                                 return db_fetch_result($result, 0, "title");
1487                         } else {
1488                                 return "Uncategorized";
1489                         }
1490                 }
1491         }
1492
1493
1494         function getCategoryCounters($link) {
1495                 $ret_arr = array();
1496
1497                 /* Labels category */
1498
1499                 $cv = array("id" => -2, "kind" => "cat",
1500                         "counter" => getCategoryUnread($link, -2));
1501
1502                 array_push($ret_arr, $cv);
1503
1504                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1505                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1506                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1507                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1508                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1509                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1510                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1511
1512                 while ($line = db_fetch_assoc($result)) {
1513                         $line["cat_id"] = (int) $line["cat_id"];
1514
1515                         if ($line["num_children"] > 0) {
1516                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1517                         } else {
1518                                 $child_counter = 0;
1519                         }
1520
1521                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1522                                 "child_counter" => $child_counter,
1523                                 "counter" => $line["unread"]);
1524
1525                         array_push($ret_arr, $cv);
1526                 }
1527
1528                 /* Special case: NULL category doesn't actually exist in the DB */
1529
1530                 $cv = array("id" => 0, "kind" => "cat",
1531                         "counter" => ccache_find($link, 0, $_SESSION["uid"], true));
1532
1533                 array_push($ret_arr, $cv);
1534
1535                 return $ret_arr;
1536         }
1537
1538         // only accepts real cats (>= 0)
1539         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1540                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1541
1542                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1543                                 AND owner_uid = $owner_uid");
1544
1545                 $unread = 0;
1546
1547                 while ($line = db_fetch_assoc($result)) {
1548                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1549                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1550                 }
1551
1552                 return $unread;
1553         }
1554
1555         function getCategoryUnread($link, $cat, $owner_uid = false) {
1556
1557                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1558
1559                 if ($cat >= 0) {
1560
1561                         if ($cat != 0) {
1562                                 $cat_query = "cat_id = '$cat'";
1563                         } else {
1564                                 $cat_query = "cat_id IS NULL";
1565                         }
1566
1567                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1568                                         AND owner_uid = " . $owner_uid);
1569
1570                         $cat_feeds = array();
1571                         while ($line = db_fetch_assoc($result)) {
1572                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1573                         }
1574
1575                         if (count($cat_feeds) == 0) return 0;
1576
1577                         $match_part = implode(" OR ", $cat_feeds);
1578
1579                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1580                                 FROM ttrss_user_entries
1581                                 WHERE   unread = true AND ($match_part)
1582                                 AND owner_uid = " . $owner_uid);
1583
1584                         $unread = 0;
1585
1586                         # this needs to be rewritten
1587                         while ($line = db_fetch_assoc($result)) {
1588                                 $unread += $line["unread"];
1589                         }
1590
1591                         return $unread;
1592                 } else if ($cat == -1) {
1593                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1594                 } else if ($cat == -2) {
1595
1596                         $result = db_query($link, "
1597                                 SELECT COUNT(unread) AS unread FROM
1598                                         ttrss_user_entries, ttrss_user_labels2
1599                                 WHERE article_id = ref_id AND unread = true
1600                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1601
1602                         $unread = db_fetch_result($result, 0, "unread");
1603
1604                         return $unread;
1605
1606                 }
1607         }
1608
1609         function getFeedUnread($link, $feed, $is_cat = false) {
1610                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1611         }
1612
1613         function getLabelUnread($link, $label_id, $owner_uid = false) {
1614                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1615
1616                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1617                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1618
1619                 if (db_num_rows($result) != 0) {
1620                         return db_fetch_result($result, 0, "unread");
1621                 } else {
1622                         return 0;
1623                 }
1624         }
1625
1626         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1627                 $owner_uid = false) {
1628
1629                 $n_feed = (int) $feed;
1630                 $need_entries = false;
1631
1632                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1633
1634                 if ($unread_only) {
1635                         $unread_qpart = "unread = true";
1636                 } else {
1637                         $unread_qpart = "true";
1638                 }
1639
1640                 if ($is_cat) {
1641                         return getCategoryUnread($link, $n_feed, $owner_uid);
1642                 } if ($feed != "0" && $n_feed == 0) {
1643
1644                         $feed = db_escape_string($feed);
1645
1646                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1647                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1648                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1649                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1650                         return db_fetch_result($result, 0, "count");
1651
1652                 } else if ($n_feed == -1) {
1653                         $match_part = "marked = true";
1654                 } else if ($n_feed == -2) {
1655                         $match_part = "published = true";
1656                 } else if ($n_feed == -3) {
1657                         $match_part = "unread = true AND score >= 0";
1658
1659                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1660
1661                         if (DB_TYPE == "pgsql") {
1662                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1663                         } else {
1664                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1665                         }
1666
1667                         $need_entries = true;
1668
1669                 } else if ($n_feed == -4) {
1670                         $match_part = "true";
1671                 } else if ($n_feed >= 0) {
1672
1673                         if ($n_feed != 0) {
1674                                 $match_part = "feed_id = '$n_feed'";
1675                         } else {
1676                                 $match_part = "feed_id IS NULL";
1677                         }
1678
1679                 } else if ($feed < -10) {
1680
1681                         $label_id = -$feed - 11;
1682
1683                         return getLabelUnread($link, $label_id, $owner_uid);
1684
1685                 }
1686
1687                 if ($match_part) {
1688
1689                         if ($need_entries) {
1690                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1691                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1692                         } else {
1693                                 $from_qpart = "ttrss_user_entries";
1694                         }
1695
1696                         $query = "SELECT count(int_id) AS unread
1697                                 FROM $from_qpart WHERE
1698                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1699
1700                         //echo "[$feed/$query]\n";
1701
1702                         $result = db_query($link, $query);
1703
1704                 } else {
1705
1706                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1707                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1708                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1709                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1710                 }
1711
1712                 $unread = db_fetch_result($result, 0, "unread");
1713
1714                 return $unread;
1715         }
1716
1717         function getGlobalUnread($link, $user_id = false) {
1718
1719                 if (!$user_id) {
1720                         $user_id = $_SESSION["uid"];
1721                 }
1722
1723                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1724                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1725
1726                 $c_id = db_fetch_result($result, 0, "c_id");
1727
1728                 return $c_id;
1729         }
1730
1731         function getGlobalCounters($link, $global_unread = -1) {
1732                 $ret_arr = array();
1733
1734                 if ($global_unread == -1) {
1735                         $global_unread = getGlobalUnread($link);
1736                 }
1737
1738                 $cv = array("id" => "global-unread",
1739                         "counter" => $global_unread);
1740
1741                 array_push($ret_arr, $cv);
1742
1743                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1744                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1745
1746                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1747
1748                 $cv = array("id" => "subscribed-feeds",
1749                         "counter" => $subscribed_feeds);
1750
1751                 array_push($ret_arr, $cv);
1752
1753                 return $ret_arr;
1754         }
1755
1756         function getTagCounters($link) {
1757
1758                 $ret_arr = array();
1759
1760                 $result = db_query($link, "SELECT tag_name,SUM((SELECT COUNT(int_id)
1761                         FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1762                                 AND ref_id = id AND unread = true)) AS count FROM ttrss_tags
1763                                 WHERE owner_uid = ".$_SESSION['uid']." GROUP BY tag_name
1764                                 ORDER BY count DESC LIMIT 55");
1765
1766                 $tags = array();
1767
1768                 while ($line = db_fetch_assoc($result)) {
1769                         $tags[$line["tag_name"]] += $line["count"];
1770                 }
1771
1772                 foreach (array_keys($tags) as $tag) {
1773                         $unread = $tags[$tag];
1774                         $tag = htmlspecialchars($tag);
1775
1776                         $cv = array("id" => $tag,
1777                                 "kind" => "tag",
1778                                 "counter" => $unread);
1779
1780                         array_push($ret_arr, $cv);
1781                 }
1782
1783                 return $ret_arr;
1784         }
1785
1786         function getVirtCounters($link) {
1787
1788                 $ret_arr = array();
1789
1790                 for ($i = 0; $i >= -4; $i--) {
1791
1792                         $count = getFeedUnread($link, $i);
1793
1794                         $cv = array("id" => $i,
1795                                 "counter" => $count);
1796
1797 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1798 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1799
1800                         array_push($ret_arr, $cv);
1801                 }
1802
1803                 return $ret_arr;
1804         }
1805
1806         function getLabelCounters($link, $descriptions = false) {
1807
1808                 $ret_arr = array();
1809
1810                 $owner_uid = $_SESSION["uid"];
1811
1812                 $result = db_query($link, "SELECT id, caption FROM ttrss_labels2
1813                         WHERE owner_uid = '$owner_uid'");
1814
1815                 while ($line = db_fetch_assoc($result)) {
1816
1817                         $id = -$line["id"] - 11;
1818
1819                         $label_name = $line["caption"];
1820                         $count = getFeedUnread($link, $id);
1821
1822                         $cv = array("id" => $id,
1823                                 "counter" => $count);
1824
1825                         if ($descriptions)
1826                                 $cv["description"] = $label_name;
1827
1828 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1829 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1830
1831                         array_push($ret_arr, $cv);
1832                 }
1833
1834                 return $ret_arr;
1835         }
1836
1837         function getFeedCounters($link, $active_feed = false) {
1838
1839                 $ret_arr = array();
1840
1841                 $query = "SELECT ttrss_feeds.id,
1842                                 ttrss_feeds.title,
1843                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1844                                 last_error, value AS count
1845                         FROM ttrss_feeds, ttrss_counters_cache
1846                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1847                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1848                                 AND ttrss_counters_cache.feed_id = id";
1849
1850                 $result = db_query($link, $query);
1851                 $fctrs_modified = false;
1852
1853                 while ($line = db_fetch_assoc($result)) {
1854
1855                         $id = $line["id"];
1856                         $count = $line["count"];
1857                         $last_error = htmlspecialchars($line["last_error"]);
1858
1859                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1860
1861                         $has_img = feed_has_icon($id);
1862
1863                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1864                                 $last_updated = '';
1865
1866                         $cv = array("id" => $id,
1867                                 "updated" => $last_updated,
1868                                 "counter" => $count,
1869                                 "has_img" => (int) $has_img);
1870
1871                         if ($last_error)
1872                                 $cv["error"] = $last_error;
1873
1874 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1875 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1876
1877                         if ($active_feed && $id == $active_feed)
1878                                 $cv["title"] = truncate_string($line["title"], 30);
1879
1880                         array_push($ret_arr, $cv);
1881
1882                 }
1883
1884                 return $ret_arr;
1885         }
1886
1887         function get_pgsql_version($link) {
1888                 $result = db_query($link, "SELECT version() AS version");
1889                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1890                 return $version[1];
1891         }
1892
1893         /**
1894          * @return integer Status code:
1895          *                 0 - OK, Feed already exists
1896          *                 1 - OK, Feed added
1897          *                 2 - Invalid URL
1898          *                 3 - URL content is HTML, no feeds available
1899          *                 4 - URL content is HTML which contains multiple feeds.
1900          *                     Here you should call extractfeedurls in rpc-backend
1901          *                     to get all possible feeds.
1902          *                 5 - Couldn't download the URL content.
1903          */
1904         function subscribe_to_feed($link, $url, $cat_id = 0,
1905                         $auth_login = '', $auth_pass = '', $need_auth = false) {
1906
1907                 require_once "include/rssfuncs.php";
1908
1909                 $url = fix_url($url);
1910
1911                 if (!$url || !validate_feed_url($url)) return 2;
1912
1913                 $update_method = 0;
1914
1915                 $result = db_query($link, "SELECT twitter_oauth FROM ttrss_users
1916                         WHERE id = ".$_SESSION['uid']);
1917
1918                 $has_oauth = db_fetch_result($result, 0, 'twitter_oauth');
1919
1920                 if (!$need_auth || !$has_oauth || strpos($url, '://api.twitter.com') === false) {
1921                         if (!fetch_file_contents($url, false, $auth_login, $auth_pass)) return 5;
1922
1923                         if (url_is_html($url, $auth_login, $auth_pass)) {
1924                                 $feedUrls = get_feeds_from_html($url, $auth_login, $auth_pass);
1925                                 if (count($feedUrls) == 0) {
1926                                         return 3;
1927                                 } else if (count($feedUrls) > 1) {
1928                                         return 4;
1929                                 }
1930                                 //use feed url as new URL
1931                                 $url = key($feedUrls);
1932                         }
1933
1934                         } else {
1935                                 if (!fetch_twitter_rss($link, $url, $_SESSION['uid']))
1936                                         return 5;
1937
1938                                 $update_method = 3;
1939                         }
1940                 if ($cat_id == "0" || !$cat_id) {
1941                         $cat_qpart = "NULL";
1942                 } else {
1943                         $cat_qpart = "'$cat_id'";
1944                 }
1945
1946                 $result = db_query($link,
1947                         "SELECT id FROM ttrss_feeds
1948                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1949
1950                 if (db_num_rows($result) == 0) {
1951                         $result = db_query($link,
1952                                 "INSERT INTO ttrss_feeds
1953                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1954                                 VALUES ('".$_SESSION["uid"]."', '$url',
1955                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', '$update_method')");
1956
1957                         $result = db_query($link,
1958                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1959                                         AND owner_uid = " . $_SESSION["uid"]);
1960
1961                         $feed_id = db_fetch_result($result, 0, "id");
1962
1963                         if ($feed_id) {
1964                                 update_rss_feed($link, $feed_id, true);
1965                         }
1966
1967                         return 1;
1968                 } else {
1969                         return 0;
1970                 }
1971         }
1972
1973         function print_feed_select($link, $id, $default_id = "",
1974                 $attributes = "", $include_all_feeds = true) {
1975
1976                 print "<select id=\"$id\" name=\"$id\" $attributes>";
1977                 if ($include_all_feeds) {
1978                         print "<option value=\"0\">".__('All feeds')."</option>";
1979                 }
1980
1981                 $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1982                         WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1983
1984                 if (db_num_rows($result) > 0 && $include_all_feeds) {
1985                         print "<option disabled>--------</option>";
1986                 }
1987
1988                 while ($line = db_fetch_assoc($result)) {
1989                         if ($line["id"] == $default_id) {
1990                                 $is_selected = "selected=\"1\"";
1991                         } else {
1992                                 $is_selected = "";
1993                         }
1994
1995                         $title = truncate_string(htmlspecialchars($line["title"]), 40);
1996
1997                         printf("<option $is_selected value='%d'>%s</option>",
1998                                 $line["id"], $title);
1999                 }
2000
2001                 print "</select>";
2002         }
2003
2004         function print_feed_cat_select($link, $id, $default_id,
2005                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
2006
2007                         if (!$root_id) {
2008                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
2009                         }
2010
2011                         if ($root_id)
2012                                 $parent_qpart = "parent_cat = '$root_id'";
2013                         else
2014                                 $parent_qpart = "parent_cat IS NULL";
2015
2016                         $result = db_query($link, "SELECT id,title,
2017                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
2018                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
2019                                 FROM ttrss_feed_categories
2020                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
2021
2022                         while ($line = db_fetch_assoc($result)) {
2023                                 if ($line["id"] == $default_id) {
2024                                         $is_selected = "selected=\"1\"";
2025                                 } else {
2026                                         $is_selected = "";
2027                                 }
2028
2029                                 for ($i = 0; $i < $nest_level; $i++)
2030                                         $line["title"] = " - " . $line["title"];
2031
2032                                 if ($line["title"])
2033                                         printf("<option $is_selected value='%d'>%s</option>",
2034                                                 $line["id"], htmlspecialchars($line["title"]));
2035
2036                                 if ($line["num_children"] > 0)
2037                                         print_feed_cat_select($link, $id, $default_id, $attributes,
2038                                                 $include_all_cats, $line["id"], $nest_level+1);
2039                         }
2040
2041                         if (!$root_id) {
2042                                 if ($include_all_cats) {
2043                                         if (db_num_rows($result) > 0) {
2044                                                 print "<option disabled=\"1\">--------</option>";
2045                                         }
2046                                                 print "<option value=\"0\">".__('Uncategorized')."</option>";
2047                                 }
2048                                 print "</select>";
2049                         }
2050                 }
2051
2052         function checkbox_to_sql_bool($val) {
2053                 return ($val == "on") ? "true" : "false";
2054         }
2055
2056         function getFeedCatTitle($link, $id) {
2057                 if ($id == -1) {
2058                         return __("Special");
2059                 } else if ($id < -10) {
2060                         return __("Labels");
2061                 } else if ($id > 0) {
2062                         $result = db_query($link, "SELECT ttrss_feed_categories.title
2063                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
2064                                         cat_id = ttrss_feed_categories.id");
2065                         if (db_num_rows($result) == 1) {
2066                                 return db_fetch_result($result, 0, "title");
2067                         } else {
2068                                 return __("Uncategorized");
2069                         }
2070                 } else {
2071                         return "getFeedCatTitle($id) failed";
2072                 }
2073
2074         }
2075
2076         function getFeedIcon($id) {
2077                 switch ($id) {
2078                 case 0:
2079                         return "images/archive.png";
2080                         break;
2081                 case -1:
2082                         return "images/mark_set.png";
2083                         break;
2084                 case -2:
2085                         return "images/pub_set.png";
2086                         break;
2087                 case -3:
2088                         return "images/fresh.png";
2089                         break;
2090                 case -4:
2091                         return "images/tag.png";
2092                         break;
2093                 default:
2094                         if ($id < -10) {
2095                                 return "images/label.png";
2096                         } else {
2097                                 if (file_exists(ICONS_DIR . "/$id.ico"))
2098                                         return ICONS_URL . "/$id.ico";
2099                         }
2100                         break;
2101                 }
2102         }
2103
2104         function getFeedTitle($link, $id) {
2105                 if ($id == -1) {
2106                         return __("Starred articles");
2107                 } else if ($id == -2) {
2108                         return __("Published articles");
2109                 } else if ($id == -3) {
2110                         return __("Fresh articles");
2111                 } else if ($id == -4) {
2112                         return __("All articles");
2113                 } else if ($id === 0 || $id === "0") {
2114                         return __("Archived articles");
2115                 } else if ($id < -10) {
2116                         $label_id = -$id - 11;
2117                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
2118                         if (db_num_rows($result) == 1) {
2119                                 return db_fetch_result($result, 0, "caption");
2120                         } else {
2121                                 return "Unknown label ($label_id)";
2122                         }
2123
2124                 } else if (is_numeric($id) && $id > 0) {
2125                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
2126                         if (db_num_rows($result) == 1) {
2127                                 return db_fetch_result($result, 0, "title");
2128                         } else {
2129                                 return "Unknown feed ($id)";
2130                         }
2131                 } else {
2132                         return $id;
2133                 }
2134         }
2135
2136         function make_init_params($link) {
2137                 $params = array();
2138
2139                 $params["theme"] = get_user_theme($link);
2140                 $params["theme_options"] = get_user_theme_options($link);
2141
2142                 $params["sign_progress"] = theme_image($link, "images/indicator_white.gif");
2143                 $params["sign_progress_tiny"] = theme_image($link, "images/indicator_tiny.gif");
2144                 $params["sign_excl"] = theme_image($link, "images/sign_excl.png");
2145                 $params["sign_info"] = theme_image($link, "images/sign_info.png");
2146
2147                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
2148                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
2149                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
2150                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
2151
2152                                  $params[strtolower($param)] = (int) get_pref($link, $param);
2153                  }
2154
2155                 $params["icons_url"] = ICONS_URL;
2156                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
2157                 $params["default_include_children"] = get_pref($link, "_DEFAULT_INCLUDE_CHILDREN");
2158                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
2159                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
2160                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
2161                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
2162
2163                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2164                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2165
2166                 $max_feed_id = db_fetch_result($result, 0, "mid");
2167                 $num_feeds = db_fetch_result($result, 0, "nf");
2168
2169                 $params["max_feed_id"] = (int) $max_feed_id;
2170                 $params["num_feeds"] = (int) $num_feeds;
2171
2172                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
2173
2174                 $params["csrf_token"] = $_SESSION["csrf_token"];
2175
2176                 return $params;
2177         }
2178
2179         function make_runtime_info($link) {
2180                 $data = array();
2181
2182                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2183                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2184
2185                 $max_feed_id = db_fetch_result($result, 0, "mid");
2186                 $num_feeds = db_fetch_result($result, 0, "nf");
2187
2188                 $data["max_feed_id"] = (int) $max_feed_id;
2189                 $data["num_feeds"] = (int) $num_feeds;
2190
2191                 $data['last_article_id'] = getLastArticleId($link);
2192                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2193
2194                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2195
2196                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2197
2198                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2199
2200                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2201
2202                                 if ($stamp) {
2203                                         $stamp_delta = time() - $stamp;
2204
2205                                         if ($stamp_delta > 1800) {
2206                                                 $stamp_check = 0;
2207                                         } else {
2208                                                 $stamp_check = 1;
2209                                                 $_SESSION["daemon_stamp_check"] = time();
2210                                         }
2211
2212                                         $data['daemon_stamp_ok'] = $stamp_check;
2213
2214                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2215
2216                                         $data['daemon_stamp'] = $stamp_fmt;
2217                                 }
2218                         }
2219                 }
2220
2221                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2222                                 $new_version_details = @check_for_update($link);
2223
2224                                 $data['new_version_available'] = (int) ($new_version_details != false);
2225
2226                                 $_SESSION["last_version_check"] = time();
2227                 }
2228
2229                 return $data;
2230         }
2231
2232         function search_to_sql($link, $search, $match_on) {
2233
2234                 $search_query_part = "";
2235
2236                 $keywords = explode(" ", $search);
2237                 $query_keywords = array();
2238
2239                 foreach ($keywords as $k) {
2240                         if (strpos($k, "-") === 0) {
2241                                 $k = substr($k, 1);
2242                                 $not = "NOT";
2243                         } else {
2244                                 $not = "";
2245                         }
2246
2247                         $commandpair = explode(":", mb_strtolower($k), 2);
2248
2249                         if ($commandpair[0] == "note" && $commandpair[1]) {
2250
2251                                 if ($commandpair[1] == "true")
2252                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2253                                 else
2254                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2255
2256                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2257
2258                                 if ($commandpair[1] == "true")
2259                                         array_push($query_keywords, "($not (marked = true))");
2260                                 else
2261                                         array_push($query_keywords, "($not (marked = false))");
2262
2263                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2264
2265                                 if ($commandpair[1] == "true")
2266                                         array_push($query_keywords, "($not (published = true))");
2267                                 else
2268                                         array_push($query_keywords, "($not (published = false))");
2269
2270                         } else if (strpos($k, "@") === 0) {
2271
2272                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2273                                 $orig_ts = strtotime(substr($k, 1));
2274                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2275
2276                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2277
2278                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2279                         } else if ($match_on == "both") {
2280                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2281                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2282                         } else if ($match_on == "title") {
2283                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%'))");
2284                         } else if ($match_on == "content") {
2285                                 array_push($query_keywords, "(UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2286                         }
2287                 }
2288
2289                 $search_query_part = implode("AND", $query_keywords);
2290
2291                 return $search_query_part;
2292         }
2293
2294         function getChildCategories($link, $cat, $owner_uid) {
2295                 $rv = array();
2296
2297                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2298                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2299
2300                 while ($line = db_fetch_assoc($result)) {
2301                         array_push($rv, $line["id"]);
2302                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2303                 }
2304
2305                 return $rv;
2306         }
2307
2308         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $match_on, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false) {
2309
2310                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2311
2312                 $ext_tables_part = "";
2313
2314                         if ($search) {
2315
2316                                 if (SPHINX_ENABLED) {
2317                                         $ids = join(",", @sphinx_search($search, 0, 500));
2318
2319                                         if ($ids)
2320                                                 $search_query_part = "ref_id IN ($ids) AND ";
2321                                         else
2322                                                 $search_query_part = "ref_id = -1 AND ";
2323
2324                                 } else {
2325                                         $search_query_part = search_to_sql($link, $search, $match_on);
2326                                         $search_query_part .= " AND ";
2327                                 }
2328
2329                         } else {
2330                                 $search_query_part = "";
2331                         }
2332
2333                         if ($filter) {
2334                                 $filter_query_part = filter_to_sql($filter);
2335                         } else {
2336                                 $filter_query_part = "";
2337                         }
2338
2339                         if ($since_id) {
2340                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2341                         } else {
2342                                 $since_id_part = "";
2343                         }
2344
2345                         $view_query_part = "";
2346
2347                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2348                                 if ($search) {
2349                                         $view_query_part = " ";
2350                                 } else if ($feed != -1) {
2351                                         $unread = getFeedUnread($link, $feed, $cat_view);
2352
2353                                         if ($cat_view && $feed > 0 && $include_children)
2354                                                 $unread += getCategoryChildrenUnread($link, $feed);
2355
2356                                         if ($unread > 0) {
2357                                                 $view_query_part = " unread = true AND ";
2358                                         }
2359                                 }
2360                         }
2361
2362                         if ($view_mode == "marked") {
2363                                 $view_query_part = " marked = true AND ";
2364                         }
2365
2366                         if ($view_mode == "published") {
2367                                 $view_query_part = " published = true AND ";
2368                         }
2369
2370                         if ($view_mode == "unread") {
2371                                 $view_query_part = " unread = true AND ";
2372                         }
2373
2374                         if ($view_mode == "updated") {
2375                                 $view_query_part = " (last_read is null and unread = false) AND ";
2376                         }
2377
2378                         if ($limit > 0) {
2379                                 $limit_query_part = "LIMIT " . $limit;
2380                         }
2381
2382                         $vfeed_query_part = "";
2383
2384                         // override query strategy and enable feed display when searching globally
2385                         if ($search && $search_mode == "all_feeds") {
2386                                 $query_strategy_part = "ttrss_entries.id > 0";
2387                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2388                         /* tags */
2389                         } else if (preg_match("/^-?[0-9][0-9]*$/", $feed) == false) {
2390                                 $query_strategy_part = "ttrss_entries.id > 0";
2391                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2392                                         id = feed_id) as feed_title,";
2393                         } else if ($feed > 0 && $search && $search_mode == "this_cat") {
2394
2395                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2396
2397                                 $tmp_result = false;
2398
2399                                 if ($cat_view) {
2400                                         $tmp_result = db_query($link, "SELECT id
2401                                                 FROM ttrss_feeds WHERE cat_id = '$feed'");
2402                                 } else {
2403                                         $tmp_result = db_query($link, "SELECT id
2404                                                 FROM ttrss_feeds WHERE cat_id = (SELECT cat_id FROM ttrss_feeds
2405                                                         WHERE id = '$feed') AND id != '$feed'");
2406                                 }
2407
2408                                 $cat_siblings = array();
2409
2410                                 if (db_num_rows($tmp_result) > 0) {
2411                                         while ($p = db_fetch_assoc($tmp_result)) {
2412                                                 array_push($cat_siblings, "feed_id = " . $p["id"]);
2413                                         }
2414
2415                                         $query_strategy_part = sprintf("(feed_id = %d OR %s)",
2416                                                 $feed, implode(" OR ", $cat_siblings));
2417
2418                                 } else {
2419                                         $query_strategy_part = "ttrss_entries.id > 0";
2420                                 }
2421
2422                         } else if ($feed > 0) {
2423
2424                                 if ($cat_view) {
2425
2426                                         if ($feed > 0) {
2427                                                 if ($include_children) {
2428                                                         # sub-cats
2429                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2430
2431                                                         if (count($subcats) == 0) {
2432                                                                 $query_strategy_part = "cat_id = '$feed'";
2433                                                         } else {
2434                                                                 array_push($subcats, $feed);
2435                                                                 $query_strategy_part = "cat_id IN (".
2436                                                                         implode(",", $subcats).")";
2437                                                         }
2438                                                 } else {
2439                                                         $query_strategy_part = "cat_id = '$feed'";
2440                                                 }
2441
2442                                         } else {
2443                                                 $query_strategy_part = "cat_id IS NULL";
2444                                         }
2445
2446                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2447
2448                                 } else {
2449                                         $query_strategy_part = "feed_id = '$feed'";
2450                                 }
2451                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2452                                 $query_strategy_part = "feed_id IS NULL";
2453                         } else if ($feed == 0 && $cat_view) { // uncategorized
2454                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2455                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2456                         } else if ($feed == -1) { // starred virtual feed
2457                                 $query_strategy_part = "marked = true";
2458                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2459                         } else if ($feed == -2) { // published virtual feed OR labels category
2460
2461                                 if (!$cat_view) {
2462                                         $query_strategy_part = "published = true";
2463                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2464                                 } else {
2465                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2466
2467                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2468
2469                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2470                                                 ttrss_user_labels2.article_id = ref_id";
2471
2472                                 }
2473
2474                         } else if ($feed == -3) { // fresh virtual feed
2475                                 $query_strategy_part = "unread = true AND score >= 0";
2476
2477                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2478
2479                                 if (DB_TYPE == "pgsql") {
2480                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2481                                 } else {
2482                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2483                                 }
2484
2485                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2486                         } else if ($feed == -4) { // all articles virtual feed
2487                                 $query_strategy_part = "true";
2488                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2489                         } else if ($feed <= -10) { // labels
2490                                 $label_id = -$feed - 11;
2491
2492                                 $query_strategy_part = "label_id = '$label_id' AND
2493                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2494                                         ttrss_user_labels2.article_id = ref_id";
2495
2496                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2497                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2498
2499                         } else {
2500                                 $query_strategy_part = "id > 0"; // dumb
2501                         }
2502
2503                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2504                                 $date_sort_field = "updated";
2505                         } else {
2506                                 $date_sort_field = "date_entered";
2507                         }
2508
2509                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2510                                 $order_by = "$date_sort_field";
2511                         } else {
2512                                 $order_by = "$date_sort_field DESC";
2513                         }
2514
2515                         if ($view_mode != "noscores") {
2516                                 $order_by = "score DESC, $order_by";
2517                         }
2518
2519                         if ($override_order) {
2520                                 $order_by = $override_order;
2521                         }
2522
2523                         $feed_title = "";
2524
2525                         if ($search) {
2526                                 $feed_title = "Search results";
2527                         } else {
2528                                 if ($cat_view) {
2529                                         $feed_title = getCategoryTitle($link, $feed);
2530                                 } else {
2531                                         if (is_numeric($feed) && $feed > 0) {
2532                                                 $result = db_query($link, "SELECT title,site_url,last_error
2533                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2534
2535                                                 $feed_title = db_fetch_result($result, 0, "title");
2536                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2537                                                 $last_error = db_fetch_result($result, 0, "last_error");
2538                                         } else {
2539                                                 $feed_title = getFeedTitle($link, $feed);
2540                                         }
2541                                 }
2542                         }
2543
2544                         $content_query_part = "content as content_preview,";
2545
2546                         if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
2547
2548                                 if ($feed >= 0) {
2549                                         $feed_kind = "Feeds";
2550                                 } else {
2551                                         $feed_kind = "Labels";
2552                                 }
2553
2554                                 if ($limit_query_part) {
2555                                         $offset_query_part = "OFFSET $offset";
2556                                 }
2557
2558                                 if ($vfeed_query_part && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2559                                         if (!$override_order) {
2560                                                 $order_by = "ttrss_feeds.title, $order_by";
2561                                         }
2562                                 }
2563
2564                                 if ($feed != "0") {
2565                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2566                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2567
2568                                 } else {
2569                                         $from_qpart = "ttrss_entries,ttrss_user_entries$ext_tables_part
2570                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2571                                 }
2572
2573                                 $query = "SELECT DISTINCT
2574                                                 date_entered,
2575                                                 guid,
2576                                                 ttrss_entries.id,ttrss_entries.title,
2577                                                 updated,
2578                                                 label_cache,
2579                                                 tag_cache,
2580                                                 always_display_enclosures,
2581                                                 site_url,
2582                                                 note,
2583                                                 num_comments,
2584                                                 comments,
2585                                                 int_id,
2586                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2587                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2588                                                 $vfeed_query_part
2589                                                 $content_query_part
2590                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2591                                                 author,score
2592                                         FROM
2593                                                 $from_qpart
2594                                         WHERE
2595                                         $feed_check_qpart
2596                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2597                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2598                                         $search_query_part
2599                                         $filter_query_part
2600                                         $view_query_part
2601                                         $since_id_part
2602                                         $query_strategy_part ORDER BY $order_by
2603                                         $limit_query_part $offset_query_part";
2604
2605                                 if ($_REQUEST["debug"]) print $query;
2606
2607                                 $result = db_query($link, $query);
2608
2609                         } else {
2610                                 // browsing by tag
2611
2612                                 $select_qpart = "SELECT DISTINCT " .
2613                                                                 "date_entered," .
2614                                                                 "guid," .
2615                                                                 "note," .
2616                                                                 "ttrss_entries.id as id," .
2617                                                                 "title," .
2618                                                                 "updated," .
2619                                                                 "unread," .
2620                                                                 "feed_id," .
2621                                                                 "orig_feed_id," .
2622                                                                 "marked," .
2623                                                                 "num_comments, " .
2624                                                                 "comments, " .
2625                                                                 "tag_cache," .
2626                                                                 "label_cache," .
2627                                                                 "link," .
2628                                                                 "last_read," .
2629                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2630                                                                 $since_id_part .
2631                                                                 $vfeed_query_part .
2632                                                                 $content_query_part .
2633                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2634                                                                 "score ";
2635
2636                                 $feed_kind = "Tags";
2637                                 $all_tags = explode(",", $feed);
2638                                 if ($search_mode == 'any') {
2639                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2640                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2641                                         $where_qpart = " WHERE " .
2642                                                                    "ref_id = ttrss_entries.id AND " .
2643                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2644                                                                    "post_int_id = int_id AND $tag_sql AND " .
2645                                                                    $view_query_part .
2646                                                                    $search_query_part .
2647                                                                    $query_strategy_part . " ORDER BY $order_by " .
2648                                                                    $limit_query_part;
2649
2650                                 } else {
2651                                         $i = 1;
2652                                         $sub_selects = array();
2653                                         $sub_ands = array();
2654                                         foreach ($all_tags as $term) {
2655                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2656                                                 $i++;
2657                                         }
2658                                         if ($i > 2) {
2659                                                 $x = 1;
2660                                                 $y = 2;
2661                                                 do {
2662                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2663                                                         $x++;
2664                                                         $y++;
2665                                                 } while ($y < $i);
2666                                         }
2667                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2668                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2669                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2670                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2671                                 }
2672                                 //                              error_log("TAG SQL: " . $tag_sql);
2673                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2674
2675                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2676                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2677                         }
2678
2679                         return array($result, $feed_title, $feed_site_url, $last_error);
2680
2681         }
2682
2683         function sanitize($link, $str, $force_strip_tags = false, $owner = false, $site_url = false) {
2684                 global $purifier;
2685
2686                 if (!$owner) $owner = $_SESSION["uid"];
2687
2688                 $res = trim($str); if (!$res) return '';
2689
2690                 // create global Purifier object if needed
2691                 if (!$purifier) {
2692                         require_once 'lib/htmlpurifier/library/HTMLPurifier.auto.php';
2693
2694                         $config = HTMLPurifier_Config::createDefault();
2695
2696                         $allowed = "p,a[href],i,em,b,strong,code,pre,blockquote,br,img[src|alt|title|align|hspace],ul,ol,li,h1,h2,h3,h4,s,object[classid|type|id|name|width|height|codebase],param[name|value],table,tr,td,span[class]";
2697
2698                         $config->set('HTML.SafeObject', true);
2699                         @$config->set('HTML', 'Allowed', $allowed);
2700                         $config->set('Output.FlashCompat', true);
2701                         $config->set('Attr.EnableID', true);
2702                         if (!defined('MOBILE_VERSION')) {
2703                                 @$config->set('Cache', 'SerializerPath', CACHE_DIR . "/htmlpurifier");
2704                         } else {
2705                                 @$config->set('Cache', 'SerializerPath', "../" . CACHE_DIR . "/htmlpurifier");
2706                         }
2707
2708                         $config->set('Filter.YouTube', true);
2709
2710                         $purifier = new HTMLPurifier($config);
2711                 }
2712
2713                 $res = $purifier->purify($res);
2714
2715                 if (get_pref($link, "STRIP_IMAGES", $owner)) {
2716                         $res = preg_replace('/<img[^>]+>/is', '', $res);
2717                 }
2718
2719                 if (strpos($res, "href=") === false)
2720                         $res = rewrite_urls($res);
2721
2722                 $charset_hack = '<head>
2723                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2724                 </head>';
2725
2726                 $res = trim($res); if (!$res) return '';
2727
2728                 libxml_use_internal_errors(true);
2729
2730                 $doc = new DOMDocument();
2731                 $doc->loadHTML($charset_hack . $res);
2732                 $xpath = new DOMXPath($doc);
2733
2734                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2735                 $br_inserted = 0;
2736
2737                 foreach ($entries as $entry) {
2738
2739                         if ($site_url) {
2740
2741                                 if ($entry->hasAttribute('href'))
2742                                         $entry->setAttribute('href',
2743                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2744
2745                                 if ($entry->hasAttribute('src'))
2746                                         if (preg_match('/^image.php\?i=[a-z0-9]+$/', $entry->getAttribute('src')) == 0)
2747                                                 $entry->setAttribute('src',
2748                                                         rewrite_relative_url($site_url, $entry->getAttribute('src')));
2749                         }
2750
2751                         if (strtolower($entry->nodeName) == "a") {
2752                                 $entry->setAttribute("target", "_blank");
2753                         }
2754
2755                         if (strtolower($entry->nodeName) == "img" && !$br_inserted) {
2756                                 $br = $doc->createElement("br");
2757
2758                                 if ($entry->parentNode->nextSibling) {
2759                                         $entry->parentNode->insertBefore($br, $entry->nextSibling);
2760                                         $br_inserted = 1;
2761                                 }
2762
2763                         }
2764                 }
2765
2766                 $node = $doc->getElementsByTagName('body')->item(0);
2767
2768                 return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
2769         }
2770
2771         /**
2772          * Send by mail a digest of last articles.
2773          *
2774          * @param mixed $link The database connection.
2775          * @param integer $limit The maximum number of articles by digest.
2776          * @return boolean Return false if digests are not enabled.
2777          */
2778         function send_headlines_digests($link, $debug = false) {
2779
2780                 require_once 'lib/phpmailer/class.phpmailer.php';
2781
2782                 $user_limit = 15; // amount of users to process (e.g. emails to send out)
2783                 $limit = 1000; // maximum amount of headlines to include
2784
2785                 if ($debug) _debug("Sending digests, batch of max $user_limit users, headline limit = $limit");
2786
2787                 if (DB_TYPE == "pgsql") {
2788                         $interval_query = "last_digest_sent < NOW() - INTERVAL '1 days'";
2789                 } else if (DB_TYPE == "mysql") {
2790                         $interval_query = "last_digest_sent < DATE_SUB(NOW(), INTERVAL 1 DAY)";
2791                 }
2792
2793                 $result = db_query($link, "SELECT id,email FROM ttrss_users
2794                                 WHERE email != '' AND (last_digest_sent IS NULL OR $interval_query)");
2795
2796                 while ($line = db_fetch_assoc($result)) {
2797
2798                         if (get_pref($link, 'DIGEST_ENABLE', $line['id'], false)) {
2799                                 $preferred_ts = strtotime(get_pref($link, 'DIGEST_PREFERRED_TIME', $line['id'], '00:00'));
2800
2801                                 // try to send digests within 2 hours of preferred time
2802                                 if ($preferred_ts && time() >= $preferred_ts &&
2803                                                 time() - $preferred_ts <= 7200) {
2804
2805                                         if ($debug) print "Sending digest for UID:" . $line['id'] . " - " . $line["email"] . " ... ";
2806
2807                                         $do_catchup = get_pref($link, 'DIGEST_CATCHUP', $line['id'], false);
2808
2809                                         global $tz_offset;
2810
2811                                         // reset tz_offset global to prevent tz cache clash between users
2812                                         $tz_offset = -1;
2813
2814                                         $tuple = prepare_headlines_digest($link, $line["id"], 1, $limit);
2815                                         $digest = $tuple[0];
2816                                         $headlines_count = $tuple[1];
2817                                         $affected_ids = $tuple[2];
2818                                         $digest_text = $tuple[3];
2819
2820                                         if ($headlines_count > 0) {
2821
2822                                                 $mail = new PHPMailer();
2823
2824                                                 $mail->PluginDir = "lib/phpmailer/";
2825                                                 $mail->SetLanguage("en", "lib/phpmailer/language/");
2826
2827                                                 $mail->CharSet = "UTF-8";
2828
2829                                                 $mail->From = SMTP_FROM_ADDRESS;
2830                                                 $mail->FromName = SMTP_FROM_NAME;
2831                                                 $mail->AddAddress($line["email"], $line["login"]);
2832
2833                                                 if (SMTP_HOST) {
2834                                                         $mail->Host = SMTP_HOST;
2835                                                         $mail->Mailer = "smtp";
2836                                                         $mail->SMTPAuth = SMTP_LOGIN != '';
2837                                                         $mail->Username = SMTP_LOGIN;
2838                                                         $mail->Password = SMTP_PASSWORD;
2839                                                 }
2840
2841                                                 $mail->IsHTML(true);
2842                                                 $mail->Subject = DIGEST_SUBJECT;
2843                                                 $mail->Body = $digest;
2844                                                 $mail->AltBody = $digest_text;
2845
2846                                                 $rc = $mail->Send();
2847
2848                                                 if (!$rc && $debug) print "ERROR: " . $mail->ErrorInfo;
2849
2850                                                 if ($debug) print "RC=$rc\n";
2851
2852                                                 if ($rc && $do_catchup) {
2853                                                         if ($debug) print "Marking affected articles as read...\n";
2854                                                         catchupArticlesById($link, $affected_ids, 0, $line["id"]);
2855                                                 }
2856                                         } else {
2857                                                 if ($debug) print "No headlines\n";
2858                                         }
2859
2860                                         db_query($link, "UPDATE ttrss_users SET last_digest_sent = NOW()
2861                                                 WHERE id = " . $line["id"]);
2862
2863                                 }
2864                         }
2865                 }
2866
2867                 if ($debug) _debug("All done.");
2868
2869         }
2870
2871         function prepare_headlines_digest($link, $user_id, $days = 1, $limit = 1000) {
2872
2873                 require_once "lib/MiniTemplator.class.php";
2874
2875                 $tpl = new MiniTemplator;
2876                 $tpl_t = new MiniTemplator;
2877
2878                 $tpl->readTemplateFromFile("templates/digest_template_html.txt");
2879                 $tpl_t->readTemplateFromFile("templates/digest_template.txt");
2880
2881                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $user_id);
2882                 $local_ts = convert_timestamp(time(), 'UTC', $user_tz_string);
2883
2884                 $tpl->setVariable('CUR_DATE', date('Y/m/d', $local_ts));
2885                 $tpl->setVariable('CUR_TIME', date('G:i', $local_ts));
2886
2887                 $tpl_t->setVariable('CUR_DATE', date('Y/m/d', $local_ts));
2888                 $tpl_t->setVariable('CUR_TIME', date('G:i', $local_ts));
2889
2890                 $affected_ids = array();
2891
2892                 if (DB_TYPE == "pgsql") {
2893                         $interval_query = "ttrss_entries.date_updated > NOW() - INTERVAL '$days days'";
2894                 } else if (DB_TYPE == "mysql") {
2895                         $interval_query = "ttrss_entries.date_updated > DATE_SUB(NOW(), INTERVAL $days DAY)";
2896                 }
2897
2898                 $result = db_query($link, "SELECT ttrss_entries.title,
2899                                 ttrss_feeds.title AS feed_title,
2900                                 COALESCE(ttrss_feed_categories.title, '".__('Uncategorized')."') AS cat_title,
2901                                 date_updated,
2902                                 ttrss_user_entries.ref_id,
2903                                 link,
2904                                 score,
2905                                 content,
2906                                 ".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
2907                         FROM
2908                                 ttrss_user_entries,ttrss_entries,ttrss_feeds
2909                         LEFT JOIN
2910                                 ttrss_feed_categories ON (cat_id = ttrss_feed_categories.id)
2911                         WHERE
2912                                 ref_id = ttrss_entries.id AND feed_id = ttrss_feeds.id
2913                                 AND include_in_digest = true
2914                                 AND $interval_query
2915                                 AND ttrss_user_entries.owner_uid = $user_id
2916                                 AND unread = true
2917                                 AND score >= 0
2918                         ORDER BY ttrss_feed_categories.title, ttrss_feeds.title, score DESC, date_updated DESC
2919                         LIMIT $limit");
2920
2921                 $cur_feed_title = "";
2922
2923                 $headlines_count = db_num_rows($result);
2924
2925                 $headlines = array();
2926
2927                 while ($line = db_fetch_assoc($result)) {
2928                         array_push($headlines, $line);
2929                 }
2930
2931                 for ($i = 0; $i < sizeof($headlines); $i++) {
2932
2933                         $line = $headlines[$i];
2934
2935                         array_push($affected_ids, $line["ref_id"]);
2936
2937                         $updated = make_local_datetime($link, $line['last_updated'], false,
2938                                 $user_id);
2939
2940 /*                      if ($line["score"] != 0) {
2941                                 if ($line["score"] > 0) $line["score"] = '+' . $line["score"];
2942
2943                                 $line["title"] .= " (".$line['score'].")";
2944                         } */
2945
2946                         if (get_pref($link, 'ENABLE_FEED_CATS', $user_id)) {
2947                                 $line['feed_title'] = $line['cat_title'] . " / " . $line['feed_title'];
2948                         }
2949
2950                         $tpl->setVariable('FEED_TITLE', $line["feed_title"]);
2951                         $tpl->setVariable('ARTICLE_TITLE', $line["title"]);
2952                         $tpl->setVariable('ARTICLE_LINK', $line["link"]);
2953                         $tpl->setVariable('ARTICLE_UPDATED', $updated);
2954                         $tpl->setVariable('ARTICLE_EXCERPT',
2955                                 truncate_string(strip_tags($line["content"]), 300));
2956 //                      $tpl->setVariable('ARTICLE_CONTENT',
2957 //                              strip_tags($article_content));
2958
2959                         $tpl->addBlock('article');
2960
2961                         $tpl_t->setVariable('FEED_TITLE', $line["feed_title"]);
2962                         $tpl_t->setVariable('ARTICLE_TITLE', $line["title"]);
2963                         $tpl_t->setVariable('ARTICLE_LINK', $line["link"]);
2964                         $tpl_t->setVariable('ARTICLE_UPDATED', $updated);
2965 //                      $tpl_t->setVariable('ARTICLE_EXCERPT',
2966 //                              truncate_string(strip_tags($line["excerpt"]), 100));
2967
2968                         $tpl_t->addBlock('article');
2969
2970                         if ($headlines[$i]['feed_title'] != $headlines[$i+1]['feed_title']) {
2971                                 $tpl->addBlock('feed');
2972                                 $tpl_t->addBlock('feed');
2973                         }
2974
2975                 }
2976
2977                 $tpl->addBlock('digest');
2978                 $tpl->generateOutputToString($tmp);
2979
2980                 $tpl_t->addBlock('digest');
2981                 $tpl_t->generateOutputToString($tmp_t);
2982
2983                 return array($tmp, $headlines_count, $affected_ids, $tmp_t);
2984         }
2985
2986         function check_for_update($link) {
2987                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2988                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION;
2989
2990                         $version_data = @fetch_file_contents($version_url);
2991
2992                         if ($version_data) {
2993                                 $version_data = json_decode($version_data, true);
2994                                 if ($version_data && $version_data['version']) {
2995
2996                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2997                                                 return $version_data;
2998                                         }
2999                                 }
3000                         }
3001                 }
3002                 return false;
3003         }
3004
3005         function markArticlesById($link, $ids, $cmode) {
3006
3007                 $tmp_ids = array();
3008
3009                 foreach ($ids as $id) {
3010                         array_push($tmp_ids, "ref_id = '$id'");
3011                 }
3012
3013                 $ids_qpart = join(" OR ", $tmp_ids);
3014
3015                 if ($cmode == 0) {
3016                         db_query($link, "UPDATE ttrss_user_entries SET
3017                         marked = false,last_read = NOW()
3018                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3019                 } else if ($cmode == 1) {
3020                         db_query($link, "UPDATE ttrss_user_entries SET
3021                         marked = true
3022                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3023                 } else {
3024                         db_query($link, "UPDATE ttrss_user_entries SET
3025                         marked = NOT marked,last_read = NOW()
3026                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3027                 }
3028         }
3029
3030         function publishArticlesById($link, $ids, $cmode) {
3031
3032                 $tmp_ids = array();
3033
3034                 foreach ($ids as $id) {
3035                         array_push($tmp_ids, "ref_id = '$id'");
3036                 }
3037
3038                 $ids_qpart = join(" OR ", $tmp_ids);
3039
3040                 if ($cmode == 0) {
3041                         db_query($link, "UPDATE ttrss_user_entries SET
3042                         published = false,last_read = NOW()
3043                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3044                 } else if ($cmode == 1) {
3045                         db_query($link, "UPDATE ttrss_user_entries SET
3046                         published = true
3047                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3048                 } else {
3049                         db_query($link, "UPDATE ttrss_user_entries SET
3050                         published = NOT published,last_read = NOW()
3051                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3052                 }
3053
3054                 if (PUBSUBHUBBUB_HUB) {
3055                         $rss_link = get_self_url_prefix() .
3056                                 "/public.php?op=rss&id=-2&key=" .
3057                                 get_feed_access_key($link, -2, false);
3058
3059                         $p = new Publisher(PUBSUBHUBBUB_HUB);
3060
3061                         $pubsub_result = $p->publish_update($rss_link);
3062                 }
3063         }
3064
3065         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
3066
3067                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3068                 if (count($ids) == 0) return;
3069
3070                 $tmp_ids = array();
3071
3072                 foreach ($ids as $id) {
3073                         array_push($tmp_ids, "ref_id = '$id'");
3074                 }
3075
3076                 $ids_qpart = join(" OR ", $tmp_ids);
3077
3078                 if ($cmode == 0) {
3079                         db_query($link, "UPDATE ttrss_user_entries SET
3080                         unread = false,last_read = NOW()
3081                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3082                 } else if ($cmode == 1) {
3083                         db_query($link, "UPDATE ttrss_user_entries SET
3084                         unread = true
3085                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3086                 } else {
3087                         db_query($link, "UPDATE ttrss_user_entries SET
3088                         unread = NOT unread,last_read = NOW()
3089                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3090                 }
3091
3092                 /* update ccache */
3093
3094                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
3095                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3096
3097                 while ($line = db_fetch_assoc($result)) {
3098                         ccache_update($link, $line["feed_id"], $owner_uid);
3099                 }
3100         }
3101
3102         function catchupArticleById($link, $id, $cmode) {
3103
3104                 if ($cmode == 0) {
3105                         db_query($link, "UPDATE ttrss_user_entries SET
3106                         unread = false,last_read = NOW()
3107                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3108                 } else if ($cmode == 1) {
3109                         db_query($link, "UPDATE ttrss_user_entries SET
3110                         unread = true
3111                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3112                 } else {
3113                         db_query($link, "UPDATE ttrss_user_entries SET
3114                         unread = NOT unread,last_read = NOW()
3115                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3116                 }
3117
3118                 $feed_id = getArticleFeed($link, $id);
3119                 ccache_update($link, $feed_id, $_SESSION["uid"]);
3120         }
3121
3122         function make_guid_from_title($title) {
3123                 return preg_replace("/[ \"\',.:;]/", "-",
3124                         mb_strtolower(strip_tags($title), 'utf-8'));
3125         }
3126
3127         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
3128
3129                 $a_id = db_escape_string($id);
3130
3131                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3132
3133                 $query = "SELECT DISTINCT tag_name,
3134                         owner_uid as owner FROM
3135                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
3136                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
3137
3138                 $obj_id = md5("TAGS:$owner_uid:$id");
3139                 $tags = array();
3140
3141                 /* check cache first */
3142
3143                 if ($tag_cache === false) {
3144                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
3145                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3146
3147                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
3148                 }
3149
3150                 if ($tag_cache) {
3151                         $tags = explode(",", $tag_cache);
3152                 } else {
3153
3154                         /* do it the hard way */
3155
3156                         $tmp_result = db_query($link, $query);
3157
3158                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3159                                 array_push($tags, $tmp_line["tag_name"]);
3160                         }
3161
3162                         /* update the cache */
3163
3164                         $tags_str = db_escape_string(join(",", $tags));
3165
3166                         db_query($link, "UPDATE ttrss_user_entries
3167                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
3168                                 AND owner_uid = $owner_uid");
3169                 }
3170
3171                 return $tags;
3172         }
3173
3174         function trim_array($array) {
3175                 $tmp = $array;
3176                 array_walk($tmp, 'trim');
3177                 return $tmp;
3178         }
3179
3180         function tag_is_valid($tag) {
3181                 if ($tag == '') return false;
3182                 if (preg_match("/^[0-9]*$/", $tag)) return false;
3183                 if (mb_strlen($tag) > 250) return false;
3184
3185                 if (function_exists('iconv')) {
3186                         $tag = iconv("utf-8", "utf-8", $tag);
3187                 }
3188
3189                 if (!$tag) return false;
3190
3191                 return true;
3192         }
3193
3194         function render_login_form($link, $mobile = 0) {
3195                 switch ($mobile) {
3196                 case 0:
3197                         require_once "login_form.php";
3198                         break;
3199                 case 1:
3200                         require_once "mobile/login_form.php";
3201                         break;
3202                 case 2:
3203                         require_once "mobile/classic/login_form.php";
3204                 }
3205         }
3206
3207         // from http://developer.apple.com/internet/safari/faq.html
3208         function no_cache_incantation() {
3209                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
3210                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
3211                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
3212                 header("Cache-Control: post-check=0, pre-check=0", false);
3213                 header("Pragma: no-cache"); // HTTP/1.0
3214         }
3215
3216         function format_warning($msg, $id = "") {
3217                 global $link;
3218                 return "<div class=\"warning\" id=\"$id\">
3219                         <img src=\"".theme_image($link, "images/sign_excl.png")."\">$msg</div>";
3220         }
3221
3222         function format_notice($msg, $id = "") {
3223                 global $link;
3224                 return "<div class=\"notice\" id=\"$id\">
3225                         <img src=\"".theme_image($link, "images/sign_info.png")."\">$msg</div>";
3226         }
3227
3228         function format_error($msg, $id = "") {
3229                 global $link;
3230                 return "<div class=\"error\" id=\"$id\">
3231                         <img src=\"".theme_image($link, "images/sign_excl.png")."\">$msg</div>";
3232         }
3233
3234         function print_notice($msg) {
3235                 return print format_notice($msg);
3236         }
3237
3238         function print_warning($msg) {
3239                 return print format_warning($msg);
3240         }
3241
3242         function print_error($msg) {
3243                 return print format_error($msg);
3244         }
3245
3246
3247         function T_sprintf() {
3248                 $args = func_get_args();
3249                 return vsprintf(__(array_shift($args)), $args);
3250         }
3251
3252         function format_inline_player($link, $url, $ctype) {
3253
3254                 $entry = "";
3255
3256                 if (strpos($ctype, "audio/") === 0) {
3257
3258                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3259                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
3260                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
3261
3262                                 $id = 'AUDIO-' . uniqid();
3263
3264                                 $entry .= "<audio id=\"$id\"\">
3265                                         <source src=\"$url\"></source>
3266                                         </audio>";
3267
3268                                 $entry .= "<span onclick=\"player(this)\"
3269                                         title=\"".__("Click to play")."\" status=\"0\"
3270                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
3271
3272                         } else {
3273
3274                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3275                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3276                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3277                                         <param name=\"movie\"
3278                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3279                                         </object>";
3280                         }
3281                 }
3282
3283                 $filename = substr($url, strrpos($url, "/")+1);
3284
3285                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3286                         $filename . " (" . $ctype . ")" . "</a>";
3287
3288                 return $entry;
3289         }
3290
3291         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3292
3293                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3294
3295                 $rv = array();
3296
3297                 $rv['id'] = $id;
3298
3299                 /* we can figure out feed_id from article id anyway, why do we
3300                  * pass feed_id here? let's ignore the argument :( */
3301
3302                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3303                         WHERE ref_id = '$id'");
3304
3305                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3306
3307                 $rv['feed_id'] = $feed_id;
3308
3309                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3310
3311                 $result = db_query($link, "SELECT rtl_content, always_display_enclosures FROM ttrss_feeds
3312                         WHERE id = '$feed_id' AND owner_uid = $owner_uid");
3313
3314                 if (db_num_rows($result) == 1) {
3315                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
3316                         $always_display_enclosures = sql_bool_to_bool(db_fetch_result($result, 0, "always_display_enclosures"));
3317                 } else {
3318                         $rtl_content = false;
3319                         $always_display_enclosures = false;
3320                 }
3321
3322                 if ($rtl_content) {
3323                         $rtl_tag = "dir=\"RTL\"";
3324                         $rtl_class = "RTL";
3325                 } else {
3326                         $rtl_tag = "";
3327                         $rtl_class = "";
3328                 }
3329
3330                 if ($mark_as_read) {
3331                         $result = db_query($link, "UPDATE ttrss_user_entries
3332                                 SET unread = false,last_read = NOW()
3333                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3334
3335                         ccache_update($link, $feed_id, $owner_uid);
3336                 }
3337
3338                 $result = db_query($link, "SELECT title,link,content,feed_id,comments,int_id,
3339                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3340                         (SELECT icon_url FROM ttrss_feeds WHERE id = feed_id) as icon_url,
3341                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3342                         num_comments,
3343                         tag_cache,
3344                         author,
3345                         orig_feed_id,
3346                         note
3347                         FROM ttrss_entries,ttrss_user_entries
3348                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3349
3350                 if ($result) {
3351
3352                         $line = db_fetch_assoc($result);
3353
3354                         if ($line["icon_url"]) {
3355                                 $feed_icon = "<img src=\"" . $line["icon_url"] . "\">";
3356                         } else {
3357                                 $feed_icon = "&nbsp;";
3358                         }
3359
3360                         $feed_site_url = $line['site_url'];
3361
3362                         $num_comments = $line["num_comments"];
3363                         $entry_comments = "";
3364
3365                         if ($num_comments > 0) {
3366                                 if ($line["comments"]) {
3367                                         $comments_url = $line["comments"];
3368                                 } else {
3369                                         $comments_url = $line["link"];
3370                                 }
3371                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3372                         } else {
3373                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3374                                         $entry_comments = "<a target='_blank' href=\"".$line["comments"]."\">comments</a>";
3375                                 }
3376                         }
3377
3378                         if ($zoom_mode) {
3379                                 header("Content-Type: text/html");
3380                                 $rv['content'] .= "<html><head>
3381                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3382                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3383                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3384                                         </head><body>";
3385                         }
3386
3387                         $title_escaped = db_escape_string($line['title']);
3388
3389                         $rv['content'] .= "<div id=\"PTITLE-$id\" style=\"display : none\">" .
3390                                 truncate_string(strip_tags($line['title']), 15) . "</div>";
3391
3392                         $rv['content'] .= "<div id=\"PTITLE-FULL-$id\" style=\"display : none\">" .
3393                                 strip_tags($line['title']) . "</div>";
3394
3395                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3396
3397                         $rv['content'] .= "<div onclick=\"return postClicked(event, $id)\"
3398                                 class=\"postHeader\" id=\"POSTHDR-$id\">";
3399
3400                         $entry_author = $line["author"];
3401
3402                         if ($entry_author) {
3403                                 $entry_author = __(" - ") . $entry_author;
3404                         }
3405
3406                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3407                                 $owner_uid, true);
3408
3409                         $rv['content'] .= "<div class=\"postDate$rtl_class\">$parsed_updated</div>";
3410
3411                         if ($line["link"]) {
3412                                 $rv['content'] .= "<div class='postTitle' clear='both'><a target='_blank'
3413                                         title=\"".htmlspecialchars($line['title'])."\"
3414                                         href=\"" .
3415                                         $line["link"] . "\">" .
3416                                         truncate_string($line["title"], 100) .
3417                                         "<span class='author'>$entry_author</span></a></div>";
3418                         } else {
3419                                 $rv['content'] .= "<div class='postTitle' clear='both'>" . $line["title"] . "$entry_author</div>";
3420                         }
3421
3422                         $tag_cache = $line["tag_cache"];
3423
3424                         if (!$tag_cache)
3425                                 $tags = get_article_tags($link, $id, $owner_uid);
3426                         else
3427                                 $tags = explode(",", $tag_cache);
3428
3429                         $tags_str = format_tags_string($tags, $id);
3430                         $tags_str_full = join(", ", $tags);
3431
3432                         if (!$tags_str_full) $tags_str_full = __("no tags");
3433
3434                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3435
3436                         $rv['content'] .= "<div class='postTags' style='float : right'>
3437                                 <img src='".theme_image($link, 'images/tag.png')."'
3438                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3439
3440                         if (!$zoom_mode) {
3441                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3442                                         <a title=\"".__('Edit tags for this article')."\"
3443                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3444
3445                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3446                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3447                                         position=\"below\">$tags_str_full</div>";
3448
3449                                 $rv['content'] .= "<img src=\"".theme_image($link, 'images/art-zoom.png')."\"
3450                                                 class='tagsPic' style=\"cursor : pointer\"
3451                                                 onclick=\"postOpenInNewTab(event, $id)\"
3452                                                 alt='Zoom' title='".__('Open article in new tab')."'>";
3453
3454                                 $button_plugins = explode(",", ARTICLE_BUTTON_PLUGINS);
3455
3456                                 foreach ($button_plugins as $p) {
3457                                         $pclass = trim("${p}_button");
3458
3459                                         if (class_exists($pclass)) {
3460                                                 $plugin = new $pclass($link);
3461                                                 $rv['content'] .= $plugin->render($id, $line);
3462                                         }
3463                                 }
3464
3465                                 $rv['content'] .= "<img src=\"".theme_image($link, 'images/digest_checkbox.png')."\"
3466                                                 class='tagsPic' style=\"cursor : pointer\"
3467                                                 onclick=\"closeArticlePanel($id)\"
3468                                                 title='".__('Close article')."'>";
3469
3470                         } else {
3471                                 $tags_str = strip_tags($tags_str);
3472                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3473                         }
3474                         $rv['content'] .= "</div>";
3475                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3476
3477                         if ($line["orig_feed_id"]) {
3478
3479                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3480                                         WHERE id = ".$line["orig_feed_id"]);
3481
3482                                 if (db_num_rows($tmp_result) != 0) {
3483
3484                                         $rv['content'] .= "<div clear='both'>";
3485                                         $rv['content'] .= __("Originally from:");
3486
3487                                         $rv['content'] .= "&nbsp;";
3488
3489                                         $tmp_line = db_fetch_assoc($tmp_result);
3490
3491                                         $rv['content'] .= "<a target='_blank'
3492                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3493                                                 $tmp_line['title'] . "</a>";
3494
3495                                         $rv['content'] .= "&nbsp;";
3496
3497                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3498                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.png'></a>";
3499
3500                                         $rv['content'] .= "</div>";
3501                                 }
3502                         }
3503
3504                         $rv['content'] .= "</div>";
3505
3506                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3507                                 if ($line['note']) {
3508                                         $rv['content'] .= format_article_note($id, $line['note']);
3509                                 }
3510                         $rv['content'] .= "</div>";
3511
3512                         $rv['content'] .= "<div class=\"postIcon\">" .
3513                                 "<a target=\"_blank\" title=\"".__("Visit the website")."\"$
3514                                 href=\"".htmlspecialchars($feed_site_url)."\">".
3515                                 $feed_icon . "</a></div>";
3516
3517                         $rv['content'] .= "<div class=\"postContent\">";
3518
3519                         // N-grams
3520
3521                         if (DB_TYPE == "pgsql" and defined('_NGRAM_TITLE_RELATED_THRESHOLD')) {
3522
3523                                 $ngram_result = db_query($link, "SELECT id,title FROM
3524                                                 ttrss_entries,ttrss_user_entries
3525                                         WHERE ref_id = id AND updated >= NOW() - INTERVAL '7 day'
3526                                                 AND similarity(title, '$title_escaped') >= "._NGRAM_TITLE_RELATED_THRESHOLD."
3527                                                 AND title != '$title_escaped'
3528                                                 AND owner_uid = $owner_uid");
3529
3530                                 if (db_num_rows($ngram_result) > 0) {
3531                                         $rv['content'] .= "<div dojoType=\"dijit.form.DropDownButton\">".
3532                                                 "<span>" . __('Related')."</span>";
3533                                         $rv['content'] .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3534
3535                                         while ($nline = db_fetch_assoc($ngram_result)) {
3536                                                 $rv['content'] .= "<div onclick=\"hlOpenInNewTab(null,".$nline['id'].")\"
3537                                                         dojoType=\"dijit.MenuItem\">".$nline['title']."</div>";
3538
3539                                         }
3540                                         $rv['content'] .= "</div></div><br/";
3541                                 }
3542                         }
3543
3544                         $article_content = sanitize($link, $line["content"], false, $owner_uid,
3545                                 $feed_site_url);
3546
3547                         $rv['content'] .= $article_content;
3548
3549                         $rv['content'] .= format_article_enclosures($link, $id,
3550                                 $always_display_enclosures, $article_content);
3551
3552                         $rv['content'] .= "</div>";
3553
3554                         $rv['content'] .= "</div>";
3555
3556                 }
3557
3558                 if ($zoom_mode) {
3559                         $rv['content'] .= "
3560                                 <div style=\"text-align : center\">
3561                                 <button onclick=\"return window.close()\">".
3562                                         __("Close this window")."</button></div>";
3563                         $rv['content'] .= "</body></html>";
3564                 }
3565
3566                 return $rv;
3567
3568         }
3569
3570         function print_checkpoint($n, $s) {
3571                 $ts = getmicrotime();
3572                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3573                 return $ts;
3574         }
3575
3576         function sanitize_tag($tag) {
3577                 $tag = trim($tag);
3578
3579                 $tag = mb_strtolower($tag, 'utf-8');
3580
3581                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3582
3583 //              $tag = str_replace('"', "", $tag);
3584 //              $tag = str_replace("+", " ", $tag);
3585                 $tag = str_replace("technorati tag: ", "", $tag);
3586
3587                 return $tag;
3588         }
3589
3590         function get_self_url_prefix() {
3591                 return SELF_URL_PATH;
3592         }
3593
3594         function opml_publish_url($link){
3595
3596                 $url_path = get_self_url_prefix();
3597                 $url_path .= "/opml.php?op=publish&key=" .
3598                         get_feed_access_key($link, 'OPML:Publish', false, $_SESSION["uid"]);
3599
3600                 return $url_path;
3601         }
3602
3603         /**
3604          * Purge a feed contents, marked articles excepted.
3605          *
3606          * @param mixed $link The database connection.
3607          * @param integer $id The id of the feed to purge.
3608          * @return void
3609          */
3610         function clear_feed_articles($link, $id) {
3611
3612                 if ($id != 0) {
3613                         $result = db_query($link, "DELETE FROM ttrss_user_entries
3614                         WHERE feed_id = '$id' AND marked = false AND owner_uid = " . $_SESSION["uid"]);
3615                 } else {
3616                         $result = db_query($link, "DELETE FROM ttrss_user_entries
3617                         WHERE feed_id IS NULL AND marked = false AND owner_uid = " . $_SESSION["uid"]);
3618                 }
3619
3620                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
3621                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
3622
3623                 ccache_update($link, $id, $_SESSION['uid']);
3624         } // function clear_feed_articles
3625
3626         /**
3627          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3628          *
3629          * @return string The Mozilla Firefox feed adding URL.
3630          */
3631         function add_feed_url() {
3632                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3633
3634                 $url_path = get_self_url_prefix() .
3635                         "/backend.php?op=pref-feeds&quiet=1&method=add&feed_url=%s";
3636                 return $url_path;
3637         } // function add_feed_url
3638
3639         function encrypt_password($pass, $salt = '', $mode2 = false) {
3640                 if ($salt && $mode2) {
3641                         return "MODE2:" . hash('sha256', $salt . $pass);
3642                 } else if ($salt) {
3643                         return "SHA1X:" . sha1("$salt:$pass");
3644                 } else {
3645                         return "SHA1:" . sha1($pass);
3646                 }
3647         } // function encrypt_password
3648
3649         function sanitize_article_content($text) {
3650                 # we don't support CDATA sections in articles, they break our own escaping
3651                 $text = preg_replace("/\[\[CDATA/", "", $text);
3652                 $text = preg_replace("/\]\]\>/", "", $text);
3653                 return $text;
3654         }
3655
3656         function load_filters($link, $feed, $owner_uid, $action_id = false) {
3657                 $filters = array();
3658
3659
3660                 if ($action_id) $ftype_query_part = "action_id = '$action_id' AND";
3661
3662                 $result = db_query($link, "SELECT reg_exp,
3663                         ttrss_filter_types.name AS name,
3664                         ttrss_filter_actions.name AS action,
3665                         inverse,
3666                         action_param,
3667                         filter_param
3668                         FROM ttrss_filters
3669                                 LEFT JOIN ttrss_feeds ON (ttrss_feeds.id = '$feed'),
3670                                 ttrss_filter_types,ttrss_filter_actions
3671                         WHERE
3672                                 enabled = true AND
3673                                 $ftype_query_part
3674                                 ttrss_filters.owner_uid = $owner_uid AND
3675                                 ttrss_filter_types.id = filter_type AND
3676                                 ttrss_filter_actions.id = action_id AND
3677                                 ((cat_filter = true AND ttrss_feeds.cat_id = ttrss_filters.cat_id) OR
3678                                 (cat_filter = true AND ttrss_feeds.cat_id IS NULL AND
3679                                         ttrss_filters.cat_id IS NULL) OR
3680                                 (cat_filter = false AND (feed_id IS NULL OR feed_id = '$feed')))
3681                         ORDER BY reg_exp");
3682
3683                 while ($line = db_fetch_assoc($result)) {
3684
3685                         if (!$filters[$line["name"]]) $filters[$line["name"]] = array();
3686                                 $filter["reg_exp"] = $line["reg_exp"];
3687                                 $filter["action"] = $line["action"];
3688                                 $filter["action_param"] = $line["action_param"];
3689                                 $filter["filter_param"] = $line["filter_param"];
3690                                 $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3691
3692                                 array_push($filters[$line["name"]], $filter);
3693                         }
3694
3695
3696                 return $filters;
3697         }
3698
3699         function get_score_pic($score) {
3700                 if ($score > 100) {
3701                         return "score_high.png";
3702                 } else if ($score > 0) {
3703                         return "score_half_high.png";
3704                 } else if ($score < -100) {
3705                         return "score_low.png";
3706                 } else if ($score < 0) {
3707                         return "score_half_low.png";
3708                 } else {
3709                         return "score_neutral.png";
3710                 }
3711         }
3712
3713         function feed_has_icon($id) {
3714                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3715         }
3716
3717         function init_connection($link) {
3718                 if ($link) {
3719
3720                         if (DB_TYPE == "pgsql") {
3721                                 pg_query($link, "set client_encoding = 'UTF-8'");
3722                                 pg_set_client_encoding("UNICODE");
3723                                 pg_query($link, "set datestyle = 'ISO, european'");
3724                                 pg_query($link, "set TIME ZONE 0");
3725                         } else {
3726                                 db_query($link, "SET time_zone = '+0:0'");
3727
3728                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3729                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3730                                 }
3731                         }
3732                         return true;
3733                 } else {
3734                         print "Unable to connect to database:" . db_last_error();
3735                         return false;
3736                 }
3737         }
3738
3739         /* function ccache_zero($link, $feed_id, $owner_uid) {
3740                 db_query($link, "UPDATE ttrss_counters_cache SET
3741                         value = 0, updated = NOW() WHERE
3742                         feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3743         } */
3744
3745         function ccache_zero_all($link, $owner_uid) {
3746                 db_query($link, "UPDATE ttrss_counters_cache SET
3747                         value = 0 WHERE owner_uid = '$owner_uid'");
3748
3749                 db_query($link, "UPDATE ttrss_cat_counters_cache SET
3750                         value = 0 WHERE owner_uid = '$owner_uid'");
3751         }
3752
3753         function ccache_remove($link, $feed_id, $owner_uid, $is_cat = false) {
3754
3755                 if (!$is_cat) {
3756                         $table = "ttrss_counters_cache";
3757                 } else {
3758                         $table = "ttrss_cat_counters_cache";
3759                 }
3760
3761                 db_query($link, "DELETE FROM $table WHERE
3762                         feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3763
3764         }
3765
3766         function ccache_update_all($link, $owner_uid) {
3767
3768                 if (get_pref($link, 'ENABLE_FEED_CATS', $owner_uid)) {
3769
3770                         $result = db_query($link, "SELECT feed_id FROM ttrss_cat_counters_cache
3771                                 WHERE feed_id > 0 AND owner_uid = '$owner_uid'");
3772
3773                         while ($line = db_fetch_assoc($result)) {
3774                                 ccache_update($link, $line["feed_id"], $owner_uid, true);
3775                         }
3776
3777                         /* We have to manually include category 0 */
3778
3779                         ccache_update($link, 0, $owner_uid, true);
3780
3781                 } else {
3782                         $result = db_query($link, "SELECT feed_id FROM ttrss_counters_cache
3783                                 WHERE feed_id > 0 AND owner_uid = '$owner_uid'");
3784
3785                         while ($line = db_fetch_assoc($result)) {
3786                                 print ccache_update($link, $line["feed_id"], $owner_uid);
3787
3788                         }
3789
3790                 }
3791         }
3792
3793         function ccache_find($link, $feed_id, $owner_uid, $is_cat = false,
3794                 $no_update = false) {
3795
3796                 if (!is_numeric($feed_id)) return;
3797
3798                 if (!$is_cat) {
3799                         $table = "ttrss_counters_cache";
3800                         if ($feed_id > 0) {
3801                                 $tmp_result = db_query($link, "SELECT owner_uid FROM ttrss_feeds
3802                                         WHERE id = '$feed_id'");
3803                                 $owner_uid = db_fetch_result($tmp_result, 0, "owner_uid");
3804                         }
3805                 } else {
3806                         $table = "ttrss_cat_counters_cache";
3807                 }
3808
3809                 if (DB_TYPE == "pgsql") {
3810                         $date_qpart = "updated > NOW() - INTERVAL '15 minutes'";
3811                 } else if (DB_TYPE == "mysql") {
3812                         $date_qpart = "updated > DATE_SUB(NOW(), INTERVAL 15 MINUTE)";
3813                 }
3814
3815                 $result = db_query($link, "SELECT value FROM $table
3816                         WHERE owner_uid = '$owner_uid' AND feed_id = '$feed_id'
3817                         LIMIT 1");
3818
3819                 if (db_num_rows($result) == 1) {
3820                         return db_fetch_result($result, 0, "value");
3821                 } else {
3822                         if ($no_update) {
3823                                 return -1;
3824                         } else {
3825                                 return ccache_update($link, $feed_id, $owner_uid, $is_cat);
3826                         }
3827                 }
3828
3829         }
3830
3831         function ccache_update($link, $feed_id, $owner_uid, $is_cat = false,
3832                 $update_pcat = true) {
3833
3834                 if (!is_numeric($feed_id)) return;
3835
3836                 if (!$is_cat && $feed_id > 0) {
3837                         $tmp_result = db_query($link, "SELECT owner_uid FROM ttrss_feeds
3838                                 WHERE id = '$feed_id'");
3839                         $owner_uid = db_fetch_result($tmp_result, 0, "owner_uid");
3840                 }
3841
3842                 $prev_unread = ccache_find($link, $feed_id, $owner_uid, $is_cat, true);
3843
3844                 /* When updating a label, all we need to do is recalculate feed counters
3845                  * because labels are not cached */
3846
3847                 if ($feed_id < 0) {
3848                         ccache_update_all($link, $owner_uid);
3849                         return;
3850                 }
3851
3852                 if (!$is_cat) {
3853                         $table = "ttrss_counters_cache";
3854                 } else {
3855                         $table = "ttrss_cat_counters_cache";
3856                 }
3857
3858                 if ($is_cat && $feed_id >= 0) {
3859                         if ($feed_id != 0) {
3860                                 $cat_qpart = "cat_id = '$feed_id'";
3861                         } else {
3862                                 $cat_qpart = "cat_id IS NULL";
3863                         }
3864
3865                         /* Recalculate counters for child feeds */
3866
3867                         $result = db_query($link, "SELECT id FROM ttrss_feeds
3868                                                 WHERE owner_uid = '$owner_uid' AND $cat_qpart");
3869
3870                         while ($line = db_fetch_assoc($result)) {
3871                                 ccache_update($link, $line["id"], $owner_uid, false, false);
3872                         }
3873
3874                         $result = db_query($link, "SELECT SUM(value) AS sv
3875                                 FROM ttrss_counters_cache, ttrss_feeds
3876                                 WHERE id = feed_id AND $cat_qpart AND
3877                                 ttrss_feeds.owner_uid = '$owner_uid'");
3878
3879                         $unread = (int) db_fetch_result($result, 0, "sv");
3880
3881                 } else {
3882                         $unread = (int) getFeedArticles($link, $feed_id, $is_cat, true, $owner_uid);
3883                 }
3884
3885                 db_query($link, "BEGIN");
3886
3887                 $result = db_query($link, "SELECT feed_id FROM $table
3888                         WHERE owner_uid = '$owner_uid' AND feed_id = '$feed_id' LIMIT 1");
3889
3890                 if (db_num_rows($result) == 1) {
3891                         db_query($link, "UPDATE $table SET
3892                                 value = '$unread', updated = NOW() WHERE
3893                                 feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3894
3895                 } else {
3896                         db_query($link, "INSERT INTO $table
3897                                 (feed_id, value, owner_uid, updated)
3898                                 VALUES
3899                                 ($feed_id, $unread, $owner_uid, NOW())");
3900                 }
3901
3902                 db_query($link, "COMMIT");
3903
3904                 if ($feed_id > 0 && $prev_unread != $unread) {
3905
3906                         if (!$is_cat) {
3907
3908                                 /* Update parent category */
3909
3910                                 if ($update_pcat) {
3911
3912                                         $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3913                                                 WHERE owner_uid = '$owner_uid' AND id = '$feed_id'");
3914
3915                                         $cat_id = (int) db_fetch_result($result, 0, "cat_id");
3916
3917                                         ccache_update($link, $cat_id, $owner_uid, true);
3918
3919                                 }
3920                         }
3921                 } else if ($feed_id < 0) {
3922                         ccache_update_all($link, $owner_uid);
3923                 }
3924
3925                 return $unread;
3926         }
3927
3928         /* function ccache_cleanup($link, $owner_uid) {
3929
3930                 if (DB_TYPE == "pgsql") {
3931                         db_query($link, "DELETE FROM ttrss_counters_cache AS c1 WHERE
3932                                 (SELECT count(*) FROM ttrss_counters_cache AS c2
3933                                         WHERE c1.feed_id = c2.feed_id AND c2.owner_uid = c1.owner_uid) > 1
3934                                         AND owner_uid = '$owner_uid'");
3935
3936                         db_query($link, "DELETE FROM ttrss_cat_counters_cache AS c1 WHERE
3937                                 (SELECT count(*) FROM ttrss_cat_counters_cache AS c2
3938                                         WHERE c1.feed_id = c2.feed_id AND c2.owner_uid = c1.owner_uid) > 1
3939                                         AND owner_uid = '$owner_uid'");
3940                 } else {
3941                         db_query($link, "DELETE c1 FROM
3942                                         ttrss_counters_cache AS c1,
3943                                         ttrss_counters_cache AS c2
3944                                 WHERE
3945                                         c1.owner_uid = '$owner_uid' AND
3946                                         c1.owner_uid = c2.owner_uid AND
3947                                         c1.feed_id = c2.feed_id");
3948
3949                         db_query($link, "DELETE c1 FROM
3950                                         ttrss_cat_counters_cache AS c1,
3951                                         ttrss_cat_counters_cache AS c2
3952                                 WHERE
3953                                         c1.owner_uid = '$owner_uid' AND
3954                                         c1.owner_uid = c2.owner_uid AND
3955                                         c1.feed_id = c2.feed_id");
3956
3957                 }
3958         } */
3959
3960         function label_find_id($link, $label, $owner_uid) {
3961                 $result = db_query($link,
3962                         "SELECT id FROM ttrss_labels2 WHERE caption = '$label'
3963                                 AND owner_uid = '$owner_uid' LIMIT 1");
3964
3965                 if (db_num_rows($result) == 1) {
3966                         return db_fetch_result($result, 0, "id");
3967                 } else {
3968                         return 0;
3969                 }
3970         }
3971
3972         function get_article_labels($link, $id) {
3973                 $rv = array();
3974
3975
3976                 $result = db_query($link, "SELECT label_cache FROM
3977                         ttrss_user_entries WHERE ref_id = '$id' AND owner_uid = " .
3978                         $_SESSION["uid"]);
3979
3980                 $label_cache = db_fetch_result($result, 0, "label_cache");
3981
3982                 if ($label_cache) {
3983
3984                         $label_cache = json_decode($label_cache, true);
3985
3986                         if ($label_cache["no-labels"] == 1)
3987                                 return $rv;
3988                         else
3989                                 return $label_cache;
3990                 }
3991
3992                 $result = db_query($link,
3993                         "SELECT DISTINCT label_id,caption,fg_color,bg_color
3994                                 FROM ttrss_labels2, ttrss_user_labels2
3995                         WHERE id = label_id
3996                                 AND article_id = '$id'
3997                                 AND owner_uid = ".$_SESSION["uid"] . "
3998                         ORDER BY caption");
3999
4000                 while ($line = db_fetch_assoc($result)) {
4001                         $rk = array($line["label_id"], $line["caption"], $line["fg_color"],
4002                                 $line["bg_color"]);
4003                         array_push($rv, $rk);
4004                 }
4005
4006                 if (count($rv) > 0)
4007                         label_update_cache($link, $id, $rv);
4008                 else
4009                         label_update_cache($link, $id, array("no-labels" => 1));
4010
4011                 return $rv;
4012         }
4013
4014
4015         function label_find_caption($link, $label, $owner_uid) {
4016                 $result = db_query($link,
4017                         "SELECT caption FROM ttrss_labels2 WHERE id = '$label'
4018                                 AND owner_uid = '$owner_uid' LIMIT 1");
4019
4020                 if (db_num_rows($result) == 1) {
4021                         return db_fetch_result($result, 0, "caption");
4022                 } else {
4023                         return "";
4024                 }
4025         }
4026
4027         function label_update_cache($link, $id, $labels = false, $force = false) {
4028
4029                 if ($force)
4030                         label_clear_cache($link, $id);
4031
4032                 if (!$labels)
4033                         $labels = get_article_labels($link, $id);
4034
4035                 $labels = db_escape_string(json_encode($labels));
4036
4037                 db_query($link, "UPDATE ttrss_user_entries SET
4038                         label_cache = '$labels' WHERE ref_id = '$id'");
4039
4040         }
4041
4042         function label_clear_cache($link, $id) {
4043
4044                 db_query($link, "UPDATE ttrss_user_entries SET
4045                         label_cache = '' WHERE ref_id = '$id'");
4046
4047         }
4048
4049         function label_remove_article($link, $id, $label, $owner_uid) {
4050
4051                 $label_id = label_find_id($link, $label, $owner_uid);
4052
4053                 if (!$label_id) return;
4054
4055                 $result = db_query($link,
4056                         "DELETE FROM ttrss_user_labels2
4057                         WHERE
4058                                 label_id = '$label_id' AND
4059                                 article_id = '$id'");
4060
4061                 label_clear_cache($link, $id);
4062         }
4063
4064         function label_add_article($link, $id, $label, $owner_uid) {
4065
4066                 $label_id = label_find_id($link, $label, $owner_uid);
4067
4068                 if (!$label_id) return;
4069
4070                 $result = db_query($link,
4071                         "SELECT
4072                                 article_id FROM ttrss_labels2, ttrss_user_labels2
4073                         WHERE
4074                                 label_id = id AND
4075                                 label_id = '$label_id' AND
4076                                 article_id = '$id' AND owner_uid = '$owner_uid'
4077                         LIMIT 1");
4078
4079                 if (db_num_rows($result) == 0) {
4080                         db_query($link, "INSERT INTO ttrss_user_labels2
4081                                 (label_id, article_id) VALUES ('$label_id', '$id')");
4082                 }
4083
4084                 label_clear_cache($link, $id);
4085
4086         }
4087
4088         function label_remove($link, $id, $owner_uid) {
4089                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4090
4091                 db_query($link, "BEGIN");
4092
4093                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
4094                         WHERE id = '$id'");
4095
4096                 $caption = db_fetch_result($result, 0, "caption");
4097
4098                 $result = db_query($link, "DELETE FROM ttrss_labels2 WHERE id = '$id'
4099                         AND owner_uid = " . $owner_uid);
4100
4101                 if (db_affected_rows($link, $result) != 0 && $caption) {
4102
4103                         /* Remove access key for the label */
4104
4105                         $ext_id = -11 - $id;
4106
4107                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
4108                                 feed_id = '$ext_id' AND owner_uid = $owner_uid");
4109
4110                         /* Disable filters that reference label being removed */
4111
4112                         db_query($link, "UPDATE ttrss_filters SET
4113                                 enabled = false WHERE action_param = '$caption'
4114                                         AND action_id = 7
4115                                         AND owner_uid = " . $owner_uid);
4116
4117                         /* Remove cached data */
4118
4119                         db_query($link, "UPDATE ttrss_user_entries SET label_cache = ''
4120                                 WHERE label_cache LIKE '%$caption%' AND owner_uid = " . $owner_uid);
4121
4122                 }
4123
4124                 db_query($link, "COMMIT");
4125         }
4126
4127         function label_create($link, $caption, $fg_color = '', $bg_color = '', $owner_uid) {
4128
4129                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
4130
4131                 db_query($link, "BEGIN");
4132
4133                 $result = false;
4134
4135                 $result = db_query($link, "SELECT id FROM ttrss_labels2
4136                         WHERE caption = '$caption' AND owner_uid = $owner_uid");
4137
4138                 if (db_num_rows($result) == 0) {
4139                         $result = db_query($link,
4140                                 "INSERT INTO ttrss_labels2 (caption,owner_uid,fg_color,bg_color)
4141                                         VALUES ('$caption', '$owner_uid', '$fg_color', '$bg_color')");
4142
4143                         $result = db_affected_rows($link, $result) != 0;
4144                 }
4145
4146                 db_query($link, "COMMIT");
4147
4148                 return $result;
4149         }
4150
4151         function format_tags_string($tags, $id) {
4152
4153                 $tags_str = "";
4154                 $tags_nolinks_str = "";
4155
4156                 $num_tags = 0;
4157
4158                 $tag_limit = 6;
4159
4160                 $formatted_tags = array();
4161
4162                 foreach ($tags as $tag) {
4163                         $num_tags++;
4164                         $tag_escaped = str_replace("'", "\\'", $tag);
4165
4166                         if (mb_strlen($tag) > 30) {
4167                                 $tag = truncate_string($tag, 30);
4168                         }
4169
4170                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
4171
4172                         array_push($formatted_tags, $tag_str);
4173
4174                         $tmp_tags_str = implode(", ", $formatted_tags);
4175
4176                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
4177                                 break;
4178                         }
4179                 }
4180
4181                 $tags_str = implode(", ", $formatted_tags);
4182
4183                 if ($num_tags < count($tags)) {
4184                         $tags_str .= ", &hellip;";
4185                 }
4186
4187                 if ($num_tags == 0) {
4188                         $tags_str = __("no tags");
4189                 }
4190
4191                 return $tags_str;
4192
4193         }
4194
4195         function format_article_labels($labels, $id) {
4196
4197                 $labels_str = "";
4198
4199                 foreach ($labels as $l) {
4200                         $labels_str .= sprintf("<span class='hlLabelRef'
4201                                 style='color : %s; background-color : %s'>%s</span>",
4202                                         $l[2], $l[3], $l[1]);
4203                         }
4204
4205                 return $labels_str;
4206
4207         }
4208
4209         function format_article_note($id, $note) {
4210
4211                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
4212                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
4213                         __('(edit note)')."</div>$note</div>";
4214
4215                 return $str;
4216         }
4217
4218         function toggle_collapse_cat($link, $cat_id, $mode) {
4219                 if ($cat_id > 0) {
4220                         $mode = bool_to_sql_bool($mode);
4221
4222                         db_query($link, "UPDATE ttrss_feed_categories SET
4223                                 collapsed = $mode WHERE id = '$cat_id' AND owner_uid = " .
4224                                 $_SESSION["uid"]);
4225                 } else {
4226                         $pref_name = '';
4227
4228                         switch ($cat_id) {
4229                         case -1:
4230                                 $pref_name = '_COLLAPSED_SPECIAL';
4231                                 break;
4232                         case -2:
4233                                 $pref_name = '_COLLAPSED_LABELS';
4234                                 break;
4235                         case 0:
4236                                 $pref_name = '_COLLAPSED_UNCAT';
4237                                 break;
4238                         }
4239
4240                         if ($pref_name) {
4241                                 if ($mode) {
4242                                         set_pref($link, $pref_name, 'true');
4243                                 } else {
4244                                         set_pref($link, $pref_name, 'false');
4245                                 }
4246                         }
4247                 }
4248         }
4249
4250         function remove_feed($link, $id, $owner_uid) {
4251
4252                 if ($id > 0) {
4253
4254                         /* save starred articles in Archived feed */
4255
4256                         db_query($link, "BEGIN");
4257
4258                         /* prepare feed if necessary */
4259
4260                         $result = db_query($link, "SELECT id FROM ttrss_archived_feeds
4261                                 WHERE id = '$id'");
4262
4263                         if (db_num_rows($result) == 0) {
4264                                 db_query($link, "INSERT INTO ttrss_archived_feeds
4265                                         (id, owner_uid, title, feed_url, site_url)
4266                                 SELECT id, owner_uid, title, feed_url, site_url from ttrss_feeds
4267                                 WHERE id = '$id'");
4268                         }
4269
4270                         db_query($link, "UPDATE ttrss_user_entries SET feed_id = NULL,
4271                                 orig_feed_id = '$id' WHERE feed_id = '$id' AND
4272                                         marked = true AND owner_uid = $owner_uid");
4273
4274                         /* Remove access key for the feed */
4275
4276                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
4277                                 feed_id = '$id' AND owner_uid = $owner_uid");
4278
4279                         /* remove the feed */
4280
4281                         db_query($link, "DELETE FROM ttrss_feeds
4282                                         WHERE id = '$id' AND owner_uid = $owner_uid");
4283
4284                         db_query($link, "COMMIT");
4285
4286                         if (file_exists(ICONS_DIR . "/$id.ico")) {
4287                                 unlink(ICONS_DIR . "/$id.ico");
4288                         }
4289
4290                         ccache_remove($link, $id, $owner_uid);
4291
4292                 } else {
4293                         label_remove($link, -11-$id, $owner_uid);
4294                         ccache_remove($link, -11-$id, $owner_uid);
4295                 }
4296         }
4297
4298         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
4299                 if ($parent_cat_id) {
4300                         $parent_qpart = "parent_cat = '$parent_cat_id'";
4301                         $parent_insert = "'$parent_cat_id'";
4302                 } else {
4303                         $parent_qpart = "parent_cat IS NULL";
4304                         $parent_insert = "NULL";
4305                 }
4306
4307                 $result = db_query($link,
4308                         "SELECT id FROM ttrss_feed_categories
4309                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
4310
4311                 if (db_num_rows($result) == 0) {
4312                         return false;
4313                 } else {
4314                         return db_fetch_result($result, 0, "id");
4315                 }
4316         }
4317
4318         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
4319
4320                 if (!$feed_cat) return false;
4321
4322                 db_query($link, "BEGIN");
4323
4324                 if ($parent_cat_id) {
4325                         $parent_qpart = "parent_cat = '$parent_cat_id'";
4326                         $parent_insert = "'$parent_cat_id'";
4327                 } else {
4328                         $parent_qpart = "parent_cat IS NULL";
4329                         $parent_insert = "NULL";
4330                 }
4331
4332                 $result = db_query($link,
4333                         "SELECT id FROM ttrss_feed_categories
4334                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
4335
4336                 if (db_num_rows($result) == 0) {
4337
4338                         $result = db_query($link,
4339                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
4340                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
4341
4342                         db_query($link, "COMMIT");
4343
4344                         return true;
4345                 }
4346
4347                 return false;
4348         }
4349
4350         function remove_feed_category($link, $id, $owner_uid) {
4351
4352                 db_query($link, "DELETE FROM ttrss_feed_categories
4353                         WHERE id = '$id' AND owner_uid = $owner_uid");
4354
4355                 ccache_remove($link, $id, $owner_uid, true);
4356         }
4357
4358         function archive_article($link, $id, $owner_uid) {
4359                 db_query($link, "BEGIN");
4360
4361                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
4362                         WHERE ref_id = '$id' AND owner_uid = $owner_uid");
4363
4364                 if (db_num_rows($result) != 0) {
4365
4366                         /* prepare the archived table */
4367
4368                         $feed_id = (int) db_fetch_result($result, 0, "feed_id");
4369
4370                         if ($feed_id) {
4371                                 $result = db_query($link, "SELECT id FROM ttrss_archived_feeds
4372                                         WHERE id = '$feed_id'");
4373
4374                                 if (db_num_rows($result) == 0) {
4375                                         db_query($link, "INSERT INTO ttrss_archived_feeds
4376                                                 (id, owner_uid, title, feed_url, site_url)
4377                                         SELECT id, owner_uid, title, feed_url, site_url from ttrss_feeds
4378                                         WHERE id = '$feed_id'");
4379                                 }
4380
4381                                 db_query($link, "UPDATE ttrss_user_entries
4382                                         SET orig_feed_id = feed_id, feed_id = NULL
4383                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
4384                         }
4385                 }
4386
4387                 db_query($link, "COMMIT");
4388         }
4389
4390         function getArticleFeed($link, $id) {
4391                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
4392                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
4393
4394                 if (db_num_rows($result) != 0) {
4395                         return db_fetch_result($result, 0, "feed_id");
4396                 } else {
4397                         return 0;
4398                 }
4399         }
4400
4401         /**
4402          * Fixes incomplete URLs by prepending "http://".
4403          * Also replaces feed:// with http://, and
4404          * prepends a trailing slash if the url is a domain name only.
4405          *
4406          * @param string $url Possibly incomplete URL
4407          *
4408          * @return string Fixed URL.
4409          */
4410         function fix_url($url) {
4411                 if (strpos($url, '://') === false) {
4412                         $url = 'http://' . $url;
4413                 } else if (substr($url, 0, 5) == 'feed:') {
4414                         $url = 'http:' . substr($url, 5);
4415                 }
4416
4417                 //prepend slash if the URL has no slash in it
4418                 // "http://www.example" -> "http://www.example/"
4419                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
4420                         $url .= '/';
4421                 }
4422
4423                 if ($url != "http:///")
4424                         return $url;
4425                 else
4426                         return '';
4427         }
4428
4429         function validate_feed_url($url) {
4430                 $parts = parse_url($url);
4431
4432                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
4433
4434         }
4435
4436         function get_article_enclosures($link, $id) {
4437
4438                 $query = "SELECT * FROM ttrss_enclosures
4439                         WHERE post_id = '$id' AND content_url != ''";
4440
4441                 $rv = array();
4442
4443                 $result = db_query($link, $query);
4444
4445                 if (db_num_rows($result) > 0) {
4446                         while ($line = db_fetch_assoc($result)) {
4447                                 array_push($rv, $line);
4448                         }
4449                 }
4450
4451                 return $rv;
4452         }
4453
4454         function api_get_feeds($link, $cat_id, $unread_only, $limit, $offset) {
4455
4456                         $feeds = array();
4457
4458                         /* Labels */
4459
4460                         if ($cat_id == -4 || $cat_id == -2) {
4461                                 $counters = getLabelCounters($link, true);
4462
4463                                 foreach (array_values($counters) as $cv) {
4464
4465                                         $unread = $cv["counter"];
4466
4467                                         if ($unread || !$unread_only) {
4468
4469                                                 $row = array(
4470                                                                 "id" => $cv["id"],
4471                                                                 "title" => $cv["description"],
4472                                                                 "unread" => $cv["counter"],
4473                                                                 "cat_id" => -2,
4474                                                         );
4475
4476                                                 array_push($feeds, $row);
4477                                         }
4478                                 }
4479                         }
4480
4481                         /* Virtual feeds */
4482
4483                         if ($cat_id == -4 || $cat_id == -1) {
4484                                 foreach (array(-1, -2, -3, -4, 0) as $i) {
4485                                         $unread = getFeedUnread($link, $i);
4486
4487                                         if ($unread || !$unread_only) {
4488                                                 $title = getFeedTitle($link, $i);
4489
4490                                                 $row = array(
4491                                                                 "id" => $i,
4492                                                                 "title" => $title,
4493                                                                 "unread" => $unread,
4494                                                                 "cat_id" => -1,
4495                                                         );
4496                                                 array_push($feeds, $row);
4497                                         }
4498
4499                                 }
4500                         }
4501
4502                         /* Real feeds */
4503
4504                         if ($limit) {
4505                                 $limit_qpart = "LIMIT $limit OFFSET $offset";
4506                         } else {
4507                                 $limit_qpart = "";
4508                         }
4509
4510                         if ($cat_id == -4 || $cat_id == -3) {
4511                                 $result = db_query($link, "SELECT
4512                                         id, feed_url, cat_id, title, order_id, ".
4513                                                 SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
4514                                                 FROM ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"] .
4515                                                 " ORDER BY cat_id, title " . $limit_qpart);
4516                         } else {
4517
4518                                 if ($cat_id)
4519                                         $cat_qpart = "cat_id = '$cat_id'";
4520                                 else
4521                                         $cat_qpart = "cat_id IS NULL";
4522
4523                                 $result = db_query($link, "SELECT
4524                                         id, feed_url, cat_id, title, order_id, ".
4525                                                 SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
4526                                                 FROM ttrss_feeds WHERE
4527                                                 $cat_qpart AND owner_uid = " . $_SESSION["uid"] .
4528                                                 " ORDER BY cat_id, title " . $limit_qpart);
4529                         }
4530
4531                         while ($line = db_fetch_assoc($result)) {
4532
4533                                 $unread = getFeedUnread($link, $line["id"]);
4534
4535                                 $has_icon = feed_has_icon($line['id']);
4536
4537                                 if ($unread || !$unread_only) {
4538
4539                                         $row = array(
4540                                                         "feed_url" => $line["feed_url"],
4541                                                         "title" => $line["title"],
4542                                                         "id" => (int)$line["id"],
4543                                                         "unread" => (int)$unread,
4544                                                         "has_icon" => $has_icon,
4545                                                         "cat_id" => (int)$line["cat_id"],
4546                                                         "last_updated" => strtotime($line["last_updated"]),
4547                                                         "order_id" => (int) $line["order_id"],
4548                                                 );
4549
4550                                         array_push($feeds, $row);
4551                                 }
4552                         }
4553
4554                 return $feeds;
4555         }
4556
4557         function api_get_headlines($link, $feed_id, $limit, $offset,
4558                                 $filter, $is_cat, $show_excerpt, $show_content, $view_mode, $order,
4559                                 $include_attachments, $since_id,
4560                                 $search = "", $search_mode = "", $match_on = "") {
4561
4562                         $qfh_ret = queryFeedHeadlines($link, $feed_id, $limit,
4563                                 $view_mode, $is_cat, $search, $search_mode, $match_on,
4564                                 $order, $offset, 0, false, $since_id);
4565
4566                         $result = $qfh_ret[0];
4567                         $feed_title = $qfh_ret[1];
4568
4569                         $headlines = array();
4570
4571                         while ($line = db_fetch_assoc($result)) {
4572                                 $is_updated = ($line["last_read"] == "" &&
4573                                         ($line["unread"] != "t" && $line["unread"] != "1"));
4574
4575                                 $tags = explode(",", $line["tag_cache"]);
4576                                 $labels = json_decode($line["label_cache"], true);
4577
4578                                 //if (!$tags) $tags = get_article_tags($link, $line["id"]);
4579                                 //if (!$labels) $labels = get_article_labels($link, $line["id"]);
4580
4581                                 $headline_row = array(
4582                                                 "id" => (int)$line["id"],
4583                                                 "unread" => sql_bool_to_bool($line["unread"]),
4584                                                 "marked" => sql_bool_to_bool($line["marked"]),
4585                                                 "published" => sql_bool_to_bool($line["published"]),
4586                                                 "updated" => strtotime($line["updated"]),
4587                                                 "is_updated" => $is_updated,
4588                                                 "title" => $line["title"],
4589                                                 "link" => $line["link"],
4590                                                 "feed_id" => $line["feed_id"],
4591                                                 "tags" => $tags,
4592                                         );
4593
4594                                         if ($include_attachments)
4595                                                 $headline_row['attachments'] = get_article_enclosures($link,
4596                                                         $line['id']);
4597
4598                                 if ($show_excerpt) {
4599                                         $excerpt = truncate_string(strip_tags($line["content_preview"]), 100);
4600                                         $headline_row["excerpt"] = $excerpt;
4601                                 }
4602
4603                                 if ($show_content) {
4604                                         $headline_row["content"] = $line["content_preview"];
4605                                 }
4606
4607                                 // unify label output to ease parsing
4608                                 if ($labels["no-labels"] == 1) $labels = array();
4609
4610                                 $headline_row["labels"] = $labels;
4611
4612                                 $headline_row["feed_title"] = $line["feed_title"];
4613
4614                                 array_push($headlines, $headline_row);
4615                         }
4616
4617                         return $headlines;
4618         }
4619
4620         function generate_error_feed($link, $error) {
4621                 $reply = array();
4622
4623                 $reply['headlines']['id'] = -6;
4624                 $reply['headlines']['is_cat'] = false;
4625
4626                 $reply['headlines']['toolbar'] = '';
4627                 $reply['headlines']['content'] = "<div class='whiteBox'>". $error . "</div>";
4628
4629                 $reply['headlines-info'] = array("count" => 0,
4630                         "vgroup_last_feed" => '',
4631                         "unread" => 0,
4632                         "disable_cache" => true);
4633
4634                 return $reply;
4635         }
4636
4637
4638         function generate_dashboard_feed($link) {
4639                 $reply = array();
4640
4641                 $reply['headlines']['id'] = -5;
4642                 $reply['headlines']['is_cat'] = false;
4643
4644                 $reply['headlines']['toolbar'] = '';
4645                 $reply['headlines']['content'] = "<div class='whiteBox'>".__('No feed selected.');
4646
4647                 $reply['headlines']['content'] .= "<p class=\"small\"><span class=\"insensitive\">";
4648
4649                 $result = db_query($link, "SELECT ".SUBSTRING_FOR_DATE."(MAX(last_updated), 1, 19) AS last_updated FROM ttrss_feeds
4650                         WHERE owner_uid = " . $_SESSION['uid']);
4651
4652                 $last_updated = db_fetch_result($result, 0, "last_updated");
4653                 $last_updated = make_local_datetime($link, $last_updated, false);
4654
4655                 $reply['headlines']['content'] .= sprintf(__("Feeds last updated at %s"), $last_updated);
4656
4657                 $result = db_query($link, "SELECT COUNT(id) AS num_errors
4658                         FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]);
4659
4660                 $num_errors = db_fetch_result($result, 0, "num_errors");
4661
4662                 if ($num_errors > 0) {
4663                         $reply['headlines']['content'] .= "<br/>";
4664                         $reply['headlines']['content'] .= "<a class=\"insensitive\" href=\"#\" onclick=\"showFeedsWithErrors()\">".
4665                                 __('Some feeds have update errors (click for details)')."</a>";
4666                 }
4667                 $reply['headlines']['content'] .= "</span></p>";
4668
4669                 $reply['headlines-info'] = array("count" => 0,
4670                         "vgroup_last_feed" => '',
4671                         "unread" => 0,
4672                         "disable_cache" => true);
4673
4674                 return $reply;
4675         }
4676
4677         function save_email_address($link, $email) {
4678                 // FIXME: implement persistent storage of emails
4679
4680                 if (!$_SESSION['stored_emails'])
4681                         $_SESSION['stored_emails'] = array();
4682
4683                 if (!in_array($email, $_SESSION['stored_emails']))
4684                         array_push($_SESSION['stored_emails'], $email);
4685         }
4686
4687         function update_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
4688                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4689
4690                 $sql_is_cat = bool_to_sql_bool($is_cat);
4691
4692                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
4693                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
4694                         AND owner_uid = " . $owner_uid);
4695
4696                 if (db_num_rows($result) == 1) {
4697                         $key = db_escape_string(sha1(uniqid(rand(), true)));
4698
4699                         db_query($link, "UPDATE ttrss_access_keys SET access_key = '$key'
4700                                 WHERE feed_id = '$feed_id' AND is_cat = $sql_is_cat
4701                                 AND owner_uid = " . $owner_uid);
4702
4703                         return $key;
4704
4705                 } else {
4706                         return get_feed_access_key($link, $feed_id, $is_cat, $owner_uid);
4707                 }
4708         }
4709
4710         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
4711
4712                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4713
4714                 $sql_is_cat = bool_to_sql_bool($is_cat);
4715
4716                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
4717                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
4718                         AND owner_uid = " . $owner_uid);
4719
4720                 if (db_num_rows($result) == 1) {
4721                         return db_fetch_result($result, 0, "access_key");
4722                 } else {
4723                         $key = db_escape_string(sha1(uniqid(rand(), true)));
4724
4725                         $result = db_query($link, "INSERT INTO ttrss_access_keys
4726                                 (access_key, feed_id, is_cat, owner_uid)
4727                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
4728
4729                         return $key;
4730                 }
4731                 return false;
4732         }
4733
4734         /**
4735          * Extracts RSS/Atom feed URLs from the given HTML URL.
4736          *
4737          * @param string $url HTML page URL
4738          *
4739          * @return array Array of feeds. Key is the full URL, value the title
4740          */
4741         function get_feeds_from_html($url, $login = false, $pass = false)
4742         {
4743                 $url     = fix_url($url);
4744                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
4745
4746                 libxml_use_internal_errors(true);
4747
4748                 $content = @fetch_file_contents($url, false, $login, $pass);
4749
4750                 $doc = new DOMDocument();
4751                 $doc->loadHTML($content);
4752                 $xpath = new DOMXPath($doc);
4753                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
4754                 $feedUrls = array();
4755                 foreach ($entries as $entry) {
4756                         if ($entry->hasAttribute('href')) {
4757                                 $title = $entry->getAttribute('title');
4758                                 if ($title == '') {
4759                                         $title = $entry->getAttribute('type');
4760                                 }
4761                                 $feedUrl = rewrite_relative_url(
4762                                         $baseUrl, $entry->getAttribute('href')
4763                                 );
4764                                 $feedUrls[$feedUrl] = $title;
4765                         }
4766                 }
4767                 return $feedUrls;
4768         }
4769
4770         /**
4771          * Checks if the content behind the given URL is a HTML file
4772          *
4773          * @param string $url URL to check
4774          *
4775          * @return boolean True if the URL contains HTML content
4776          */
4777         function url_is_html($url, $login = false, $pass = false) {
4778                 $content = substr(fetch_file_contents($url, false, $login, $pass), 0, 1000);
4779
4780                 if (stripos($content, '<html>') === false
4781                         && stripos($content, '<html ') === false
4782                 ) {
4783                         return false;
4784                 }
4785
4786                 return true;
4787         }
4788
4789         function print_label_select($link, $name, $value, $attributes = "") {
4790
4791                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
4792                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
4793
4794                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
4795                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
4796
4797                 while ($line = db_fetch_assoc($result)) {
4798
4799                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
4800
4801                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
4802                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
4803
4804                 }
4805
4806 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
4807
4808                 print "</select>";
4809
4810
4811         }
4812
4813         function format_article_enclosures($link, $id, $always_display_enclosures,
4814                                         $article_content) {
4815
4816                 $result = get_article_enclosures($link, $id);
4817                 $rv = '';
4818
4819                 if (count($result) > 0) {
4820
4821                         $entries_html = array();
4822                         $entries = array();
4823
4824                         foreach ($result as $line) {
4825
4826                                 $url = $line["content_url"];
4827                                 $ctype = $line["content_type"];
4828
4829                                 if (!$ctype) $ctype = __("unknown type");
4830
4831                                 $filename = substr($url, strrpos($url, "/")+1);
4832
4833 #                               $player = format_inline_player($link, $url, $ctype);
4834
4835 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
4836 #                                       $filename . " (" . $ctype . ")" . "</a>";
4837
4838                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
4839                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
4840
4841                                 array_push($entries_html, $entry);
4842
4843                                 $entry = array();
4844
4845                                 $entry["type"] = $ctype;
4846                                 $entry["filename"] = $filename;
4847                                 $entry["url"] = $url;
4848
4849                                 array_push($entries, $entry);
4850                         }
4851
4852                         if (!get_pref($link, "STRIP_IMAGES")) {
4853                                 if ($always_display_enclosures ||
4854                                                         !preg_match("/<img/i", $article_content)) {
4855
4856                                         foreach ($entries as $entry) {
4857
4858                                                 if (preg_match("/image/", $entry["type"]) ||
4859                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
4860
4861                                                                 $rv .= "<p><img
4862                                                                 alt=\"".htmlspecialchars($entry["filename"])."\"
4863                                                                 src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
4864
4865                                                 }
4866                                         }
4867                                 }
4868                         }
4869
4870                         $rv .= "<div dojoType=\"dijit.form.DropDownButton\">".
4871                                 "<span>" . __('Attachments')."</span>";
4872                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
4873
4874                         foreach ($entries_html as $entry) { $rv .= $entry; };
4875
4876                         $rv .= "</div></div>";
4877                 }
4878
4879                 return $rv;
4880         }
4881
4882         function getLastArticleId($link) {
4883                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
4884                         WHERE owner_uid = " . $_SESSION["uid"]);
4885
4886                 if (db_num_rows($result) == 1) {
4887                         return db_fetch_result($result, 0, "id");
4888                 } else {
4889                         return -1;
4890                 }
4891         }
4892
4893         function build_url($parts) {
4894                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
4895         }
4896
4897         /**
4898          * Converts a (possibly) relative URL to a absolute one.
4899          *
4900          * @param string $url     Base URL (i.e. from where the document is)
4901          * @param string $rel_url Possibly relative URL in the document
4902          *
4903          * @return string Absolute URL
4904          */
4905         function rewrite_relative_url($url, $rel_url) {
4906                 if (strpos($rel_url, "magnet:") === 0) {
4907                         return $rel_url;
4908                 } else if (strpos($rel_url, "://") !== false) {
4909                         return $rel_url;
4910                 } else if (strpos($rel_url, "//") === 0) {
4911                         # protocol-relative URL (rare but they exist)
4912                         return $rel_url;
4913                 } else if (strpos($rel_url, "/") === 0)
4914                 {
4915                         $parts = parse_url($url);
4916                         $parts['path'] = $rel_url;
4917
4918                         return build_url($parts);
4919
4920                 } else {
4921                         $parts = parse_url($url);
4922                         if (!isset($parts['path'])) {
4923                                 $parts['path'] = '/';
4924                         }
4925                         $dir = $parts['path'];
4926                         if (substr($dir, -1) !== '/') {
4927                                 $dir = dirname($parts['path']);
4928                                 $dir !== '/' && $dir .= '/';
4929                         }
4930                         $parts['path'] = $dir . $rel_url;
4931
4932                         return build_url($parts);
4933                 }
4934         }
4935
4936         function sphinx_search($query, $offset = 0, $limit = 30) {
4937                 require_once 'lib/sphinxapi.php';
4938
4939                 $sphinxClient = new SphinxClient();
4940
4941                 $sphinxClient->SetServer('localhost', 9312);
4942                 $sphinxClient->SetConnectTimeout(1);
4943
4944                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
4945                         'feed_title' => 20));
4946
4947                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
4948                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
4949                 $sphinxClient->SetLimits($offset, $limit, 1000);
4950                 $sphinxClient->SetArrayResult(false);
4951                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
4952
4953                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
4954
4955                 $ids = array();
4956
4957                 if (is_array($result['matches'])) {
4958                         foreach (array_keys($result['matches']) as $int_id) {
4959                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
4960                                 array_push($ids, $ref_id);
4961                         }
4962                 }
4963
4964                 return $ids;
4965         }
4966
4967         function cleanup_tags($link, $days = 14, $limit = 1000) {
4968
4969                 if (DB_TYPE == "pgsql") {
4970                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
4971                 } else if (DB_TYPE == "mysql") {
4972                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
4973                 }
4974
4975                 $tags_deleted = 0;
4976
4977                 while ($limit > 0) {
4978                         $limit_part = 500;
4979
4980                         $query = "SELECT ttrss_tags.id AS id
4981                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
4982                                 WHERE post_int_id = int_id AND $interval_query AND
4983                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
4984
4985                         $result = db_query($link, $query);
4986
4987                         $ids = array();
4988
4989                         while ($line = db_fetch_assoc($result)) {
4990                                 array_push($ids, $line['id']);
4991                         }
4992
4993                         if (count($ids) > 0) {
4994                                 $ids = join(",", $ids);
4995                                 print ".";
4996
4997                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
4998                                 $tags_deleted += db_affected_rows($link, $tmp_result);
4999                         } else {
5000                                 break;
5001                         }
5002
5003                         $limit -= $limit_part;
5004                 }
5005
5006                 print "\n";
5007
5008                 return $tags_deleted;
5009         }
5010
5011         function print_user_stylesheet($link) {
5012                 $value = get_pref($link, 'USER_STYLESHEET');
5013
5014                 if ($value) {
5015                         print "<style type=\"text/css\">";
5016                         print str_replace("<br/>", "\n", $value);
5017                         print "</style>";
5018                 }
5019
5020         }
5021
5022 /*      function rewrite_urls($line) {
5023                 global $url_regex;
5024
5025                 $urls = null;
5026
5027                 $result = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
5028                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $line);
5029
5030                 return $result;
5031         } */
5032
5033         function rewrite_urls($html) {
5034                 libxml_use_internal_errors(true);
5035
5036                 $charset_hack = '<head>
5037                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
5038                 </head>';
5039
5040                 $doc = new DOMDocument();
5041                 $doc->loadHTML($charset_hack . $html);
5042                 $xpath = new DOMXPath($doc);
5043
5044                 $entries = $xpath->query('//*/text()');
5045
5046                 foreach ($entries as $entry) {
5047                         if (strstr($entry->wholeText, "://") !== false) {
5048                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
5049                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
5050
5051                                 if ($text != $entry->wholeText) {
5052                                         $cdoc = new DOMDocument();
5053                                         $cdoc->loadHTML($charset_hack . $text);
5054
5055
5056                                         foreach ($cdoc->childNodes as $cnode) {
5057                                                 $cnode = $doc->importNode($cnode, true);
5058
5059                                                 if ($cnode) {
5060                                                         $entry->parentNode->insertBefore($cnode);
5061                                                 }
5062                                         }
5063
5064                                         $entry->parentNode->removeChild($entry);
5065
5066                                 }
5067                         }
5068                 }
5069
5070                 $node = $doc->getElementsByTagName('body')->item(0);
5071
5072                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
5073                 if ($node)
5074                         return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
5075                 else
5076                         return $html;
5077         }
5078
5079         function filter_to_sql($filter) {
5080                 $query = "";
5081
5082                 $regexp_valid = preg_match('/' . $filter['reg_exp'] . '/',
5083                         $filter['reg_exp']) !== FALSE;
5084
5085                 if ($regexp_valid) {
5086
5087                         if (DB_TYPE == "pgsql")
5088                                 $reg_qpart = "~";
5089                         else
5090                                 $reg_qpart = "REGEXP";
5091
5092                         switch ($filter["type"]) {
5093                                 case "title":
5094                                         $query = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
5095                                                 $filter['reg_exp'] . "')";
5096                                         break;
5097                                 case "content":
5098                                         $query = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
5099                                                 $filter['reg_exp'] . "')";
5100                                         break;
5101                                 case "both":
5102                                         $query = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
5103                                                 $filter['reg_exp'] . "') OR LOWER(" .
5104                                                 "ttrss_entries.content) $reg_qpart LOWER('" . $filter['reg_exp'] . "')";
5105                                         break;
5106                                 case "tag":
5107                                         $query = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
5108                                                 $filter['reg_exp'] . "')";
5109                                         break;
5110                                 case "link":
5111                                         $query = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
5112                                                 $filter['reg_exp'] . "')";
5113                                         break;
5114                                 case "date":
5115
5116                                         if ($filter["filter_param"] == "before")
5117                                                 $cmp_qpart = "<";
5118                                         else
5119                                                 $cmp_qpart = ">=";
5120
5121                                         $timestamp = date("Y-m-d H:N:s", strtotime($filter["reg_exp"]));
5122                                         $query = "ttrss_entries.date_entered $cmp_qpart '$timestamp'";
5123                                         break;
5124                                 case "author":
5125                                         $query = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
5126                                                 $filter['reg_exp'] . "')";
5127                                         break;
5128                         }
5129
5130                         if ($filter["inverse"])
5131                                 $query = "NOT ($query)";
5132
5133                         if ($query) {
5134                                 if (DB_TYPE == "pgsql") {
5135                                         $query = " ($query) AND ttrss_entries.date_entered > NOW() - INTERVAL '14 days'";
5136                                 } else {
5137                                         $query = " ($query) AND ttrss_entries.date_entered > DATE_SUB(NOW(), INTERVAL 14 DAY)";
5138                                 }
5139                                 $query .= " AND ";
5140                         }
5141
5142                         return $query;
5143                 } else {
5144                         return false;
5145                 }
5146         }
5147
5148         // Status codes:
5149         // -1  - never connected
5150         // 0   - no data received
5151         // 1   - data received successfully
5152         // 2   - did not receive valid data
5153         // >10 - server error, code + 10 (e.g. 16 means server error 6)
5154
5155         function get_linked_feeds($link, $instance_id = false) {
5156                 if ($instance_id)
5157                         $instance_qpart = "id = '$instance_id' AND ";
5158                 else
5159                         $instance_qpart = "";
5160
5161                 if (DB_TYPE == "pgsql") {
5162                         $date_qpart = "last_connected < NOW() - INTERVAL '6 hours'";
5163                 } else {
5164                         $date_qpart = "last_connected < DATE_SUB(NOW(), INTERVAL 6 HOUR)";
5165                 }
5166
5167                 $result = db_query($link, "SELECT id, access_key, access_url FROM ttrss_linked_instances
5168                         WHERE $instance_qpart $date_qpart ORDER BY last_connected");
5169
5170                 while ($line = db_fetch_assoc($result)) {
5171                         $id = $line['id'];
5172
5173                         _debug("Updating: " . $line['access_url'] . " ($id)");
5174
5175                         $fetch_url = $line['access_url'] . '/public.php?op=fbexport';
5176                         $post_query = 'key=' . $line['access_key'];
5177
5178                         $feeds = fetch_file_contents($fetch_url, false, false, false, $post_query);
5179
5180                         // try doing it the old way
5181                         if (!$feeds) {
5182                                 $fetch_url = $line['access_url'] . '/backend.php?op=fbexport';
5183                                 $feeds = fetch_file_contents($fetch_url, false, false, false, $post_query);
5184                         }
5185
5186                         if ($feeds) {
5187                                 $feeds = json_decode($feeds, true);
5188
5189                                 if ($feeds) {
5190                                         if ($feeds['error']) {
5191                                                 $status = $feeds['error']['code'] + 10;
5192                                         } else {
5193                                                 $status = 1;
5194
5195                                                 if (count($feeds['feeds']) > 0) {
5196
5197                                                         db_query($link, "DELETE FROM ttrss_linked_feeds
5198                                                                 WHERE instance_id = '$id'");
5199
5200                                                         foreach ($feeds['feeds'] as $feed) {
5201                                                                 $feed_url = db_escape_string($feed['feed_url']);
5202                                                                 $title = db_escape_string($feed['title']);
5203                                                                 $subscribers = db_escape_string($feed['subscribers']);
5204                                                                 $site_url = db_escape_string($feed['site_url']);
5205
5206                                                                 db_query($link, "INSERT INTO ttrss_linked_feeds
5207                                                                         (feed_url, site_url, title, subscribers, instance_id, created, updated)
5208                                                                 VALUES
5209                                                                         ('$feed_url', '$site_url', '$title', '$subscribers', '$id', NOW(), NOW())");
5210                                                         }
5211                                                 } else {
5212                                                         // received 0 feeds, this might indicate that
5213                                                         // the instance on the other hand is rebuilding feedbrowser cache
5214                                                         // we will try again later
5215
5216                                                         // TODO: maybe perform expiration based on updated here?
5217                                                 }
5218
5219                                                 _debug("Processed " . count($feeds['feeds']) . " feeds.");
5220                                         }
5221                                 } else {
5222                                         $status = 2;
5223                                 }
5224
5225                         } else {
5226                                 $status = 0;
5227                         }
5228
5229                         _debug("Status: $status");
5230
5231                         db_query($link, "UPDATE ttrss_linked_instances SET
5232                                 last_status_out = '$status', last_connected = NOW() WHERE id = '$id'");
5233
5234                 }
5235         }
5236
5237         function make_feed_browser($link, $search, $limit, $mode = 1) {
5238
5239                 $owner_uid = $_SESSION["uid"];
5240                 $rv = '';
5241
5242                 if ($search) {
5243                         $search_qpart = "AND (UPPER(feed_url) LIKE UPPER('%$search%') OR
5244                                                 UPPER(title) LIKE UPPER('%$search%'))";
5245                 } else {
5246                         $search_qpart = "";
5247                 }
5248
5249                 if ($mode == 1) {
5250                         /* $result = db_query($link, "SELECT feed_url, subscribers FROM
5251                          ttrss_feedbrowser_cache WHERE (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf
5252                         WHERE tf.feed_url = ttrss_feedbrowser_cache.feed_url
5253                         AND owner_uid = '$owner_uid') $search_qpart
5254                         ORDER BY subscribers DESC LIMIT $limit"); */
5255
5256                         $result = db_query($link, "SELECT feed_url, site_url, title, SUM(subscribers) AS subscribers FROM
5257                                                 (SELECT feed_url, site_url, title, subscribers FROM ttrss_feedbrowser_cache UNION ALL
5258                                                         SELECT feed_url, site_url, title, subscribers FROM ttrss_linked_feeds) AS qqq
5259                                                 WHERE
5260                                                         (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf
5261                                                                 WHERE tf.feed_url = qqq.feed_url
5262                                                                         AND owner_uid = '$owner_uid') $search_qpart
5263                                                 GROUP BY feed_url, site_url, title ORDER BY subscribers DESC LIMIT $limit");
5264
5265                 } else if ($mode == 2) {
5266                         $result = db_query($link, "SELECT *,
5267                                                 (SELECT COUNT(*) FROM ttrss_user_entries WHERE
5268                                                         orig_feed_id = ttrss_archived_feeds.id) AS articles_archived
5269                                                 FROM
5270                                                         ttrss_archived_feeds
5271                                                 WHERE
5272                                                 (SELECT COUNT(*) FROM ttrss_feeds
5273                                                         WHERE ttrss_feeds.feed_url = ttrss_archived_feeds.feed_url AND
5274                                                                 owner_uid = '$owner_uid') = 0   AND
5275                                                 owner_uid = '$owner_uid' $search_qpart
5276                                                 ORDER BY id DESC LIMIT $limit");
5277                 }
5278
5279                 $feedctr = 0;
5280
5281                 while ($line = db_fetch_assoc($result)) {
5282
5283                         if ($mode == 1) {
5284
5285                                 $feed_url = htmlspecialchars($line["feed_url"]);
5286                                 $site_url = htmlspecialchars($line["site_url"]);
5287                                 $subscribers = $line["subscribers"];
5288
5289                                 $check_box = "<input onclick='toggleSelectListRow2(this)'
5290                                                         dojoType=\"dijit.form.CheckBox\"
5291                                                         type=\"checkbox\" \">";
5292
5293                                 $class = ($feedctr % 2) ? "even" : "odd";
5294
5295                                 $site_url = "<a target=\"_blank\"
5296                                                         href=\"$site_url\">
5297                                                         <span class=\"fb_feedTitle\">".
5298                                 htmlspecialchars($line["title"])."</span></a>";
5299
5300                                 $feed_url = "<a target=\"_blank\" class=\"fb_feedUrl\"
5301                                                         href=\"$feed_url\"><img src='images/feed-icon-12x12.png'
5302                                                         style='vertical-align : middle'></a>";
5303
5304                                 $rv .= "<li>$check_box $feed_url $site_url".
5305                                                         "&nbsp;<span class='subscribers'>($subscribers)</span></li>";
5306
5307                         } else if ($mode == 2) {
5308                                 $feed_url = htmlspecialchars($line["feed_url"]);
5309                                 $site_url = htmlspecialchars($line["site_url"]);
5310                                 $title = htmlspecialchars($line["title"]);
5311
5312                                 $check_box = "<input onclick='toggleSelectListRow2(this)' dojoType=\"dijit.form.CheckBox\"
5313                                                         type=\"checkbox\">";
5314
5315                                 $class = ($feedctr % 2) ? "even" : "odd";
5316
5317                                 if ($line['articles_archived'] > 0) {
5318                                         $archived = sprintf(__("%d archived articles"), $line['articles_archived']);
5319                                         $archived = "&nbsp;<span class='subscribers'>($archived)</span>";
5320                                 } else {
5321                                         $archived = '';
5322                                 }
5323
5324                                 $site_url = "<a target=\"_blank\"
5325                                                         href=\"$site_url\">
5326                                                         <span class=\"fb_feedTitle\">".
5327                                 htmlspecialchars($line["title"])."</span></a>";
5328
5329                                 $feed_url = "<a target=\"_blank\" class=\"fb_feedUrl\"
5330                                                         href=\"$feed_url\"><img src='images/feed-icon-12x12.png'
5331                                                         style='vertical-align : middle'></a>";
5332
5333
5334                                 $rv .= "<li id=\"FBROW-".$line["id"]."\">".
5335                                                         "$check_box $feed_url $site_url $archived</li>";
5336                         }
5337
5338                         ++$feedctr;
5339                 }
5340
5341                 if ($feedctr == 0) {
5342                         $rv .= "<li style=\"text-align : center\"><p>".__('No feeds found.')."</p></li>";
5343                 }
5344
5345                 return $rv;
5346         }
5347
5348         if (!function_exists('gzdecode')) {
5349                 function gzdecode($string) { // no support for 2nd argument
5350                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
5351                                 base64_encode($string));
5352                 }
5353         }
5354
5355         function perform_data_import($link, $filename, $owner_uid) {
5356
5357                 $num_imported = 0;
5358                 $num_processed = 0;
5359                 $num_feeds_created = 0;
5360
5361                 $doc = @DOMDocument::load($filename);
5362
5363                 if (!$doc) {
5364                         $contents = file_get_contents($filename);
5365
5366                         if ($contents) {
5367                                 $data = @gzuncompress($contents);
5368                         }
5369
5370                         if (!$data) {
5371                                 $data = @gzdecode($contents);
5372                         }
5373
5374                         if ($data)
5375                                 $doc = DOMDocument::loadXML($data);
5376                 }
5377
5378                 if ($doc) {
5379
5380                         $xpath = new DOMXpath($doc);
5381
5382                         $container = $doc->firstChild;
5383
5384                         if ($container && $container->hasAttribute('schema-version')) {
5385                                 $schema_version = $container->getAttribute('schema-version');
5386
5387                                 if ($schema_version != SCHEMA_VERSION) {
5388                                         print "<p>" .__("Could not import: incorrect schema version.") . "</p>";
5389                                         return;
5390                                 }
5391
5392                         } else {
5393                                 print "<p>" . __("Could not import: unrecognized document format.") . "</p>";
5394                                 return;
5395                         }
5396
5397                         $articles = $xpath->query("//article");
5398
5399                         foreach ($articles as $article_node) {
5400                                 if ($article_node->childNodes) {
5401
5402                                         $ref_id = 0;
5403
5404                                         $article = array();
5405
5406                                         foreach ($article_node->childNodes as $child) {
5407                                                 if ($child->nodeName != 'label_cache')
5408                                                         $article[$child->nodeName] = db_escape_string($child->nodeValue);
5409                                                 else
5410                                                         $article[$child->nodeName] = $child->nodeValue;
5411                                         }
5412
5413                                         //print_r($article);
5414
5415                                         if ($article['guid']) {
5416
5417                                                 ++$num_processed;
5418
5419                                                 //db_query($link, "BEGIN");
5420
5421                                                 //print 'GUID:' . $article['guid'] . "\n";
5422
5423                                                 $result = db_query($link, "SELECT id FROM ttrss_entries
5424                                                         WHERE guid = '".$article['guid']."'");
5425
5426                                                 if (db_num_rows($result) == 0) {
5427
5428                                                         $result = db_query($link,
5429                                                                 "INSERT INTO ttrss_entries
5430                                                                         (title,
5431                                                                         guid,
5432                                                                         link,
5433                                                                         updated,
5434                                                                         content,
5435                                                                         content_hash,
5436                                                                         no_orig_date,
5437                                                                         date_updated,
5438                                                                         date_entered,
5439                                                                         comments,
5440                                                                         num_comments,
5441                                                                         author)
5442                                                                 VALUES
5443                                                                         ('".$article['title']."',
5444                                                                         '".$article['guid']."',
5445                                                                         '".$article['link']."',
5446                                                                         '".$article['updated']."',
5447                                                                         '".$article['content']."',
5448                                                                         '".sha1($article['content'])."',
5449                                                                         false,
5450                                                                         NOW(),
5451                                                                         NOW(),
5452                                                                         '',
5453                                                                         '0',
5454                                                                         '')");
5455
5456                                                         $result = db_query($link, "SELECT id FROM ttrss_entries
5457                                                                 WHERE guid = '".$article['guid']."'");
5458
5459                                                         if (db_num_rows($result) != 0) {
5460                                                                 $ref_id = db_fetch_result($result, 0, "id");
5461                                                         }
5462
5463                                                 } else {
5464                                                         $ref_id = db_fetch_result($result, 0, "id");
5465                                                 }
5466
5467                                                 //print "Got ref ID: $ref_id\n";
5468
5469                                                 if ($ref_id) {
5470
5471                                                         $feed_url = $article['feed_url'];
5472                                                         $feed_title = $article['feed_title'];
5473
5474                                                         $feed = 'NULL';
5475
5476                                                         if ($feed_url && $feed_title) {
5477                                                                 $result = db_query($link, "SELECT id FROM ttrss_feeds
5478                                                                         WHERE feed_url = '$feed_url' AND owner_uid = '$owner_uid'");
5479
5480                                                                 if (db_num_rows($result) != 0) {
5481                                                                         $feed = db_fetch_result($result, 0, "id");
5482                                                                 } else {
5483                                                                         // try autocreating feed in Uncategorized...
5484
5485                                                                         $result = db_query($link, "INSERT INTO ttrss_feeds (owner_uid,
5486                                                                                 feed_url, title) VALUES ($owner_uid, '$feed_url', '$feed_title')");
5487
5488                                                                         $result = db_query($link, "SELECT id FROM ttrss_feeds
5489                                                                                 WHERE feed_url = '$feed_url' AND owner_uid = '$owner_uid'");
5490
5491                                                                         if (db_num_rows($result) != 0) {
5492                                                                                 ++$num_feeds_created;
5493
5494                                                                                 $feed = db_fetch_result($result, 0, "id");
5495                                                                         }
5496                                                                 }
5497                                                         }
5498
5499                                                         if ($feed != 'NULL')
5500                                                                 $feed_qpart = "feed_id = $feed";
5501                                                         else
5502                                                                 $feed_qpart = "feed_id IS NULL";
5503
5504                                                         //print "$ref_id / $feed / " . $article['title'] . "\n";
5505
5506                                                         $result = db_query($link, "SELECT int_id FROM ttrss_user_entries
5507                                                                 WHERE ref_id = '$ref_id' AND owner_uid = '$owner_uid' AND $feed_qpart");
5508
5509                                                         if (db_num_rows($result) == 0) {
5510
5511                                                                 $marked = bool_to_sql_bool(sql_bool_to_bool($article['marked']));
5512                                                                 $published = bool_to_sql_bool(sql_bool_to_bool($article['published']));
5513                                                                 $score = (int) $article['score'];
5514
5515                                                                 $tag_cache = $article['tag_cache'];
5516                                                                 $label_cache = db_escape_string($article['label_cache']);
5517                                                                 $note = $article['note'];
5518
5519                                                                 //print "Importing " . $article['title'] . "<br/>";
5520
5521                                                                 ++$num_imported;
5522
5523                                                                 $result = db_query($link,
5524                                                                         "INSERT INTO ttrss_user_entries
5525                                                                         (ref_id, owner_uid, feed_id, unread, last_read, marked,
5526                                                                                 published, score, tag_cache, label_cache, uuid, note)
5527                                                                         VALUES ($ref_id, $owner_uid, $feed, false,
5528                                                                                 NULL, $marked, $published, $score, '$tag_cache',
5529                                                                                         '$label_cache', '', '$note')");
5530
5531                                                                 $label_cache = json_decode($label_cache, true);
5532
5533                                                                 if (is_array($label_cache) && $label_cache["no-labels"] != 1) {
5534                                                                         foreach ($label_cache as $label) {
5535
5536                                                                                 label_create($link, $label[1],
5537                                                                                         $label[2], $label[3], $owner_uid);
5538
5539                                                                                 label_add_article($link, $ref_id, $label[1], $owner_uid);
5540
5541                                                                         }
5542                                                                 }
5543
5544                                                                 //db_query($link, "COMMIT");
5545                                                         }
5546                                                 }
5547                                         }
5548                                 }
5549                         }
5550
5551                         print "<p>" .
5552                                 T_sprintf("Finished: %d articles processed, %d imported, %d feeds created.",
5553                                         $num_processed, $num_imported, $num_feeds_created) .
5554                                         "</p>";
5555
5556                 } else {
5557
5558                         print "<p>" . __("Could not load XML document.") . "</p>";
5559
5560                 }
5561         }
5562
5563         function get_random_bytes($length) {
5564                 if (function_exists('openssl_random_pseudo_bytes')) {
5565                         return openssl_random_pseudo_bytes($length);
5566                 } else {
5567                         $output = "";
5568
5569                         for ($i = 0; $i < $length; $i++)
5570                                 $output .= chr(mt_rand(0, 255));
5571
5572                         return $output;
5573                 }
5574         }
5575
5576         function read_stdin() {
5577                 $fp = fopen("php://stdin", "r");
5578
5579                 if ($fp) {
5580                         $line = trim(fgets($fp));
5581                         fclose($fp);
5582                         return $line;
5583                 }
5584
5585                 return null;
5586         }
5587 ?>