include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 122);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         define('COOKIE_LIFETIME_LONG', 86400*365);
   9
  10         $fetch_last_error = false;
  11         $fetch_last_error_code = false;
  12         $fetch_last_content_type = false;
  13         $fetch_curl_used = false;
  14
  15         mb_internal_encoding("UTF-8");
  16         date_default_timezone_set('UTC');
  17         if (defined('E_DEPRECATED')) {
  18                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  19         } else {
  20                 error_reporting(E_ALL & ~E_NOTICE);
  21         }
  22
  23         require_once 'config.php';
  24
  25         /**
  26          * Define a constant if not already defined
  27          *
  28          * @param string $name The constant name.
  29          * @param mixed $value The constant value.
  30          * @access public
  31          * @return boolean True if defined successfully or not.
  32          */
  33         function define_default($name, $value) {
  34                 defined($name) or define($name, $value);
  35         }
  36
  37         ///// Some defaults that you can override in config.php //////
  38
  39         define_default('FEED_FETCH_TIMEOUT', 45);
  40         // How may seconds to wait for response when requesting feed from a site
  41         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  42         // How may seconds to wait for response when requesting feed from a
  43         // site when that feed wasn't cached before
  44         define_default('FILE_FETCH_TIMEOUT', 45);
  45         // Default timeout when fetching files from remote sites
  46         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  47         // How many seconds to wait for initial response from website when
  48         // fetching files from remote sites
  49
  50         if (DB_TYPE == "pgsql") {
  51                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  52         } else {
  53                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  54         }
  55
  56         /**
  57          * Return available translations names.
  58          *
  59          * @access public
  60          * @return array A array of available translations.
  61          */
  62         function get_translations() {
  63                 $tr = array(
  64                                         "auto"  => "Detect automatically",
  65                                         "ca_CA" => "Català",
  66                                         "cs_CZ" => "Česky",
  67                                         "en_US" => "English",
  68                                         "es_ES" => "Español",
  69                                         "de_DE" => "Deutsch",
  70                                         "fr_FR" => "Français",
  71                                         "hu_HU" => "Magyar (Hungarian)",
  72                                         "it_IT" => "Italiano",
  73                                         "ja_JP" => "日本語 (Japanese)",
  74                                         "lv_LV" => "Latviešu",
  75                                         "nb_NO" => "Norwegian bokmål",
  76                                         "nl_NL" => "Dutch",
  77                                         "pl_PL" => "Polski",
  78                                         "ru_RU" => "Русский",
  79                                         "pt_BR" => "Portuguese/Brazil",
  80                                         "zh_CN" => "Simplified Chinese",
  81                                         "sv_SE" => "Svenska",
  82                                         "fi_FI" => "Suomi");
  83
  84                 return $tr;
  85         }
  86
  87         require_once "lib/accept-to-gettext.php";
  88         require_once "lib/gettext/gettext.inc";
  89
  90         require_once "lib/languagedetect/LanguageDetect.php";
  91
  92         function startup_gettext() {
  93
  94                 # Get locale from Accept-Language header
  95                 $lang = al2gt(array_keys(get_translations()), "text/html");
  96
  97                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  98                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  99                 }
 100
 101                 if ($_SESSION["uid"] && get_schema_version() >= 120) {
 102                         $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
 103
 104                         if ($pref_lang && $pref_lang != 'auto') {
 105                                 $lang = $pref_lang;
 106                         }
 107                 }
 108
 109                 if ($lang) {
 110                         if (defined('LC_MESSAGES')) {
 111                                 _setlocale(LC_MESSAGES, $lang);
 112                         } else if (defined('LC_ALL')) {
 113                                 _setlocale(LC_ALL, $lang);
 114                         }
 115
 116                         _bindtextdomain("messages", "locale");
 117
 118                         _textdomain("messages");
 119                         _bind_textdomain_codeset("messages", "UTF-8");
 120                 }
 121         }
 122
 123         require_once 'db-prefs.php';
 124         require_once 'version.php';
 125         require_once 'ccache.php';
 126         require_once 'labels.php';
 127
 128         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 129         ini_set('user_agent', SELF_USER_AGENT);
 130
 131         require_once 'lib/pubsubhubbub/publisher.php';
 132
 133         $schema_version = false;
 134
 135         /**
 136          * Print a timestamped debug message.
 137          *
 138          * @param string $msg The debug message.
 139          * @return void
 140          */
 141         function _debug($msg, $show = true) {
 142
 143                 $ts = strftime("%H:%M:%S", time());
 144                 if (function_exists('posix_getpid')) {
 145                         $ts = "$ts/" . posix_getpid();
 146                 }
 147
 148                 if ($show && !(defined('QUIET') && QUIET)) {
 149                         print "[$ts] $msg\n";
 150                 }
 151
 152                 if (defined('LOGFILE'))  {
 153                         $fp = fopen(LOGFILE, 'a+');
 154
 155                         if ($fp) {
 156                                 fputs($fp, "[$ts] $msg\n");
 157                                 fclose($fp);
 158                         }
 159                 }
 160
 161         } // function _debug
 162
 163         /**
 164          * Purge a feed old posts.
 165          *
 166          * @param mixed $link A database connection.
 167          * @param mixed $feed_id The id of the purged feed.
 168          * @param mixed $purge_interval Olderness of purged posts.
 169          * @param boolean $debug Set to True to enable the debug. False by default.
 170          * @access public
 171          * @return void
 172          */
 173         function purge_feed($feed_id, $purge_interval, $debug = false) {
 174
 175                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
 176
 177                 $rows = -1;
 178
 179                 $result = db_query(
 180                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 181
 182                 $owner_uid = false;
 183
 184                 if (db_num_rows($result) == 1) {
 185                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 186                 }
 187
 188                 if ($purge_interval == -1 || !$purge_interval) {
 189                         if ($owner_uid) {
 190                                 ccache_update($feed_id, $owner_uid);
 191                         }
 192                         return;
 193                 }
 194
 195                 if (!$owner_uid) return;
 196
 197                 if (FORCE_ARTICLE_PURGE == 0) {
 198                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
 199                                 $owner_uid, false);
 200                 } else {
 201                         $purge_unread = true;
 202                         $purge_interval = FORCE_ARTICLE_PURGE;
 203                 }
 204
 205                 if (!$purge_unread) $query_limit = " unread = false AND ";
 206
 207                 if (DB_TYPE == "pgsql") {
 208                         $pg_version = get_pgsql_version();
 209
 210                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 211
 212                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
 213                                         ttrss_entries.id = ref_id AND
 214                                         marked = false AND
 215                                         feed_id = '$feed_id' AND
 216                                         $query_limit
 217                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 218
 219                         } else {
 220
 221                                 $result = db_query("DELETE FROM ttrss_user_entries
 222                                         USING ttrss_entries
 223                                         WHERE ttrss_entries.id = ref_id AND
 224                                         marked = false AND
 225                                         feed_id = '$feed_id' AND
 226                                         $query_limit
 227                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 228                         }
 229
 230                 } else {
 231
 232 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
 233                                 marked = false AND feed_id = '$feed_id' AND
 234                                 (SELECT date_updated FROM ttrss_entries WHERE
 235                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 236
 237                         $result = db_query("DELETE FROM ttrss_user_entries
 238                                 USING ttrss_user_entries, ttrss_entries
 239                                 WHERE ttrss_entries.id = ref_id AND
 240                                 marked = false AND
 241                                 feed_id = '$feed_id' AND
 242                                 $query_limit
 243                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 244                 }
 245
 246                 $rows = db_affected_rows($result);
 247
 248                 ccache_update($feed_id, $owner_uid);
 249
 250                 if ($debug) {
 251                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 252                 }
 253
 254                 return $rows;
 255         } // function purge_feed
 256
 257         function feed_purge_interval($feed_id) {
 258
 259                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
 260                         WHERE id = '$feed_id'");
 261
 262                 if (db_num_rows($result) == 1) {
 263                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 264                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 265
 266                         if ($purge_interval == 0) $purge_interval = get_pref(
 267                                 'PURGE_OLD_DAYS', $owner_uid);
 268
 269                         return $purge_interval;
 270
 271                 } else {
 272                         return -1;
 273                 }
 274         }
 275
 276         function purge_orphans($do_output = false) {
 277
 278                 // purge orphaned posts in main content table
 279                 $result = db_query("DELETE FROM ttrss_entries WHERE
 280                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 281
 282                 if ($do_output) {
 283                         $rows = db_affected_rows($result);
 284                         _debug("Purged $rows orphaned posts.");
 285                 }
 286         }
 287
 288         function get_feed_update_interval($feed_id) {
 289                 $result = db_query("SELECT owner_uid, update_interval FROM
 290                         ttrss_feeds WHERE id = '$feed_id'");
 291
 292                 if (db_num_rows($result) == 1) {
 293                         $update_interval = db_fetch_result($result, 0, "update_interval");
 294                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 295
 296                         if ($update_interval != 0) {
 297                                 return $update_interval;
 298                         } else {
 299                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 300                         }
 301
 302                 } else {
 303                         return -1;
 304                 }
 305         }
 306
 307         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 308
 309                 global $fetch_last_error;
 310                 global $fetch_last_error_code;
 311                 global $fetch_last_content_type;
 312                 global $fetch_curl_used;
 313
 314                 $url = str_replace(' ', '%20', $url);
 315
 316                 if (!defined('NO_CURL') && function_exists('curl_init')) {
 317
 318                         $fetch_curl_used = true;
 319
 320                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
 321                                 $new_url = geturl($url);
 322                                 if (!$new_url) {
 323                                     // geturl has already populated $fetch_last_error
 324                                     return false;
 325                                 }
 326                                 $ch = curl_init($new_url);
 327                         } else {
 328                                 $ch = curl_init($url);
 329                         }
 330
 331                         if ($timestamp && !$post_query) {
 332                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 333                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 334                         }
 335
 336                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 337                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 338                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
 339                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 340                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 341                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 342                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 343                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 344                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 345                         curl_setopt($ch, CURLOPT_ENCODING, "");
 346                         curl_setopt($ch, CURLOPT_REFERER, $url);
 347
 348                         if ($post_query) {
 349                                 curl_setopt($ch, CURLOPT_POST, true);
 350                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 351                         }
 352
 353                         if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
 354                                 curl_setopt($ch, CURLOPT_SSLVERSION, 3);
 355                         }
 356
 357                         if ($login && $pass)
 358                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 359
 360                         $contents = @curl_exec($ch);
 361
 362                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 363                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 364                                 $contents = @curl_exec($ch);
 365                         }
 366
 367                         if ($contents === false) {
 368                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 369                                 curl_close($ch);
 370                                 return false;
 371                         }
 372
 373                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 374                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 375
 376                         $fetch_last_error_code = $http_code;
 377
 378                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
 379                                 if (curl_errno($ch) != 0) {
 380                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 381                                 } else {
 382                                         $fetch_last_error = "HTTP Code: $http_code";
 383                                 }
 384                                 curl_close($ch);
 385                                 return false;
 386                         }
 387
 388                         curl_close($ch);
 389
 390                         return $contents;
 391                 } else {
 392
 393                         $fetch_curl_used = false;
 394
 395                         if ($login && $pass){
 396                                 $url_parts = array();
 397
 398                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 399
 400                                 $pass = urlencode($pass);
 401
 402                                 if ($url_parts[1] && $url_parts[2]) {
 403                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 404                                 }
 405                         }
 406
 407                         if (!$post_query && $timestamp) {
 408                                 $context = stream_context_create(array(
 409                                         'http' => array(
 410                                                 'method' => 'GET',
 411                                                 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
 412                                         )));
 413                         } else {
 414                                 $context = NULL;
 415                         }
 416
 417                         $old_error = error_get_last();
 418
 419                         $data = @file_get_contents($url, false, $context);
 420
 421                         $fetch_last_content_type = false;  // reset if no type was sent from server
 422                         if (isset($http_response_header) && is_array($http_response_header)) {
 423                                 foreach ($http_response_header as $h) {
 424                                         if (substr(strtolower($h), 0, 13) == 'content-type:') {
 425                                                 $fetch_last_content_type = substr($h, 14);
 426                                                 // don't abort here b/c there might be more than one
 427                                                 // e.g. if we were being redirected -- last one is the right one
 428                                         }
 429
 430                                         if (substr(strtolower($h), 0, 7) == 'http/1.') {
 431                                                 $fetch_last_error_code = (int) substr($h, 9, 3);
 432                                         }
 433                                 }
 434                         }
 435
 436                         if (!$data) {
 437                                 $error = error_get_last();
 438
 439                                 if ($error['message'] != $old_error['message']) {
 440                                         $fetch_last_error = $error["message"];
 441                                 } else {
 442                                         $fetch_last_error = "HTTP Code: $fetch_last_error_code";
 443                                 }
 444                         }
 445                         return $data;
 446                 }
 447
 448         }
 449
 450         /**
 451          * Try to determine the favicon URL for a feed.
 452          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 453          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 454          *
 455          * @param string $url A feed or page URL
 456          * @access public
 457          * @return mixed The favicon URL, or false if none was found.
 458          */
 459         function get_favicon_url($url) {
 460
 461                 $favicon_url = false;
 462
 463                 if ($html = @fetch_file_contents($url)) {
 464
 465                         libxml_use_internal_errors(true);
 466
 467                         $doc = new DOMDocument();
 468                         $doc->loadHTML($html);
 469                         $xpath = new DOMXPath($doc);
 470
 471                         $base = $xpath->query('/html/head/base');
 472                         foreach ($base as $b) {
 473                                 $url = $b->getAttribute("href");
 474                                 break;
 475                         }
 476
 477                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 478                         if (count($entries) > 0) {
 479                                 foreach ($entries as $entry) {
 480                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 481                                         break;
 482                                 }
 483                         }
 484                 }
 485
 486                 if (!$favicon_url)
 487                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 488
 489                 return $favicon_url;
 490         } // function get_favicon_url
 491
 492         function check_feed_favicon($site_url, $feed) {
 493 #               print "FAVICON [$site_url]: $favicon_url\n";
 494
 495                 $icon_file = ICONS_DIR . "/$feed.ico";
 496
 497                 if (!file_exists($icon_file)) {
 498                         $favicon_url = get_favicon_url($site_url);
 499
 500                         if ($favicon_url) {
 501                                 // Limiting to "image" type misses those served with text/plain
 502                                 $contents = fetch_file_contents($favicon_url); // , "image");
 503
 504                                 if ($contents) {
 505                                         // Crude image type matching.
 506                                         // Patterns gleaned from the file(1) source code.
 507                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 508                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 509                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 510                                         }
 511                                         elseif (preg_match('/^GIF8/', $contents)) {
 512                                                 // 0       string          GIF8            GIF image data
 513                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 514                                         }
 515                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 516                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 517                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 518                                         }
 519                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 520                                                 // 0       beshort         0xffd8          JPEG image data
 521                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 522                                         }
 523                                         else {
 524                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 525                                                 $contents = "";
 526                                         }
 527                                 }
 528
 529                                 if ($contents) {
 530                                         $fp = @fopen($icon_file, "w");
 531
 532                                         if ($fp) {
 533                                                 fwrite($fp, $contents);
 534                                                 fclose($fp);
 535                                                 chmod($icon_file, 0644);
 536                                         }
 537                                 }
 538                         }
 539             return $icon_file;
 540                 }
 541         }
 542
 543         function print_select($id, $default, $values, $attributes = "") {
 544                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 545                 foreach ($values as $v) {
 546                         if ($v == $default)
 547                                 $sel = "selected=\"1\"";
 548                          else
 549                                 $sel = "";
 550
 551                         $v = trim($v);
 552
 553                         print "<option value=\"$v\" $sel>$v</option>";
 554                 }
 555                 print "</select>";
 556         }
 557
 558         function print_select_hash($id, $default, $values, $attributes = "") {
 559                 print "<select name=\"$id\" id='$id' $attributes>";
 560                 foreach (array_keys($values) as $v) {
 561                         if ($v == $default)
 562                                 $sel = 'selected="selected"';
 563                          else
 564                                 $sel = "";
 565
 566                         $v = trim($v);
 567
 568                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 569                 }
 570
 571                 print "</select>";
 572         }
 573
 574         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 575                 foreach ($values as $v) {
 576
 577                         if ($v == $default)
 578                                 $sel = "checked";
 579                          else
 580                                 $sel = "";
 581
 582                         if ($v == $true_is) {
 583                                 $sel .= " value=\"1\"";
 584                         } else {
 585                                 $sel .= " value=\"0\"";
 586                         }
 587
 588                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 589                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 590
 591                 }
 592         }
 593
 594         function initialize_user_prefs($uid, $profile = false) {
 595
 596                 $uid = db_escape_string($uid);
 597
 598                 if (!$profile) {
 599                         $profile = "NULL";
 600                         $profile_qpart = "AND profile IS NULL";
 601                 } else {
 602                         $profile_qpart = "AND profile = '$profile'";
 603                 }
 604
 605                 if (get_schema_version() < 63) $profile_qpart = "";
 606
 607                 db_query("BEGIN");
 608
 609                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
 610
 611                 $u_result = db_query("SELECT pref_name
 612                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 613
 614                 $active_prefs = array();
 615
 616                 while ($line = db_fetch_assoc($u_result)) {
 617                         array_push($active_prefs, $line["pref_name"]);
 618                 }
 619
 620                 while ($line = db_fetch_assoc($result)) {
 621                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 622 //                              print "adding " . $line["pref_name"] . "<br>";
 623
 624                                 $line["def_value"] = db_escape_string($line["def_value"]);
 625                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
 626
 627                                 if (get_schema_version() < 63) {
 628                                         db_query("INSERT INTO ttrss_user_prefs
 629                                                 (owner_uid,pref_name,value) VALUES
 630                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 631
 632                                 } else {
 633                                         db_query("INSERT INTO ttrss_user_prefs
 634                                                 (owner_uid,pref_name,value, profile) VALUES
 635                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 636                                 }
 637
 638                         }
 639                 }
 640
 641                 db_query("COMMIT");
 642
 643         }
 644
 645         function get_ssl_certificate_id() {
 646                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 647                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 648                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 649                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 650                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 651                 }
 652                 return "";
 653         }
 654
 655         function authenticate_user($login, $password, $check_only = false) {
 656
 657                 if (!SINGLE_USER_MODE) {
 658                         $user_id = false;
 659
 660                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
 661
 662                                 $user_id = (int) $plugin->authenticate($login, $password);
 663
 664                                 if ($user_id) {
 665                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 666                                         break;
 667                                 }
 668                         }
 669
 670                         if ($user_id && !$check_only) {
 671                                 @session_start();
 672
 673                                 $_SESSION["uid"] = $user_id;
 674                                 $_SESSION["version"] = VERSION_STATIC;
 675
 676                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
 677                                         WHERE id = '$user_id'");
 678
 679                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 680                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 681                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 682
 683                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 684                                         $_SESSION["uid"]);
 685
 686                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 687                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 688                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 689
 690                                 $_SESSION["last_version_check"] = time();
 691
 692                                 initialize_user_prefs($_SESSION["uid"]);
 693
 694                                 return true;
 695                         }
 696
 697                         return false;
 698
 699                 } else {
 700
 701                         $_SESSION["uid"] = 1;
 702                         $_SESSION["name"] = "admin";
 703                         $_SESSION["access_level"] = 10;
 704
 705                         $_SESSION["hide_hello"] = true;
 706                         $_SESSION["hide_logout"] = true;
 707
 708                         $_SESSION["auth_module"] = false;
 709
 710                         if (!$_SESSION["csrf_token"]) {
 711                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 712                         }
 713
 714                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 715
 716                         initialize_user_prefs($_SESSION["uid"]);
 717
 718                         return true;
 719                 }
 720         }
 721
 722         function make_password($length = 8) {
 723
 724                 $password = "";
 725                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 726
 727         $i = 0;
 728
 729                 while ($i < $length) {
 730                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 731
 732                         if (!strstr($password, $char)) {
 733                                 $password .= $char;
 734                                 $i++;
 735                         }
 736                 }
 737                 return $password;
 738         }
 739
 740         // this is called after user is created to initialize default feeds, labels
 741         // or whatever else
 742
 743         // user preferences are checked on every login, not here
 744
 745         function initialize_user($uid) {
 746
 747                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 748                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 749                         'http://tt-rss.org/releases.rss')");
 750
 751                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 752                         values ('$uid', 'Tiny Tiny RSS: Forum',
 753                                 'http://tt-rss.org/forum/rss.php')");
 754         }
 755
 756         function logout_user() {
 757                 session_destroy();
 758                 if (isset($_COOKIE[session_name()])) {
 759                    setcookie(session_name(), '', time()-42000, '/');
 760                 }
 761         }
 762
 763         function validate_csrf($csrf_token) {
 764                 return $csrf_token == $_SESSION['csrf_token'];
 765         }
 766
 767         function load_user_plugins($owner_uid) {
 768                 if ($owner_uid) {
 769                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 770
 771                         PluginHost::getInstance()->load($plugins, PluginHost::KIND_USER, $owner_uid);
 772
 773                         if (get_schema_version() > 100) {
 774                                 PluginHost::getInstance()->load_data();
 775                         }
 776                 }
 777         }
 778
 779         function login_sequence() {
 780                 if (SINGLE_USER_MODE) {
 781                         @session_start();
 782                         authenticate_user("admin", null);
 783                         load_user_plugins($_SESSION["uid"]);
 784                 } else {
 785                         if (!validate_session()) $_SESSION["uid"] = false;
 786
 787                         if (!$_SESSION["uid"]) {
 788
 789                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
 790                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
 791                                 } else {
 792                                          authenticate_user(null, null, true);
 793                                 }
 794
 795                                 if (!$_SESSION["uid"]) {
 796                                         @session_destroy();
 797                                         setcookie(session_name(), '', time()-42000, '/');
 798
 799                                         render_login_form();
 800                                         exit;
 801                                 }
 802
 803                         } else {
 804                                 /* bump login timestamp */
 805                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 806                                         $_SESSION["uid"]);
 807                                 $_SESSION["last_login_update"] = time();
 808                         }
 809
 810                         if ($_SESSION["uid"]) {
 811                                 startup_gettext();
 812                                 load_user_plugins($_SESSION["uid"]);
 813
 814                                 /* cleanup ccache */
 815
 816                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 817                                         $_SESSION["uid"] . " AND
 818                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 819                                                         ttrss_feeds.id = feed_id) = 0");
 820
 821                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 822                                         $_SESSION["uid"] . " AND
 823                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 824                                                         ttrss_feed_categories.id = feed_id) = 0");
 825
 826                         }
 827
 828                 }
 829         }
 830
 831         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 832                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 833                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 834                 } else {
 835                         return $str;
 836                 }
 837         }
 838
 839         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 840
 841                 try {
 842                         $source_tz = new DateTimeZone($source_tz);
 843                 } catch (Exception $e) {
 844                         $source_tz = new DateTimeZone('UTC');
 845                 }
 846
 847                 try {
 848                         $dest_tz = new DateTimeZone($dest_tz);
 849                 } catch (Exception $e) {
 850                         $dest_tz = new DateTimeZone('UTC');
 851                 }
 852
 853                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 854                 return $dt->format('U') + $dest_tz->getOffset($dt);
 855         }
 856
 857         function make_local_datetime($timestamp, $long, $owner_uid = false,
 858                                         $no_smart_dt = false) {
 859
 860                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 861                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 862
 863                 global $utc_tz;
 864                 global $user_tz;
 865
 866                 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
 867
 868                 $timestamp = substr($timestamp, 0, 19);
 869
 870                 # We store date in UTC internally
 871                 $dt = new DateTime($timestamp, $utc_tz);
 872
 873                 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
 874
 875                 if ($user_tz_string != 'Automatic') {
 876
 877                         try {
 878                                 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
 879                         } catch (Exception $e) {
 880                                 $user_tz = $utc_tz;
 881                         }
 882
 883                         $tz_offset = $user_tz->getOffset($dt);
 884                 } else {
 885                         $tz_offset = (int) -$_SESSION["clientTzOffset"];
 886                 }
 887
 888                 $user_timestamp = $dt->format('U') + $tz_offset;
 889
 890                 if (!$no_smart_dt) {
 891                         return smart_date_time($user_timestamp,
 892                                 $tz_offset, $owner_uid);
 893                 } else {
 894                         if ($long)
 895                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 896                         else
 897                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 898
 899                         return date($format, $user_timestamp);
 900                 }
 901         }
 902
 903         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
 904                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 905
 906                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 907                         return date("G:i", $timestamp);
 908                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 909                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 910                         return date($format, $timestamp);
 911                 } else {
 912                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 913                         return date($format, $timestamp);
 914                 }
 915         }
 916
 917         function sql_bool_to_bool($s) {
 918                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 919                         return true;
 920                 } else {
 921                         return false;
 922                 }
 923         }
 924
 925         function bool_to_sql_bool($s) {
 926                 if ($s) {
 927                         return "true";
 928                 } else {
 929                         return "false";
 930                 }
 931         }
 932
 933         // Session caching removed due to causing wrong redirects to upgrade
 934         // script when get_schema_version() is called on an obsolete session
 935         // created on a previous schema version.
 936         function get_schema_version($nocache = false) {
 937                 global $schema_version;
 938
 939                 if (!$schema_version && !$nocache) {
 940                         $result = db_query("SELECT schema_version FROM ttrss_version");
 941                         $version = db_fetch_result($result, 0, "schema_version");
 942                         $schema_version = $version;
 943                         return $version;
 944                 } else {
 945                         return $schema_version;
 946                 }
 947         }
 948
 949         function sanity_check() {
 950                 require_once 'errors.php';
 951
 952                 $error_code = 0;
 953                 $schema_version = get_schema_version(true);
 954
 955                 if ($schema_version != SCHEMA_VERSION) {
 956                         $error_code = 5;
 957                 }
 958
 959                 if (DB_TYPE == "mysql") {
 960                         $result = db_query("SELECT true", false);
 961                         if (db_num_rows($result) != 1) {
 962                                 $error_code = 10;
 963                         }
 964                 }
 965
 966                 if (db_escape_string("testTEST") != "testTEST") {
 967                         $error_code = 12;
 968                 }
 969
 970                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 971         }
 972
 973         function file_is_locked($filename) {
 974                 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
 975                         if (function_exists('flock')) {
 976                                 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 977                                 if ($fp) {
 978                                         if (flock($fp, LOCK_EX | LOCK_NB)) {
 979                                                 flock($fp, LOCK_UN);
 980                                                 fclose($fp);
 981                                                 return false;
 982                                         }
 983                                         fclose($fp);
 984                                         return true;
 985                                 } else {
 986                                         return false;
 987                                 }
 988                         }
 989                         return true; // consider the file always locked and skip the test
 990                 } else {
 991                         return false;
 992                 }
 993         }
 994
 995
 996         function make_lockfile($filename) {
 997                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 998
 999                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
1000                         $stat_h = fstat($fp);
1001                         $stat_f = stat(LOCK_DIRECTORY . "/$filename");
1002
1003                         if (strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
1004                                 if ($stat_h["ino"] != $stat_f["ino"] ||
1005                                                 $stat_h["dev"] != $stat_f["dev"]) {
1006
1007                                         return false;
1008                                 }
1009                         }
1010
1011                         if (function_exists('posix_getpid')) {
1012                                 fwrite($fp, posix_getpid() . "\n");
1013                         }
1014                         return $fp;
1015                 } else {
1016                         return false;
1017                 }
1018         }
1019
1020         function make_stampfile($filename) {
1021                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1022
1023                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1024                         fwrite($fp, time() . "\n");
1025                         flock($fp, LOCK_UN);
1026                         fclose($fp);
1027                         return true;
1028                 } else {
1029                         return false;
1030                 }
1031         }
1032
1033         function sql_random_function() {
1034                 if (DB_TYPE == "mysql") {
1035                         return "RAND()";
1036                 } else {
1037                         return "RANDOM()";
1038                 }
1039         }
1040
1041         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
1042
1043                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1044
1045                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1046
1047                         // Todo: all this interval stuff needs some generic generator function
1048
1049                         $date_qpart = "false";
1050
1051                         switch ($mode) {
1052                         case "1day":
1053                                 if (DB_TYPE == "pgsql") {
1054                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1055                                 } else {
1056                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1057                                 }
1058                                 break;
1059                         case "1week":
1060                                 if (DB_TYPE == "pgsql") {
1061                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1062                                 } else {
1063                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1064                                 }
1065                                 break;
1066                         case "2week":
1067                                 if (DB_TYPE == "pgsql") {
1068                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1069                                 } else {
1070                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1071                                 }
1072                                 break;
1073                         default:
1074                                 $date_qpart = "true";
1075                         }
1076
1077                         if (is_numeric($feed)) {
1078                                 if ($cat_view) {
1079
1080                                         if ($feed >= 0) {
1081
1082                                                 if ($feed > 0) {
1083                                                         $children = getChildCategories($feed, $owner_uid);
1084                                                         array_push($children, $feed);
1085
1086                                                         $children = join(",", $children);
1087
1088                                                         $cat_qpart = "cat_id IN ($children)";
1089                                                 } else {
1090                                                         $cat_qpart = "cat_id IS NULL";
1091                                                 }
1092
1093                                                 db_query("UPDATE ttrss_user_entries
1094                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1095                                                                 (SELECT id FROM
1096                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1097                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1098                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1099
1100                                         } else if ($feed == -2) {
1101
1102                                                 db_query("UPDATE ttrss_user_entries
1103                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1104                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1105                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1106                                         }
1107
1108                                 } else if ($feed > 0) {
1109
1110                                         db_query("UPDATE ttrss_user_entries
1111                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1112                                                         (SELECT id FROM
1113                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1114                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1115
1116                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1117
1118                                         if ($feed == -1) {
1119                                                 db_query("UPDATE ttrss_user_entries
1120                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1121                                                                 (SELECT id FROM
1122                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1123                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1124                                         }
1125
1126                                         if ($feed == -2) {
1127                                                 db_query("UPDATE ttrss_user_entries
1128                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1129                                                                 (SELECT id FROM
1130                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1131                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1132                                         }
1133
1134                                         if ($feed == -3) {
1135
1136                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1137
1138                                                 if (DB_TYPE == "pgsql") {
1139                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1140                                                 } else {
1141                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1142                                                                 INTERVAL $intl HOUR) ";
1143                                                 }
1144
1145                                                 db_query("UPDATE ttrss_user_entries
1146                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1147                                                                 (SELECT id FROM
1148                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1149                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1150                                         }
1151
1152                                         if ($feed == -4) {
1153                                                 db_query("UPDATE ttrss_user_entries
1154                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1155                                                                 (SELECT id FROM
1156                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1157                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1158                                         }
1159
1160                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1161
1162                                         $label_id = feed_to_label_id($feed);
1163
1164                                         db_query("UPDATE ttrss_user_entries
1165                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1166                                                         (SELECT id FROM
1167                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1168                                                                         AND label_id = '$label_id' AND ref_id = article_id
1169                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1170
1171                                 }
1172
1173                                 ccache_update($feed, $owner_uid, $cat_view);
1174
1175                         } else { // tag
1176                                 db_query("UPDATE ttrss_user_entries
1177                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1178                                                 (SELECT id FROM
1179                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1180                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1181                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1182
1183                         }
1184         }
1185
1186         function getAllCounters() {
1187                 $data = getGlobalCounters();
1188
1189                 $data = array_merge($data, getVirtCounters());
1190                 $data = array_merge($data, getLabelCounters());
1191                 $data = array_merge($data, getFeedCounters());
1192                 $data = array_merge($data, getCategoryCounters());
1193
1194                 return $data;
1195         }
1196
1197         function getCategoryTitle($cat_id) {
1198
1199                 if ($cat_id == -1) {
1200                         return __("Special");
1201                 } else if ($cat_id == -2) {
1202                         return __("Labels");
1203                 } else {
1204
1205                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1206                                 id = '$cat_id'");
1207
1208                         if (db_num_rows($result) == 1) {
1209                                 return db_fetch_result($result, 0, "title");
1210                         } else {
1211                                 return __("Uncategorized");
1212                         }
1213                 }
1214         }
1215
1216
1217         function getCategoryCounters() {
1218                 $ret_arr = array();
1219
1220                 /* Labels category */
1221
1222                 $cv = array("id" => -2, "kind" => "cat",
1223                         "counter" => getCategoryUnread(-2));
1224
1225                 array_push($ret_arr, $cv);
1226
1227                 $result = db_query("SELECT id AS cat_id, value AS unread,
1228                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1229                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1230                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1231                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1232                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1233                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1234
1235                 while ($line = db_fetch_assoc($result)) {
1236                         $line["cat_id"] = (int) $line["cat_id"];
1237
1238                         if ($line["num_children"] > 0) {
1239                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1240                         } else {
1241                                 $child_counter = 0;
1242                         }
1243
1244                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1245                                 "counter" => $line["unread"] + $child_counter);
1246
1247                         array_push($ret_arr, $cv);
1248                 }
1249
1250                 /* Special case: NULL category doesn't actually exist in the DB */
1251
1252                 $cv = array("id" => 0, "kind" => "cat",
1253                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1254
1255                 array_push($ret_arr, $cv);
1256
1257                 return $ret_arr;
1258         }
1259
1260         // only accepts real cats (>= 0)
1261         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1262                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1263
1264                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1265                                 AND owner_uid = $owner_uid");
1266
1267                 $unread = 0;
1268
1269                 while ($line = db_fetch_assoc($result)) {
1270                         $unread += getCategoryUnread($line["id"], $owner_uid);
1271                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1272                 }
1273
1274                 return $unread;
1275         }
1276
1277         function getCategoryUnread($cat, $owner_uid = false) {
1278
1279                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1280
1281                 if ($cat >= 0) {
1282
1283                         if ($cat != 0) {
1284                                 $cat_query = "cat_id = '$cat'";
1285                         } else {
1286                                 $cat_query = "cat_id IS NULL";
1287                         }
1288
1289                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1290                                         AND owner_uid = " . $owner_uid);
1291
1292                         $cat_feeds = array();
1293                         while ($line = db_fetch_assoc($result)) {
1294                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1295                         }
1296
1297                         if (count($cat_feeds) == 0) return 0;
1298
1299                         $match_part = implode(" OR ", $cat_feeds);
1300
1301                         $result = db_query("SELECT COUNT(int_id) AS unread
1302                                 FROM ttrss_user_entries
1303                                 WHERE   unread = true AND ($match_part)
1304                                 AND owner_uid = " . $owner_uid);
1305
1306                         $unread = 0;
1307
1308                         # this needs to be rewritten
1309                         while ($line = db_fetch_assoc($result)) {
1310                                 $unread += $line["unread"];
1311                         }
1312
1313                         return $unread;
1314                 } else if ($cat == -1) {
1315                         return getFeedUnread(-1) + getFeedUnread(-2) + getFeedUnread(-3) + getFeedUnread(0);
1316                 } else if ($cat == -2) {
1317
1318                         $result = db_query("
1319                                 SELECT COUNT(unread) AS unread FROM
1320                                         ttrss_user_entries, ttrss_user_labels2
1321                                 WHERE article_id = ref_id AND unread = true
1322                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1323
1324                         $unread = db_fetch_result($result, 0, "unread");
1325
1326                         return $unread;
1327
1328                 }
1329         }
1330
1331         function getFeedUnread($feed, $is_cat = false) {
1332                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1333         }
1334
1335         function getLabelUnread($label_id, $owner_uid = false) {
1336                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1337
1338                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1339                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1340
1341                 if (db_num_rows($result) != 0) {
1342                         return db_fetch_result($result, 0, "unread");
1343                 } else {
1344                         return 0;
1345                 }
1346         }
1347
1348         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1349                 $owner_uid = false) {
1350
1351                 $n_feed = (int) $feed;
1352                 $need_entries = false;
1353
1354                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1355
1356                 if ($unread_only) {
1357                         $unread_qpart = "unread = true";
1358                 } else {
1359                         $unread_qpart = "true";
1360                 }
1361
1362                 if ($is_cat) {
1363                         return getCategoryUnread($n_feed, $owner_uid);
1364                 } else if ($n_feed == -6) {
1365                         return 0;
1366                 } else if ($feed != "0" && $n_feed == 0) {
1367
1368                         $feed = db_escape_string($feed);
1369
1370                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1371                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1372                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1373                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1374                         return db_fetch_result($result, 0, "count");
1375
1376                 } else if ($n_feed == -1) {
1377                         $match_part = "marked = true";
1378                 } else if ($n_feed == -2) {
1379                         $match_part = "published = true";
1380                 } else if ($n_feed == -3) {
1381                         $match_part = "unread = true AND score >= 0";
1382
1383                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1384
1385                         if (DB_TYPE == "pgsql") {
1386                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1387                         } else {
1388                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1389                         }
1390
1391                         $need_entries = true;
1392
1393                 } else if ($n_feed == -4) {
1394                         $match_part = "true";
1395                 } else if ($n_feed >= 0) {
1396
1397                         if ($n_feed != 0) {
1398                                 $match_part = "feed_id = '$n_feed'";
1399                         } else {
1400                                 $match_part = "feed_id IS NULL";
1401                         }
1402
1403                 } else if ($feed < LABEL_BASE_INDEX) {
1404
1405                         $label_id = feed_to_label_id($feed);
1406
1407                         return getLabelUnread($label_id, $owner_uid);
1408
1409                 }
1410
1411                 if ($match_part) {
1412
1413                         if ($need_entries) {
1414                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1415                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1416                         } else {
1417                                 $from_qpart = "ttrss_user_entries";
1418                         }
1419
1420                         $query = "SELECT count(int_id) AS unread
1421                                 FROM $from_qpart WHERE
1422                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1423
1424                         //echo "[$feed/$query]\n";
1425
1426                         $result = db_query($query);
1427
1428                 } else {
1429
1430                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1431                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1432                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1433                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1434                 }
1435
1436                 $unread = db_fetch_result($result, 0, "unread");
1437
1438                 return $unread;
1439         }
1440
1441         function getGlobalUnread($user_id = false) {
1442
1443                 if (!$user_id) {
1444                         $user_id = $_SESSION["uid"];
1445                 }
1446
1447                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1448                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1449
1450                 $c_id = db_fetch_result($result, 0, "c_id");
1451
1452                 return $c_id;
1453         }
1454
1455         function getGlobalCounters($global_unread = -1) {
1456                 $ret_arr = array();
1457
1458                 if ($global_unread == -1) {
1459                         $global_unread = getGlobalUnread();
1460                 }
1461
1462                 $cv = array("id" => "global-unread",
1463                         "counter" => (int) $global_unread);
1464
1465                 array_push($ret_arr, $cv);
1466
1467                 $result = db_query("SELECT COUNT(id) AS fn FROM
1468                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1469
1470                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1471
1472                 $cv = array("id" => "subscribed-feeds",
1473                         "counter" => (int) $subscribed_feeds);
1474
1475                 array_push($ret_arr, $cv);
1476
1477                 return $ret_arr;
1478         }
1479
1480         function getVirtCounters() {
1481
1482                 $ret_arr = array();
1483
1484                 for ($i = 0; $i >= -4; $i--) {
1485
1486                         $count = getFeedUnread($i);
1487
1488                         if ($i == 0 || $i == -1 || $i == -2)
1489                                 $auxctr = getFeedArticles($i, false);
1490                         else
1491                                 $auxctr = 0;
1492
1493                         $cv = array("id" => $i,
1494                                 "counter" => (int) $count,
1495                                 "auxcounter" => $auxctr);
1496
1497 //                      if (get_pref('EXTENDED_FEEDLIST'))
1498 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1499
1500                         array_push($ret_arr, $cv);
1501                 }
1502
1503                 $feeds = PluginHost::getInstance()->get_feeds(-1);
1504
1505                 if (is_array($feeds)) {
1506                         foreach ($feeds as $feed) {
1507                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1508                                         "counter" => $feed['sender']->get_unread($feed['id']));
1509
1510                                 if (method_exists($feed['sender'], 'get_total'))
1511                                         $cv["auxcounter"] = $feed['sender']->get_total($feed['id']);
1512
1513                                 array_push($ret_arr, $cv);
1514                         }
1515                 }
1516
1517                 return $ret_arr;
1518         }
1519
1520         function getLabelCounters($descriptions = false) {
1521
1522                 $ret_arr = array();
1523
1524                 $owner_uid = $_SESSION["uid"];
1525
1526                 $result = db_query("SELECT id,caption,COUNT(u1.unread) AS unread,COUNT(u2.unread) AS total
1527                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1528                                 (ttrss_labels2.id = label_id)
1529                                 LEFT JOIN ttrss_user_entries AS u1 ON (u1.ref_id = article_id AND u1.unread = true
1530                                         AND u1.owner_uid = $owner_uid)
1531                                 LEFT JOIN ttrss_user_entries AS u2 ON (u2.ref_id = article_id AND u2.unread = false
1532                                         AND u2.owner_uid = $owner_uid)
1533                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1534                                         ttrss_labels2.caption");
1535
1536                 while ($line = db_fetch_assoc($result)) {
1537
1538                         $id = label_to_feed_id($line["id"]);
1539
1540                         $cv = array("id" => $id,
1541                                 "counter" => (int) $line["unread"],
1542                                 "auxcounter" => (int) $line["total"]);
1543
1544                         if ($descriptions)
1545                                 $cv["description"] = $line["caption"];
1546
1547                         array_push($ret_arr, $cv);
1548                 }
1549
1550                 return $ret_arr;
1551         }
1552
1553         function getFeedCounters($active_feed = false) {
1554
1555                 $ret_arr = array();
1556
1557                 $query = "SELECT ttrss_feeds.id,
1558                                 ttrss_feeds.title,
1559                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1560                                 last_error, value AS count
1561                         FROM ttrss_feeds, ttrss_counters_cache
1562                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1563                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1564                                 AND ttrss_counters_cache.feed_id = id";
1565
1566                 $result = db_query($query);
1567                 $fctrs_modified = false;
1568
1569                 while ($line = db_fetch_assoc($result)) {
1570
1571                         $id = $line["id"];
1572                         $count = $line["count"];
1573                         $last_error = htmlspecialchars($line["last_error"]);
1574
1575                         $last_updated = make_local_datetime($line['last_updated'], false);
1576
1577                         $has_img = feed_has_icon($id);
1578
1579                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1580                                 $last_updated = '';
1581
1582                         $cv = array("id" => $id,
1583                                 "updated" => $last_updated,
1584                                 "counter" => (int) $count,
1585                                 "has_img" => (int) $has_img);
1586
1587                         if ($last_error)
1588                                 $cv["error"] = $last_error;
1589
1590 //                      if (get_pref('EXTENDED_FEEDLIST'))
1591 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1592
1593                         if ($active_feed && $id == $active_feed)
1594                                 $cv["title"] = truncate_string($line["title"], 30);
1595
1596                         array_push($ret_arr, $cv);
1597
1598                 }
1599
1600                 return $ret_arr;
1601         }
1602
1603         function get_pgsql_version() {
1604                 $result = db_query("SELECT version() AS version");
1605                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1606                 return $version[1];
1607         }
1608
1609         /**
1610          * @return array (code => Status code, message => error message if available)
1611          *
1612          *                 0 - OK, Feed already exists
1613          *                 1 - OK, Feed added
1614          *                 2 - Invalid URL
1615          *                 3 - URL content is HTML, no feeds available
1616          *                 4 - URL content is HTML which contains multiple feeds.
1617          *                     Here you should call extractfeedurls in rpc-backend
1618          *                     to get all possible feeds.
1619          *                 5 - Couldn't download the URL content.
1620          *                 6 - Content is an invalid XML.
1621          */
1622         function subscribe_to_feed($url, $cat_id = 0,
1623                         $auth_login = '', $auth_pass = '') {
1624
1625                 global $fetch_last_error;
1626
1627                 require_once "include/rssfuncs.php";
1628
1629                 $url = fix_url($url);
1630
1631                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1632
1633                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1634
1635                 if (!$contents) {
1636                         return array("code" => 5, "message" => $fetch_last_error);
1637                 }
1638
1639                 if (is_html($contents)) {
1640                         $feedUrls = get_feeds_from_html($url, $contents);
1641
1642                         if (count($feedUrls) == 0) {
1643                                 return array("code" => 3);
1644                         } else if (count($feedUrls) > 1) {
1645                                 return array("code" => 4, "feeds" => $feedUrls);
1646                         }
1647                         //use feed url as new URL
1648                         $url = key($feedUrls);
1649                 }
1650
1651                 /* libxml_use_internal_errors(true);
1652                 $doc = new DOMDocument();
1653                 $doc->loadXML($contents);
1654                 $error = libxml_get_last_error();
1655                 libxml_clear_errors();
1656
1657                 if ($error) {
1658                         $error_message = format_libxml_error($error);
1659
1660                         return array("code" => 6, "message" => $error_message);
1661                 } */
1662
1663                 if ($cat_id == "0" || !$cat_id) {
1664                         $cat_qpart = "NULL";
1665                 } else {
1666                         $cat_qpart = "'$cat_id'";
1667                 }
1668
1669                 $result = db_query(
1670                         "SELECT id FROM ttrss_feeds
1671                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1672
1673                 if (strlen(FEED_CRYPT_KEY) > 0) {
1674                         require_once "crypt.php";
1675                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1676                         $auth_pass_encrypted = 'true';
1677                 } else {
1678                         $auth_pass_encrypted = 'false';
1679                 }
1680
1681                 $auth_pass = db_escape_string($auth_pass);
1682
1683                 if (db_num_rows($result) == 0) {
1684                         $result = db_query(
1685                                 "INSERT INTO ttrss_feeds
1686                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1687                                 VALUES ('".$_SESSION["uid"]."', '$url',
1688                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1689
1690                         $result = db_query(
1691                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1692                                         AND owner_uid = " . $_SESSION["uid"]);
1693
1694                         $feed_id = db_fetch_result($result, 0, "id");
1695
1696                         if ($feed_id) {
1697                                 update_rss_feed($feed_id, true);
1698                         }
1699
1700                         return array("code" => 1);
1701                 } else {
1702                         return array("code" => 0);
1703                 }
1704         }
1705
1706         function print_feed_select($id, $default_id = "",
1707                 $attributes = "", $include_all_feeds = true,
1708                 $root_id = false, $nest_level = 0) {
1709
1710                 if (!$root_id) {
1711                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1712                         if ($include_all_feeds) {
1713                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1714                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1715                         }
1716                 }
1717
1718                 if (get_pref('ENABLE_FEED_CATS')) {
1719
1720                         if ($root_id)
1721                                 $parent_qpart = "parent_cat = '$root_id'";
1722                         else
1723                                 $parent_qpart = "parent_cat IS NULL";
1724
1725                         $result = db_query("SELECT id,title,
1726                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1727                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1728                                 FROM ttrss_feed_categories
1729                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1730
1731                         while ($line = db_fetch_assoc($result)) {
1732
1733                                 for ($i = 0; $i < $nest_level; $i++)
1734                                         $line["title"] = " - " . $line["title"];
1735
1736                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1737
1738                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1739                                         $line["id"], htmlspecialchars($line["title"]));
1740
1741                                 if ($line["num_children"] > 0)
1742                                         print_feed_select($id, $default_id, $attributes,
1743                                                 $include_all_feeds, $line["id"], $nest_level+1);
1744
1745                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1746                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1747
1748                                 while ($fline = db_fetch_assoc($feed_result)) {
1749                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1750
1751                                         $fline["title"] = " + " . $fline["title"];
1752
1753                                         for ($i = 0; $i < $nest_level; $i++)
1754                                                 $fline["title"] = " - " . $fline["title"];
1755
1756                                         printf("<option $is_selected value='%d'>%s</option>",
1757                                                 $fline["id"], htmlspecialchars($fline["title"]));
1758                                 }
1759                         }
1760
1761                         if (!$root_id) {
1762                                 $default_is_cat = ($default_id == "CAT:0");
1763                                 $is_selected = $default_is_cat ? "selected=\"1\"" : "";
1764
1765                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1766                                         __("Uncategorized"));
1767
1768                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1769                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1770
1771                                 while ($fline = db_fetch_assoc($feed_result)) {
1772                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1773
1774                                         $fline["title"] = " + " . $fline["title"];
1775
1776                                         for ($i = 0; $i < $nest_level; $i++)
1777                                                 $fline["title"] = " - " . $fline["title"];
1778
1779                                         printf("<option $is_selected value='%d'>%s</option>",
1780                                                 $fline["id"], htmlspecialchars($fline["title"]));
1781                                 }
1782                         }
1783
1784                 } else {
1785                         $result = db_query("SELECT id,title FROM ttrss_feeds
1786                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1787
1788                         while ($line = db_fetch_assoc($result)) {
1789
1790                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1791
1792                                 printf("<option $is_selected value='%d'>%s</option>",
1793                                         $line["id"], htmlspecialchars($line["title"]));
1794                         }
1795                 }
1796
1797                 if (!$root_id) {
1798                         print "</select>";
1799                 }
1800         }
1801
1802         function print_feed_cat_select($id, $default_id,
1803                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1804
1805                         if (!$root_id) {
1806                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1807                         }
1808
1809                         if ($root_id)
1810                                 $parent_qpart = "parent_cat = '$root_id'";
1811                         else
1812                                 $parent_qpart = "parent_cat IS NULL";
1813
1814                         $result = db_query("SELECT id,title,
1815                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1816                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1817                                 FROM ttrss_feed_categories
1818                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1819
1820                         while ($line = db_fetch_assoc($result)) {
1821                                 if ($line["id"] == $default_id) {
1822                                         $is_selected = "selected=\"1\"";
1823                                 } else {
1824                                         $is_selected = "";
1825                                 }
1826
1827                                 for ($i = 0; $i < $nest_level; $i++)
1828                                         $line["title"] = " - " . $line["title"];
1829
1830                                 if ($line["title"])
1831                                         printf("<option $is_selected value='%d'>%s</option>",
1832                                                 $line["id"], htmlspecialchars($line["title"]));
1833
1834                                 if ($line["num_children"] > 0)
1835                                         print_feed_cat_select($id, $default_id, $attributes,
1836                                                 $include_all_cats, $line["id"], $nest_level+1);
1837                         }
1838
1839                         if (!$root_id) {
1840                                 if ($include_all_cats) {
1841                                         if (db_num_rows($result) > 0) {
1842                                                 print "<option disabled=\"1\">--------</option>";
1843                                         }
1844
1845                                         if ($default_id == 0) {
1846                                                 $is_selected = "selected=\"1\"";
1847                                         } else {
1848                                                 $is_selected = "";
1849                                         }
1850
1851                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1852                                 }
1853                                 print "</select>";
1854                         }
1855                 }
1856
1857         function checkbox_to_sql_bool($val) {
1858                 return ($val == "on") ? "true" : "false";
1859         }
1860
1861         function getFeedCatTitle($id) {
1862                 if ($id == -1) {
1863                         return __("Special");
1864                 } else if ($id < LABEL_BASE_INDEX) {
1865                         return __("Labels");
1866                 } else if ($id > 0) {
1867                         $result = db_query("SELECT ttrss_feed_categories.title
1868                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1869                                         cat_id = ttrss_feed_categories.id");
1870                         if (db_num_rows($result) == 1) {
1871                                 return db_fetch_result($result, 0, "title");
1872                         } else {
1873                                 return __("Uncategorized");
1874                         }
1875                 } else {
1876                         return "getFeedCatTitle($id) failed";
1877                 }
1878
1879         }
1880
1881         function getFeedIcon($id) {
1882                 switch ($id) {
1883                 case 0:
1884                         return "images/archive.png";
1885                         break;
1886                 case -1:
1887                         return "images/star.png";
1888                         break;
1889                 case -2:
1890                         return "images/feed.png";
1891                         break;
1892                 case -3:
1893                         return "images/fresh.png";
1894                         break;
1895                 case -4:
1896                         return "images/folder.png";
1897                         break;
1898                 case -6:
1899                         return "images/time.png";
1900                         break;
1901                 default:
1902                         if ($id < LABEL_BASE_INDEX) {
1903                                 return "images/label.png";
1904                         } else {
1905                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1906                                         return ICONS_URL . "/$id.ico";
1907                         }
1908                         break;
1909                 }
1910
1911                 return false;
1912         }
1913
1914         function getFeedTitle($id, $cat = false) {
1915                 if ($cat) {
1916                         return getCategoryTitle($id);
1917                 } else if ($id == -1) {
1918                         return __("Starred articles");
1919                 } else if ($id == -2) {
1920                         return __("Published articles");
1921                 } else if ($id == -3) {
1922                         return __("Fresh articles");
1923                 } else if ($id == -4) {
1924                         return __("All articles");
1925                 } else if ($id === 0 || $id === "0") {
1926                         return __("Archived articles");
1927                 } else if ($id == -6) {
1928                         return __("Recently read");
1929                 } else if ($id < LABEL_BASE_INDEX) {
1930                         $label_id = feed_to_label_id($id);
1931                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1932                         if (db_num_rows($result) == 1) {
1933                                 return db_fetch_result($result, 0, "caption");
1934                         } else {
1935                                 return "Unknown label ($label_id)";
1936                         }
1937
1938                 } else if (is_numeric($id) && $id > 0) {
1939                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1940                         if (db_num_rows($result) == 1) {
1941                                 return db_fetch_result($result, 0, "title");
1942                         } else {
1943                                 return "Unknown feed ($id)";
1944                         }
1945                 } else {
1946                         return $id;
1947                 }
1948         }
1949
1950         function make_init_params() {
1951                 $params = array();
1952
1953                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1954                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1955                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1956                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1957
1958                                  $params[strtolower($param)] = (int) get_pref($param);
1959                  }
1960
1961                 $params["icons_url"] = ICONS_URL;
1962                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1963                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1964                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1965                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1966                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1967                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1968
1969                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1970                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1971
1972                 $max_feed_id = db_fetch_result($result, 0, "mid");
1973                 $num_feeds = db_fetch_result($result, 0, "nf");
1974
1975                 $params["max_feed_id"] = (int) $max_feed_id;
1976                 $params["num_feeds"] = (int) $num_feeds;
1977
1978                 $params["hotkeys"] = get_hotkeys_map();
1979
1980                 $params["csrf_token"] = $_SESSION["csrf_token"];
1981                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1982
1983                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1984
1985                 return $params;
1986         }
1987
1988         function get_hotkeys_info() {
1989                 $hotkeys = array(
1990                         __("Navigation") => array(
1991                                 "next_feed" => __("Open next feed"),
1992                                 "prev_feed" => __("Open previous feed"),
1993                                 "next_article" => __("Open next article"),
1994                                 "prev_article" => __("Open previous article"),
1995                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1996                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1997                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1998                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1999                                 "search_dialog" => __("Show search dialog")),
2000                         __("Article") => array(
2001                                 "toggle_mark" => __("Toggle starred"),
2002                                 "toggle_publ" => __("Toggle published"),
2003                                 "toggle_unread" => __("Toggle unread"),
2004                                 "edit_tags" => __("Edit tags"),
2005                                 "dismiss_selected" => __("Dismiss selected"),
2006                                 "dismiss_read" => __("Dismiss read"),
2007                                 "open_in_new_window" => __("Open in new window"),
2008                                 "catchup_below" => __("Mark below as read"),
2009                                 "catchup_above" => __("Mark above as read"),
2010                                 "article_scroll_down" => __("Scroll down"),
2011                                 "article_scroll_up" => __("Scroll up"),
2012                                 "select_article_cursor" => __("Select article under cursor"),
2013                                 "email_article" => __("Email article"),
2014                                 "close_article" => __("Close/collapse article"),
2015                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
2016                                 "toggle_widescreen" => __("Toggle widescreen mode"),
2017                                 "toggle_embed_original" => __("Toggle embed original")),
2018                         __("Article selection") => array(
2019                                 "select_all" => __("Select all articles"),
2020                                 "select_unread" => __("Select unread"),
2021                                 "select_marked" => __("Select starred"),
2022                                 "select_published" => __("Select published"),
2023                                 "select_invert" => __("Invert selection"),
2024                                 "select_none" => __("Deselect everything")),
2025                         __("Feed") => array(
2026                                 "feed_refresh" => __("Refresh current feed"),
2027                                 "feed_unhide_read" => __("Un/hide read feeds"),
2028                                 "feed_subscribe" => __("Subscribe to feed"),
2029                                 "feed_edit" => __("Edit feed"),
2030                                 "feed_catchup" => __("Mark as read"),
2031                                 "feed_reverse" => __("Reverse headlines"),
2032                                 "feed_debug_update" => __("Debug feed update"),
2033                                 "catchup_all" => __("Mark all feeds as read"),
2034                                 "cat_toggle_collapse" => __("Un/collapse current category"),
2035                                 "toggle_combined_mode" => __("Toggle combined mode"),
2036                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
2037                         __("Go to") => array(
2038                                 "goto_all" => __("All articles"),
2039                                 "goto_fresh" => __("Fresh"),
2040                                 "goto_marked" => __("Starred"),
2041                                 "goto_published" => __("Published"),
2042                                 "goto_tagcloud" => __("Tag cloud"),
2043                                 "goto_prefs" => __("Preferences")),
2044                         __("Other") => array(
2045                                 "create_label" => __("Create label"),
2046                                 "create_filter" => __("Create filter"),
2047                                 "collapse_sidebar" => __("Un/collapse sidebar"),
2048                                 "help_dialog" => __("Show help dialog"))
2049                         );
2050
2051                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
2052                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
2053                 }
2054
2055                 return $hotkeys;
2056         }
2057
2058         function get_hotkeys_map() {
2059                 $hotkeys = array(
2060 //                      "navigation" => array(
2061                                 "k" => "next_feed",
2062                                 "j" => "prev_feed",
2063                                 "n" => "next_article",
2064                                 "p" => "prev_article",
2065                                 "(38)|up" => "prev_article",
2066                                 "(40)|down" => "next_article",
2067 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2068 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2069                                 "(191)|/" => "search_dialog",
2070 //                      "article" => array(
2071                                 "s" => "toggle_mark",
2072                                 "*s" => "toggle_publ",
2073                                 "u" => "toggle_unread",
2074                                 "*t" => "edit_tags",
2075                                 "*d" => "dismiss_selected",
2076                                 "*x" => "dismiss_read",
2077                                 "o" => "open_in_new_window",
2078                                 "c p" => "catchup_below",
2079                                 "c n" => "catchup_above",
2080                                 "*n" => "article_scroll_down",
2081                                 "*p" => "article_scroll_up",
2082                                 "*(38)|Shift+up" => "article_scroll_up",
2083                                 "*(40)|Shift+down" => "article_scroll_down",
2084                                 "a *w" => "toggle_widescreen",
2085                                 "a e" => "toggle_embed_original",
2086                                 "e" => "email_article",
2087                                 "a q" => "close_article",
2088 //                      "article_selection" => array(
2089                                 "a a" => "select_all",
2090                                 "a u" => "select_unread",
2091                                 "a *u" => "select_marked",
2092                                 "a p" => "select_published",
2093                                 "a i" => "select_invert",
2094                                 "a n" => "select_none",
2095 //                      "feed" => array(
2096                                 "f r" => "feed_refresh",
2097                                 "f a" => "feed_unhide_read",
2098                                 "f s" => "feed_subscribe",
2099                                 "f e" => "feed_edit",
2100                                 "f q" => "feed_catchup",
2101                                 "f x" => "feed_reverse",
2102                                 "f *d" => "feed_debug_update",
2103                                 "f *c" => "toggle_combined_mode",
2104                                 "f c" => "toggle_cdm_expanded",
2105                                 "*q" => "catchup_all",
2106                                 "x" => "cat_toggle_collapse",
2107 //                      "goto" => array(
2108                                 "g a" => "goto_all",
2109                                 "g f" => "goto_fresh",
2110                                 "g s" => "goto_marked",
2111                                 "g p" => "goto_published",
2112                                 "g t" => "goto_tagcloud",
2113                                 "g *p" => "goto_prefs",
2114 //                      "other" => array(
2115                                 "(9)|Tab" => "select_article_cursor", // tab
2116                                 "c l" => "create_label",
2117                                 "c f" => "create_filter",
2118                                 "c s" => "collapse_sidebar",
2119                                 "^(191)|Ctrl+/" => "help_dialog",
2120                         );
2121
2122                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2123                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2124                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2125                 }
2126
2127                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
2128                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2129                 }
2130
2131                 $prefixes = array();
2132
2133                 foreach (array_keys($hotkeys) as $hotkey) {
2134                         $pair = explode(" ", $hotkey, 2);
2135
2136                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2137                                 array_push($prefixes, $pair[0]);
2138                         }
2139                 }
2140
2141                 return array($prefixes, $hotkeys);
2142         }
2143
2144         function make_runtime_info() {
2145                 $data = array();
2146
2147                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2148                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2149
2150                 $max_feed_id = db_fetch_result($result, 0, "mid");
2151                 $num_feeds = db_fetch_result($result, 0, "nf");
2152
2153                 $data["max_feed_id"] = (int) $max_feed_id;
2154                 $data["num_feeds"] = (int) $num_feeds;
2155
2156                 $data['last_article_id'] = getLastArticleId();
2157                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2158
2159                 $data['dep_ts'] = calculate_dep_timestamp();
2160                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2161
2162                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2163
2164                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2165
2166                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2167
2168                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2169
2170                                 if ($stamp) {
2171                                         $stamp_delta = time() - $stamp;
2172
2173                                         if ($stamp_delta > 1800) {
2174                                                 $stamp_check = 0;
2175                                         } else {
2176                                                 $stamp_check = 1;
2177                                                 $_SESSION["daemon_stamp_check"] = time();
2178                                         }
2179
2180                                         $data['daemon_stamp_ok'] = $stamp_check;
2181
2182                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2183
2184                                         $data['daemon_stamp'] = $stamp_fmt;
2185                                 }
2186                         }
2187                 }
2188
2189                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2190                                 $new_version_details = @check_for_update();
2191
2192                                 $data['new_version_available'] = (int) ($new_version_details != false);
2193
2194                                 $_SESSION["last_version_check"] = time();
2195                                 $_SESSION["version_data"] = $new_version_details;
2196                 }
2197
2198                 return $data;
2199         }
2200
2201         function search_to_sql($search) {
2202
2203                 $search_query_part = "";
2204
2205                 $keywords = explode(" ", $search);
2206                 $query_keywords = array();
2207                 $search_words = array();
2208
2209                 foreach ($keywords as $k) {
2210                         if (strpos($k, "-") === 0) {
2211                                 $k = substr($k, 1);
2212                                 $not = "NOT";
2213                         } else {
2214                                 $not = "";
2215                         }
2216
2217                         $commandpair = explode(":", mb_strtolower($k), 2);
2218
2219                         switch ($commandpair[0]) {
2220                         case "title":
2221                                 if ($commandpair[1]) {
2222                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2223                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2224                                 } else {
2225                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2226                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2227                                         array_push($search_words, $k);
2228                                 }
2229                                 break;
2230                         case "author":
2231                                 if ($commandpair[1]) {
2232                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2233                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2234                                 } else {
2235                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2236                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2237                                         array_push($search_words, $k);
2238                                 }
2239                                 break;
2240                         case "note":
2241                                 if ($commandpair[1]) {
2242                                         if ($commandpair[1] == "true")
2243                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2244                                         else if ($commandpair[1] == "false")
2245                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2246                                         else
2247                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2248                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2249                                 } else {
2250                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2251                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2252                                         if (!$not) array_push($search_words, $k);
2253                                 }
2254                                 break;
2255                         case "star":
2256
2257                                 if ($commandpair[1]) {
2258                                         if ($commandpair[1] == "true")
2259                                                 array_push($query_keywords, "($not (marked = true))");
2260                                         else
2261                                                 array_push($query_keywords, "($not (marked = false))");
2262                                 } else {
2263                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2264                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2265                                         if (!$not) array_push($search_words, $k);
2266                                 }
2267                                 break;
2268                         case "pub":
2269                                 if ($commandpair[1]) {
2270                                         if ($commandpair[1] == "true")
2271                                                 array_push($query_keywords, "($not (published = true))");
2272                                         else
2273                                                 array_push($query_keywords, "($not (published = false))");
2274
2275                                 } else {
2276                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2277                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2278                                         if (!$not) array_push($search_words, $k);
2279                                 }
2280                                 break;
2281                         default:
2282                                 if (strpos($k, "@") === 0) {
2283
2284                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2285                                         $orig_ts = strtotime(substr($k, 1));
2286                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2287
2288                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2289
2290                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2291                                 } else {
2292                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2293                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2294
2295                                         if (!$not) array_push($search_words, $k);
2296                                 }
2297                         }
2298                 }
2299
2300                 $search_query_part = implode("AND", $query_keywords);
2301
2302                 return array($search_query_part, $search_words);
2303         }
2304
2305         function getParentCategories($cat, $owner_uid) {
2306                 $rv = array();
2307
2308                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2309                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2310
2311                 while ($line = db_fetch_assoc($result)) {
2312                         array_push($rv, $line["parent_cat"]);
2313                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2314                 }
2315
2316                 return $rv;
2317         }
2318
2319         function getChildCategories($cat, $owner_uid) {
2320                 $rv = array();
2321
2322                 $result = db_query("SELECT id FROM ttrss_feed_categories
2323                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2324
2325                 while ($line = db_fetch_assoc($result)) {
2326                         array_push($rv, $line["id"]);
2327                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2328                 }
2329
2330                 return $rv;
2331         }
2332
2333         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false, $override_strategy = false, $override_vfeed = false) {
2334
2335                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2336
2337                 $ext_tables_part = "";
2338                 $search_words = array();
2339
2340                         if ($search) {
2341
2342                                 if (SPHINX_ENABLED) {
2343                                         $ids = join(",", @sphinx_search($search, 0, 500));
2344
2345                                         if ($ids)
2346                                                 $search_query_part = "ref_id IN ($ids) AND ";
2347                                         else
2348                                                 $search_query_part = "ref_id = -1 AND ";
2349
2350                                 } else {
2351                                         list($search_query_part, $search_words) = search_to_sql($search);
2352                                         $search_query_part .= " AND ";
2353                                 }
2354
2355                         } else {
2356                                 $search_query_part = "";
2357                         }
2358
2359                         if ($filter) {
2360
2361                                 if (DB_TYPE == "pgsql") {
2362                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2363                                 } else {
2364                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2365                                 }
2366
2367                                 $override_order = "updated DESC";
2368
2369                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2370
2371                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2372
2373
2374                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2375                                         ttrss_user_entries, ttrss_feeds
2376                                         WHERE $filter_query_part LIMIT 1", false);
2377
2378                                 if ($result) {
2379                                         $test = db_fetch_result($result, 0, "true_val");
2380
2381                                         if (!$test) {
2382                                                 $filter_query_part = "false AND";
2383                                         } else {
2384                                                 $filter_query_part .= " AND";
2385                                         }
2386                                 } else {
2387                                         $filter_query_part = "false AND";
2388                                 }
2389
2390                         } else {
2391                                 $filter_query_part = "";
2392                         }
2393
2394                         if ($since_id) {
2395                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2396                         } else {
2397                                 $since_id_part = "";
2398                         }
2399
2400                         $view_query_part = "";
2401
2402                         if ($view_mode == "adaptive") {
2403                                 if ($search) {
2404                                         $view_query_part = " ";
2405                                 } else if ($feed != -1) {
2406
2407                                         $unread = getFeedUnread($feed, $cat_view);
2408
2409                                         if ($cat_view && $feed > 0 && $include_children)
2410                                                 $unread += getCategoryChildrenUnread($feed);
2411
2412                                         if ($unread > 0)
2413                                 $view_query_part = " unread = true AND ";
2414
2415                                 }
2416                         }
2417
2418                         if ($view_mode == "marked") {
2419                                 $view_query_part = " marked = true AND ";
2420                         }
2421
2422                         if ($view_mode == "has_note") {
2423                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2424                         }
2425
2426                         if ($view_mode == "published") {
2427                                 $view_query_part = " published = true AND ";
2428                         }
2429
2430                         if ($view_mode == "unread" && $feed != -6) {
2431                                 $view_query_part = " unread = true AND ";
2432                         }
2433
2434                         if ($limit > 0) {
2435                                 $limit_query_part = "LIMIT " . $limit;
2436                         }
2437
2438                         $allow_archived = false;
2439
2440                         $vfeed_query_part = "";
2441
2442                         // override query strategy and enable feed display when searching globally
2443                         if ($search && $search_mode == "all_feeds") {
2444                                 $query_strategy_part = "true";
2445                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2446                         /* tags */
2447                         } else if (!is_numeric($feed)) {
2448                                 $query_strategy_part = "true";
2449                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2450                                         id = feed_id) as feed_title,";
2451                         } else if ($search && $search_mode == "this_cat") {
2452                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2453
2454                                 if ($feed > 0) {
2455                                         if ($include_children) {
2456                                                 $subcats = getChildCategories($feed, $owner_uid);
2457                                                 array_push($subcats, $feed);
2458                                                 $cats_qpart = join(",", $subcats);
2459                                         } else {
2460                                                 $cats_qpart = $feed;
2461                                         }
2462
2463                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2464
2465                                 } else {
2466                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2467                                 }
2468
2469                         } else if ($feed > 0) {
2470
2471                                 if ($cat_view) {
2472
2473                                         if ($feed > 0) {
2474                                                 if ($include_children) {
2475                                                         # sub-cats
2476                                                         $subcats = getChildCategories($feed, $owner_uid);
2477
2478                                                         array_push($subcats, $feed);
2479                                                         $query_strategy_part = "cat_id IN (".
2480                                                                         implode(",", $subcats).")";
2481
2482                                                 } else {
2483                                                         $query_strategy_part = "cat_id = '$feed'";
2484                                                 }
2485
2486                                         } else {
2487                                                 $query_strategy_part = "cat_id IS NULL";
2488                                         }
2489
2490                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2491
2492                                 } else {
2493                                         $query_strategy_part = "feed_id = '$feed'";
2494                                 }
2495                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2496                                 $query_strategy_part = "feed_id IS NULL";
2497                                 $allow_archived = true;
2498                         } else if ($feed == 0 && $cat_view) { // uncategorized
2499                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2500                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2501                         } else if ($feed == -1) { // starred virtual feed
2502                                 $query_strategy_part = "marked = true";
2503                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2504                                 $allow_archived = true;
2505
2506                                 if (!$override_order) {
2507                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2508                                 }
2509
2510                         } else if ($feed == -2) { // published virtual feed OR labels category
2511
2512                                 if (!$cat_view) {
2513                                         $query_strategy_part = "published = true";
2514                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2515                                         $allow_archived = true;
2516
2517                                         if (!$override_order) {
2518                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2519                                         }
2520
2521                                 } else {
2522                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2523
2524                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2525
2526                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2527                                                 ttrss_user_labels2.article_id = ref_id";
2528
2529                                 }
2530                         } else if ($feed == -6) { // recently read
2531                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2532                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2533                                 $allow_archived = true;
2534
2535                                 if (!$override_order) $override_order = "last_read DESC";
2536
2537 /*                      } else if ($feed == -7) { // shared
2538                                 $query_strategy_part = "uuid != ''";
2539                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2540                                 $allow_archived = true; */
2541                         } else if ($feed == -3) { // fresh virtual feed
2542                                 $query_strategy_part = "unread = true AND score >= 0";
2543
2544                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2545
2546                                 if (DB_TYPE == "pgsql") {
2547                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2548                                 } else {
2549                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2550                                 }
2551
2552                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2553                         } else if ($feed == -4) { // all articles virtual feed
2554                                 $allow_archived = true;
2555                                 $query_strategy_part = "true";
2556                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2557                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2558                                 $label_id = feed_to_label_id($feed);
2559
2560                                 $query_strategy_part = "label_id = '$label_id' AND
2561                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2562                                         ttrss_user_labels2.article_id = ref_id";
2563
2564                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2565                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2566                                 $allow_archived = true;
2567
2568                         } else {
2569                                 $query_strategy_part = "true";
2570                         }
2571
2572                         $order_by = "score DESC, date_entered DESC, updated DESC";
2573
2574                         if ($view_mode == "unread_first") {
2575                                 $order_by = "unread DESC, $order_by";
2576                         }
2577
2578                         if ($override_order) {
2579                                 $order_by = $override_order;
2580                         }
2581
2582                         if ($override_strategy) {
2583                                 $query_strategy_part = $override_strategy;
2584                         }
2585
2586                         if ($override_vfeed) {
2587                                 $vfeed_query_part = $override_vfeed;
2588                         }
2589
2590                         $feed_title = "";
2591
2592                         if ($search) {
2593                                 $feed_title = T_sprintf("Search results: %s", $search);
2594                         } else {
2595                                 if ($cat_view) {
2596                                         $feed_title = getCategoryTitle($feed);
2597                                 } else {
2598                                         if (is_numeric($feed) && $feed > 0) {
2599                                                 $result = db_query("SELECT title,site_url,last_error,last_updated
2600                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2601
2602                                                 $feed_title = db_fetch_result($result, 0, "title");
2603                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2604                                                 $last_error = db_fetch_result($result, 0, "last_error");
2605                                                 $last_updated = db_fetch_result($result, 0, "last_updated");
2606                                         } else {
2607                                                 $feed_title = getFeedTitle($feed);
2608                                         }
2609                                 }
2610                         }
2611
2612
2613                         $content_query_part = "content, content AS content_preview, ";
2614
2615
2616                         if (is_numeric($feed)) {
2617
2618                                 if ($feed >= 0) {
2619                                         $feed_kind = "Feeds";
2620                                 } else {
2621                                         $feed_kind = "Labels";
2622                                 }
2623
2624                                 if ($limit_query_part) {
2625                                         $offset_query_part = "OFFSET $offset";
2626                                 }
2627
2628                                 // proper override_order applied above
2629                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2630                                         if (!$override_order) {
2631                                                 $order_by = "ttrss_feeds.title, $order_by";
2632                                         } else {
2633                                                 $order_by = "ttrss_feeds.title, $override_order";
2634                                         }
2635                                 }
2636
2637                                 if (!$allow_archived) {
2638                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2639                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2640
2641                                 } else {
2642                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2643                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2644                                 }
2645
2646                                 if ($vfeed_query_part)
2647                                         $vfeed_query_part .= "favicon_avg_color,";
2648
2649                                 $query = "SELECT DISTINCT
2650                                                 date_entered,
2651                                                 guid,
2652                                                 ttrss_entries.id,ttrss_entries.title,
2653                                                 updated,
2654                                                 label_cache,
2655                                                 tag_cache,
2656                                                 always_display_enclosures,
2657                                                 site_url,
2658                                                 note,
2659                                                 num_comments,
2660                                                 comments,
2661                                                 int_id,
2662                                                 uuid,
2663                                                 lang,
2664                                                 hide_images,
2665                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2666                                                 last_marked, last_published,
2667                                                 $vfeed_query_part
2668                                                 $content_query_part
2669                                                 author,score
2670                                         FROM
2671                                                 $from_qpart
2672                                         WHERE
2673                                         $feed_check_qpart
2674                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2675                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2676                                         $search_query_part
2677                                         $filter_query_part
2678                                         $view_query_part
2679                                         $since_id_part
2680                                         $query_strategy_part ORDER BY $order_by
2681                                         $limit_query_part $offset_query_part";
2682
2683                                 if ($_REQUEST["debug"]) print $query;
2684
2685                                 $result = db_query($query);
2686
2687                         } else {
2688                                 // browsing by tag
2689
2690                                 $select_qpart = "SELECT DISTINCT " .
2691                                                                 "date_entered," .
2692                                                                 "guid," .
2693                                                                 "note," .
2694                                                                 "ttrss_entries.id as id," .
2695                                                                 "title," .
2696                                                                 "updated," .
2697                                                                 "unread," .
2698                                                                 "feed_id," .
2699                                                                 "orig_feed_id," .
2700                                                                 "marked," .
2701                                                                 "num_comments, " .
2702                                                                 "comments, " .
2703                                                                 "tag_cache," .
2704                                                                 "label_cache," .
2705                                                                 "link," .
2706                                                                 "lang," .
2707                                                                 "uuid," .
2708                                                                 "last_read," .
2709                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2710                                                                 "last_marked, last_published, " .
2711                                                                 $since_id_part .
2712                                                                 $vfeed_query_part .
2713                                                                 $content_query_part .
2714                                                                 "score ";
2715
2716                                 $feed_kind = "Tags";
2717                                 $all_tags = explode(",", $feed);
2718                                 if ($search_mode == 'any') {
2719                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2720                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2721                                         $where_qpart = " WHERE " .
2722                                                                    "ref_id = ttrss_entries.id AND " .
2723                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2724                                                                    "post_int_id = int_id AND $tag_sql AND " .
2725                                                                    $view_query_part .
2726                                                                    $search_query_part .
2727                                                                    $query_strategy_part . " ORDER BY $order_by " .
2728                                                                    $limit_query_part;
2729
2730                                 } else {
2731                                         $i = 1;
2732                                         $sub_selects = array();
2733                                         $sub_ands = array();
2734                                         foreach ($all_tags as $term) {
2735                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2736                                                 $i++;
2737                                         }
2738                                         if ($i > 2) {
2739                                                 $x = 1;
2740                                                 $y = 2;
2741                                                 do {
2742                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2743                                                         $x++;
2744                                                         $y++;
2745                                                 } while ($y < $i);
2746                                         }
2747                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2748                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2749                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2750                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2751                                 }
2752                                 //                              error_log("TAG SQL: " . $tag_sql);
2753                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2754
2755                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2756                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2757                         }
2758
2759                         return array($result, $feed_title, $feed_site_url, $last_error, $last_updated, $search_words);
2760
2761         }
2762
2763         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false, $highlight_words = false, $article_id = false) {
2764                 if (!$owner) $owner = $_SESSION["uid"];
2765
2766                 $res = trim($str); if (!$res) return '';
2767
2768                 $charset_hack = '<head>
2769                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2770                 </head>';
2771
2772                 $res = trim($res); if (!$res) return '';
2773
2774                 libxml_use_internal_errors(true);
2775
2776                 $doc = new DOMDocument();
2777                 $doc->loadHTML($charset_hack . $res);
2778                 $xpath = new DOMXPath($doc);
2779
2780                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2781
2782                 foreach ($entries as $entry) {
2783
2784                         if ($site_url) {
2785
2786                                 if ($entry->hasAttribute('href'))
2787                                         $entry->setAttribute('href',
2788                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2789
2790                                 if ($entry->hasAttribute('src')) {
2791                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2792
2793                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2794
2795                                         if (file_exists($cached_filename)) {
2796                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2797                                         }
2798
2799                                         $entry->setAttribute('src', $src);
2800                                 }
2801
2802                                 if ($entry->nodeName == 'img') {
2803                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2804                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2805
2806                                                 $p = $doc->createElement('p');
2807
2808                                                 $a = $doc->createElement('a');
2809                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2810
2811                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2812                                                 $a->setAttribute('target', '_blank');
2813
2814                                                 $p->appendChild($a);
2815
2816                                                 $entry->parentNode->replaceChild($p, $entry);
2817                                         }
2818                                 }
2819                         }
2820
2821                         if (strtolower($entry->nodeName) == "a") {
2822                                 $entry->setAttribute("target", "_blank");
2823                         }
2824                 }
2825
2826                 $entries = $xpath->query('//iframe');
2827                 foreach ($entries as $entry) {
2828                         $entry->setAttribute('sandbox', 'allow-scripts');
2829
2830                 }
2831
2832                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2833                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2834                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2835                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2836                         'dt', 'em', 'footer', 'figure', 'figcaption',
2837                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2838                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2839                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2840                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2841                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2842                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2843
2844                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2845
2846                 $disallowed_attributes = array('id', 'style', 'class');
2847
2848                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
2849                         $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes, $article_id);
2850                         if (is_array($retval)) {
2851                                 $doc = $retval[0];
2852                                 $allowed_elements = $retval[1];
2853                                 $disallowed_attributes = $retval[2];
2854                         } else {
2855                                 $doc = $retval;
2856                         }
2857                 }
2858
2859                 $doc->removeChild($doc->firstChild); //remove doctype
2860                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2861
2862                 if ($highlight_words) {
2863                         foreach ($highlight_words as $word) {
2864
2865                                 // http://stackoverflow.com/questions/4081372/highlight-keywords-in-a-paragraph
2866
2867                                 $elements = $xpath->query("//*/text()");
2868
2869                                 foreach ($elements as $child) {
2870
2871                                         $fragment = $doc->createDocumentFragment();
2872                                         $text = $child->textContent;
2873                                         $stubs = array();
2874
2875                                         while (($pos = mb_stripos($text, $word)) !== false) {
2876                                                 $fragment->appendChild(new DomText(mb_substr($text, 0, $pos)));
2877                                                 $word = mb_substr($text, $pos, mb_strlen($word));
2878                                                 $highlight = $doc->createElement('span');
2879                                                 $highlight->appendChild(new DomText($word));
2880                                                 $highlight->setAttribute('class', 'highlight');
2881                                                 $fragment->appendChild($highlight);
2882                                                 $text = mb_substr($text, $pos + mb_strlen($word));
2883                                         }
2884
2885                                         if (!empty($text)) $fragment->appendChild(new DomText($text));
2886
2887                                         $child->parentNode->replaceChild($fragment, $child);
2888                                 }
2889                         }
2890                 }
2891
2892                 $res = $doc->saveHTML();
2893
2894                 return $res;
2895         }
2896
2897         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2898                 $xpath = new DOMXPath($doc);
2899                 $entries = $xpath->query('//*');
2900
2901                 foreach ($entries as $entry) {
2902                         if (!in_array($entry->nodeName, $allowed_elements)) {
2903                                 $entry->parentNode->removeChild($entry);
2904                         }
2905
2906                         if ($entry->hasAttributes()) {
2907                                 $attrs_to_remove = array();
2908
2909                                 foreach ($entry->attributes as $attr) {
2910
2911                                         if (strpos($attr->nodeName, 'on') === 0) {
2912                                                 array_push($attrs_to_remove, $attr);
2913                                         }
2914
2915                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2916                                                 array_push($attrs_to_remove, $attr);
2917                                         }
2918                                 }
2919
2920                                 foreach ($attrs_to_remove as $attr) {
2921                                         $entry->removeAttributeNode($attr);
2922                                 }
2923                         }
2924                 }
2925
2926                 return $doc;
2927         }
2928
2929         function check_for_update() {
2930                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2931                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2932                                 "&iid=" . sha1(SELF_URL_PATH);
2933
2934                         $version_data = @fetch_file_contents($version_url);
2935
2936                         if ($version_data) {
2937                                 $version_data = json_decode($version_data, true);
2938                                 if ($version_data && $version_data['version']) {
2939                                         if (version_compare(VERSION_STATIC, $version_data['version']) == -1) {
2940                                                 return $version_data;
2941                                         }
2942                                 }
2943                         }
2944                 }
2945                 return false;
2946         }
2947
2948         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2949
2950                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2951                 if (count($ids) == 0) return;
2952
2953                 $tmp_ids = array();
2954
2955                 foreach ($ids as $id) {
2956                         array_push($tmp_ids, "ref_id = '$id'");
2957                 }
2958
2959                 $ids_qpart = join(" OR ", $tmp_ids);
2960
2961                 if ($cmode == 0) {
2962                         db_query("UPDATE ttrss_user_entries SET
2963                         unread = false,last_read = NOW()
2964                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2965                 } else if ($cmode == 1) {
2966                         db_query("UPDATE ttrss_user_entries SET
2967                         unread = true
2968                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2969                 } else {
2970                         db_query("UPDATE ttrss_user_entries SET
2971                         unread = NOT unread,last_read = NOW()
2972                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2973                 }
2974
2975                 /* update ccache */
2976
2977                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
2978                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2979
2980                 while ($line = db_fetch_assoc($result)) {
2981                         ccache_update($line["feed_id"], $owner_uid);
2982                 }
2983         }
2984
2985         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
2986
2987                 $a_id = db_escape_string($id);
2988
2989                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2990
2991                 $query = "SELECT DISTINCT tag_name,
2992                         owner_uid as owner FROM
2993                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2994                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2995
2996                 $tags = array();
2997
2998                 /* check cache first */
2999
3000                 if ($tag_cache === false) {
3001                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
3002                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3003
3004                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
3005                 }
3006
3007                 if ($tag_cache) {
3008                         $tags = explode(",", $tag_cache);
3009                 } else {
3010
3011                         /* do it the hard way */
3012
3013                         $tmp_result = db_query($query);
3014
3015                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3016                                 array_push($tags, $tmp_line["tag_name"]);
3017                         }
3018
3019                         /* update the cache */
3020
3021                         $tags_str = db_escape_string(join(",", $tags));
3022
3023                         db_query("UPDATE ttrss_user_entries
3024                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
3025                                 AND owner_uid = $owner_uid");
3026                 }
3027
3028                 return $tags;
3029         }
3030
3031         function trim_array($array) {
3032                 $tmp = $array;
3033                 array_walk($tmp, 'trim');
3034                 return $tmp;
3035         }
3036
3037         function tag_is_valid($tag) {
3038                 if ($tag == '') return false;
3039                 if (preg_match("/^[0-9]*$/", $tag)) return false;
3040                 if (mb_strlen($tag) > 250) return false;
3041
3042                 if (function_exists('iconv')) {
3043                         $tag = iconv("utf-8", "utf-8", $tag);
3044                 }
3045
3046                 if (!$tag) return false;
3047
3048                 return true;
3049         }
3050
3051         function render_login_form() {
3052                 header('Cache-Control: public');
3053
3054                 require_once "login_form.php";
3055                 exit;
3056         }
3057
3058         function format_warning($msg, $id = "") {
3059                 global $link;
3060                 return "<div class=\"warning\" id=\"$id\">
3061                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3062         }
3063
3064         function format_notice($msg, $id = "") {
3065                 global $link;
3066                 return "<div class=\"notice\" id=\"$id\">
3067                         <span><img src=\"images/information.png\"></span><span>$msg</span></div>";
3068         }
3069
3070         function format_error($msg, $id = "") {
3071                 global $link;
3072                 return "<div class=\"error\" id=\"$id\">
3073                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3074         }
3075
3076         function print_notice($msg) {
3077                 return print format_notice($msg);
3078         }
3079
3080         function print_warning($msg) {
3081                 return print format_warning($msg);
3082         }
3083
3084         function print_error($msg) {
3085                 return print format_error($msg);
3086         }
3087
3088
3089         function T_sprintf() {
3090                 $args = func_get_args();
3091                 return vsprintf(__(array_shift($args)), $args);
3092         }
3093
3094         function format_inline_player($url, $ctype) {
3095
3096                 $entry = "";
3097
3098                 $url = htmlspecialchars($url);
3099
3100                 if (strpos($ctype, "audio/") === 0) {
3101
3102                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3103                                 $_SESSION["hasMp3"])) {
3104
3105                                 $entry .= "<audio preload=\"none\" controls>
3106                                         <source type=\"$ctype\" src=\"$url\"></source>
3107                                         </audio>";
3108
3109                         } else {
3110
3111                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3112                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3113                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3114                                         <param name=\"movie\"
3115                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3116                                         </object>";
3117                         }
3118
3119                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
3120                                 href=\"$url\">" . basename($url) . "</a>";
3121
3122                         return $entry;
3123
3124                 }
3125
3126                 return "";
3127
3128 /*              $filename = substr($url, strrpos($url, "/")+1);
3129
3130                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3131                         $filename . " (" . $ctype . ")" . "</a>"; */
3132
3133         }
3134
3135         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3136                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3137
3138                 $rv = array();
3139
3140                 $rv['id'] = $id;
3141
3142                 /* we can figure out feed_id from article id anyway, why do we
3143                  * pass feed_id here? let's ignore the argument :(*/
3144
3145                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3146                         WHERE ref_id = '$id'");
3147
3148                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3149
3150                 $rv['feed_id'] = $feed_id;
3151
3152                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3153
3154                 if ($mark_as_read) {
3155                         $result = db_query("UPDATE ttrss_user_entries
3156                                 SET unread = false,last_read = NOW()
3157                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3158
3159                         ccache_update($feed_id, $owner_uid);
3160                 }
3161
3162                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,lang,
3163                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3164                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3165                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3166                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3167                         num_comments,
3168                         tag_cache,
3169                         author,
3170                         orig_feed_id,
3171                         note
3172                         FROM ttrss_entries,ttrss_user_entries
3173                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3174
3175                 if ($result) {
3176
3177                         $line = db_fetch_assoc($result);
3178
3179                         $tag_cache = $line["tag_cache"];
3180
3181                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3182                         unset($line["tag_cache"]);
3183
3184                         $line["content"] = sanitize($line["content"],
3185                                 sql_bool_to_bool($line['hide_images']),
3186                                 $owner_uid, $line["site_url"], false, $line["id"]);
3187
3188                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
3189                                 $line = $p->hook_render_article($line);
3190                         }
3191
3192                         $num_comments = $line["num_comments"];
3193                         $entry_comments = "";
3194
3195                         if ($num_comments > 0) {
3196                                 if ($line["comments"]) {
3197                                         $comments_url = htmlspecialchars($line["comments"]);
3198                                 } else {
3199                                         $comments_url = htmlspecialchars($line["link"]);
3200                                 }
3201                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3202                         } else {
3203                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3204                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3205                                 }
3206                         }
3207
3208                         if ($zoom_mode) {
3209                                 header("Content-Type: text/html");
3210                                 $rv['content'] .= "<html><head>
3211                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3212                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3213                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"css/tt-rss.css\">
3214                                                 <script type=\"text/javascript\">
3215                                                 function openSelectedAttachment(elem) {
3216                                                         try {
3217                                                                 var url = elem[elem.selectedIndex].value;
3218
3219                                                                 if (url) {
3220                                                                         window.open(url);
3221                                                                         elem.selectedIndex = 0;
3222                                                                 }
3223
3224                                                         } catch (e) {
3225                                                                 exception_error(\"openSelectedAttachment\", e);
3226                                                         }
3227                                                 }
3228                                         </script>
3229                                         </head><body id=\"ttrssZoom\">";
3230                         }
3231
3232                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3233
3234                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3235
3236                         $entry_author = $line["author"];
3237
3238                         if ($entry_author) {
3239                                 $entry_author = __(" - ") . $entry_author;
3240                         }
3241
3242                         $parsed_updated = make_local_datetime($line["updated"], true,
3243                                 $owner_uid, true);
3244
3245                         if (!$zoom_mode)
3246                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3247
3248                         if ($line["link"]) {
3249                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3250                                         title=\"".htmlspecialchars($line['title'])."\"
3251                                         href=\"" .
3252                                         htmlspecialchars($line["link"]) . "\">" .
3253                                         $line["title"] . "</a>" .
3254                                         "<span class='author'>$entry_author</span></div>";
3255                         } else {
3256                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3257                         }
3258
3259                         if ($zoom_mode)
3260                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3261
3262                         $tags_str = format_tags_string($line["tags"], $id);
3263                         $tags_str_full = join(", ", $line["tags"]);
3264
3265                         if (!$tags_str_full) $tags_str_full = __("no tags");
3266
3267                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3268
3269                         $rv['content'] .= "<div class='postTags' style='float : right'>
3270                                 <img src='images/tag.png'
3271                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3272
3273                         if (!$zoom_mode) {
3274                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3275                                         <a title=\"".__('Edit tags for this article')."\"
3276                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3277
3278                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3279                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3280                                         position=\"below\">$tags_str_full</div>";
3281
3282                                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
3283                                         $rv['content'] .= $p->hook_article_button($line);
3284                                 }
3285
3286                         } else {
3287                                 $tags_str = strip_tags($tags_str);
3288                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3289                         }
3290                         $rv['content'] .= "</div>";
3291                         $rv['content'] .= "<div clear='both'>";
3292
3293                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3294                                 $rv['content'] .= $p->hook_article_left_button($line);
3295                         }
3296
3297                         $rv['content'] .= "$entry_comments</div>";
3298
3299                         if ($line["orig_feed_id"]) {
3300
3301                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3302                                         WHERE id = ".$line["orig_feed_id"]);
3303
3304                                 if (db_num_rows($tmp_result) != 0) {
3305
3306                                         $rv['content'] .= "<div clear='both'>";
3307                                         $rv['content'] .= __("Originally from:");
3308
3309                                         $rv['content'] .= "&nbsp;";
3310
3311                                         $tmp_line = db_fetch_assoc($tmp_result);
3312
3313                                         $rv['content'] .= "<a target='_blank'
3314                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3315                                                 $tmp_line['title'] . "</a>";
3316
3317                                         $rv['content'] .= "&nbsp;";
3318
3319                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3320                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3321
3322                                         $rv['content'] .= "</div>";
3323                                 }
3324                         }
3325
3326                         $rv['content'] .= "</div>";
3327
3328                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3329                                 if ($line['note']) {
3330                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3331                                 }
3332                         $rv['content'] .= "</div>";
3333
3334                         if (!$line['lang']) $line['lang'] = 'en';
3335
3336                         $rv['content'] .= "<div class=\"postContent\" lang=\"".$line['lang']."\">";
3337
3338                         $rv['content'] .= $line["content"];
3339                         $rv['content'] .= format_article_enclosures($id,
3340                                 sql_bool_to_bool($line["always_display_enclosures"]),
3341                                 $line["content"],
3342                                 sql_bool_to_bool($line["hide_images"]));
3343
3344                         $rv['content'] .= "</div>";
3345
3346                         $rv['content'] .= "</div>";
3347
3348                 }
3349
3350                 if ($zoom_mode) {
3351                         $rv['content'] .= "
3352                                 <div class='footer'>
3353                                 <button onclick=\"return window.close()\">".
3354                                         __("Close this window")."</button></div>";
3355                         $rv['content'] .= "</body></html>";
3356                 }
3357
3358                 return $rv;
3359
3360         }
3361
3362         function print_checkpoint($n, $s) {
3363                 $ts = microtime(true);
3364                 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
3365                 return $ts;
3366         }
3367
3368         function sanitize_tag($tag) {
3369                 $tag = trim($tag);
3370
3371                 $tag = mb_strtolower($tag, 'utf-8');
3372
3373                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3374
3375 //              $tag = str_replace('"', "", $tag);
3376 //              $tag = str_replace("+", " ", $tag);
3377                 $tag = str_replace("technorati tag: ", "", $tag);
3378
3379                 return $tag;
3380         }
3381
3382         function get_self_url_prefix() {
3383                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3384                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3385                 } else {
3386                         return SELF_URL_PATH;
3387                 }
3388         }
3389
3390         /**
3391          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3392          *
3393          * @return string The Mozilla Firefox feed adding URL.
3394          */
3395         function add_feed_url() {
3396                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3397
3398                 $url_path = get_self_url_prefix() .
3399                         "/public.php?op=subscribe&feed_url=%s";
3400                 return $url_path;
3401         } // function add_feed_url
3402
3403         function encrypt_password($pass, $salt = '', $mode2 = false) {
3404                 if ($salt && $mode2) {
3405                         return "MODE2:" . hash('sha256', $salt . $pass);
3406                 } else if ($salt) {
3407                         return "SHA1X:" . sha1("$salt:$pass");
3408                 } else {
3409                         return "SHA1:" . sha1($pass);
3410                 }
3411         } // function encrypt_password
3412
3413         function load_filters($feed_id, $owner_uid, $action_id = false) {
3414                 $filters = array();
3415
3416                 $cat_id = (int)getFeedCategory($feed_id);
3417
3418                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3419                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3420
3421                 $check_cats = join(",", array_merge(
3422                         getParentCategories($cat_id, $owner_uid),
3423                         array($cat_id)));
3424
3425                 while ($line = db_fetch_assoc($result)) {
3426                         $filter_id = $line["id"];
3427
3428                         $result2 = db_query("SELECT
3429                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3430                                 FROM ttrss_filters2_rules AS r,
3431                                 ttrss_filter_types AS t
3432                                 WHERE
3433                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3434                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3435                                         filter_type = t.id AND filter_id = '$filter_id'");
3436
3437                         $rules = array();
3438                         $actions = array();
3439
3440                         while ($rule_line = db_fetch_assoc($result2)) {
3441 #                               print_r($rule_line);
3442
3443                                 $rule = array();
3444                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3445                                 $rule["type"] = $rule_line["type_name"];
3446                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3447
3448                                 array_push($rules, $rule);
3449                         }
3450
3451                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3452                                 FROM ttrss_filters2_actions AS a,
3453                                 ttrss_filter_actions AS t
3454                                 WHERE
3455                                         action_id = t.id AND filter_id = '$filter_id'");
3456
3457                         while ($action_line = db_fetch_assoc($result2)) {
3458 #                               print_r($action_line);
3459
3460                                 $action = array();
3461                                 $action["type"] = $action_line["type_name"];
3462                                 $action["param"] = $action_line["action_param"];
3463
3464                                 array_push($actions, $action);
3465                         }
3466
3467
3468                         $filter = array();
3469                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3470                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3471                         $filter["rules"] = $rules;
3472                         $filter["actions"] = $actions;
3473
3474                         if (count($rules) > 0 && count($actions) > 0) {
3475                                 array_push($filters, $filter);
3476                         }
3477                 }
3478
3479                 return $filters;
3480         }
3481
3482         function get_score_pic($score) {
3483                 if ($score > 100) {
3484                         return "score_high.png";
3485                 } else if ($score > 0) {
3486                         return "score_half_high.png";
3487                 } else if ($score < -100) {
3488                         return "score_low.png";
3489                 } else if ($score < 0) {
3490                         return "score_half_low.png";
3491                 } else {
3492                         return "score_neutral.png";
3493                 }
3494         }
3495
3496         function feed_has_icon($id) {
3497                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3498         }
3499
3500         function init_plugins() {
3501                 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
3502
3503                 return true;
3504         }
3505
3506         function format_tags_string($tags, $id) {
3507                 if (!is_array($tags) || count($tags) == 0) {
3508                         return __("no tags");
3509                 } else {
3510                         $maxtags = min(5, count($tags));
3511
3512                         for ($i = 0; $i < $maxtags; $i++) {
3513                                 $tags_str .= "<a class=\"tag\" href=\"#\" onclick=\"viewfeed('".$tags[$i]."')\">" . $tags[$i] . "</a>, ";
3514                         }
3515
3516                         $tags_str = mb_substr($tags_str, 0, mb_strlen($tags_str)-2);
3517
3518                         if (count($tags) > $maxtags)
3519                                 $tags_str .= ", &hellip;";
3520
3521                         return $tags_str;
3522                 }
3523         }
3524
3525         function format_article_labels($labels, $id) {
3526
3527                 if (!is_array($labels)) return '';
3528
3529                 $labels_str = "";
3530
3531                 foreach ($labels as $l) {
3532                         $labels_str .= sprintf("<span class='hlLabelRef'
3533                                 style='color : %s; background-color : %s'>%s</span>",
3534                                         $l[2], $l[3], $l[1]);
3535                         }
3536
3537                 return $labels_str;
3538
3539         }
3540
3541         function format_article_note($id, $note, $allow_edit = true) {
3542
3543                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3544                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3545                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3546
3547                 return $str;
3548         }
3549
3550
3551         function get_feed_category($feed_cat, $parent_cat_id = false) {
3552                 if ($parent_cat_id) {
3553                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3554                         $parent_insert = "'$parent_cat_id'";
3555                 } else {
3556                         $parent_qpart = "parent_cat IS NULL";
3557                         $parent_insert = "NULL";
3558                 }
3559
3560                 $result = db_query(
3561                         "SELECT id FROM ttrss_feed_categories
3562                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3563
3564                 if (db_num_rows($result) == 0) {
3565                         return false;
3566                 } else {
3567                         return db_fetch_result($result, 0, "id");
3568                 }
3569         }
3570
3571         function add_feed_category($feed_cat, $parent_cat_id = false) {
3572
3573                 if (!$feed_cat) return false;
3574
3575                 db_query("BEGIN");
3576
3577                 if ($parent_cat_id) {
3578                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3579                         $parent_insert = "'$parent_cat_id'";
3580                 } else {
3581                         $parent_qpart = "parent_cat IS NULL";
3582                         $parent_insert = "NULL";
3583                 }
3584
3585                 $feed_cat = mb_substr($feed_cat, 0, 250);
3586
3587                 $result = db_query(
3588                         "SELECT id FROM ttrss_feed_categories
3589                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3590
3591                 if (db_num_rows($result) == 0) {
3592
3593                         $result = db_query(
3594                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3595                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3596
3597                         db_query("COMMIT");
3598
3599                         return true;
3600                 }
3601
3602                 return false;
3603         }
3604
3605         function getArticleFeed($id) {
3606                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3607                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3608
3609                 if (db_num_rows($result) != 0) {
3610                         return db_fetch_result($result, 0, "feed_id");
3611                 } else {
3612                         return 0;
3613                 }
3614         }
3615
3616         /**
3617          * Fixes incomplete URLs by prepending "http://".
3618          * Also replaces feed:// with http://, and
3619          * prepends a trailing slash if the url is a domain name only.
3620          *
3621          * @param string $url Possibly incomplete URL
3622          *
3623          * @return string Fixed URL.
3624          */
3625         function fix_url($url) {
3626                 if (strpos($url, '://') === false) {
3627                         $url = 'http://' . $url;
3628                 } else if (substr($url, 0, 5) == 'feed:') {
3629                         $url = 'http:' . substr($url, 5);
3630                 }
3631
3632                 //prepend slash if the URL has no slash in it
3633                 // "http://www.example" -> "http://www.example/"
3634                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3635                         $url .= '/';
3636                 }
3637
3638                 if ($url != "http:///")
3639                         return $url;
3640                 else
3641                         return '';
3642         }
3643
3644         function validate_feed_url($url) {
3645                 $parts = parse_url($url);
3646
3647                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3648
3649         }
3650
3651         function get_article_enclosures($id) {
3652
3653                 $query = "SELECT * FROM ttrss_enclosures
3654                         WHERE post_id = '$id' AND content_url != ''";
3655
3656                 $rv = array();
3657
3658                 $result = db_query($query);
3659
3660                 if (db_num_rows($result) > 0) {
3661                         while ($line = db_fetch_assoc($result)) {
3662                                 array_push($rv, $line);
3663                         }
3664                 }
3665
3666                 return $rv;
3667         }
3668
3669         function save_email_address($email) {
3670                 // FIXME: implement persistent storage of emails
3671
3672                 if (!$_SESSION['stored_emails'])
3673                         $_SESSION['stored_emails'] = array();
3674
3675                 if (!in_array($email, $_SESSION['stored_emails']))
3676                         array_push($_SESSION['stored_emails'], $email);
3677         }
3678
3679
3680         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3681
3682                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3683
3684                 $sql_is_cat = bool_to_sql_bool($is_cat);
3685
3686                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3687                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3688                         AND owner_uid = " . $owner_uid);
3689
3690                 if (db_num_rows($result) == 1) {
3691                         return db_fetch_result($result, 0, "access_key");
3692                 } else {
3693                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3694
3695                         $result = db_query("INSERT INTO ttrss_access_keys
3696                                 (access_key, feed_id, is_cat, owner_uid)
3697                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3698
3699                         return $key;
3700                 }
3701                 return false;
3702         }
3703
3704         function get_feeds_from_html($url, $content)
3705         {
3706                 $url     = fix_url($url);
3707                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3708
3709                 libxml_use_internal_errors(true);
3710
3711                 $doc = new DOMDocument();
3712                 $doc->loadHTML($content);
3713                 $xpath = new DOMXPath($doc);
3714                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3715                 $feedUrls = array();
3716                 foreach ($entries as $entry) {
3717                         if ($entry->hasAttribute('href')) {
3718                                 $title = $entry->getAttribute('title');
3719                                 if ($title == '') {
3720                                         $title = $entry->getAttribute('type');
3721                                 }
3722                                 $feedUrl = rewrite_relative_url(
3723                                         $baseUrl, $entry->getAttribute('href')
3724                                 );
3725                                 $feedUrls[$feedUrl] = $title;
3726                         }
3727                 }
3728                 return $feedUrls;
3729         }
3730
3731         function is_html($content) {
3732                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3733         }
3734
3735         function url_is_html($url, $login = false, $pass = false) {
3736                 return is_html(fetch_file_contents($url, false, $login, $pass));
3737         }
3738
3739         function print_label_select($name, $value, $attributes = "") {
3740
3741                 $result = db_query("SELECT caption FROM ttrss_labels2
3742                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3743
3744                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3745                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3746
3747                 while ($line = db_fetch_assoc($result)) {
3748
3749                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3750
3751                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3752                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3753
3754                 }
3755
3756 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3757
3758                 print "</select>";
3759
3760
3761         }
3762
3763         function format_article_enclosures($id, $always_display_enclosures,
3764                                         $article_content, $hide_images = false) {
3765
3766                 $result = get_article_enclosures($id);
3767                 $rv = '';
3768
3769                 if (count($result) > 0) {
3770
3771                         $entries_html = array();
3772                         $entries = array();
3773                         $entries_inline = array();
3774
3775                         foreach ($result as $line) {
3776
3777                                 $url = $line["content_url"];
3778                                 $ctype = $line["content_type"];
3779
3780                                 if (!$ctype) $ctype = __("unknown type");
3781
3782                                 $filename = substr($url, strrpos($url, "/")+1);
3783
3784                                 $player = format_inline_player($url, $ctype);
3785
3786                                 if ($player) array_push($entries_inline, $player);
3787
3788 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3789 #                                       $filename . " (" . $ctype . ")" . "</a>";
3790
3791                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3792                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3793
3794                                 array_push($entries_html, $entry);
3795
3796                                 $entry = array();
3797
3798                                 $entry["type"] = $ctype;
3799                                 $entry["filename"] = $filename;
3800                                 $entry["url"] = $url;
3801
3802                                 array_push($entries, $entry);
3803                         }
3804
3805                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3806                                 if ($always_display_enclosures ||
3807                                                         !preg_match("/<img/i", $article_content)) {
3808
3809                                         foreach ($entries as $entry) {
3810
3811                                                 if (preg_match("/image/", $entry["type"]) ||
3812                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3813
3814                                                                 if (!$hide_images) {
3815                                                                         $rv .= "<p><img
3816                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3817                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3818                                                                 } else {
3819                                                                         $rv .= "<p><a target=\"_blank\"
3820                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3821                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3822
3823                                                                 }
3824                                                 }
3825                                         }
3826                                 }
3827                         }
3828
3829                         if (count($entries_inline) > 0) {
3830                                 $rv .= "<hr clear='both'/>";
3831                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3832                                 $rv .= "<hr clear='both'/>";
3833                         }
3834
3835                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3836                                 "<option value=''>" . __('Attachments')."</option>";
3837
3838                         foreach ($entries as $entry) {
3839                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3840
3841                         };
3842
3843                         $rv .= "</select>";
3844                 }
3845
3846                 return $rv;
3847         }
3848
3849         function getLastArticleId() {
3850                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3851                         WHERE owner_uid = " . $_SESSION["uid"]);
3852
3853                 if (db_num_rows($result) == 1) {
3854                         return db_fetch_result($result, 0, "id");
3855                 } else {
3856                         return -1;
3857                 }
3858         }
3859
3860         function build_url($parts) {
3861                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3862         }
3863
3864         /**
3865          * Converts a (possibly) relative URL to a absolute one.
3866          *
3867          * @param string $url     Base URL (i.e. from where the document is)
3868          * @param string $rel_url Possibly relative URL in the document
3869          *
3870          * @return string Absolute URL
3871          */
3872         function rewrite_relative_url($url, $rel_url) {
3873                 if (strpos($rel_url, ":") !== false) {
3874                         return $rel_url;
3875                 } else if (strpos($rel_url, "://") !== false) {
3876                         return $rel_url;
3877                 } else if (strpos($rel_url, "//") === 0) {
3878                         # protocol-relative URL (rare but they exist)
3879                         return $rel_url;
3880                 } else if (strpos($rel_url, "/") === 0)
3881                 {
3882                         $parts = parse_url($url);
3883                         $parts['path'] = $rel_url;
3884
3885                         return build_url($parts);
3886
3887                 } else {
3888                         $parts = parse_url($url);
3889                         if (!isset($parts['path'])) {
3890                                 $parts['path'] = '/';
3891                         }
3892                         $dir = $parts['path'];
3893                         if (substr($dir, -1) !== '/') {
3894                                 $dir = dirname($parts['path']);
3895                                 $dir !== '/' && $dir .= '/';
3896                         }
3897                         $parts['path'] = $dir . $rel_url;
3898
3899                         return build_url($parts);
3900                 }
3901         }
3902
3903         function sphinx_search($query, $offset = 0, $limit = 30) {
3904                 require_once 'lib/sphinxapi.php';
3905
3906                 $sphinxClient = new SphinxClient();
3907
3908                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3909
3910                 $sphinxClient->SetServer($sphinxpair[0], (int)$sphinxpair[1]);
3911                 $sphinxClient->SetConnectTimeout(1);
3912
3913                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3914                         'feed_title' => 20));
3915
3916                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3917                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3918                 $sphinxClient->SetLimits($offset, $limit, 1000);
3919                 $sphinxClient->SetArrayResult(false);
3920                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3921
3922                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3923
3924                 $ids = array();
3925
3926                 if (is_array($result['matches'])) {
3927                         foreach (array_keys($result['matches']) as $int_id) {
3928                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3929                                 array_push($ids, $ref_id);
3930                         }
3931                 }
3932
3933                 return $ids;
3934         }
3935
3936         function cleanup_tags($days = 14, $limit = 1000) {
3937
3938                 if (DB_TYPE == "pgsql") {
3939                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3940                 } else if (DB_TYPE == "mysql") {
3941                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3942                 }
3943
3944                 $tags_deleted = 0;
3945
3946                 while ($limit > 0) {
3947                         $limit_part = 500;
3948
3949                         $query = "SELECT ttrss_tags.id AS id
3950                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3951                                 WHERE post_int_id = int_id AND $interval_query AND
3952                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3953
3954                         $result = db_query($query);
3955
3956                         $ids = array();
3957
3958                         while ($line = db_fetch_assoc($result)) {
3959                                 array_push($ids, $line['id']);
3960                         }
3961
3962                         if (count($ids) > 0) {
3963                                 $ids = join(",", $ids);
3964
3965                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
3966                                 $tags_deleted += db_affected_rows($tmp_result);
3967                         } else {
3968                                 break;
3969                         }
3970
3971                         $limit -= $limit_part;
3972                 }
3973
3974                 return $tags_deleted;
3975         }
3976
3977         function print_user_stylesheet() {
3978                 $value = get_pref('USER_STYLESHEET');
3979
3980                 if ($value) {
3981                         print "<style type=\"text/css\">";
3982                         print str_replace("<br/>", "\n", $value);
3983                         print "</style>";
3984                 }
3985
3986         }
3987
3988         function filter_to_sql($filter, $owner_uid) {
3989                 $query = array();
3990
3991                 if (DB_TYPE == "pgsql")
3992                         $reg_qpart = "~";
3993                 else
3994                         $reg_qpart = "REGEXP";
3995
3996                 foreach ($filter["rules"] AS $rule) {
3997                         $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
3998                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3999                                 $rule['reg_exp']) !== FALSE;
4000
4001                         if ($regexp_valid) {
4002
4003                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
4004
4005                                         switch ($rule["type"]) {
4006                                         case "title":
4007                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4008                                                         $rule['reg_exp'] . "')";
4009                                                 break;
4010                                         case "content":
4011                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
4012                                                         $rule['reg_exp'] . "')";
4013                                                 break;
4014                                         case "both":
4015                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4016                                                         $rule['reg_exp'] . "') OR LOWER(" .
4017                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
4018                                                 break;
4019                                         case "tag":
4020                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
4021                                                         $rule['reg_exp'] . "')";
4022                                                 break;
4023                                         case "link":
4024                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
4025                                                         $rule['reg_exp'] . "')";
4026                                                 break;
4027                                         case "author":
4028                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
4029                                                         $rule['reg_exp'] . "')";
4030                                                 break;
4031                                 }
4032
4033                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
4034
4035                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
4036                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
4037                                 }
4038
4039                                 if (isset($rule["cat_id"])) {
4040
4041                                         if ($rule["cat_id"] > 0) {
4042                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
4043                                                 array_push($children, $rule["cat_id"]);
4044
4045                                                 $children = join(",", $children);
4046
4047                                                 $cat_qpart = "cat_id IN ($children)";
4048                                         } else {
4049                                                 $cat_qpart = "cat_id IS NULL";
4050                                         }
4051
4052                                         $qpart .= " AND $cat_qpart";
4053                                 }
4054
4055                                 array_push($query, "($qpart)");
4056
4057                         }
4058                 }
4059
4060                 if (count($query) > 0) {
4061                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4062                 } else {
4063                         $fullquery = "(false)";
4064                 }
4065
4066                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4067
4068                 return $fullquery;
4069         }
4070
4071         if (!function_exists('gzdecode')) {
4072                 function gzdecode($string) { // no support for 2nd argument
4073                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4074                                 base64_encode($string));
4075                 }
4076         }
4077
4078         function get_random_bytes($length) {
4079                 if (function_exists('openssl_random_pseudo_bytes')) {
4080                         return openssl_random_pseudo_bytes($length);
4081                 } else {
4082                         $output = "";
4083
4084                         for ($i = 0; $i < $length; $i++)
4085                                 $output .= chr(mt_rand(0, 255));
4086
4087                         return $output;
4088                 }
4089         }
4090
4091         function read_stdin() {
4092                 $fp = fopen("php://stdin", "r");
4093
4094                 if ($fp) {
4095                         $line = trim(fgets($fp));
4096                         fclose($fp);
4097                         return $line;
4098                 }
4099
4100                 return null;
4101         }
4102
4103         function tmpdirname($path, $prefix) {
4104                 // Use PHP's tmpfile function to create a temporary
4105                 // directory name. Delete the file and keep the name.
4106                 $tempname = tempnam($path,$prefix);
4107                 if (!$tempname)
4108                         return false;
4109
4110                 if (!unlink($tempname))
4111                         return false;
4112
4113        return $tempname;
4114         }
4115
4116         function getFeedCategory($feed) {
4117                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4118                         WHERE id = '$feed'");
4119
4120                 if (db_num_rows($result) > 0) {
4121                         return db_fetch_result($result, 0, "cat_id");
4122                 } else {
4123                         return false;
4124                 }
4125
4126         }
4127
4128         function implements_interface($class, $interface) {
4129                 return in_array($interface, class_implements($class));
4130         }
4131
4132         function geturl($url, $depth = 0){
4133
4134                 if ($depth == 20) return $url;
4135
4136                 if (!function_exists('curl_init'))
4137                         return user_error('CURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini', E_USER_ERROR);
4138
4139                 $curl = curl_init();
4140                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4141                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4142                 $header[] = "Cache-Control: max-age=0";
4143                 $header[] = "Connection: keep-alive";
4144                 $header[] = "Keep-Alive: 300";
4145                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4146                 $header[] = "Accept-Language: en-us,en;q=0.5";
4147                 $header[] = "Pragma: ";
4148
4149                 curl_setopt($curl, CURLOPT_URL, $url);
4150                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4151                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4152                 curl_setopt($curl, CURLOPT_HEADER, true);
4153                 curl_setopt($curl, CURLOPT_REFERER, $url);
4154                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4155                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4156                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4157                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4158                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4159                 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
4160
4161                 if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
4162                         curl_setopt($curl, CURLOPT_SSLVERSION, 3);
4163                 }
4164
4165                 $html = curl_exec($curl);
4166
4167                 $status = curl_getinfo($curl);
4168
4169                 if($status['http_code']!=200){
4170                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4171                                 curl_close($curl);
4172                                 list($header) = explode("\r\n\r\n", $html, 2);
4173                                 $matches = array();
4174                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4175                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4176                                 $url_parsed = parse_url($url);
4177                                 return (isset($url_parsed))? geturl($url, $depth + 1):'';
4178                         }
4179
4180                         global $fetch_last_error;
4181
4182                         $fetch_last_error = curl_errno($curl) . " " . curl_error($curl);
4183                         curl_close($curl);
4184
4185                         $oline='';
4186                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4187                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4188 #                       $handle = @fopen('./curl.error.log', 'a');
4189 #                       fwrite($handle, $line);
4190                         return FALSE;
4191                 }
4192                 curl_close($curl);
4193                 return $url;
4194         }
4195
4196         function get_minified_js($files) {
4197                 require_once 'lib/jshrink/Minifier.php';
4198
4199                 $rv = '';
4200
4201                 foreach ($files as $js) {
4202                         if (!isset($_GET['debug'])) {
4203                                 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
4204
4205                                 if (file_exists($cached_file) &&
4206                                                 is_readable($cached_file) &&
4207                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4208
4209                                         $rv .= file_get_contents($cached_file);
4210
4211                                 } else {
4212                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4213                                         file_put_contents($cached_file, $minified);
4214                                         $rv .= $minified;
4215                                 }
4216                         } else {
4217                                 $rv .= file_get_contents("js/$js.js");
4218                         }
4219                 }
4220
4221                 return $rv;
4222         }
4223
4224         function stylesheet_tag($filename) {
4225                 $timestamp = filemtime($filename);
4226
4227                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4228         }
4229
4230         function javascript_tag($filename) {
4231                 $query = "";
4232
4233                 if (!(strpos($filename, "?") === FALSE)) {
4234                         $query = substr($filename, strpos($filename, "?")+1);
4235                         $filename = substr($filename, 0, strpos($filename, "?"));
4236                 }
4237
4238                 $timestamp = filemtime($filename);
4239
4240                 if ($query) $timestamp .= "&$query";
4241
4242                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4243         }
4244
4245         function calculate_dep_timestamp() {
4246                 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
4247
4248                 $max_ts = -1;
4249
4250                 foreach ($files as $file) {
4251                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4252                 }
4253
4254                 return $max_ts;
4255         }
4256
4257         function T_js_decl($s1, $s2) {
4258                 if ($s1 && $s2) {
4259                         $s1 = preg_replace("/\n/", "", $s1);
4260                         $s2 = preg_replace("/\n/", "", $s2);
4261
4262                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4263                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4264
4265                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4266                 }
4267         }
4268
4269         function init_js_translations() {
4270
4271         print 'var T_messages = new Object();
4272
4273                 function __(msg) {
4274                         if (T_messages[msg]) {
4275                                 return T_messages[msg];
4276                         } else {
4277                                 return msg;
4278                         }
4279                 }
4280
4281                 function ngettext(msg1, msg2, n) {
4282                         return __((parseInt(n) > 1) ? msg2 : msg1);
4283                 }';
4284
4285                 $l10n = _get_reader();
4286
4287                 for ($i = 0; $i < $l10n->total; $i++) {
4288                         $orig = $l10n->get_original_string($i);
4289                         if(strpos($orig, "\000") !== FALSE) { // Plural forms
4290                                 $key = explode(chr(0), $orig);
4291                                 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
4292                                 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
4293                         } else {
4294                                 $translation = __($orig);
4295                                 print T_js_decl($orig, $translation);
4296                         }
4297                 }
4298         }
4299
4300         function label_to_feed_id($label) {
4301                 return LABEL_BASE_INDEX - 1 - abs($label);
4302         }
4303
4304         function feed_to_label_id($feed) {
4305                 return LABEL_BASE_INDEX - 1 + abs($feed);
4306         }
4307
4308         function format_libxml_error($error) {
4309                 return T_sprintf("LibXML error %s at line %d (column %d): %s",
4310                                 $error->code, $error->line, $error->column,
4311                                 $error->message);
4312         }
4313
4314 ?>