include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 118);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         $fetch_last_error = false;
   9         $fetch_last_error_code = false;
  10         $fetch_last_content_type = false;
  11         $fetch_curl_used = false;
  12
  13         mb_internal_encoding("UTF-8");
  14         date_default_timezone_set('UTC');
  15         if (defined('E_DEPRECATED')) {
  16                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  17         } else {
  18                 error_reporting(E_ALL & ~E_NOTICE);
  19         }
  20
  21         require_once 'config.php';
  22
  23         /**
  24          * Define a constant if not already defined
  25          *
  26          * @param string $name The constant name.
  27          * @param mixed $value The constant value.
  28          * @access public
  29          * @return boolean True if defined successfully or not.
  30          */
  31         function define_default($name, $value) {
  32                 defined($name) or define($name, $value);
  33         }
  34
  35         ///// Some defaults that you can override in config.php //////
  36
  37         define_default('FEED_FETCH_TIMEOUT', 45);
  38         // How may seconds to wait for response when requesting feed from a site
  39         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  40         // How may seconds to wait for response when requesting feed from a
  41         // site when that feed wasn't cached before
  42         define_default('FILE_FETCH_TIMEOUT', 45);
  43         // Default timeout when fetching files from remote sites
  44         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  45         // How many seconds to wait for initial response from website when
  46         // fetching files from remote sites
  47
  48         if (DB_TYPE == "pgsql") {
  49                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  50         } else {
  51                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  52         }
  53
  54         /**
  55          * Return available translations names.
  56          *
  57          * @access public
  58          * @return array A array of available translations.
  59          */
  60         function get_translations() {
  61                 $tr = array(
  62                                         "auto"  => "Detect automatically",
  63                                         "ca_CA" => "Català",
  64                                         "cs_CZ" => "Česky",
  65                                         "en_US" => "English",
  66                                         "es_ES" => "Español",
  67                                         "de_DE" => "Deutsch",
  68                                         "fr_FR" => "Français",
  69                                         "hu_HU" => "Magyar (Hungarian)",
  70                                         "it_IT" => "Italiano",
  71                                         "ja_JP" => "日本語 (Japanese)",
  72                                         "lv_LV" => "Latviešu",
  73                                         "nb_NO" => "Norwegian bokmål",
  74                                         "nl_NL" => "Dutch",
  75                                         "pl_PL" => "Polski",
  76                                         "ru_RU" => "Русский",
  77                                         "pt_BR" => "Portuguese/Brazil",
  78                                         "zh_CN" => "Simplified Chinese",
  79                                         "sv_SE" => "Svenska",
  80                                         "fi_FI" => "Suomi");
  81
  82                 return $tr;
  83         }
  84
  85         require_once "lib/accept-to-gettext.php";
  86         require_once "lib/gettext/gettext.inc";
  87
  88
  89         function startup_gettext() {
  90
  91                 # Get locale from Accept-Language header
  92                 $lang = al2gt(array_keys(get_translations()), "text/html");
  93
  94                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  95                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  96                 }
  97
  98                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
  99                         $lang = $_SESSION["language"];
 100                 }
 101
 102                 if ($lang) {
 103                         if (defined('LC_MESSAGES')) {
 104                                 _setlocale(LC_MESSAGES, $lang);
 105                         } else if (defined('LC_ALL')) {
 106                                 _setlocale(LC_ALL, $lang);
 107                         }
 108
 109                         _bindtextdomain("messages", "locale");
 110
 111                         _textdomain("messages");
 112                         _bind_textdomain_codeset("messages", "UTF-8");
 113                 }
 114         }
 115
 116         startup_gettext();
 117
 118         require_once 'db-prefs.php';
 119         require_once 'version.php';
 120         require_once 'ccache.php';
 121         require_once 'labels.php';
 122
 123         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 124         ini_set('user_agent', SELF_USER_AGENT);
 125
 126         require_once 'lib/pubsubhubbub/publisher.php';
 127
 128         $tz_offset = -1;
 129         $utc_tz = new DateTimeZone('UTC');
 130         $schema_version = false;
 131
 132         /**
 133          * Print a timestamped debug message.
 134          *
 135          * @param string $msg The debug message.
 136          * @return void
 137          */
 138         function _debug($msg, $show = true) {
 139
 140                 $ts = strftime("%H:%M:%S", time());
 141                 if (function_exists('posix_getpid')) {
 142                         $ts = "$ts/" . posix_getpid();
 143                 }
 144
 145                 if ($show && !(defined('QUIET') && QUIET)) {
 146                         print "[$ts] $msg\n";
 147                 }
 148
 149                 if (defined('LOGFILE'))  {
 150                         $fp = fopen(LOGFILE, 'a+');
 151
 152                         if ($fp) {
 153                                 fputs($fp, "[$ts] $msg\n");
 154                                 fclose($fp);
 155                         }
 156                 }
 157
 158         } // function _debug
 159
 160         /**
 161          * Purge a feed old posts.
 162          *
 163          * @param mixed $link A database connection.
 164          * @param mixed $feed_id The id of the purged feed.
 165          * @param mixed $purge_interval Olderness of purged posts.
 166          * @param boolean $debug Set to True to enable the debug. False by default.
 167          * @access public
 168          * @return void
 169          */
 170         function purge_feed($feed_id, $purge_interval, $debug = false) {
 171
 172                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
 173
 174                 $rows = -1;
 175
 176                 $result = db_query(
 177                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 178
 179                 $owner_uid = false;
 180
 181                 if (db_num_rows($result) == 1) {
 182                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 183                 }
 184
 185                 if ($purge_interval == -1 || !$purge_interval) {
 186                         if ($owner_uid) {
 187                                 ccache_update($feed_id, $owner_uid);
 188                         }
 189                         return;
 190                 }
 191
 192                 if (!$owner_uid) return;
 193
 194                 if (FORCE_ARTICLE_PURGE == 0) {
 195                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
 196                                 $owner_uid, false);
 197                 } else {
 198                         $purge_unread = true;
 199                         $purge_interval = FORCE_ARTICLE_PURGE;
 200                 }
 201
 202                 if (!$purge_unread) $query_limit = " unread = false AND ";
 203
 204                 if (DB_TYPE == "pgsql") {
 205                         $pg_version = get_pgsql_version();
 206
 207                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 208
 209                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
 210                                         ttrss_entries.id = ref_id AND
 211                                         marked = false AND
 212                                         feed_id = '$feed_id' AND
 213                                         $query_limit
 214                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 215
 216                         } else {
 217
 218                                 $result = db_query("DELETE FROM ttrss_user_entries
 219                                         USING ttrss_entries
 220                                         WHERE ttrss_entries.id = ref_id AND
 221                                         marked = false AND
 222                                         feed_id = '$feed_id' AND
 223                                         $query_limit
 224                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 225                         }
 226
 227                 } else {
 228
 229 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
 230                                 marked = false AND feed_id = '$feed_id' AND
 231                                 (SELECT date_updated FROM ttrss_entries WHERE
 232                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 233
 234                         $result = db_query("DELETE FROM ttrss_user_entries
 235                                 USING ttrss_user_entries, ttrss_entries
 236                                 WHERE ttrss_entries.id = ref_id AND
 237                                 marked = false AND
 238                                 feed_id = '$feed_id' AND
 239                                 $query_limit
 240                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 241                 }
 242
 243                 $rows = db_affected_rows($result);
 244
 245                 ccache_update($feed_id, $owner_uid);
 246
 247                 if ($debug) {
 248                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 249                 }
 250
 251                 return $rows;
 252         } // function purge_feed
 253
 254         function feed_purge_interval($feed_id) {
 255
 256                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
 257                         WHERE id = '$feed_id'");
 258
 259                 if (db_num_rows($result) == 1) {
 260                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 261                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 262
 263                         if ($purge_interval == 0) $purge_interval = get_pref(
 264                                 'PURGE_OLD_DAYS', $owner_uid);
 265
 266                         return $purge_interval;
 267
 268                 } else {
 269                         return -1;
 270                 }
 271         }
 272
 273         function purge_orphans($do_output = false) {
 274
 275                 // purge orphaned posts in main content table
 276                 $result = db_query("DELETE FROM ttrss_entries WHERE
 277                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 278
 279                 if ($do_output) {
 280                         $rows = db_affected_rows($result);
 281                         _debug("Purged $rows orphaned posts.");
 282                 }
 283         }
 284
 285         function get_feed_update_interval($feed_id) {
 286                 $result = db_query("SELECT owner_uid, update_interval FROM
 287                         ttrss_feeds WHERE id = '$feed_id'");
 288
 289                 if (db_num_rows($result) == 1) {
 290                         $update_interval = db_fetch_result($result, 0, "update_interval");
 291                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 292
 293                         if ($update_interval != 0) {
 294                                 return $update_interval;
 295                         } else {
 296                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 297                         }
 298
 299                 } else {
 300                         return -1;
 301                 }
 302         }
 303
 304         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 305
 306                 global $fetch_last_error;
 307                 global $fetch_last_error_code;
 308                 global $fetch_last_content_type;
 309                 global $fetch_curl_used;
 310
 311                 $url = str_replace(' ', '%20', $url);
 312
 313                 if (!defined('NO_CURL') && function_exists('curl_init')) {
 314
 315                         $fetch_curl_used = true;
 316
 317                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
 318                                 $ch = curl_init(geturl($url));
 319                         } else {
 320                                 $ch = curl_init($url);
 321                         }
 322
 323                         if ($timestamp && !$post_query) {
 324                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 325                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 326                         }
 327
 328                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 329                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 330                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
 331                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 332                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 333                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 334                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 335                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 336                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 337                         curl_setopt($ch, CURLOPT_ENCODING, "");
 338                         curl_setopt($ch, CURLOPT_REFERER, $url);
 339
 340                         if ($post_query) {
 341                                 curl_setopt($ch, CURLOPT_POST, true);
 342                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 343                         }
 344
 345                         if ($login && $pass)
 346                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 347
 348                         $contents = @curl_exec($ch);
 349
 350                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 351                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 352                                 $contents = @curl_exec($ch);
 353                         }
 354
 355                         if ($contents === false) {
 356                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 357                                 curl_close($ch);
 358                                 return false;
 359                         }
 360
 361                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 362                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 363
 364                         $fetch_last_error_code = $http_code;
 365
 366                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
 367                                 if (curl_errno($ch) != 0) {
 368                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 369                                 } else {
 370                                         $fetch_last_error = "HTTP Code: $http_code";
 371                                 }
 372                                 curl_close($ch);
 373                                 return false;
 374                         }
 375
 376                         curl_close($ch);
 377
 378                         return $contents;
 379                 } else {
 380
 381                         $fetch_curl_used = false;
 382
 383                         if ($login && $pass){
 384                                 $url_parts = array();
 385
 386                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 387
 388                                 $pass = urlencode($pass);
 389
 390                                 if ($url_parts[1] && $url_parts[2]) {
 391                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 392                                 }
 393                         }
 394
 395                         if (!$post_query && $timestamp) {
 396                                 $context = stream_context_create(array(
 397                                         'http' => array(
 398                                                 'method' => 'GET',
 399                                                 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
 400                                         )));
 401                         } else {
 402                                 $context = NULL;
 403                         }
 404
 405                         $old_error = error_get_last();
 406
 407                         $data = @file_get_contents($url, false, $context);
 408
 409                         $fetch_last_content_type = false;  // reset if no type was sent from server
 410                         if (isset($http_response_header) && is_array($http_response_header)) {
 411                                 foreach ($http_response_header as $h) {
 412                                         if (substr(strtolower($h), 0, 13) == 'content-type:') {
 413                                                 $fetch_last_content_type = substr($h, 14);
 414                                                 // don't abort here b/c there might be more than one
 415                                                 // e.g. if we were being redirected -- last one is the right one
 416                                         }
 417
 418                                         if (substr(strtolower($h), 0, 7) == 'http/1.') {
 419                                                 $fetch_last_error_code = (int) substr($h, 9, 3);
 420                                         }
 421                                 }
 422                         }
 423
 424                         if (!$data) {
 425                                 $error = error_get_last();
 426
 427                                 if ($error['message'] != $old_error['message']) {
 428                                         $fetch_last_error = $error["message"];
 429                                 } else {
 430                                         $fetch_last_error = "HTTP Code: $fetch_last_error_code";
 431                                 }
 432                         }
 433                         return $data;
 434                 }
 435
 436         }
 437
 438         /**
 439          * Try to determine the favicon URL for a feed.
 440          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 441          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 442          *
 443          * @param string $url A feed or page URL
 444          * @access public
 445          * @return mixed The favicon URL, or false if none was found.
 446          */
 447         function get_favicon_url($url) {
 448
 449                 $favicon_url = false;
 450
 451                 if ($html = @fetch_file_contents($url)) {
 452
 453                         libxml_use_internal_errors(true);
 454
 455                         $doc = new DOMDocument();
 456                         $doc->loadHTML($html);
 457                         $xpath = new DOMXPath($doc);
 458
 459                         $base = $xpath->query('/html/head/base');
 460                         foreach ($base as $b) {
 461                                 $url = $b->getAttribute("href");
 462                                 break;
 463                         }
 464
 465                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 466                         if (count($entries) > 0) {
 467                                 foreach ($entries as $entry) {
 468                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 469                                         break;
 470                                 }
 471                         }
 472                 }
 473
 474                 if (!$favicon_url)
 475                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 476
 477                 return $favicon_url;
 478         } // function get_favicon_url
 479
 480         function check_feed_favicon($site_url, $feed) {
 481 #               print "FAVICON [$site_url]: $favicon_url\n";
 482
 483                 $icon_file = ICONS_DIR . "/$feed.ico";
 484
 485                 if (!file_exists($icon_file)) {
 486                         $favicon_url = get_favicon_url($site_url);
 487
 488                         if ($favicon_url) {
 489                                 // Limiting to "image" type misses those served with text/plain
 490                                 $contents = fetch_file_contents($favicon_url); // , "image");
 491
 492                                 if ($contents) {
 493                                         // Crude image type matching.
 494                                         // Patterns gleaned from the file(1) source code.
 495                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 496                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 497                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 498                                         }
 499                                         elseif (preg_match('/^GIF8/', $contents)) {
 500                                                 // 0       string          GIF8            GIF image data
 501                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 502                                         }
 503                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 504                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 505                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 506                                         }
 507                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 508                                                 // 0       beshort         0xffd8          JPEG image data
 509                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 510                                         }
 511                                         else {
 512                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 513                                                 $contents = "";
 514                                         }
 515                                 }
 516
 517                                 if ($contents) {
 518                                         $fp = @fopen($icon_file, "w");
 519
 520                                         if ($fp) {
 521                                                 fwrite($fp, $contents);
 522                                                 fclose($fp);
 523                                                 chmod($icon_file, 0644);
 524                                         }
 525                                 }
 526                         }
 527             return $icon_file;
 528                 }
 529         }
 530
 531         function print_select($id, $default, $values, $attributes = "") {
 532                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 533                 foreach ($values as $v) {
 534                         if ($v == $default)
 535                                 $sel = "selected=\"1\"";
 536                          else
 537                                 $sel = "";
 538
 539                         $v = trim($v);
 540
 541                         print "<option value=\"$v\" $sel>$v</option>";
 542                 }
 543                 print "</select>";
 544         }
 545
 546         function print_select_hash($id, $default, $values, $attributes = "") {
 547                 print "<select name=\"$id\" id='$id' $attributes>";
 548                 foreach (array_keys($values) as $v) {
 549                         if ($v == $default)
 550                                 $sel = 'selected="selected"';
 551                          else
 552                                 $sel = "";
 553
 554                         $v = trim($v);
 555
 556                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 557                 }
 558
 559                 print "</select>";
 560         }
 561
 562         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 563                 foreach ($values as $v) {
 564
 565                         if ($v == $default)
 566                                 $sel = "checked";
 567                          else
 568                                 $sel = "";
 569
 570                         if ($v == $true_is) {
 571                                 $sel .= " value=\"1\"";
 572                         } else {
 573                                 $sel .= " value=\"0\"";
 574                         }
 575
 576                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 577                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 578
 579                 }
 580         }
 581
 582         function initialize_user_prefs($uid, $profile = false) {
 583
 584                 $uid = db_escape_string($uid);
 585
 586                 if (!$profile) {
 587                         $profile = "NULL";
 588                         $profile_qpart = "AND profile IS NULL";
 589                 } else {
 590                         $profile_qpart = "AND profile = '$profile'";
 591                 }
 592
 593                 if (get_schema_version() < 63) $profile_qpart = "";
 594
 595                 db_query("BEGIN");
 596
 597                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
 598
 599                 $u_result = db_query("SELECT pref_name
 600                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 601
 602                 $active_prefs = array();
 603
 604                 while ($line = db_fetch_assoc($u_result)) {
 605                         array_push($active_prefs, $line["pref_name"]);
 606                 }
 607
 608                 while ($line = db_fetch_assoc($result)) {
 609                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 610 //                              print "adding " . $line["pref_name"] . "<br>";
 611
 612                                 $line["def_value"] = db_escape_string($line["def_value"]);
 613                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
 614
 615                                 if (get_schema_version() < 63) {
 616                                         db_query("INSERT INTO ttrss_user_prefs
 617                                                 (owner_uid,pref_name,value) VALUES
 618                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 619
 620                                 } else {
 621                                         db_query("INSERT INTO ttrss_user_prefs
 622                                                 (owner_uid,pref_name,value, profile) VALUES
 623                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 624                                 }
 625
 626                         }
 627                 }
 628
 629                 db_query("COMMIT");
 630
 631         }
 632
 633         function get_ssl_certificate_id() {
 634                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 635                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 636                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 637                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 638                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 639                 }
 640                 return "";
 641         }
 642
 643         function authenticate_user($login, $password, $check_only = false) {
 644
 645                 if (!SINGLE_USER_MODE) {
 646                         $user_id = false;
 647
 648                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
 649
 650                                 $user_id = (int) $plugin->authenticate($login, $password);
 651
 652                                 if ($user_id) {
 653                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 654                                         break;
 655                                 }
 656                         }
 657
 658                         if ($user_id && !$check_only) {
 659                                 @session_start();
 660
 661                                 $_SESSION["uid"] = $user_id;
 662                                 $_SESSION["version"] = VERSION_STATIC;
 663
 664                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
 665                                         WHERE id = '$user_id'");
 666
 667                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 668                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 669                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 670
 671                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 672                                         $_SESSION["uid"]);
 673
 674                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 675                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 676                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 677
 678                                 $_SESSION["last_version_check"] = time();
 679
 680                                 initialize_user_prefs($_SESSION["uid"]);
 681
 682                                 return true;
 683                         }
 684
 685                         return false;
 686
 687                 } else {
 688
 689                         $_SESSION["uid"] = 1;
 690                         $_SESSION["name"] = "admin";
 691                         $_SESSION["access_level"] = 10;
 692
 693                         $_SESSION["hide_hello"] = true;
 694                         $_SESSION["hide_logout"] = true;
 695
 696                         $_SESSION["auth_module"] = false;
 697
 698                         if (!$_SESSION["csrf_token"]) {
 699                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 700                         }
 701
 702                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 703
 704                         initialize_user_prefs($_SESSION["uid"]);
 705
 706                         return true;
 707                 }
 708         }
 709
 710         function make_password($length = 8) {
 711
 712                 $password = "";
 713                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 714
 715         $i = 0;
 716
 717                 while ($i < $length) {
 718                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 719
 720                         if (!strstr($password, $char)) {
 721                                 $password .= $char;
 722                                 $i++;
 723                         }
 724                 }
 725                 return $password;
 726         }
 727
 728         // this is called after user is created to initialize default feeds, labels
 729         // or whatever else
 730
 731         // user preferences are checked on every login, not here
 732
 733         function initialize_user($uid) {
 734
 735                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 736                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 737                         'http://tt-rss.org/releases.rss')");
 738
 739                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 740                         values ('$uid', 'Tiny Tiny RSS: Forum',
 741                                 'http://tt-rss.org/forum/rss.php')");
 742         }
 743
 744         function logout_user() {
 745                 session_destroy();
 746                 if (isset($_COOKIE[session_name()])) {
 747                    setcookie(session_name(), '', time()-42000, '/');
 748                 }
 749         }
 750
 751         function validate_csrf($csrf_token) {
 752                 return $csrf_token == $_SESSION['csrf_token'];
 753         }
 754
 755         function load_user_plugins($owner_uid) {
 756                 if ($owner_uid) {
 757                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 758
 759                         PluginHost::getInstance()->load($plugins, PluginHost::KIND_USER, $owner_uid);
 760
 761                         if (get_schema_version() > 100) {
 762                                 PluginHost::getInstance()->load_data();
 763                         }
 764                 }
 765         }
 766
 767         function login_sequence() {
 768                 if (SINGLE_USER_MODE) {
 769                         @session_start();
 770                         authenticate_user("admin", null);
 771                         load_user_plugins($_SESSION["uid"]);
 772                 } else {
 773                         if (!validate_session()) $_SESSION["uid"] = false;
 774
 775                         if (!$_SESSION["uid"]) {
 776
 777                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
 778                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
 779                                 } else {
 780                                          authenticate_user(null, null, true);
 781                                 }
 782
 783                                 if (!$_SESSION["uid"]) {
 784                                         @session_destroy();
 785                                         setcookie(session_name(), '', time()-42000, '/');
 786
 787                                         render_login_form();
 788                                         exit;
 789                                 }
 790
 791                         } else {
 792                                 /* bump login timestamp */
 793                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 794                                         $_SESSION["uid"]);
 795                                 $_SESSION["last_login_update"] = time();
 796                         }
 797
 798                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 799                                 setcookie("ttrss_lang", $_SESSION["language"],
 800                                         time() + SESSION_COOKIE_LIFETIME);
 801                         }
 802
 803                         if ($_SESSION["uid"]) {
 804                                 load_user_plugins($_SESSION["uid"]);
 805
 806                                 /* cleanup ccache */
 807
 808                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 809                                         $_SESSION["uid"] . " AND
 810                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 811                                                         ttrss_feeds.id = feed_id) = 0");
 812
 813                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 814                                         $_SESSION["uid"] . " AND
 815                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 816                                                         ttrss_feed_categories.id = feed_id) = 0");
 817
 818                         }
 819
 820                 }
 821         }
 822
 823         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 824                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 825                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 826                 } else {
 827                         return $str;
 828                 }
 829         }
 830
 831         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 832
 833                 try {
 834                         $source_tz = new DateTimeZone($source_tz);
 835                 } catch (Exception $e) {
 836                         $source_tz = new DateTimeZone('UTC');
 837                 }
 838
 839                 try {
 840                         $dest_tz = new DateTimeZone($dest_tz);
 841                 } catch (Exception $e) {
 842                         $dest_tz = new DateTimeZone('UTC');
 843                 }
 844
 845                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 846                 return $dt->format('U') + $dest_tz->getOffset($dt);
 847         }
 848
 849         function make_local_datetime($timestamp, $long, $owner_uid = false,
 850                                         $no_smart_dt = false) {
 851
 852                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 853                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 854
 855                 global $utc_tz;
 856                 global $tz_offset;
 857
 858                 $timestamp = substr($timestamp, 0, 19);
 859
 860                 # We store date in UTC internally
 861                 $dt = new DateTime($timestamp, $utc_tz);
 862
 863                 if ($tz_offset == -1) {
 864
 865                         $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
 866
 867                         try {
 868                                 $user_tz = new DateTimeZone($user_tz_string);
 869                         } catch (Exception $e) {
 870                                 $user_tz = $utc_tz;
 871                         }
 872
 873                         $tz_offset = $user_tz->getOffset($dt);
 874                 }
 875
 876                 $user_timestamp = $dt->format('U') + $tz_offset;
 877
 878                 if (!$no_smart_dt) {
 879                         return smart_date_time($user_timestamp,
 880                                 $tz_offset, $owner_uid);
 881                 } else {
 882                         if ($long)
 883                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 884                         else
 885                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 886
 887                         return date($format, $user_timestamp);
 888                 }
 889         }
 890
 891         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
 892                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 893
 894                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 895                         return date("G:i", $timestamp);
 896                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 897                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 898                         return date($format, $timestamp);
 899                 } else {
 900                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 901                         return date($format, $timestamp);
 902                 }
 903         }
 904
 905         function sql_bool_to_bool($s) {
 906                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 907                         return true;
 908                 } else {
 909                         return false;
 910                 }
 911         }
 912
 913         function bool_to_sql_bool($s) {
 914                 if ($s) {
 915                         return "true";
 916                 } else {
 917                         return "false";
 918                 }
 919         }
 920
 921         // Session caching removed due to causing wrong redirects to upgrade
 922         // script when get_schema_version() is called on an obsolete session
 923         // created on a previous schema version.
 924         function get_schema_version($nocache = false) {
 925                 global $schema_version;
 926
 927                 if (!$schema_version && !$nocache) {
 928                         $result = db_query("SELECT schema_version FROM ttrss_version");
 929                         $version = db_fetch_result($result, 0, "schema_version");
 930                         $schema_version = $version;
 931                         return $version;
 932                 } else {
 933                         return $schema_version;
 934                 }
 935         }
 936
 937         function sanity_check() {
 938                 require_once 'errors.php';
 939
 940                 $error_code = 0;
 941                 $schema_version = get_schema_version(true);
 942
 943                 if ($schema_version != SCHEMA_VERSION) {
 944                         $error_code = 5;
 945                 }
 946
 947                 if (DB_TYPE == "mysql") {
 948                         $result = db_query("SELECT true", false);
 949                         if (db_num_rows($result) != 1) {
 950                                 $error_code = 10;
 951                         }
 952                 }
 953
 954                 if (db_escape_string("testTEST") != "testTEST") {
 955                         $error_code = 12;
 956                 }
 957
 958                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 959         }
 960
 961         function file_is_locked($filename) {
 962                 if (function_exists('flock')) {
 963                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 964                         if ($fp) {
 965                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 966                                         flock($fp, LOCK_UN);
 967                                         fclose($fp);
 968                                         return false;
 969                                 }
 970                                 fclose($fp);
 971                                 return true;
 972                         } else {
 973                                 return false;
 974                         }
 975                 }
 976                 return true; // consider the file always locked and skip the test
 977         }
 978
 979         function make_lockfile($filename) {
 980                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 981
 982                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 983                         if (function_exists('posix_getpid')) {
 984                                 fwrite($fp, posix_getpid() . "\n");
 985                         }
 986                         return $fp;
 987                 } else {
 988                         return false;
 989                 }
 990         }
 991
 992         function make_stampfile($filename) {
 993                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 994
 995                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 996                         fwrite($fp, time() . "\n");
 997                         flock($fp, LOCK_UN);
 998                         fclose($fp);
 999                         return true;
1000                 } else {
1001                         return false;
1002                 }
1003         }
1004
1005         function sql_random_function() {
1006                 if (DB_TYPE == "mysql") {
1007                         return "RAND()";
1008                 } else {
1009                         return "RANDOM()";
1010                 }
1011         }
1012
1013         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
1014
1015                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1016
1017                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1018
1019                         // Todo: all this interval stuff needs some generic generator function
1020
1021                         $date_qpart = "false";
1022
1023                         switch ($mode) {
1024                         case "1day":
1025                                 if (DB_TYPE == "pgsql") {
1026                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1027                                 } else {
1028                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1029                                 }
1030                                 break;
1031                         case "1week":
1032                                 if (DB_TYPE == "pgsql") {
1033                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1034                                 } else {
1035                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1036                                 }
1037                                 break;
1038                         case "2weeks":
1039                                 if (DB_TYPE == "pgsql") {
1040                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1041                                 } else {
1042                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1043                                 }
1044                                 break;
1045                         default:
1046                                 $date_qpart = "true";
1047                         }
1048
1049                         if (is_numeric($feed)) {
1050                                 if ($cat_view) {
1051
1052                                         if ($feed >= 0) {
1053
1054                                                 if ($feed > 0) {
1055                                                         $children = getChildCategories($feed, $owner_uid);
1056                                                         array_push($children, $feed);
1057
1058                                                         $children = join(",", $children);
1059
1060                                                         $cat_qpart = "cat_id IN ($children)";
1061                                                 } else {
1062                                                         $cat_qpart = "cat_id IS NULL";
1063                                                 }
1064
1065                                                 db_query("UPDATE ttrss_user_entries
1066                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1067                                                                 (SELECT id FROM
1068                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1069                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1070                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1071
1072                                         } else if ($feed == -2) {
1073
1074                                                 db_query("UPDATE ttrss_user_entries
1075                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1076                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1077                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1078                                         }
1079
1080                                 } else if ($feed > 0) {
1081
1082                                         db_query("UPDATE ttrss_user_entries
1083                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1084                                                         (SELECT id FROM
1085                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1086                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1087
1088                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1089
1090                                         if ($feed == -1) {
1091                                                 db_query("UPDATE ttrss_user_entries
1092                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1093                                                                 (SELECT id FROM
1094                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1095                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1096                                         }
1097
1098                                         if ($feed == -2) {
1099                                                 db_query("UPDATE ttrss_user_entries
1100                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1101                                                                 (SELECT id FROM
1102                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1103                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1104                                         }
1105
1106                                         if ($feed == -3) {
1107
1108                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1109
1110                                                 if (DB_TYPE == "pgsql") {
1111                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1112                                                 } else {
1113                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1114                                                                 INTERVAL $intl HOUR) ";
1115                                                 }
1116
1117                                                 db_query("UPDATE ttrss_user_entries
1118                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1119                                                                 (SELECT id FROM
1120                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1121                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1122                                         }
1123
1124                                         if ($feed == -4) {
1125                                                 db_query("UPDATE ttrss_user_entries
1126                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1127                                                                 (SELECT id FROM
1128                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1129                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1130                                         }
1131
1132                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1133
1134                                         $label_id = feed_to_label_id($feed);
1135
1136                                         db_query("UPDATE ttrss_user_entries
1137                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1138                                                         (SELECT id FROM
1139                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1140                                                                         AND label_id = '$label_id' AND ref_id = article_id
1141                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1142
1143                                 }
1144
1145                                 ccache_update($feed, $owner_uid, $cat_view);
1146
1147                         } else { // tag
1148                                 db_query("UPDATE ttrss_user_entries
1149                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1150                                                 (SELECT id FROM
1151                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1152                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1153                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1154
1155                         }
1156         }
1157
1158         function getAllCounters() {
1159                 $data = getGlobalCounters();
1160
1161                 $data = array_merge($data, getVirtCounters());
1162                 $data = array_merge($data, getLabelCounters());
1163                 $data = array_merge($data, getFeedCounters($active_feed));
1164                 $data = array_merge($data, getCategoryCounters());
1165
1166                 return $data;
1167         }
1168
1169         function getCategoryTitle($cat_id) {
1170
1171                 if ($cat_id == -1) {
1172                         return __("Special");
1173                 } else if ($cat_id == -2) {
1174                         return __("Labels");
1175                 } else {
1176
1177                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1178                                 id = '$cat_id'");
1179
1180                         if (db_num_rows($result) == 1) {
1181                                 return db_fetch_result($result, 0, "title");
1182                         } else {
1183                                 return __("Uncategorized");
1184                         }
1185                 }
1186         }
1187
1188
1189         function getCategoryCounters() {
1190                 $ret_arr = array();
1191
1192                 /* Labels category */
1193
1194                 $cv = array("id" => -2, "kind" => "cat",
1195                         "counter" => getCategoryUnread(-2));
1196
1197                 array_push($ret_arr, $cv);
1198
1199                 $result = db_query("SELECT id AS cat_id, value AS unread,
1200                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1201                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1202                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1203                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1204                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1205                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1206
1207                 while ($line = db_fetch_assoc($result)) {
1208                         $line["cat_id"] = (int) $line["cat_id"];
1209
1210                         if ($line["num_children"] > 0) {
1211                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1212                         } else {
1213                                 $child_counter = 0;
1214                         }
1215
1216                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1217                                 "counter" => $line["unread"] + $child_counter);
1218
1219                         array_push($ret_arr, $cv);
1220                 }
1221
1222                 /* Special case: NULL category doesn't actually exist in the DB */
1223
1224                 $cv = array("id" => 0, "kind" => "cat",
1225                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1226
1227                 array_push($ret_arr, $cv);
1228
1229                 return $ret_arr;
1230         }
1231
1232         // only accepts real cats (>= 0)
1233         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1234                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1235
1236                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1237                                 AND owner_uid = $owner_uid");
1238
1239                 $unread = 0;
1240
1241                 while ($line = db_fetch_assoc($result)) {
1242                         $unread += getCategoryUnread($line["id"], $owner_uid);
1243                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1244                 }
1245
1246                 return $unread;
1247         }
1248
1249         function getCategoryUnread($cat, $owner_uid = false) {
1250
1251                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1252
1253                 if ($cat >= 0) {
1254
1255                         if ($cat != 0) {
1256                                 $cat_query = "cat_id = '$cat'";
1257                         } else {
1258                                 $cat_query = "cat_id IS NULL";
1259                         }
1260
1261                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1262                                         AND owner_uid = " . $owner_uid);
1263
1264                         $cat_feeds = array();
1265                         while ($line = db_fetch_assoc($result)) {
1266                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1267                         }
1268
1269                         if (count($cat_feeds) == 0) return 0;
1270
1271                         $match_part = implode(" OR ", $cat_feeds);
1272
1273                         $result = db_query("SELECT COUNT(int_id) AS unread
1274                                 FROM ttrss_user_entries
1275                                 WHERE   unread = true AND ($match_part)
1276                                 AND owner_uid = " . $owner_uid);
1277
1278                         $unread = 0;
1279
1280                         # this needs to be rewritten
1281                         while ($line = db_fetch_assoc($result)) {
1282                                 $unread += $line["unread"];
1283                         }
1284
1285                         return $unread;
1286                 } else if ($cat == -1) {
1287                         return getFeedUnread(-1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1288                 } else if ($cat == -2) {
1289
1290                         $result = db_query("
1291                                 SELECT COUNT(unread) AS unread FROM
1292                                         ttrss_user_entries, ttrss_user_labels2
1293                                 WHERE article_id = ref_id AND unread = true
1294                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1295
1296                         $unread = db_fetch_result($result, 0, "unread");
1297
1298                         return $unread;
1299
1300                 }
1301         }
1302
1303         function getFeedUnread($feed, $is_cat = false) {
1304                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1305         }
1306
1307         function getLabelUnread($label_id, $owner_uid = false) {
1308                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1309
1310                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1311                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1312
1313                 if (db_num_rows($result) != 0) {
1314                         return db_fetch_result($result, 0, "unread");
1315                 } else {
1316                         return 0;
1317                 }
1318         }
1319
1320         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1321                 $owner_uid = false) {
1322
1323                 $n_feed = (int) $feed;
1324                 $need_entries = false;
1325
1326                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1327
1328                 if ($unread_only) {
1329                         $unread_qpart = "unread = true";
1330                 } else {
1331                         $unread_qpart = "true";
1332                 }
1333
1334                 if ($is_cat) {
1335                         return getCategoryUnread($n_feed, $owner_uid);
1336                 } else if ($n_feed == -6) {
1337                         return 0;
1338                 } else if ($feed != "0" && $n_feed == 0) {
1339
1340                         $feed = db_escape_string($feed);
1341
1342                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1343                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1344                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1345                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1346                         return db_fetch_result($result, 0, "count");
1347
1348                 } else if ($n_feed == -1) {
1349                         $match_part = "marked = true";
1350                 } else if ($n_feed == -2) {
1351                         $match_part = "published = true";
1352                 } else if ($n_feed == -3) {
1353                         $match_part = "unread = true AND score >= 0";
1354
1355                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1356
1357                         if (DB_TYPE == "pgsql") {
1358                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1359                         } else {
1360                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1361                         }
1362
1363                         $need_entries = true;
1364
1365                 } else if ($n_feed == -4) {
1366                         $match_part = "true";
1367                 } else if ($n_feed >= 0) {
1368
1369                         if ($n_feed != 0) {
1370                                 $match_part = "feed_id = '$n_feed'";
1371                         } else {
1372                                 $match_part = "feed_id IS NULL";
1373                         }
1374
1375                 } else if ($feed < LABEL_BASE_INDEX) {
1376
1377                         $label_id = feed_to_label_id($feed);
1378
1379                         return getLabelUnread($label_id, $owner_uid);
1380
1381                 }
1382
1383                 if ($match_part) {
1384
1385                         if ($need_entries) {
1386                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1387                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1388                         } else {
1389                                 $from_qpart = "ttrss_user_entries";
1390                         }
1391
1392                         $query = "SELECT count(int_id) AS unread
1393                                 FROM $from_qpart WHERE
1394                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1395
1396                         //echo "[$feed/$query]\n";
1397
1398                         $result = db_query($query);
1399
1400                 } else {
1401
1402                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1403                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1404                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1405                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1406                 }
1407
1408                 $unread = db_fetch_result($result, 0, "unread");
1409
1410                 return $unread;
1411         }
1412
1413         function getGlobalUnread($user_id = false) {
1414
1415                 if (!$user_id) {
1416                         $user_id = $_SESSION["uid"];
1417                 }
1418
1419                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1420                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1421
1422                 $c_id = db_fetch_result($result, 0, "c_id");
1423
1424                 return $c_id;
1425         }
1426
1427         function getGlobalCounters($global_unread = -1) {
1428                 $ret_arr = array();
1429
1430                 if ($global_unread == -1) {
1431                         $global_unread = getGlobalUnread();
1432                 }
1433
1434                 $cv = array("id" => "global-unread",
1435                         "counter" => (int) $global_unread);
1436
1437                 array_push($ret_arr, $cv);
1438
1439                 $result = db_query("SELECT COUNT(id) AS fn FROM
1440                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1441
1442                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1443
1444                 $cv = array("id" => "subscribed-feeds",
1445                         "counter" => (int) $subscribed_feeds);
1446
1447                 array_push($ret_arr, $cv);
1448
1449                 return $ret_arr;
1450         }
1451
1452         function getVirtCounters() {
1453
1454                 $ret_arr = array();
1455
1456                 for ($i = 0; $i >= -4; $i--) {
1457
1458                         $count = getFeedUnread($i);
1459
1460                         $cv = array("id" => $i,
1461                                 "counter" => (int) $count);
1462
1463 //                      if (get_pref('EXTENDED_FEEDLIST'))
1464 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1465
1466                         array_push($ret_arr, $cv);
1467                 }
1468
1469                 $feeds = PluginHost::getInstance()->get_feeds(-1);
1470
1471                 if (is_array($feeds)) {
1472                         foreach ($feeds as $feed) {
1473                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1474                                         "counter" => $feed['sender']->get_unread($feed['id']));
1475                                         array_push($ret_arr, $cv);
1476                         }
1477                 }
1478
1479                 return $ret_arr;
1480         }
1481
1482         function getLabelCounters($descriptions = false) {
1483
1484                 $ret_arr = array();
1485
1486                 $owner_uid = $_SESSION["uid"];
1487
1488                 $result = db_query("SELECT id,caption,COUNT(unread) AS unread
1489                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1490                                 (ttrss_labels2.id = label_id)
1491                                 LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true
1492                                         AND ttrss_user_entries.owner_uid = $owner_uid)
1493                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1494                                         ttrss_labels2.caption");
1495
1496                 while ($line = db_fetch_assoc($result)) {
1497
1498                         $id = label_to_feed_id($line["id"]);
1499
1500                         $label_name = $line["caption"];
1501                         $count = $line["unread"];
1502
1503                         $cv = array("id" => $id,
1504                                 "counter" => (int) $count);
1505
1506                         if ($descriptions)
1507                                 $cv["description"] = $label_name;
1508
1509 //                      if (get_pref('EXTENDED_FEEDLIST'))
1510 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1511
1512                         array_push($ret_arr, $cv);
1513                 }
1514
1515                 return $ret_arr;
1516         }
1517
1518         function getFeedCounters($active_feed = false) {
1519
1520                 $ret_arr = array();
1521
1522                 $query = "SELECT ttrss_feeds.id,
1523                                 ttrss_feeds.title,
1524                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1525                                 last_error, value AS count
1526                         FROM ttrss_feeds, ttrss_counters_cache
1527                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1528                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1529                                 AND ttrss_counters_cache.feed_id = id";
1530
1531                 $result = db_query($query);
1532                 $fctrs_modified = false;
1533
1534                 while ($line = db_fetch_assoc($result)) {
1535
1536                         $id = $line["id"];
1537                         $count = $line["count"];
1538                         $last_error = htmlspecialchars($line["last_error"]);
1539
1540                         $last_updated = make_local_datetime($line['last_updated'], false);
1541
1542                         $has_img = feed_has_icon($id);
1543
1544                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1545                                 $last_updated = '';
1546
1547                         $cv = array("id" => $id,
1548                                 "updated" => $last_updated,
1549                                 "counter" => (int) $count,
1550                                 "has_img" => (int) $has_img);
1551
1552                         if ($last_error)
1553                                 $cv["error"] = $last_error;
1554
1555 //                      if (get_pref('EXTENDED_FEEDLIST'))
1556 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1557
1558                         if ($active_feed && $id == $active_feed)
1559                                 $cv["title"] = truncate_string($line["title"], 30);
1560
1561                         array_push($ret_arr, $cv);
1562
1563                 }
1564
1565                 return $ret_arr;
1566         }
1567
1568         function get_pgsql_version() {
1569                 $result = db_query("SELECT version() AS version");
1570                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1571                 return $version[1];
1572         }
1573
1574         /**
1575          * @return array (code => Status code, message => error message if available)
1576          *
1577          *                 0 - OK, Feed already exists
1578          *                 1 - OK, Feed added
1579          *                 2 - Invalid URL
1580          *                 3 - URL content is HTML, no feeds available
1581          *                 4 - URL content is HTML which contains multiple feeds.
1582          *                     Here you should call extractfeedurls in rpc-backend
1583          *                     to get all possible feeds.
1584          *                 5 - Couldn't download the URL content.
1585          *                 6 - Content is an invalid XML.
1586          */
1587         function subscribe_to_feed($url, $cat_id = 0,
1588                         $auth_login = '', $auth_pass = '') {
1589
1590                 global $fetch_last_error;
1591
1592                 require_once "include/rssfuncs.php";
1593
1594                 $url = fix_url($url);
1595
1596                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1597
1598                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1599
1600                 if (!$contents) {
1601                         return array("code" => 5, "message" => $fetch_last_error);
1602                 }
1603
1604                 if (is_html($contents)) {
1605                         $feedUrls = get_feeds_from_html($url, $contents);
1606
1607                         if (count($feedUrls) == 0) {
1608                                 return array("code" => 3);
1609                         } else if (count($feedUrls) > 1) {
1610                                 return array("code" => 4, "feeds" => $feedUrls);
1611                         }
1612                         //use feed url as new URL
1613                         $url = key($feedUrls);
1614                 }
1615
1616                 /* libxml_use_internal_errors(true);
1617                 $doc = new DOMDocument();
1618                 $doc->loadXML($contents);
1619                 $error = libxml_get_last_error();
1620                 libxml_clear_errors();
1621
1622                 if ($error) {
1623                         $error_message = format_libxml_error($error);
1624
1625                         return array("code" => 6, "message" => $error_message);
1626                 } */
1627
1628                 if ($cat_id == "0" || !$cat_id) {
1629                         $cat_qpart = "NULL";
1630                 } else {
1631                         $cat_qpart = "'$cat_id'";
1632                 }
1633
1634                 $result = db_query(
1635                         "SELECT id FROM ttrss_feeds
1636                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1637
1638                 if (strlen(FEED_CRYPT_KEY) > 0) {
1639                         require_once "crypt.php";
1640                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1641                         $auth_pass_encrypted = 'true';
1642                 } else {
1643                         $auth_pass_encrypted = 'false';
1644                 }
1645
1646                 $auth_pass = db_escape_string($auth_pass);
1647
1648                 if (db_num_rows($result) == 0) {
1649                         $result = db_query(
1650                                 "INSERT INTO ttrss_feeds
1651                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1652                                 VALUES ('".$_SESSION["uid"]."', '$url',
1653                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1654
1655                         $result = db_query(
1656                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1657                                         AND owner_uid = " . $_SESSION["uid"]);
1658
1659                         $feed_id = db_fetch_result($result, 0, "id");
1660
1661                         if ($feed_id) {
1662                                 update_rss_feed($feed_id, true);
1663                         }
1664
1665                         return array("code" => 1);
1666                 } else {
1667                         return array("code" => 0);
1668                 }
1669         }
1670
1671         function print_feed_select($id, $default_id = "",
1672                 $attributes = "", $include_all_feeds = true,
1673                 $root_id = false, $nest_level = 0) {
1674
1675                 if (!$root_id) {
1676                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1677                         if ($include_all_feeds) {
1678                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1679                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1680                         }
1681                 }
1682
1683                 if (get_pref('ENABLE_FEED_CATS')) {
1684
1685                         if ($root_id)
1686                                 $parent_qpart = "parent_cat = '$root_id'";
1687                         else
1688                                 $parent_qpart = "parent_cat IS NULL";
1689
1690                         $result = db_query("SELECT id,title,
1691                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1692                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1693                                 FROM ttrss_feed_categories
1694                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1695
1696                         while ($line = db_fetch_assoc($result)) {
1697
1698                                 for ($i = 0; $i < $nest_level; $i++)
1699                                         $line["title"] = " - " . $line["title"];
1700
1701                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1702
1703                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1704                                         $line["id"], htmlspecialchars($line["title"]));
1705
1706                                 if ($line["num_children"] > 0)
1707                                         print_feed_select($id, $default_id, $attributes,
1708                                                 $include_all_feeds, $line["id"], $nest_level+1);
1709
1710                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1711                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1712
1713                                 while ($fline = db_fetch_assoc($feed_result)) {
1714                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1715
1716                                         $fline["title"] = " + " . $fline["title"];
1717
1718                                         for ($i = 0; $i < $nest_level; $i++)
1719                                                 $fline["title"] = " - " . $fline["title"];
1720
1721                                         printf("<option $is_selected value='%d'>%s</option>",
1722                                                 $fline["id"], htmlspecialchars($fline["title"]));
1723                                 }
1724                         }
1725
1726                         if (!$root_id) {
1727                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1728
1729                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1730                                         __("Uncategorized"));
1731
1732                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1733                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1734
1735                                 while ($fline = db_fetch_assoc($feed_result)) {
1736                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1737
1738                                         $fline["title"] = " + " . $fline["title"];
1739
1740                                         for ($i = 0; $i < $nest_level; $i++)
1741                                                 $fline["title"] = " - " . $fline["title"];
1742
1743                                         printf("<option $is_selected value='%d'>%s</option>",
1744                                                 $fline["id"], htmlspecialchars($fline["title"]));
1745                                 }
1746                         }
1747
1748                 } else {
1749                         $result = db_query("SELECT id,title FROM ttrss_feeds
1750                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1751
1752                         while ($line = db_fetch_assoc($result)) {
1753
1754                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1755
1756                                 printf("<option $is_selected value='%d'>%s</option>",
1757                                         $line["id"], htmlspecialchars($line["title"]));
1758                         }
1759                 }
1760
1761                 if (!$root_id) {
1762                         print "</select>";
1763                 }
1764         }
1765
1766         function print_feed_cat_select($id, $default_id,
1767                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1768
1769                         if (!$root_id) {
1770                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1771                         }
1772
1773                         if ($root_id)
1774                                 $parent_qpart = "parent_cat = '$root_id'";
1775                         else
1776                                 $parent_qpart = "parent_cat IS NULL";
1777
1778                         $result = db_query("SELECT id,title,
1779                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1780                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1781                                 FROM ttrss_feed_categories
1782                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1783
1784                         while ($line = db_fetch_assoc($result)) {
1785                                 if ($line["id"] == $default_id) {
1786                                         $is_selected = "selected=\"1\"";
1787                                 } else {
1788                                         $is_selected = "";
1789                                 }
1790
1791                                 for ($i = 0; $i < $nest_level; $i++)
1792                                         $line["title"] = " - " . $line["title"];
1793
1794                                 if ($line["title"])
1795                                         printf("<option $is_selected value='%d'>%s</option>",
1796                                                 $line["id"], htmlspecialchars($line["title"]));
1797
1798                                 if ($line["num_children"] > 0)
1799                                         print_feed_cat_select($id, $default_id, $attributes,
1800                                                 $include_all_cats, $line["id"], $nest_level+1);
1801                         }
1802
1803                         if (!$root_id) {
1804                                 if ($include_all_cats) {
1805                                         if (db_num_rows($result) > 0) {
1806                                                 print "<option disabled=\"1\">--------</option>";
1807                                         }
1808
1809                                         if ($default_id == 0) {
1810                                                 $is_selected = "selected=\"1\"";
1811                                         } else {
1812                                                 $is_selected = "";
1813                                         }
1814
1815                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1816                                 }
1817                                 print "</select>";
1818                         }
1819                 }
1820
1821         function checkbox_to_sql_bool($val) {
1822                 return ($val == "on") ? "true" : "false";
1823         }
1824
1825         function getFeedCatTitle($id) {
1826                 if ($id == -1) {
1827                         return __("Special");
1828                 } else if ($id < LABEL_BASE_INDEX) {
1829                         return __("Labels");
1830                 } else if ($id > 0) {
1831                         $result = db_query("SELECT ttrss_feed_categories.title
1832                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1833                                         cat_id = ttrss_feed_categories.id");
1834                         if (db_num_rows($result) == 1) {
1835                                 return db_fetch_result($result, 0, "title");
1836                         } else {
1837                                 return __("Uncategorized");
1838                         }
1839                 } else {
1840                         return "getFeedCatTitle($id) failed";
1841                 }
1842
1843         }
1844
1845         function getFeedIcon($id) {
1846                 switch ($id) {
1847                 case 0:
1848                         return "images/archive.png";
1849                         break;
1850                 case -1:
1851                         return "images/mark_set.svg";
1852                         break;
1853                 case -2:
1854                         return "images/pub_set.svg";
1855                         break;
1856                 case -3:
1857                         return "images/fresh.png";
1858                         break;
1859                 case -4:
1860                         return "images/tag.png";
1861                         break;
1862                 case -6:
1863                         return "images/recently_read.png";
1864                         break;
1865                 default:
1866                         if ($id < LABEL_BASE_INDEX) {
1867                                 return "images/label.png";
1868                         } else {
1869                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1870                                         return ICONS_URL . "/$id.ico";
1871                         }
1872                         break;
1873                 }
1874
1875                 return false;
1876         }
1877
1878         function getFeedTitle($id, $cat = false) {
1879                 if ($cat) {
1880                         return getCategoryTitle($id);
1881                 } else if ($id == -1) {
1882                         return __("Starred articles");
1883                 } else if ($id == -2) {
1884                         return __("Published articles");
1885                 } else if ($id == -3) {
1886                         return __("Fresh articles");
1887                 } else if ($id == -4) {
1888                         return __("All articles");
1889                 } else if ($id === 0 || $id === "0") {
1890                         return __("Archived articles");
1891                 } else if ($id == -6) {
1892                         return __("Recently read");
1893                 } else if ($id < LABEL_BASE_INDEX) {
1894                         $label_id = feed_to_label_id($id);
1895                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1896                         if (db_num_rows($result) == 1) {
1897                                 return db_fetch_result($result, 0, "caption");
1898                         } else {
1899                                 return "Unknown label ($label_id)";
1900                         }
1901
1902                 } else if (is_numeric($id) && $id > 0) {
1903                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1904                         if (db_num_rows($result) == 1) {
1905                                 return db_fetch_result($result, 0, "title");
1906                         } else {
1907                                 return "Unknown feed ($id)";
1908                         }
1909                 } else {
1910                         return $id;
1911                 }
1912         }
1913
1914         function make_init_params() {
1915                 $params = array();
1916
1917                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1918                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1919                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1920                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1921
1922                                  $params[strtolower($param)] = (int) get_pref($param);
1923                  }
1924
1925                 $params["icons_url"] = ICONS_URL;
1926                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1927                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1928                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1929                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1930                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1931                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1932
1933                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1934                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1935
1936                 $max_feed_id = db_fetch_result($result, 0, "mid");
1937                 $num_feeds = db_fetch_result($result, 0, "nf");
1938
1939                 $params["max_feed_id"] = (int) $max_feed_id;
1940                 $params["num_feeds"] = (int) $num_feeds;
1941
1942                 $params["collapsed_feedlist"] = (int) get_pref("_COLLAPSED_FEEDLIST");
1943                 $params["hotkeys"] = get_hotkeys_map();
1944
1945                 $params["csrf_token"] = $_SESSION["csrf_token"];
1946                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1947
1948                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1949
1950                 return $params;
1951         }
1952
1953         function get_hotkeys_info() {
1954                 $hotkeys = array(
1955                         __("Navigation") => array(
1956                                 "next_feed" => __("Open next feed"),
1957                                 "prev_feed" => __("Open previous feed"),
1958                                 "next_article" => __("Open next article"),
1959                                 "prev_article" => __("Open previous article"),
1960                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1961                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1962                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1963                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1964                                 "search_dialog" => __("Show search dialog")),
1965                         __("Article") => array(
1966                                 "toggle_mark" => __("Toggle starred"),
1967                                 "toggle_publ" => __("Toggle published"),
1968                                 "toggle_unread" => __("Toggle unread"),
1969                                 "edit_tags" => __("Edit tags"),
1970                                 "dismiss_selected" => __("Dismiss selected"),
1971                                 "dismiss_read" => __("Dismiss read"),
1972                                 "open_in_new_window" => __("Open in new window"),
1973                                 "catchup_below" => __("Mark below as read"),
1974                                 "catchup_above" => __("Mark above as read"),
1975                                 "article_scroll_down" => __("Scroll down"),
1976                                 "article_scroll_up" => __("Scroll up"),
1977                                 "select_article_cursor" => __("Select article under cursor"),
1978                                 "email_article" => __("Email article"),
1979                                 "close_article" => __("Close/collapse article"),
1980                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
1981                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1982                                 "toggle_embed_original" => __("Toggle embed original")),
1983                         __("Article selection") => array(
1984                                 "select_all" => __("Select all articles"),
1985                                 "select_unread" => __("Select unread"),
1986                                 "select_marked" => __("Select starred"),
1987                                 "select_published" => __("Select published"),
1988                                 "select_invert" => __("Invert selection"),
1989                                 "select_none" => __("Deselect everything")),
1990                         __("Feed") => array(
1991                                 "feed_refresh" => __("Refresh current feed"),
1992                                 "feed_unhide_read" => __("Un/hide read feeds"),
1993                                 "feed_subscribe" => __("Subscribe to feed"),
1994                                 "feed_edit" => __("Edit feed"),
1995                                 "feed_catchup" => __("Mark as read"),
1996                                 "feed_reverse" => __("Reverse headlines"),
1997                                 "feed_debug_update" => __("Debug feed update"),
1998                                 "catchup_all" => __("Mark all feeds as read"),
1999                                 "cat_toggle_collapse" => __("Un/collapse current category"),
2000                                 "toggle_combined_mode" => __("Toggle combined mode"),
2001                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
2002                         __("Go to") => array(
2003                                 "goto_all" => __("All articles"),
2004                                 "goto_fresh" => __("Fresh"),
2005                                 "goto_marked" => __("Starred"),
2006                                 "goto_published" => __("Published"),
2007                                 "goto_tagcloud" => __("Tag cloud"),
2008                                 "goto_prefs" => __("Preferences")),
2009                         __("Other") => array(
2010                                 "create_label" => __("Create label"),
2011                                 "create_filter" => __("Create filter"),
2012                                 "collapse_sidebar" => __("Un/collapse sidebar"),
2013                                 "help_dialog" => __("Show help dialog"))
2014                         );
2015
2016                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
2017                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
2018                 }
2019
2020                 return $hotkeys;
2021         }
2022
2023         function get_hotkeys_map() {
2024                 $hotkeys = array(
2025 //                      "navigation" => array(
2026                                 "k" => "next_feed",
2027                                 "j" => "prev_feed",
2028                                 "n" => "next_article",
2029                                 "p" => "prev_article",
2030                                 "(38)|up" => "prev_article",
2031                                 "(40)|down" => "next_article",
2032 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2033 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2034                                 "(191)|/" => "search_dialog",
2035 //                      "article" => array(
2036                                 "s" => "toggle_mark",
2037                                 "*s" => "toggle_publ",
2038                                 "u" => "toggle_unread",
2039                                 "*t" => "edit_tags",
2040                                 "*d" => "dismiss_selected",
2041                                 "*x" => "dismiss_read",
2042                                 "o" => "open_in_new_window",
2043                                 "c p" => "catchup_below",
2044                                 "c n" => "catchup_above",
2045                                 "*n" => "article_scroll_down",
2046                                 "*p" => "article_scroll_up",
2047                                 "*(38)|Shift+up" => "article_scroll_up",
2048                                 "*(40)|Shift+down" => "article_scroll_down",
2049                                 "a *w" => "toggle_widescreen",
2050                                 "a e" => "toggle_embed_original",
2051                                 "e" => "email_article",
2052                                 "a q" => "close_article",
2053 //                      "article_selection" => array(
2054                                 "a a" => "select_all",
2055                                 "a u" => "select_unread",
2056                                 "a *u" => "select_marked",
2057                                 "a p" => "select_published",
2058                                 "a i" => "select_invert",
2059                                 "a n" => "select_none",
2060 //                      "feed" => array(
2061                                 "f r" => "feed_refresh",
2062                                 "f a" => "feed_unhide_read",
2063                                 "f s" => "feed_subscribe",
2064                                 "f e" => "feed_edit",
2065                                 "f q" => "feed_catchup",
2066                                 "f x" => "feed_reverse",
2067                                 "f *d" => "feed_debug_update",
2068                                 "f *c" => "toggle_combined_mode",
2069                                 "f c" => "toggle_cdm_expanded",
2070                                 "*q" => "catchup_all",
2071                                 "x" => "cat_toggle_collapse",
2072 //                      "goto" => array(
2073                                 "g a" => "goto_all",
2074                                 "g f" => "goto_fresh",
2075                                 "g s" => "goto_marked",
2076                                 "g p" => "goto_published",
2077                                 "g t" => "goto_tagcloud",
2078                                 "g *p" => "goto_prefs",
2079 //                      "other" => array(
2080                                 "(9)|Tab" => "select_article_cursor", // tab
2081                                 "c l" => "create_label",
2082                                 "c f" => "create_filter",
2083                                 "c s" => "collapse_sidebar",
2084                                 "^(191)|Ctrl+/" => "help_dialog",
2085                         );
2086
2087                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2088                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2089                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2090                 }
2091
2092                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
2093                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2094                 }
2095
2096                 $prefixes = array();
2097
2098                 foreach (array_keys($hotkeys) as $hotkey) {
2099                         $pair = explode(" ", $hotkey, 2);
2100
2101                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2102                                 array_push($prefixes, $pair[0]);
2103                         }
2104                 }
2105
2106                 return array($prefixes, $hotkeys);
2107         }
2108
2109         function make_runtime_info() {
2110                 $data = array();
2111
2112                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2113                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2114
2115                 $max_feed_id = db_fetch_result($result, 0, "mid");
2116                 $num_feeds = db_fetch_result($result, 0, "nf");
2117
2118                 $data["max_feed_id"] = (int) $max_feed_id;
2119                 $data["num_feeds"] = (int) $num_feeds;
2120
2121                 $data['last_article_id'] = getLastArticleId();
2122                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2123
2124                 $data['dep_ts'] = calculate_dep_timestamp();
2125                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2126
2127                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2128
2129                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2130
2131                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2132
2133                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2134
2135                                 if ($stamp) {
2136                                         $stamp_delta = time() - $stamp;
2137
2138                                         if ($stamp_delta > 1800) {
2139                                                 $stamp_check = 0;
2140                                         } else {
2141                                                 $stamp_check = 1;
2142                                                 $_SESSION["daemon_stamp_check"] = time();
2143                                         }
2144
2145                                         $data['daemon_stamp_ok'] = $stamp_check;
2146
2147                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2148
2149                                         $data['daemon_stamp'] = $stamp_fmt;
2150                                 }
2151                         }
2152                 }
2153
2154                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2155                                 $new_version_details = @check_for_update();
2156
2157                                 $data['new_version_available'] = (int) ($new_version_details != false);
2158
2159                                 $_SESSION["last_version_check"] = time();
2160                                 $_SESSION["version_data"] = $new_version_details;
2161                 }
2162
2163                 return $data;
2164         }
2165
2166         function search_to_sql($search) {
2167
2168                 $search_query_part = "";
2169
2170                 $keywords = explode(" ", $search);
2171                 $query_keywords = array();
2172
2173                 foreach ($keywords as $k) {
2174                         if (strpos($k, "-") === 0) {
2175                                 $k = substr($k, 1);
2176                                 $not = "NOT";
2177                         } else {
2178                                 $not = "";
2179                         }
2180
2181                         $commandpair = explode(":", mb_strtolower($k), 2);
2182
2183                         switch ($commandpair[0]) {
2184                         case "title":
2185                                 if ($commandpair[1]) {
2186                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2187                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2188                                 } else {
2189                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2190                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2191                                 }
2192                                 break;
2193                         case "author":
2194                                 if ($commandpair[1]) {
2195                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2196                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2197                                 } else {
2198                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2199                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2200                                 }
2201                                 break;
2202                         case "note":
2203                                 if ($commandpair[1]) {
2204                                         if ($commandpair[1] == "true")
2205                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2206                                         else if ($commandpair[1] == "false")
2207                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2208                                         else
2209                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2210                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2211                                 } else {
2212                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2213                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2214                                 }
2215                                 break;
2216                         case "star":
2217
2218                                 if ($commandpair[1]) {
2219                                         if ($commandpair[1] == "true")
2220                                                 array_push($query_keywords, "($not (marked = true))");
2221                                         else
2222                                                 array_push($query_keywords, "($not (marked = false))");
2223                                 } else {
2224                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2225                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2226                                 }
2227                                 break;
2228                         case "pub":
2229                                 if ($commandpair[1]) {
2230                                         if ($commandpair[1] == "true")
2231                                                 array_push($query_keywords, "($not (published = true))");
2232                                         else
2233                                                 array_push($query_keywords, "($not (published = false))");
2234
2235                                 } else {
2236                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2237                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2238                                 }
2239                                 break;
2240                         default:
2241                                 if (strpos($k, "@") === 0) {
2242
2243                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2244                                         $orig_ts = strtotime(substr($k, 1));
2245                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2246
2247                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2248
2249                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2250                                 } else {
2251                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2252                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2253                                 }
2254                         }
2255                 }
2256
2257                 $search_query_part = implode("AND", $query_keywords);
2258
2259                 return $search_query_part;
2260         }
2261
2262         function getParentCategories($cat, $owner_uid) {
2263                 $rv = array();
2264
2265                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2266                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2267
2268                 while ($line = db_fetch_assoc($result)) {
2269                         array_push($rv, $line["parent_cat"]);
2270                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2271                 }
2272
2273                 return $rv;
2274         }
2275
2276         function getChildCategories($cat, $owner_uid) {
2277                 $rv = array();
2278
2279                 $result = db_query("SELECT id FROM ttrss_feed_categories
2280                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2281
2282                 while ($line = db_fetch_assoc($result)) {
2283                         array_push($rv, $line["id"]);
2284                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2285                 }
2286
2287                 return $rv;
2288         }
2289
2290         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2291
2292                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2293
2294                 $ext_tables_part = "";
2295
2296                         if ($search) {
2297
2298                                 if (SPHINX_ENABLED) {
2299                                         $ids = join(",", @sphinx_search($search, 0, 500));
2300
2301                                         if ($ids)
2302                                                 $search_query_part = "ref_id IN ($ids) AND ";
2303                                         else
2304                                                 $search_query_part = "ref_id = -1 AND ";
2305
2306                                 } else {
2307                                         $search_query_part = search_to_sql($search);
2308                                         $search_query_part .= " AND ";
2309                                 }
2310
2311                         } else {
2312                                 $search_query_part = "";
2313                         }
2314
2315                         if ($filter) {
2316
2317                                 if (DB_TYPE == "pgsql") {
2318                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2319                                 } else {
2320                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2321                                 }
2322
2323                                 $override_order = "updated DESC";
2324
2325                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2326
2327                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2328                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2329                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2330                                         WHERE $filter_query_part LIMIT 1", false);
2331
2332                                 if ($result) {
2333                                         $test = db_fetch_result($result, 0, "true_val");
2334
2335                                         if (!$test) {
2336                                                 $filter_query_part = "false AND";
2337                                         } else {
2338                                                 $filter_query_part .= " AND";
2339                                         }
2340                                 } else {
2341                                         $filter_query_part = "false AND";
2342                                 }
2343
2344                         } else {
2345                                 $filter_query_part = "";
2346                         }
2347
2348                         if ($since_id) {
2349                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2350                         } else {
2351                                 $since_id_part = "";
2352                         }
2353
2354                         $view_query_part = "";
2355
2356                         if ($view_mode == "adaptive") {
2357                                 if ($search) {
2358                                         $view_query_part = " ";
2359                                 } else if ($feed != -1) {
2360
2361                                         $unread = getFeedUnread($feed, $cat_view);
2362
2363                                         if ($cat_view && $feed > 0 && $include_children)
2364                                                 $unread += getCategoryChildrenUnread($feed);
2365
2366                                         if ($unread > 0)
2367                                 $view_query_part = " unread = true AND ";
2368
2369                                 }
2370                         }
2371
2372                         if ($view_mode == "marked") {
2373                                 $view_query_part = " marked = true AND ";
2374                         }
2375
2376                         if ($view_mode == "has_note") {
2377                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2378                         }
2379
2380                         if ($view_mode == "published") {
2381                                 $view_query_part = " published = true AND ";
2382                         }
2383
2384                         if ($view_mode == "unread" && $feed != -6) {
2385                                 $view_query_part = " unread = true AND ";
2386                         }
2387
2388                         if ($limit > 0) {
2389                                 $limit_query_part = "LIMIT " . $limit;
2390                         }
2391
2392                         $allow_archived = false;
2393
2394                         $vfeed_query_part = "";
2395
2396                         // override query strategy and enable feed display when searching globally
2397                         if ($search && $search_mode == "all_feeds") {
2398                                 $query_strategy_part = "true";
2399                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2400                         /* tags */
2401                         } else if (!is_numeric($feed)) {
2402                                 $query_strategy_part = "true";
2403                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2404                                         id = feed_id) as feed_title,";
2405                         } else if ($search && $search_mode == "this_cat") {
2406                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2407
2408                                 if ($feed > 0) {
2409                                         if ($include_children) {
2410                                                 $subcats = getChildCategories($feed, $owner_uid);
2411                                                 array_push($subcats, $feed);
2412                                                 $cats_qpart = join(",", $subcats);
2413                                         } else {
2414                                                 $cats_qpart = $feed;
2415                                         }
2416
2417                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2418
2419                                 } else {
2420                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2421                                 }
2422
2423                         } else if ($feed > 0) {
2424
2425                                 if ($cat_view) {
2426
2427                                         if ($feed > 0) {
2428                                                 if ($include_children) {
2429                                                         # sub-cats
2430                                                         $subcats = getChildCategories($feed, $owner_uid);
2431
2432                                                         array_push($subcats, $feed);
2433                                                         $query_strategy_part = "cat_id IN (".
2434                                                                         implode(",", $subcats).")";
2435
2436                                                 } else {
2437                                                         $query_strategy_part = "cat_id = '$feed'";
2438                                                 }
2439
2440                                         } else {
2441                                                 $query_strategy_part = "cat_id IS NULL";
2442                                         }
2443
2444                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2445
2446                                 } else {
2447                                         $query_strategy_part = "feed_id = '$feed'";
2448                                 }
2449                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2450                                 $query_strategy_part = "feed_id IS NULL";
2451                                 $allow_archived = true;
2452                         } else if ($feed == 0 && $cat_view) { // uncategorized
2453                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2454                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2455                         } else if ($feed == -1) { // starred virtual feed
2456                                 $query_strategy_part = "marked = true";
2457                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2458                                 $allow_archived = true;
2459
2460                                 if (!$override_order) {
2461                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2462                                 }
2463
2464                         } else if ($feed == -2) { // published virtual feed OR labels category
2465
2466                                 if (!$cat_view) {
2467                                         $query_strategy_part = "published = true";
2468                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2469                                         $allow_archived = true;
2470
2471                                         if (!$override_order) {
2472                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2473                                         }
2474
2475                                 } else {
2476                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2477
2478                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2479
2480                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2481                                                 ttrss_user_labels2.article_id = ref_id";
2482
2483                                 }
2484                         } else if ($feed == -6) { // recently read
2485                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2486                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2487                                 $allow_archived = true;
2488
2489                                 if (!$override_order) $override_order = "last_read DESC";
2490                         } else if ($feed == -3) { // fresh virtual feed
2491                                 $query_strategy_part = "unread = true AND score >= 0";
2492
2493                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2494
2495                                 if (DB_TYPE == "pgsql") {
2496                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2497                                 } else {
2498                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2499                                 }
2500
2501                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2502                         } else if ($feed == -4) { // all articles virtual feed
2503                                 $allow_archived = true;
2504                                 $query_strategy_part = "true";
2505                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2506                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2507                                 $label_id = feed_to_label_id($feed);
2508
2509                                 $query_strategy_part = "label_id = '$label_id' AND
2510                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2511                                         ttrss_user_labels2.article_id = ref_id";
2512
2513                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2514                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2515                                 $allow_archived = true;
2516
2517                         } else {
2518                                 $query_strategy_part = "true";
2519                         }
2520
2521                         $order_by = "score DESC, date_entered DESC, updated DESC";
2522
2523                         if ($view_mode == "unread_first") {
2524                                 $order_by = "unread DESC, $order_by";
2525                         }
2526
2527                         if ($override_order) {
2528                                 $order_by = $override_order;
2529                         }
2530
2531                         $feed_title = "";
2532
2533                         if ($search) {
2534                                 $feed_title = T_sprintf("Search results: %s", $search);
2535                         } else {
2536                                 if ($cat_view) {
2537                                         $feed_title = getCategoryTitle($feed);
2538                                 } else {
2539                                         if (is_numeric($feed) && $feed > 0) {
2540                                                 $result = db_query("SELECT title,site_url,last_error,last_updated
2541                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2542
2543                                                 $feed_title = db_fetch_result($result, 0, "title");
2544                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2545                                                 $last_error = db_fetch_result($result, 0, "last_error");
2546                                                 $last_updated = db_fetch_result($result, 0, "last_updated");
2547                                         } else {
2548                                                 $feed_title = getFeedTitle($feed);
2549                                         }
2550                                 }
2551                         }
2552
2553                         $content_query_part = "content as content_preview, cached_content, ";
2554
2555                         if (is_numeric($feed)) {
2556
2557                                 if ($feed >= 0) {
2558                                         $feed_kind = "Feeds";
2559                                 } else {
2560                                         $feed_kind = "Labels";
2561                                 }
2562
2563                                 if ($limit_query_part) {
2564                                         $offset_query_part = "OFFSET $offset";
2565                                 }
2566
2567                                 // proper override_order applied above
2568                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2569                                         if (!$override_order) {
2570                                                 $order_by = "ttrss_feeds.title, $order_by";
2571                                         } else {
2572                                                 $order_by = "ttrss_feeds.title, $override_order";
2573                                         }
2574                                 }
2575
2576                                 if (!$allow_archived) {
2577                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2578                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2579
2580                                 } else {
2581                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2582                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2583                                 }
2584
2585                                 if ($vfeed_query_part)
2586                                         $vfeed_query_part .= "favicon_avg_color,";
2587
2588                                 $query = "SELECT DISTINCT
2589                                                 date_entered,
2590                                                 guid,
2591                                                 ttrss_entries.id,ttrss_entries.title,
2592                                                 updated,
2593                                                 label_cache,
2594                                                 tag_cache,
2595                                                 always_display_enclosures,
2596                                                 site_url,
2597                                                 note,
2598                                                 num_comments,
2599                                                 comments,
2600                                                 int_id,
2601                                                 hide_images,
2602                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2603                                                 last_marked, last_published,
2604                                                 $vfeed_query_part
2605                                                 $content_query_part
2606                                                 author,score
2607                                         FROM
2608                                                 $from_qpart
2609                                         WHERE
2610                                         $feed_check_qpart
2611                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2612                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2613                                         $search_query_part
2614                                         $filter_query_part
2615                                         $view_query_part
2616                                         $since_id_part
2617                                         $query_strategy_part ORDER BY $order_by
2618                                         $limit_query_part $offset_query_part";
2619
2620                                 if ($_REQUEST["debug"]) print $query;
2621
2622                                 $result = db_query($query);
2623
2624                         } else {
2625                                 // browsing by tag
2626
2627                                 $select_qpart = "SELECT DISTINCT " .
2628                                                                 "date_entered," .
2629                                                                 "guid," .
2630                                                                 "note," .
2631                                                                 "ttrss_entries.id as id," .
2632                                                                 "title," .
2633                                                                 "updated," .
2634                                                                 "unread," .
2635                                                                 "feed_id," .
2636                                                                 "orig_feed_id," .
2637                                                                 "marked," .
2638                                                                 "num_comments, " .
2639                                                                 "comments, " .
2640                                                                 "tag_cache," .
2641                                                                 "label_cache," .
2642                                                                 "link," .
2643                                                                 "last_read," .
2644                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2645                                                                 "last_marked, last_published, " .
2646                                                                 $since_id_part .
2647                                                                 $vfeed_query_part .
2648                                                                 $content_query_part .
2649                                                                 "score ";
2650
2651                                 $feed_kind = "Tags";
2652                                 $all_tags = explode(",", $feed);
2653                                 if ($search_mode == 'any') {
2654                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2655                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2656                                         $where_qpart = " WHERE " .
2657                                                                    "ref_id = ttrss_entries.id AND " .
2658                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2659                                                                    "post_int_id = int_id AND $tag_sql AND " .
2660                                                                    $view_query_part .
2661                                                                    $search_query_part .
2662                                                                    $query_strategy_part . " ORDER BY $order_by " .
2663                                                                    $limit_query_part;
2664
2665                                 } else {
2666                                         $i = 1;
2667                                         $sub_selects = array();
2668                                         $sub_ands = array();
2669                                         foreach ($all_tags as $term) {
2670                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2671                                                 $i++;
2672                                         }
2673                                         if ($i > 2) {
2674                                                 $x = 1;
2675                                                 $y = 2;
2676                                                 do {
2677                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2678                                                         $x++;
2679                                                         $y++;
2680                                                 } while ($y < $i);
2681                                         }
2682                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2683                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2684                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2685                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2686                                 }
2687                                 //                              error_log("TAG SQL: " . $tag_sql);
2688                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2689
2690                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2691                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2692                         }
2693
2694                         return array($result, $feed_title, $feed_site_url, $last_error, $last_updated);
2695
2696         }
2697
2698         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false) {
2699                 if (!$owner) $owner = $_SESSION["uid"];
2700
2701                 $res = trim($str); if (!$res) return '';
2702
2703                 if (strpos($res, "href=") === false)
2704                         $res = rewrite_urls($res);
2705
2706                 $charset_hack = '<head>
2707                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2708                 </head>';
2709
2710                 $res = trim($res); if (!$res) return '';
2711
2712                 libxml_use_internal_errors(true);
2713
2714                 $doc = new DOMDocument();
2715                 $doc->loadHTML($charset_hack . $res);
2716                 $xpath = new DOMXPath($doc);
2717
2718                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2719
2720                 foreach ($entries as $entry) {
2721
2722                         if ($site_url) {
2723
2724                                 if ($entry->hasAttribute('href'))
2725                                         $entry->setAttribute('href',
2726                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2727
2728                                 if ($entry->hasAttribute('src')) {
2729                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2730
2731                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2732
2733                                         if (file_exists($cached_filename)) {
2734                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2735                                         }
2736
2737                                         $entry->setAttribute('src', $src);
2738                                 }
2739
2740                                 if ($entry->nodeName == 'img') {
2741                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2742                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2743
2744                                                 $p = $doc->createElement('p');
2745
2746                                                 $a = $doc->createElement('a');
2747                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2748
2749                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2750                                                 $a->setAttribute('target', '_blank');
2751
2752                                                 $p->appendChild($a);
2753
2754                                                 $entry->parentNode->replaceChild($p, $entry);
2755                                         }
2756                                 }
2757                         }
2758
2759                         if (strtolower($entry->nodeName) == "a") {
2760                                 $entry->setAttribute("target", "_blank");
2761                         }
2762                 }
2763
2764                 $entries = $xpath->query('//iframe');
2765                 foreach ($entries as $entry) {
2766                         $entry->setAttribute('sandbox', 'allow-scripts');
2767
2768                 }
2769
2770                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2771                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2772                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2773                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2774                         'dt', 'em', 'footer', 'figure', 'figcaption',
2775                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2776                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2777                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2778                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2779                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2780                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2781
2782                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2783
2784                 $disallowed_attributes = array('id', 'style', 'class');
2785
2786                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
2787                         $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2788                         if (is_array($retval)) {
2789                                 $doc = $retval[0];
2790                                 $allowed_elements = $retval[1];
2791                                 $disallowed_attributes = $retval[2];
2792                         } else {
2793                                 $doc = $retval;
2794                         }
2795                 }
2796
2797                 $doc->removeChild($doc->firstChild); //remove doctype
2798                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2799                 $res = $doc->saveHTML();
2800                 return $res;
2801         }
2802
2803         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2804                 $xpath = new DOMXPath($doc);
2805                 $entries = $xpath->query('//*');
2806
2807                 foreach ($entries as $entry) {
2808                         if (!in_array($entry->nodeName, $allowed_elements)) {
2809                                 $entry->parentNode->removeChild($entry);
2810                         }
2811
2812                         if ($entry->hasAttributes()) {
2813                                 $attrs_to_remove = array();
2814
2815                                 foreach ($entry->attributes as $attr) {
2816
2817                                         if (strpos($attr->nodeName, 'on') === 0) {
2818                                                 array_push($attrs_to_remove, $attr);
2819                                         }
2820
2821                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2822                                                 array_push($attrs_to_remove, $attr);
2823                                         }
2824                                 }
2825
2826                                 foreach ($attrs_to_remove as $attr) {
2827                                         $entry->removeAttributeNode($attr);
2828                                 }
2829                         }
2830                 }
2831
2832                 return $doc;
2833         }
2834
2835         function check_for_update() {
2836                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2837                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2838                                 "&iid=" . sha1(SELF_URL_PATH);
2839
2840                         $version_data = @fetch_file_contents($version_url);
2841
2842                         if ($version_data) {
2843                                 $version_data = json_decode($version_data, true);
2844                                 if ($version_data && $version_data['version']) {
2845
2846                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2847                                                 return $version_data;
2848                                         }
2849                                 }
2850                         }
2851                 }
2852                 return false;
2853         }
2854
2855         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2856
2857                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2858                 if (count($ids) == 0) return;
2859
2860                 $tmp_ids = array();
2861
2862                 foreach ($ids as $id) {
2863                         array_push($tmp_ids, "ref_id = '$id'");
2864                 }
2865
2866                 $ids_qpart = join(" OR ", $tmp_ids);
2867
2868                 if ($cmode == 0) {
2869                         db_query("UPDATE ttrss_user_entries SET
2870                         unread = false,last_read = NOW()
2871                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2872                 } else if ($cmode == 1) {
2873                         db_query("UPDATE ttrss_user_entries SET
2874                         unread = true
2875                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2876                 } else {
2877                         db_query("UPDATE ttrss_user_entries SET
2878                         unread = NOT unread,last_read = NOW()
2879                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2880                 }
2881
2882                 /* update ccache */
2883
2884                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
2885                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2886
2887                 while ($line = db_fetch_assoc($result)) {
2888                         ccache_update($line["feed_id"], $owner_uid);
2889                 }
2890         }
2891
2892         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
2893
2894                 $a_id = db_escape_string($id);
2895
2896                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2897
2898                 $query = "SELECT DISTINCT tag_name,
2899                         owner_uid as owner FROM
2900                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2901                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2902
2903                 $obj_id = md5("TAGS:$owner_uid:$id");
2904                 $tags = array();
2905
2906                 /* check cache first */
2907
2908                 if ($tag_cache === false) {
2909                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
2910                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2911
2912                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2913                 }
2914
2915                 if ($tag_cache) {
2916                         $tags = explode(",", $tag_cache);
2917                 } else {
2918
2919                         /* do it the hard way */
2920
2921                         $tmp_result = db_query($query);
2922
2923                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2924                                 array_push($tags, $tmp_line["tag_name"]);
2925                         }
2926
2927                         /* update the cache */
2928
2929                         $tags_str = db_escape_string(join(",", $tags));
2930
2931                         db_query("UPDATE ttrss_user_entries
2932                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2933                                 AND owner_uid = $owner_uid");
2934                 }
2935
2936                 return $tags;
2937         }
2938
2939         function trim_array($array) {
2940                 $tmp = $array;
2941                 array_walk($tmp, 'trim');
2942                 return $tmp;
2943         }
2944
2945         function tag_is_valid($tag) {
2946                 if ($tag == '') return false;
2947                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2948                 if (mb_strlen($tag) > 250) return false;
2949
2950                 if (function_exists('iconv')) {
2951                         $tag = iconv("utf-8", "utf-8", $tag);
2952                 }
2953
2954                 if (!$tag) return false;
2955
2956                 return true;
2957         }
2958
2959         function render_login_form() {
2960                 header('Cache-Control: public');
2961
2962                 require_once "login_form.php";
2963                 exit;
2964         }
2965
2966         function format_warning($msg, $id = "") {
2967                 global $link;
2968                 return "<div class=\"warning\" id=\"$id\">
2969                         <span><img src=\"images/sign_excl.svg\"></span><span>$msg</span></div>";
2970         }
2971
2972         function format_notice($msg, $id = "") {
2973                 global $link;
2974                 return "<div class=\"notice\" id=\"$id\">
2975                         <span><img src=\"images/sign_info.svg\"></span><span>$msg</span></div>";
2976         }
2977
2978         function format_error($msg, $id = "") {
2979                 global $link;
2980                 return "<div class=\"error\" id=\"$id\">
2981                         <span><img src=\"images/sign_excl.svg\"></span><span>$msg</span></div>";
2982         }
2983
2984         function print_notice($msg) {
2985                 return print format_notice($msg);
2986         }
2987
2988         function print_warning($msg) {
2989                 return print format_warning($msg);
2990         }
2991
2992         function print_error($msg) {
2993                 return print format_error($msg);
2994         }
2995
2996
2997         function T_sprintf() {
2998                 $args = func_get_args();
2999                 return vsprintf(__(array_shift($args)), $args);
3000         }
3001
3002         function format_inline_player($url, $ctype) {
3003
3004                 $entry = "";
3005
3006                 $url = htmlspecialchars($url);
3007
3008                 if (strpos($ctype, "audio/") === 0) {
3009
3010                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3011                                 $_SESSION["hasMp3"])) {
3012
3013                                 $entry .= "<audio controls>
3014                                         <source type=\"$ctype\" src=\"$url\"></source>
3015                                         </audio>";
3016
3017                         } else {
3018
3019                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3020                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3021                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3022                                         <param name=\"movie\"
3023                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3024                                         </object>";
3025                         }
3026
3027                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
3028                                 href=\"$url\">" . basename($url) . "</a>";
3029
3030                         return $entry;
3031
3032                 }
3033
3034                 return "";
3035
3036 /*              $filename = substr($url, strrpos($url, "/")+1);
3037
3038                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3039                         $filename . " (" . $ctype . ")" . "</a>"; */
3040
3041         }
3042
3043         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3044                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3045
3046                 $rv = array();
3047
3048                 $rv['id'] = $id;
3049
3050                 /* we can figure out feed_id from article id anyway, why do we
3051                  * pass feed_id here? let's ignore the argument :(*/
3052
3053                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3054                         WHERE ref_id = '$id'");
3055
3056                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3057
3058                 $rv['feed_id'] = $feed_id;
3059
3060                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3061
3062                 if ($mark_as_read) {
3063                         $result = db_query("UPDATE ttrss_user_entries
3064                                 SET unread = false,last_read = NOW()
3065                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3066
3067                         ccache_update($feed_id, $owner_uid);
3068                 }
3069
3070                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,
3071                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3072                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3073                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3074                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3075                         num_comments,
3076                         tag_cache,
3077                         author,
3078                         orig_feed_id,
3079                         note,
3080                         cached_content
3081                         FROM ttrss_entries,ttrss_user_entries
3082                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3083
3084                 if ($result) {
3085
3086                         $line = db_fetch_assoc($result);
3087
3088                         $tag_cache = $line["tag_cache"];
3089
3090                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3091                         unset($line["tag_cache"]);
3092
3093                         $line["content"] = sanitize($line["content"], false, $owner_uid,        $line["site_url"]);
3094
3095                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
3096                                 $line = $p->hook_render_article($line);
3097                         }
3098
3099                         $num_comments = $line["num_comments"];
3100                         $entry_comments = "";
3101
3102                         if ($num_comments > 0) {
3103                                 if ($line["comments"]) {
3104                                         $comments_url = htmlspecialchars($line["comments"]);
3105                                 } else {
3106                                         $comments_url = htmlspecialchars($line["link"]);
3107                                 }
3108                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3109                         } else {
3110                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3111                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3112                                 }
3113                         }
3114
3115                         if ($zoom_mode) {
3116                                 header("Content-Type: text/html");
3117                                 $rv['content'] .= "<html><head>
3118                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3119                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3120                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3121                                         </head><body id=\"ttrssZoom\">";
3122                         }
3123
3124                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3125
3126                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3127
3128                         $entry_author = $line["author"];
3129
3130                         if ($entry_author) {
3131                                 $entry_author = __(" - ") . $entry_author;
3132                         }
3133
3134                         $parsed_updated = make_local_datetime($line["updated"], true,
3135                                 $owner_uid, true);
3136
3137                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3138
3139                         if ($line["link"]) {
3140                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3141                                         title=\"".htmlspecialchars($line['title'])."\"
3142                                         href=\"" .
3143                                         htmlspecialchars($line["link"]) . "\">" .
3144                                         $line["title"] . "</a>" .
3145                                         "<span class='author'>$entry_author</span></div>";
3146                         } else {
3147                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3148                         }
3149
3150                         $tags_str = format_tags_string($line["tags"], $id);
3151                         $tags_str_full = join(", ", $line["tags"]);
3152
3153                         if (!$tags_str_full) $tags_str_full = __("no tags");
3154
3155                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3156
3157                         $rv['content'] .= "<div class='postTags' style='float : right'>
3158                                 <img src='images/tag.png'
3159                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3160
3161                         if (!$zoom_mode) {
3162                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3163                                         <a title=\"".__('Edit tags for this article')."\"
3164                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3165
3166                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3167                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3168                                         position=\"below\">$tags_str_full</div>";
3169
3170                                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
3171                                         $rv['content'] .= $p->hook_article_button($line);
3172                                 }
3173
3174                         } else {
3175                                 $tags_str = strip_tags($tags_str);
3176                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3177                         }
3178                         $rv['content'] .= "</div>";
3179                         $rv['content'] .= "<div clear='both'>";
3180
3181                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3182                                 $rv['content'] .= $p->hook_article_left_button($line);
3183                         }
3184
3185                         $rv['content'] .= "$entry_comments</div>";
3186
3187                         if ($line["orig_feed_id"]) {
3188
3189                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3190                                         WHERE id = ".$line["orig_feed_id"]);
3191
3192                                 if (db_num_rows($tmp_result) != 0) {
3193
3194                                         $rv['content'] .= "<div clear='both'>";
3195                                         $rv['content'] .= __("Originally from:");
3196
3197                                         $rv['content'] .= "&nbsp;";
3198
3199                                         $tmp_line = db_fetch_assoc($tmp_result);
3200
3201                                         $rv['content'] .= "<a target='_blank'
3202                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3203                                                 $tmp_line['title'] . "</a>";
3204
3205                                         $rv['content'] .= "&nbsp;";
3206
3207                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3208                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3209
3210                                         $rv['content'] .= "</div>";
3211                                 }
3212                         }
3213
3214                         $rv['content'] .= "</div>";
3215
3216                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3217                                 if ($line['note']) {
3218                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3219                                 }
3220                         $rv['content'] .= "</div>";
3221
3222                         $rv['content'] .= "<div class=\"postContent\">";
3223
3224                         $rv['content'] .= $line["content"];
3225                         $rv['content'] .= format_article_enclosures($id,
3226                                 sql_bool_to_bool($line["always_display_enclosures"]),
3227                                 $line["content"],
3228                                 sql_bool_to_bool($line["hide_images"]));
3229
3230                         $rv['content'] .= "</div>";
3231
3232                         $rv['content'] .= "</div>";
3233
3234                 }
3235
3236                 if ($zoom_mode) {
3237                         $rv['content'] .= "
3238                                 <div class='footer'>
3239                                 <button onclick=\"return window.close()\">".
3240                                         __("Close this window")."</button></div>";
3241                         $rv['content'] .= "</body></html>";
3242                 }
3243
3244                 return $rv;
3245
3246         }
3247
3248         function print_checkpoint($n, $s) {
3249                 $ts = microtime(true);
3250                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3251                 return $ts;
3252         }
3253
3254         function sanitize_tag($tag) {
3255                 $tag = trim($tag);
3256
3257                 $tag = mb_strtolower($tag, 'utf-8');
3258
3259                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3260
3261 //              $tag = str_replace('"', "", $tag);
3262 //              $tag = str_replace("+", " ", $tag);
3263                 $tag = str_replace("technorati tag: ", "", $tag);
3264
3265                 return $tag;
3266         }
3267
3268         function get_self_url_prefix() {
3269                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3270                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3271                 } else {
3272                         return SELF_URL_PATH;
3273                 }
3274         }
3275
3276         /**
3277          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3278          *
3279          * @return string The Mozilla Firefox feed adding URL.
3280          */
3281         function add_feed_url() {
3282                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3283
3284                 $url_path = get_self_url_prefix() .
3285                         "/public.php?op=subscribe&feed_url=%s";
3286                 return $url_path;
3287         } // function add_feed_url
3288
3289         function encrypt_password($pass, $salt = '', $mode2 = false) {
3290                 if ($salt && $mode2) {
3291                         return "MODE2:" . hash('sha256', $salt . $pass);
3292                 } else if ($salt) {
3293                         return "SHA1X:" . sha1("$salt:$pass");
3294                 } else {
3295                         return "SHA1:" . sha1($pass);
3296                 }
3297         } // function encrypt_password
3298
3299         function load_filters($feed_id, $owner_uid, $action_id = false) {
3300                 $filters = array();
3301
3302                 $cat_id = (int)getFeedCategory($feed_id);
3303
3304                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3305                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3306
3307                 $check_cats = join(",", array_merge(
3308                         getParentCategories($cat_id, $owner_uid),
3309                         array($cat_id)));
3310
3311                 while ($line = db_fetch_assoc($result)) {
3312                         $filter_id = $line["id"];
3313
3314                         $result2 = db_query("SELECT
3315                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3316                                 FROM ttrss_filters2_rules AS r,
3317                                 ttrss_filter_types AS t
3318                                 WHERE
3319                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3320                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3321                                         filter_type = t.id AND filter_id = '$filter_id'");
3322
3323                         $rules = array();
3324                         $actions = array();
3325
3326                         while ($rule_line = db_fetch_assoc($result2)) {
3327 #                               print_r($rule_line);
3328
3329                                 $rule = array();
3330                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3331                                 $rule["type"] = $rule_line["type_name"];
3332                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3333
3334                                 array_push($rules, $rule);
3335                         }
3336
3337                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3338                                 FROM ttrss_filters2_actions AS a,
3339                                 ttrss_filter_actions AS t
3340                                 WHERE
3341                                         action_id = t.id AND filter_id = '$filter_id'");
3342
3343                         while ($action_line = db_fetch_assoc($result2)) {
3344 #                               print_r($action_line);
3345
3346                                 $action = array();
3347                                 $action["type"] = $action_line["type_name"];
3348                                 $action["param"] = $action_line["action_param"];
3349
3350                                 array_push($actions, $action);
3351                         }
3352
3353
3354                         $filter = array();
3355                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3356                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3357                         $filter["rules"] = $rules;
3358                         $filter["actions"] = $actions;
3359
3360                         if (count($rules) > 0 && count($actions) > 0) {
3361                                 array_push($filters, $filter);
3362                         }
3363                 }
3364
3365                 return $filters;
3366         }
3367
3368         function get_score_pic($score) {
3369                 if ($score > 100) {
3370                         return "score_high.png";
3371                 } else if ($score > 0) {
3372                         return "score_half_high.png";
3373                 } else if ($score < -100) {
3374                         return "score_low.png";
3375                 } else if ($score < 0) {
3376                         return "score_half_low.png";
3377                 } else {
3378                         return "score_neutral.png";
3379                 }
3380         }
3381
3382         function feed_has_icon($id) {
3383                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3384         }
3385
3386         function init_plugins() {
3387                 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
3388
3389                 return true;
3390         }
3391
3392         function format_tags_string($tags, $id) {
3393
3394                 $tags_str = "";
3395                 $tags_nolinks_str = "";
3396
3397                 $num_tags = 0;
3398
3399                 $tag_limit = 6;
3400
3401                 $formatted_tags = array();
3402
3403                 foreach ($tags as $tag) {
3404                         $num_tags++;
3405                         $tag_escaped = str_replace("'", "\\'", $tag);
3406
3407                         if (mb_strlen($tag) > 30) {
3408                                 $tag = truncate_string($tag, 30);
3409                         }
3410
3411                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3412
3413                         array_push($formatted_tags, $tag_str);
3414
3415                         $tmp_tags_str = implode(", ", $formatted_tags);
3416
3417                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3418                                 break;
3419                         }
3420                 }
3421
3422                 $tags_str = implode(", ", $formatted_tags);
3423
3424                 if ($num_tags < count($tags)) {
3425                         $tags_str .= ", &hellip;";
3426                 }
3427
3428                 if ($num_tags == 0) {
3429                         $tags_str = __("no tags");
3430                 }
3431
3432                 return $tags_str;
3433
3434         }
3435
3436         function format_article_labels($labels, $id) {
3437
3438                 if (is_array($labels)) return '';
3439
3440                 $labels_str = "";
3441
3442                 foreach ($labels as $l) {
3443                         $labels_str .= sprintf("<span class='hlLabelRef'
3444                                 style='color : %s; background-color : %s'>%s</span>",
3445                                         $l[2], $l[3], $l[1]);
3446                         }
3447
3448                 return $labels_str;
3449
3450         }
3451
3452         function format_article_note($id, $note, $allow_edit = true) {
3453
3454                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3455                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3456                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3457
3458                 return $str;
3459         }
3460
3461
3462         function get_feed_category($feed_cat, $parent_cat_id = false) {
3463                 if ($parent_cat_id) {
3464                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3465                         $parent_insert = "'$parent_cat_id'";
3466                 } else {
3467                         $parent_qpart = "parent_cat IS NULL";
3468                         $parent_insert = "NULL";
3469                 }
3470
3471                 $result = db_query(
3472                         "SELECT id FROM ttrss_feed_categories
3473                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3474
3475                 if (db_num_rows($result) == 0) {
3476                         return false;
3477                 } else {
3478                         return db_fetch_result($result, 0, "id");
3479                 }
3480         }
3481
3482         function add_feed_category($feed_cat, $parent_cat_id = false) {
3483
3484                 if (!$feed_cat) return false;
3485
3486                 db_query("BEGIN");
3487
3488                 if ($parent_cat_id) {
3489                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3490                         $parent_insert = "'$parent_cat_id'";
3491                 } else {
3492                         $parent_qpart = "parent_cat IS NULL";
3493                         $parent_insert = "NULL";
3494                 }
3495
3496                 $feed_cat = mb_substr($feed_cat, 0, 250);
3497
3498                 $result = db_query(
3499                         "SELECT id FROM ttrss_feed_categories
3500                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3501
3502                 if (db_num_rows($result) == 0) {
3503
3504                         $result = db_query(
3505                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3506                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3507
3508                         db_query("COMMIT");
3509
3510                         return true;
3511                 }
3512
3513                 return false;
3514         }
3515
3516         function getArticleFeed($id) {
3517                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3518                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3519
3520                 if (db_num_rows($result) != 0) {
3521                         return db_fetch_result($result, 0, "feed_id");
3522                 } else {
3523                         return 0;
3524                 }
3525         }
3526
3527         /**
3528          * Fixes incomplete URLs by prepending "http://".
3529          * Also replaces feed:// with http://, and
3530          * prepends a trailing slash if the url is a domain name only.
3531          *
3532          * @param string $url Possibly incomplete URL
3533          *
3534          * @return string Fixed URL.
3535          */
3536         function fix_url($url) {
3537                 if (strpos($url, '://') === false) {
3538                         $url = 'http://' . $url;
3539                 } else if (substr($url, 0, 5) == 'feed:') {
3540                         $url = 'http:' . substr($url, 5);
3541                 }
3542
3543                 //prepend slash if the URL has no slash in it
3544                 // "http://www.example" -> "http://www.example/"
3545                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3546                         $url .= '/';
3547                 }
3548
3549                 if ($url != "http:///")
3550                         return $url;
3551                 else
3552                         return '';
3553         }
3554
3555         function validate_feed_url($url) {
3556                 $parts = parse_url($url);
3557
3558                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3559
3560         }
3561
3562         function get_article_enclosures($id) {
3563
3564                 $query = "SELECT * FROM ttrss_enclosures
3565                         WHERE post_id = '$id' AND content_url != ''";
3566
3567                 $rv = array();
3568
3569                 $result = db_query($query);
3570
3571                 if (db_num_rows($result) > 0) {
3572                         while ($line = db_fetch_assoc($result)) {
3573                                 array_push($rv, $line);
3574                         }
3575                 }
3576
3577                 return $rv;
3578         }
3579
3580         function save_email_address($email) {
3581                 // FIXME: implement persistent storage of emails
3582
3583                 if (!$_SESSION['stored_emails'])
3584                         $_SESSION['stored_emails'] = array();
3585
3586                 if (!in_array($email, $_SESSION['stored_emails']))
3587                         array_push($_SESSION['stored_emails'], $email);
3588         }
3589
3590
3591         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3592
3593                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3594
3595                 $sql_is_cat = bool_to_sql_bool($is_cat);
3596
3597                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3598                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3599                         AND owner_uid = " . $owner_uid);
3600
3601                 if (db_num_rows($result) == 1) {
3602                         return db_fetch_result($result, 0, "access_key");
3603                 } else {
3604                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3605
3606                         $result = db_query("INSERT INTO ttrss_access_keys
3607                                 (access_key, feed_id, is_cat, owner_uid)
3608                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3609
3610                         return $key;
3611                 }
3612                 return false;
3613         }
3614
3615         function get_feeds_from_html($url, $content)
3616         {
3617                 $url     = fix_url($url);
3618                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3619
3620                 libxml_use_internal_errors(true);
3621
3622                 $doc = new DOMDocument();
3623                 $doc->loadHTML($content);
3624                 $xpath = new DOMXPath($doc);
3625                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3626                 $feedUrls = array();
3627                 foreach ($entries as $entry) {
3628                         if ($entry->hasAttribute('href')) {
3629                                 $title = $entry->getAttribute('title');
3630                                 if ($title == '') {
3631                                         $title = $entry->getAttribute('type');
3632                                 }
3633                                 $feedUrl = rewrite_relative_url(
3634                                         $baseUrl, $entry->getAttribute('href')
3635                                 );
3636                                 $feedUrls[$feedUrl] = $title;
3637                         }
3638                 }
3639                 return $feedUrls;
3640         }
3641
3642         function is_html($content) {
3643                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3644         }
3645
3646         function url_is_html($url, $login = false, $pass = false) {
3647                 return is_html(fetch_file_contents($url, false, $login, $pass));
3648         }
3649
3650         function print_label_select($name, $value, $attributes = "") {
3651
3652                 $result = db_query("SELECT caption FROM ttrss_labels2
3653                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3654
3655                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3656                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3657
3658                 while ($line = db_fetch_assoc($result)) {
3659
3660                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3661
3662                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3663                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3664
3665                 }
3666
3667 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3668
3669                 print "</select>";
3670
3671
3672         }
3673
3674         function format_article_enclosures($id, $always_display_enclosures,
3675                                         $article_content, $hide_images = false) {
3676
3677                 $result = get_article_enclosures($id);
3678                 $rv = '';
3679
3680                 if (count($result) > 0) {
3681
3682                         $entries_html = array();
3683                         $entries = array();
3684                         $entries_inline = array();
3685
3686                         foreach ($result as $line) {
3687
3688                                 $url = $line["content_url"];
3689                                 $ctype = $line["content_type"];
3690
3691                                 if (!$ctype) $ctype = __("unknown type");
3692
3693                                 $filename = substr($url, strrpos($url, "/")+1);
3694
3695                                 $player = format_inline_player($url, $ctype);
3696
3697                                 if ($player) array_push($entries_inline, $player);
3698
3699 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3700 #                                       $filename . " (" . $ctype . ")" . "</a>";
3701
3702                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3703                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3704
3705                                 array_push($entries_html, $entry);
3706
3707                                 $entry = array();
3708
3709                                 $entry["type"] = $ctype;
3710                                 $entry["filename"] = $filename;
3711                                 $entry["url"] = $url;
3712
3713                                 array_push($entries, $entry);
3714                         }
3715
3716                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3717                                 if ($always_display_enclosures ||
3718                                                         !preg_match("/<img/i", $article_content)) {
3719
3720                                         foreach ($entries as $entry) {
3721
3722                                                 if (preg_match("/image/", $entry["type"]) ||
3723                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3724
3725                                                                 if (!$hide_images) {
3726                                                                         $rv .= "<p><img
3727                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3728                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3729                                                                 } else {
3730                                                                         $rv .= "<p><a target=\"_blank\"
3731                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3732                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3733
3734                                                                 }
3735                                                 }
3736                                         }
3737                                 }
3738                         }
3739
3740                         if (count($entries_inline) > 0) {
3741                                 $rv .= "<hr clear='both'/>";
3742                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3743                                 $rv .= "<hr clear='both'/>";
3744                         }
3745
3746                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3747                                 "<option value=''>" . __('Attachments')."</option>";
3748
3749                         foreach ($entries as $entry) {
3750                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3751
3752                         };
3753
3754                         $rv .= "</select>";
3755                 }
3756
3757                 return $rv;
3758         }
3759
3760         function getLastArticleId() {
3761                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3762                         WHERE owner_uid = " . $_SESSION["uid"]);
3763
3764                 if (db_num_rows($result) == 1) {
3765                         return db_fetch_result($result, 0, "id");
3766                 } else {
3767                         return -1;
3768                 }
3769         }
3770
3771         function build_url($parts) {
3772                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3773         }
3774
3775         /**
3776          * Converts a (possibly) relative URL to a absolute one.
3777          *
3778          * @param string $url     Base URL (i.e. from where the document is)
3779          * @param string $rel_url Possibly relative URL in the document
3780          *
3781          * @return string Absolute URL
3782          */
3783         function rewrite_relative_url($url, $rel_url) {
3784                 if (strpos($rel_url, "magnet:") === 0) {
3785                         return $rel_url;
3786                 } else if (strpos($rel_url, "://") !== false) {
3787                         return $rel_url;
3788                 } else if (strpos($rel_url, "//") === 0) {
3789                         # protocol-relative URL (rare but they exist)
3790                         return $rel_url;
3791                 } else if (strpos($rel_url, "/") === 0)
3792                 {
3793                         $parts = parse_url($url);
3794                         $parts['path'] = $rel_url;
3795
3796                         return build_url($parts);
3797
3798                 } else {
3799                         $parts = parse_url($url);
3800                         if (!isset($parts['path'])) {
3801                                 $parts['path'] = '/';
3802                         }
3803                         $dir = $parts['path'];
3804                         if (substr($dir, -1) !== '/') {
3805                                 $dir = dirname($parts['path']);
3806                                 $dir !== '/' && $dir .= '/';
3807                         }
3808                         $parts['path'] = $dir . $rel_url;
3809
3810                         return build_url($parts);
3811                 }
3812         }
3813
3814         function sphinx_search($query, $offset = 0, $limit = 30) {
3815                 require_once 'lib/sphinxapi.php';
3816
3817                 $sphinxClient = new SphinxClient();
3818
3819                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3820
3821                 $sphinxClient->SetServer($sphinxpair[0], $sphinxpair[1]);
3822                 $sphinxClient->SetConnectTimeout(1);
3823
3824                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3825                         'feed_title' => 20));
3826
3827                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3828                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3829                 $sphinxClient->SetLimits($offset, $limit, 1000);
3830                 $sphinxClient->SetArrayResult(false);
3831                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3832
3833                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3834
3835                 $ids = array();
3836
3837                 if (is_array($result['matches'])) {
3838                         foreach (array_keys($result['matches']) as $int_id) {
3839                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3840                                 array_push($ids, $ref_id);
3841                         }
3842                 }
3843
3844                 return $ids;
3845         }
3846
3847         function cleanup_tags($days = 14, $limit = 1000) {
3848
3849                 if (DB_TYPE == "pgsql") {
3850                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3851                 } else if (DB_TYPE == "mysql") {
3852                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3853                 }
3854
3855                 $tags_deleted = 0;
3856
3857                 while ($limit > 0) {
3858                         $limit_part = 500;
3859
3860                         $query = "SELECT ttrss_tags.id AS id
3861                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3862                                 WHERE post_int_id = int_id AND $interval_query AND
3863                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3864
3865                         $result = db_query($query);
3866
3867                         $ids = array();
3868
3869                         while ($line = db_fetch_assoc($result)) {
3870                                 array_push($ids, $line['id']);
3871                         }
3872
3873                         if (count($ids) > 0) {
3874                                 $ids = join(",", $ids);
3875
3876                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
3877                                 $tags_deleted += db_affected_rows($tmp_result);
3878                         } else {
3879                                 break;
3880                         }
3881
3882                         $limit -= $limit_part;
3883                 }
3884
3885                 return $tags_deleted;
3886         }
3887
3888         function print_user_stylesheet() {
3889                 $value = get_pref('USER_STYLESHEET');
3890
3891                 if ($value) {
3892                         print "<style type=\"text/css\">";
3893                         print str_replace("<br/>", "\n", $value);
3894                         print "</style>";
3895                 }
3896
3897         }
3898
3899         function rewrite_urls($html) {
3900                 libxml_use_internal_errors(true);
3901
3902                 $charset_hack = '<head>
3903                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3904                 </head>';
3905
3906                 $doc = new DOMDocument();
3907                 $doc->loadHTML($charset_hack . $html);
3908                 $xpath = new DOMXPath($doc);
3909
3910                 $entries = $xpath->query('//*/text()');
3911
3912                 foreach ($entries as $entry) {
3913                         if (strstr($entry->wholeText, "://") !== false) {
3914                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3915                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3916
3917                                 if ($text != $entry->wholeText) {
3918                                         $cdoc = new DOMDocument();
3919                                         $cdoc->loadHTML($charset_hack . $text);
3920
3921
3922                                         foreach ($cdoc->childNodes as $cnode) {
3923                                                 $cnode = $doc->importNode($cnode, true);
3924
3925                                                 if ($cnode) {
3926                                                         $entry->parentNode->insertBefore($cnode);
3927                                                 }
3928                                         }
3929
3930                                         $entry->parentNode->removeChild($entry);
3931
3932                                 }
3933                         }
3934                 }
3935
3936                 $node = $doc->getElementsByTagName('body')->item(0);
3937
3938                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3939                 if ($node)
3940                         return $doc->saveXML($node);
3941                 else
3942                         return $html;
3943         }
3944
3945         function filter_to_sql($filter, $owner_uid) {
3946                 $query = array();
3947
3948                 if (DB_TYPE == "pgsql")
3949                         $reg_qpart = "~";
3950                 else
3951                         $reg_qpart = "REGEXP";
3952
3953                 foreach ($filter["rules"] AS $rule) {
3954                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3955                                 $rule['reg_exp']) !== FALSE;
3956
3957                         if ($regexp_valid) {
3958
3959                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
3960
3961                                         switch ($rule["type"]) {
3962                                         case "title":
3963                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3964                                                         $rule['reg_exp'] . "')";
3965                                                 break;
3966                                         case "content":
3967                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3968                                                         $rule['reg_exp'] . "')";
3969                                                 break;
3970                                         case "both":
3971                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3972                                                         $rule['reg_exp'] . "') OR LOWER(" .
3973                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3974                                                 break;
3975                                         case "tag":
3976                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3977                                                         $rule['reg_exp'] . "')";
3978                                                 break;
3979                                         case "link":
3980                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3981                                                         $rule['reg_exp'] . "')";
3982                                                 break;
3983                                         case "author":
3984                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3985                                                         $rule['reg_exp'] . "')";
3986                                                 break;
3987                                 }
3988
3989                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3990
3991                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3992                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
3993                                 }
3994
3995                                 if (isset($rule["cat_id"])) {
3996
3997                                         if ($rule["cat_id"] > 0) {
3998                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
3999                                                 array_push($children, $rule["cat_id"]);
4000
4001                                                 $children = join(",", $children);
4002
4003                                                 $cat_qpart = "cat_id IN ($children)";
4004                                         } else {
4005                                                 $cat_qpart = "cat_id IS NULL";
4006                                         }
4007
4008                                         $qpart .= " AND $cat_qpart";
4009                                 }
4010
4011                                 array_push($query, "($qpart)");
4012
4013                         }
4014                 }
4015
4016                 if (count($query) > 0) {
4017                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4018                 } else {
4019                         $fullquery = "(false)";
4020                 }
4021
4022                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4023
4024                 return $fullquery;
4025         }
4026
4027         if (!function_exists('gzdecode')) {
4028                 function gzdecode($string) { // no support for 2nd argument
4029                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4030                                 base64_encode($string));
4031                 }
4032         }
4033
4034         function get_random_bytes($length) {
4035                 if (function_exists('openssl_random_pseudo_bytes')) {
4036                         return openssl_random_pseudo_bytes($length);
4037                 } else {
4038                         $output = "";
4039
4040                         for ($i = 0; $i < $length; $i++)
4041                                 $output .= chr(mt_rand(0, 255));
4042
4043                         return $output;
4044                 }
4045         }
4046
4047         function read_stdin() {
4048                 $fp = fopen("php://stdin", "r");
4049
4050                 if ($fp) {
4051                         $line = trim(fgets($fp));
4052                         fclose($fp);
4053                         return $line;
4054                 }
4055
4056                 return null;
4057         }
4058
4059         function tmpdirname($path, $prefix) {
4060                 // Use PHP's tmpfile function to create a temporary
4061                 // directory name. Delete the file and keep the name.
4062                 $tempname = tempnam($path,$prefix);
4063                 if (!$tempname)
4064                         return false;
4065
4066                 if (!unlink($tempname))
4067                         return false;
4068
4069        return $tempname;
4070         }
4071
4072         function getFeedCategory($feed) {
4073                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4074                         WHERE id = '$feed'");
4075
4076                 if (db_num_rows($result) > 0) {
4077                         return db_fetch_result($result, 0, "cat_id");
4078                 } else {
4079                         return false;
4080                 }
4081
4082         }
4083
4084         function implements_interface($class, $interface) {
4085                 return in_array($interface, class_implements($class));
4086         }
4087
4088         function geturl($url){
4089
4090                 if (!function_exists('curl_init'))
4091                         return user_error('CURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini', E_USER_ERROR);
4092
4093                 $curl = curl_init();
4094                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4095                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4096                 $header[] = "Cache-Control: max-age=0";
4097                 $header[] = "Connection: keep-alive";
4098                 $header[] = "Keep-Alive: 300";
4099                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4100                 $header[] = "Accept-Language: en-us,en;q=0.5";
4101                 $header[] = "Pragma: ";
4102
4103                 curl_setopt($curl, CURLOPT_URL, $url);
4104                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4105                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4106                 curl_setopt($curl, CURLOPT_HEADER, true);
4107                 curl_setopt($curl, CURLOPT_REFERER, $url);
4108                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4109                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4110                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4111                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4112                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4113
4114                 $html = curl_exec($curl);
4115
4116                 $status = curl_getinfo($curl);
4117                 curl_close($curl);
4118
4119                 if($status['http_code']!=200){
4120                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4121                                 list($header) = explode("\r\n\r\n", $html, 2);
4122                                 $matches = array();
4123                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4124                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4125                                 $url_parsed = parse_url($url);
4126                                 return (isset($url_parsed))? geturl($url, $referer):'';
4127                         }
4128                         $oline='';
4129                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4130                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4131 #                       $handle = @fopen('./curl.error.log', 'a');
4132 #                       fwrite($handle, $line);
4133                         return FALSE;
4134                 }
4135                 return $url;
4136         }
4137
4138         function get_minified_js($files) {
4139                 require_once 'lib/jshrink/Minifier.php';
4140
4141                 $rv = '';
4142
4143                 foreach ($files as $js) {
4144                         if (!isset($_GET['debug'])) {
4145                                 $cached_file = CACHE_DIR . "/js/$js.js";
4146
4147                                 if (file_exists($cached_file) &&
4148                                                 is_readable($cached_file) &&
4149                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4150
4151                                         $rv .= file_get_contents($cached_file);
4152
4153                                 } else {
4154                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4155                                         file_put_contents($cached_file, $minified);
4156                                         $rv .= $minified;
4157                                 }
4158                         } else {
4159                                 $rv .= file_get_contents("js/$js.js");
4160                         }
4161                 }
4162
4163                 return $rv;
4164         }
4165
4166         function stylesheet_tag($filename) {
4167                 $timestamp = filemtime($filename);
4168
4169                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4170         }
4171
4172         function javascript_tag($filename) {
4173                 $query = "";
4174
4175                 if (!(strpos($filename, "?") === FALSE)) {
4176                         $query = substr($filename, strpos($filename, "?")+1);
4177                         $filename = substr($filename, 0, strpos($filename, "?"));
4178                 }
4179
4180                 $timestamp = filemtime($filename);
4181
4182                 if ($query) $timestamp .= "&$query";
4183
4184                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4185         }
4186
4187         function calculate_dep_timestamp() {
4188                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4189
4190                 $max_ts = -1;
4191
4192                 foreach ($files as $file) {
4193                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4194                 }
4195
4196                 return $max_ts;
4197         }
4198
4199         function T_js_decl($s1, $s2) {
4200                 if ($s1 && $s2) {
4201                         $s1 = preg_replace("/\n/", "", $s1);
4202                         $s2 = preg_replace("/\n/", "", $s2);
4203
4204                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4205                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4206
4207                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4208                 }
4209         }
4210
4211         function init_js_translations() {
4212
4213         print 'var T_messages = new Object();
4214
4215                 function __(msg) {
4216                         if (T_messages[msg]) {
4217                                 return T_messages[msg];
4218                         } else {
4219                                 return msg;
4220                         }
4221                 }
4222
4223                 function ngettext(msg1, msg2, n) {
4224                         return (parseInt(n) > 1) ? msg2 : msg1;
4225                 }';
4226
4227                 $l10n = _get_reader();
4228
4229                 for ($i = 0; $i < $l10n->total; $i++) {
4230                         $orig = $l10n->get_original_string($i);
4231                         $translation = __($orig);
4232
4233                         print T_js_decl($orig, $translation);
4234                 }
4235         }
4236
4237         function label_to_feed_id($label) {
4238                 return LABEL_BASE_INDEX - 1 - abs($label);
4239         }
4240
4241         function feed_to_label_id($feed) {
4242                 return LABEL_BASE_INDEX - 1 + abs($feed);
4243         }
4244
4245         function format_libxml_error($error) {
4246                 return T_sprintf("LibXML error %s at line %d (column %d): %s",
4247                                 $error->code, $error->line, $error->column,
4248                                 $error->message);
4249         }
4250
4251 ?>