include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 122);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         define('COOKIE_LIFETIME_LONG', 86400*365);
   9
  10         $fetch_last_error = false;
  11         $fetch_last_error_code = false;
  12         $fetch_last_content_type = false;
  13         $fetch_curl_used = false;
  14
  15         mb_internal_encoding("UTF-8");
  16         date_default_timezone_set('UTC');
  17         if (defined('E_DEPRECATED')) {
  18                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  19         } else {
  20                 error_reporting(E_ALL & ~E_NOTICE);
  21         }
  22
  23         require_once 'config.php';
  24
  25         /**
  26          * Define a constant if not already defined
  27          *
  28          * @param string $name The constant name.
  29          * @param mixed $value The constant value.
  30          * @access public
  31          * @return boolean True if defined successfully or not.
  32          */
  33         function define_default($name, $value) {
  34                 defined($name) or define($name, $value);
  35         }
  36
  37         ///// Some defaults that you can override in config.php //////
  38
  39         define_default('FEED_FETCH_TIMEOUT', 45);
  40         // How may seconds to wait for response when requesting feed from a site
  41         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  42         // How may seconds to wait for response when requesting feed from a
  43         // site when that feed wasn't cached before
  44         define_default('FILE_FETCH_TIMEOUT', 45);
  45         // Default timeout when fetching files from remote sites
  46         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  47         // How many seconds to wait for initial response from website when
  48         // fetching files from remote sites
  49
  50         if (DB_TYPE == "pgsql") {
  51                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  52         } else {
  53                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  54         }
  55
  56         /**
  57          * Return available translations names.
  58          *
  59          * @access public
  60          * @return array A array of available translations.
  61          */
  62         function get_translations() {
  63                 $tr = array(
  64                                         "auto"  => "Detect automatically",
  65                                         "ca_CA" => "Català",
  66                                         "cs_CZ" => "Česky",
  67                                         "en_US" => "English",
  68                                         "es_ES" => "Español",
  69                                         "de_DE" => "Deutsch",
  70                                         "fr_FR" => "Français",
  71                                         "hu_HU" => "Magyar (Hungarian)",
  72                                         "it_IT" => "Italiano",
  73                                         "ja_JP" => "日本語 (Japanese)",
  74                                         "lv_LV" => "Latviešu",
  75                                         "nb_NO" => "Norwegian bokmål",
  76                                         "nl_NL" => "Dutch",
  77                                         "pl_PL" => "Polski",
  78                                         "ru_RU" => "Русский",
  79                                         "pt_BR" => "Portuguese/Brazil",
  80                                         "zh_CN" => "Simplified Chinese",
  81                                         "sv_SE" => "Svenska",
  82                                         "fi_FI" => "Suomi");
  83
  84                 return $tr;
  85         }
  86
  87         require_once "lib/accept-to-gettext.php";
  88         require_once "lib/gettext/gettext.inc";
  89
  90         require_once "lib/languagedetect/LanguageDetect.php";
  91
  92         function startup_gettext() {
  93
  94                 # Get locale from Accept-Language header
  95                 $lang = al2gt(array_keys(get_translations()), "text/html");
  96
  97                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  98                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  99                 }
 100
 101                 if ($_SESSION["uid"] && get_schema_version() >= 120) {
 102                         $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
 103
 104                         if ($pref_lang && $pref_lang != 'auto') {
 105                                 $lang = $pref_lang;
 106                         }
 107                 }
 108
 109                 if ($lang) {
 110                         if (defined('LC_MESSAGES')) {
 111                                 _setlocale(LC_MESSAGES, $lang);
 112                         } else if (defined('LC_ALL')) {
 113                                 _setlocale(LC_ALL, $lang);
 114                         }
 115
 116                         _bindtextdomain("messages", "locale");
 117
 118                         _textdomain("messages");
 119                         _bind_textdomain_codeset("messages", "UTF-8");
 120                 }
 121         }
 122
 123         require_once 'db-prefs.php';
 124         require_once 'version.php';
 125         require_once 'ccache.php';
 126         require_once 'labels.php';
 127
 128         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 129         ini_set('user_agent', SELF_USER_AGENT);
 130
 131         require_once 'lib/pubsubhubbub/publisher.php';
 132
 133         $schema_version = false;
 134
 135         /**
 136          * Print a timestamped debug message.
 137          *
 138          * @param string $msg The debug message.
 139          * @return void
 140          */
 141         function _debug($msg, $show = true) {
 142
 143                 $ts = strftime("%H:%M:%S", time());
 144                 if (function_exists('posix_getpid')) {
 145                         $ts = "$ts/" . posix_getpid();
 146                 }
 147
 148                 if ($show && !(defined('QUIET') && QUIET)) {
 149                         print "[$ts] $msg\n";
 150                 }
 151
 152                 if (defined('LOGFILE'))  {
 153                         $fp = fopen(LOGFILE, 'a+');
 154
 155                         if ($fp) {
 156                                 fputs($fp, "[$ts] $msg\n");
 157                                 fclose($fp);
 158                         }
 159                 }
 160
 161         } // function _debug
 162
 163         /**
 164          * Purge a feed old posts.
 165          *
 166          * @param mixed $link A database connection.
 167          * @param mixed $feed_id The id of the purged feed.
 168          * @param mixed $purge_interval Olderness of purged posts.
 169          * @param boolean $debug Set to True to enable the debug. False by default.
 170          * @access public
 171          * @return void
 172          */
 173         function purge_feed($feed_id, $purge_interval, $debug = false) {
 174
 175                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
 176
 177                 $rows = -1;
 178
 179                 $result = db_query(
 180                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 181
 182                 $owner_uid = false;
 183
 184                 if (db_num_rows($result) == 1) {
 185                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 186                 }
 187
 188                 if ($purge_interval == -1 || !$purge_interval) {
 189                         if ($owner_uid) {
 190                                 ccache_update($feed_id, $owner_uid);
 191                         }
 192                         return;
 193                 }
 194
 195                 if (!$owner_uid) return;
 196
 197                 if (FORCE_ARTICLE_PURGE == 0) {
 198                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
 199                                 $owner_uid, false);
 200                 } else {
 201                         $purge_unread = true;
 202                         $purge_interval = FORCE_ARTICLE_PURGE;
 203                 }
 204
 205                 if (!$purge_unread) $query_limit = " unread = false AND ";
 206
 207                 if (DB_TYPE == "pgsql") {
 208                         $pg_version = get_pgsql_version();
 209
 210                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 211
 212                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
 213                                         ttrss_entries.id = ref_id AND
 214                                         marked = false AND
 215                                         feed_id = '$feed_id' AND
 216                                         $query_limit
 217                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 218
 219                         } else {
 220
 221                                 $result = db_query("DELETE FROM ttrss_user_entries
 222                                         USING ttrss_entries
 223                                         WHERE ttrss_entries.id = ref_id AND
 224                                         marked = false AND
 225                                         feed_id = '$feed_id' AND
 226                                         $query_limit
 227                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 228                         }
 229
 230                 } else {
 231
 232 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
 233                                 marked = false AND feed_id = '$feed_id' AND
 234                                 (SELECT date_updated FROM ttrss_entries WHERE
 235                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 236
 237                         $result = db_query("DELETE FROM ttrss_user_entries
 238                                 USING ttrss_user_entries, ttrss_entries
 239                                 WHERE ttrss_entries.id = ref_id AND
 240                                 marked = false AND
 241                                 feed_id = '$feed_id' AND
 242                                 $query_limit
 243                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 244                 }
 245
 246                 $rows = db_affected_rows($result);
 247
 248                 ccache_update($feed_id, $owner_uid);
 249
 250                 if ($debug) {
 251                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 252                 }
 253
 254                 return $rows;
 255         } // function purge_feed
 256
 257         function feed_purge_interval($feed_id) {
 258
 259                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
 260                         WHERE id = '$feed_id'");
 261
 262                 if (db_num_rows($result) == 1) {
 263                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 264                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 265
 266                         if ($purge_interval == 0) $purge_interval = get_pref(
 267                                 'PURGE_OLD_DAYS', $owner_uid);
 268
 269                         return $purge_interval;
 270
 271                 } else {
 272                         return -1;
 273                 }
 274         }
 275
 276         function purge_orphans($do_output = false) {
 277
 278                 // purge orphaned posts in main content table
 279                 $result = db_query("DELETE FROM ttrss_entries WHERE
 280                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 281
 282                 if ($do_output) {
 283                         $rows = db_affected_rows($result);
 284                         _debug("Purged $rows orphaned posts.");
 285                 }
 286         }
 287
 288         function get_feed_update_interval($feed_id) {
 289                 $result = db_query("SELECT owner_uid, update_interval FROM
 290                         ttrss_feeds WHERE id = '$feed_id'");
 291
 292                 if (db_num_rows($result) == 1) {
 293                         $update_interval = db_fetch_result($result, 0, "update_interval");
 294                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 295
 296                         if ($update_interval != 0) {
 297                                 return $update_interval;
 298                         } else {
 299                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 300                         }
 301
 302                 } else {
 303                         return -1;
 304                 }
 305         }
 306
 307         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 308
 309                 global $fetch_last_error;
 310                 global $fetch_last_error_code;
 311                 global $fetch_last_content_type;
 312                 global $fetch_curl_used;
 313
 314                 $url = str_replace(' ', '%20', $url);
 315
 316                 if (!defined('NO_CURL') && function_exists('curl_init')) {
 317
 318                         $fetch_curl_used = true;
 319
 320                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
 321                                 $new_url = geturl($url);
 322                                 if (!$new_url) {
 323                                     // geturl has already populated $fetch_last_error
 324                                     return false;
 325                                 }
 326                                 $ch = curl_init($new_url);
 327                         } else {
 328                                 $ch = curl_init($url);
 329                         }
 330
 331                         if ($timestamp && !$post_query) {
 332                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 333                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 334                         }
 335
 336                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 337                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 338                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
 339                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 340                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 341                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 342                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 343                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 344                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 345                         curl_setopt($ch, CURLOPT_ENCODING, "");
 346                         curl_setopt($ch, CURLOPT_REFERER, $url);
 347
 348                         if ($post_query) {
 349                                 curl_setopt($ch, CURLOPT_POST, true);
 350                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 351                         }
 352
 353                         if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
 354                                 curl_setopt($ch, CURLOPT_SSLVERSION, 3);
 355                         }
 356
 357                         if ($login && $pass)
 358                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 359
 360                         $contents = @curl_exec($ch);
 361
 362                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 363                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 364                                 $contents = @curl_exec($ch);
 365                         }
 366
 367                         if ($contents === false) {
 368                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 369                                 curl_close($ch);
 370                                 return false;
 371                         }
 372
 373                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 374                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 375
 376                         $fetch_last_error_code = $http_code;
 377
 378                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
 379                                 if (curl_errno($ch) != 0) {
 380                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 381                                 } else {
 382                                         $fetch_last_error = "HTTP Code: $http_code";
 383                                 }
 384                                 curl_close($ch);
 385                                 return false;
 386                         }
 387
 388                         curl_close($ch);
 389
 390                         return $contents;
 391                 } else {
 392
 393                         $fetch_curl_used = false;
 394
 395                         if ($login && $pass){
 396                                 $url_parts = array();
 397
 398                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 399
 400                                 $pass = urlencode($pass);
 401
 402                                 if ($url_parts[1] && $url_parts[2]) {
 403                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 404                                 }
 405                         }
 406
 407                         if (!$post_query && $timestamp) {
 408                                 $context = stream_context_create(array(
 409                                         'http' => array(
 410                                                 'method' => 'GET',
 411                                                 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
 412                                         )));
 413                         } else {
 414                                 $context = NULL;
 415                         }
 416
 417                         $old_error = error_get_last();
 418
 419                         $data = @file_get_contents($url, false, $context);
 420
 421                         $fetch_last_content_type = false;  // reset if no type was sent from server
 422                         if (isset($http_response_header) && is_array($http_response_header)) {
 423                                 foreach ($http_response_header as $h) {
 424                                         if (substr(strtolower($h), 0, 13) == 'content-type:') {
 425                                                 $fetch_last_content_type = substr($h, 14);
 426                                                 // don't abort here b/c there might be more than one
 427                                                 // e.g. if we were being redirected -- last one is the right one
 428                                         }
 429
 430                                         if (substr(strtolower($h), 0, 7) == 'http/1.') {
 431                                                 $fetch_last_error_code = (int) substr($h, 9, 3);
 432                                         }
 433                                 }
 434                         }
 435
 436                         if (!$data) {
 437                                 $error = error_get_last();
 438
 439                                 if ($error['message'] != $old_error['message']) {
 440                                         $fetch_last_error = $error["message"];
 441                                 } else {
 442                                         $fetch_last_error = "HTTP Code: $fetch_last_error_code";
 443                                 }
 444                         }
 445                         return $data;
 446                 }
 447
 448         }
 449
 450         /**
 451          * Try to determine the favicon URL for a feed.
 452          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 453          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 454          *
 455          * @param string $url A feed or page URL
 456          * @access public
 457          * @return mixed The favicon URL, or false if none was found.
 458          */
 459         function get_favicon_url($url) {
 460
 461                 $favicon_url = false;
 462
 463                 if ($html = @fetch_file_contents($url)) {
 464
 465                         libxml_use_internal_errors(true);
 466
 467                         $doc = new DOMDocument();
 468                         $doc->loadHTML($html);
 469                         $xpath = new DOMXPath($doc);
 470
 471                         $base = $xpath->query('/html/head/base');
 472                         foreach ($base as $b) {
 473                                 $url = $b->getAttribute("href");
 474                                 break;
 475                         }
 476
 477                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 478                         if (count($entries) > 0) {
 479                                 foreach ($entries as $entry) {
 480                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 481                                         break;
 482                                 }
 483                         }
 484                 }
 485
 486                 if (!$favicon_url)
 487                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 488
 489                 return $favicon_url;
 490         } // function get_favicon_url
 491
 492         function check_feed_favicon($site_url, $feed) {
 493 #               print "FAVICON [$site_url]: $favicon_url\n";
 494
 495                 $icon_file = ICONS_DIR . "/$feed.ico";
 496
 497                 if (!file_exists($icon_file)) {
 498                         $favicon_url = get_favicon_url($site_url);
 499
 500                         if ($favicon_url) {
 501                                 // Limiting to "image" type misses those served with text/plain
 502                                 $contents = fetch_file_contents($favicon_url); // , "image");
 503
 504                                 if ($contents) {
 505                                         // Crude image type matching.
 506                                         // Patterns gleaned from the file(1) source code.
 507                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 508                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 509                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 510                                         }
 511                                         elseif (preg_match('/^GIF8/', $contents)) {
 512                                                 // 0       string          GIF8            GIF image data
 513                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 514                                         }
 515                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 516                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 517                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 518                                         }
 519                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 520                                                 // 0       beshort         0xffd8          JPEG image data
 521                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 522                                         }
 523                                         else {
 524                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 525                                                 $contents = "";
 526                                         }
 527                                 }
 528
 529                                 if ($contents) {
 530                                         $fp = @fopen($icon_file, "w");
 531
 532                                         if ($fp) {
 533                                                 fwrite($fp, $contents);
 534                                                 fclose($fp);
 535                                                 chmod($icon_file, 0644);
 536                                         }
 537                                 }
 538                         }
 539             return $icon_file;
 540                 }
 541         }
 542
 543         function print_select($id, $default, $values, $attributes = "") {
 544                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 545                 foreach ($values as $v) {
 546                         if ($v == $default)
 547                                 $sel = "selected=\"1\"";
 548                          else
 549                                 $sel = "";
 550
 551                         $v = trim($v);
 552
 553                         print "<option value=\"$v\" $sel>$v</option>";
 554                 }
 555                 print "</select>";
 556         }
 557
 558         function print_select_hash($id, $default, $values, $attributes = "") {
 559                 print "<select name=\"$id\" id='$id' $attributes>";
 560                 foreach (array_keys($values) as $v) {
 561                         if ($v == $default)
 562                                 $sel = 'selected="selected"';
 563                          else
 564                                 $sel = "";
 565
 566                         $v = trim($v);
 567
 568                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 569                 }
 570
 571                 print "</select>";
 572         }
 573
 574         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 575                 foreach ($values as $v) {
 576
 577                         if ($v == $default)
 578                                 $sel = "checked";
 579                          else
 580                                 $sel = "";
 581
 582                         if ($v == $true_is) {
 583                                 $sel .= " value=\"1\"";
 584                         } else {
 585                                 $sel .= " value=\"0\"";
 586                         }
 587
 588                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 589                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 590
 591                 }
 592         }
 593
 594         function initialize_user_prefs($uid, $profile = false) {
 595
 596                 $uid = db_escape_string($uid);
 597
 598                 if (!$profile) {
 599                         $profile = "NULL";
 600                         $profile_qpart = "AND profile IS NULL";
 601                 } else {
 602                         $profile_qpart = "AND profile = '$profile'";
 603                 }
 604
 605                 if (get_schema_version() < 63) $profile_qpart = "";
 606
 607                 db_query("BEGIN");
 608
 609                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
 610
 611                 $u_result = db_query("SELECT pref_name
 612                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 613
 614                 $active_prefs = array();
 615
 616                 while ($line = db_fetch_assoc($u_result)) {
 617                         array_push($active_prefs, $line["pref_name"]);
 618                 }
 619
 620                 while ($line = db_fetch_assoc($result)) {
 621                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 622 //                              print "adding " . $line["pref_name"] . "<br>";
 623
 624                                 $line["def_value"] = db_escape_string($line["def_value"]);
 625                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
 626
 627                                 if (get_schema_version() < 63) {
 628                                         db_query("INSERT INTO ttrss_user_prefs
 629                                                 (owner_uid,pref_name,value) VALUES
 630                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 631
 632                                 } else {
 633                                         db_query("INSERT INTO ttrss_user_prefs
 634                                                 (owner_uid,pref_name,value, profile) VALUES
 635                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 636                                 }
 637
 638                         }
 639                 }
 640
 641                 db_query("COMMIT");
 642
 643         }
 644
 645         function get_ssl_certificate_id() {
 646                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 647                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 648                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 649                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 650                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 651                 }
 652                 return "";
 653         }
 654
 655         function authenticate_user($login, $password, $check_only = false) {
 656
 657                 if (!SINGLE_USER_MODE) {
 658                         $user_id = false;
 659
 660                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
 661
 662                                 $user_id = (int) $plugin->authenticate($login, $password);
 663
 664                                 if ($user_id) {
 665                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 666                                         break;
 667                                 }
 668                         }
 669
 670                         if ($user_id && !$check_only) {
 671                                 @session_start();
 672
 673                                 $_SESSION["uid"] = $user_id;
 674                                 $_SESSION["version"] = VERSION_STATIC;
 675
 676                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
 677                                         WHERE id = '$user_id'");
 678
 679                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 680                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 681                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 682
 683                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 684                                         $_SESSION["uid"]);
 685
 686                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 687                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 688                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 689
 690                                 $_SESSION["last_version_check"] = time();
 691
 692                                 initialize_user_prefs($_SESSION["uid"]);
 693
 694                                 return true;
 695                         }
 696
 697                         return false;
 698
 699                 } else {
 700
 701                         $_SESSION["uid"] = 1;
 702                         $_SESSION["name"] = "admin";
 703                         $_SESSION["access_level"] = 10;
 704
 705                         $_SESSION["hide_hello"] = true;
 706                         $_SESSION["hide_logout"] = true;
 707
 708                         $_SESSION["auth_module"] = false;
 709
 710                         if (!$_SESSION["csrf_token"]) {
 711                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 712                         }
 713
 714                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 715
 716                         initialize_user_prefs($_SESSION["uid"]);
 717
 718                         return true;
 719                 }
 720         }
 721
 722         function make_password($length = 8) {
 723
 724                 $password = "";
 725                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 726
 727         $i = 0;
 728
 729                 while ($i < $length) {
 730                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 731
 732                         if (!strstr($password, $char)) {
 733                                 $password .= $char;
 734                                 $i++;
 735                         }
 736                 }
 737                 return $password;
 738         }
 739
 740         // this is called after user is created to initialize default feeds, labels
 741         // or whatever else
 742
 743         // user preferences are checked on every login, not here
 744
 745         function initialize_user($uid) {
 746
 747                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 748                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 749                         'http://tt-rss.org/releases.rss')");
 750
 751                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 752                         values ('$uid', 'Tiny Tiny RSS: Forum',
 753                                 'http://tt-rss.org/forum/rss.php')");
 754         }
 755
 756         function logout_user() {
 757                 session_destroy();
 758                 if (isset($_COOKIE[session_name()])) {
 759                    setcookie(session_name(), '', time()-42000, '/');
 760                 }
 761         }
 762
 763         function validate_csrf($csrf_token) {
 764                 return $csrf_token == $_SESSION['csrf_token'];
 765         }
 766
 767         function load_user_plugins($owner_uid) {
 768                 if ($owner_uid) {
 769                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 770
 771                         PluginHost::getInstance()->load($plugins, PluginHost::KIND_USER, $owner_uid);
 772
 773                         if (get_schema_version() > 100) {
 774                                 PluginHost::getInstance()->load_data();
 775                         }
 776                 }
 777         }
 778
 779         function login_sequence() {
 780                 if (SINGLE_USER_MODE) {
 781                         @session_start();
 782                         authenticate_user("admin", null);
 783                         load_user_plugins($_SESSION["uid"]);
 784                 } else {
 785                         if (!validate_session()) $_SESSION["uid"] = false;
 786
 787                         if (!$_SESSION["uid"]) {
 788
 789                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
 790                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
 791                                 } else {
 792                                          authenticate_user(null, null, true);
 793                                 }
 794
 795                                 if (!$_SESSION["uid"]) {
 796                                         @session_destroy();
 797                                         setcookie(session_name(), '', time()-42000, '/');
 798
 799                                         render_login_form();
 800                                         exit;
 801                                 }
 802
 803                         } else {
 804                                 /* bump login timestamp */
 805                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 806                                         $_SESSION["uid"]);
 807                                 $_SESSION["last_login_update"] = time();
 808                         }
 809
 810                         if ($_SESSION["uid"]) {
 811                                 startup_gettext();
 812                                 load_user_plugins($_SESSION["uid"]);
 813
 814                                 /* cleanup ccache */
 815
 816                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 817                                         $_SESSION["uid"] . " AND
 818                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 819                                                         ttrss_feeds.id = feed_id) = 0");
 820
 821                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 822                                         $_SESSION["uid"] . " AND
 823                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 824                                                         ttrss_feed_categories.id = feed_id) = 0");
 825
 826                         }
 827
 828                 }
 829         }
 830
 831         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 832                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 833                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 834                 } else {
 835                         return $str;
 836                 }
 837         }
 838
 839         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 840
 841                 try {
 842                         $source_tz = new DateTimeZone($source_tz);
 843                 } catch (Exception $e) {
 844                         $source_tz = new DateTimeZone('UTC');
 845                 }
 846
 847                 try {
 848                         $dest_tz = new DateTimeZone($dest_tz);
 849                 } catch (Exception $e) {
 850                         $dest_tz = new DateTimeZone('UTC');
 851                 }
 852
 853                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 854                 return $dt->format('U') + $dest_tz->getOffset($dt);
 855         }
 856
 857         function make_local_datetime($timestamp, $long, $owner_uid = false,
 858                                         $no_smart_dt = false) {
 859
 860                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 861                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 862
 863                 global $utc_tz;
 864                 global $user_tz;
 865
 866                 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
 867
 868                 $timestamp = substr($timestamp, 0, 19);
 869
 870                 # We store date in UTC internally
 871                 $dt = new DateTime($timestamp, $utc_tz);
 872
 873                 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
 874
 875                 if ($user_tz_string != 'Automatic') {
 876
 877                         try {
 878                                 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
 879                         } catch (Exception $e) {
 880                                 $user_tz = $utc_tz;
 881                         }
 882
 883                         $tz_offset = $user_tz->getOffset($dt);
 884                 } else {
 885                         $tz_offset = (int) -$_SESSION["clientTzOffset"];
 886                 }
 887
 888                 $user_timestamp = $dt->format('U') + $tz_offset;
 889
 890                 if (!$no_smart_dt) {
 891                         return smart_date_time($user_timestamp,
 892                                 $tz_offset, $owner_uid);
 893                 } else {
 894                         if ($long)
 895                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 896                         else
 897                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 898
 899                         return date($format, $user_timestamp);
 900                 }
 901         }
 902
 903         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
 904                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 905
 906                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 907                         return date("G:i", $timestamp);
 908                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 909                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 910                         return date($format, $timestamp);
 911                 } else {
 912                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 913                         return date($format, $timestamp);
 914                 }
 915         }
 916
 917         function sql_bool_to_bool($s) {
 918                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 919                         return true;
 920                 } else {
 921                         return false;
 922                 }
 923         }
 924
 925         function bool_to_sql_bool($s) {
 926                 if ($s) {
 927                         return "true";
 928                 } else {
 929                         return "false";
 930                 }
 931         }
 932
 933         // Session caching removed due to causing wrong redirects to upgrade
 934         // script when get_schema_version() is called on an obsolete session
 935         // created on a previous schema version.
 936         function get_schema_version($nocache = false) {
 937                 global $schema_version;
 938
 939                 if (!$schema_version && !$nocache) {
 940                         $result = db_query("SELECT schema_version FROM ttrss_version");
 941                         $version = db_fetch_result($result, 0, "schema_version");
 942                         $schema_version = $version;
 943                         return $version;
 944                 } else {
 945                         return $schema_version;
 946                 }
 947         }
 948
 949         function sanity_check() {
 950                 require_once 'errors.php';
 951
 952                 $error_code = 0;
 953                 $schema_version = get_schema_version(true);
 954
 955                 if ($schema_version != SCHEMA_VERSION) {
 956                         $error_code = 5;
 957                 }
 958
 959                 if (DB_TYPE == "mysql") {
 960                         $result = db_query("SELECT true", false);
 961                         if (db_num_rows($result) != 1) {
 962                                 $error_code = 10;
 963                         }
 964                 }
 965
 966                 if (db_escape_string("testTEST") != "testTEST") {
 967                         $error_code = 12;
 968                 }
 969
 970                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 971         }
 972
 973         function file_is_locked($filename) {
 974                 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
 975                         if (function_exists('flock')) {
 976                                 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 977                                 if ($fp) {
 978                                         if (flock($fp, LOCK_EX | LOCK_NB)) {
 979                                                 flock($fp, LOCK_UN);
 980                                                 fclose($fp);
 981                                                 return false;
 982                                         }
 983                                         fclose($fp);
 984                                         return true;
 985                                 } else {
 986                                         return false;
 987                                 }
 988                         }
 989                         return true; // consider the file always locked and skip the test
 990                 } else {
 991                         return false;
 992                 }
 993         }
 994
 995
 996         function make_lockfile($filename) {
 997                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 998
 999                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
1000                         $stat_h = fstat($fp);
1001                         $stat_f = stat(LOCK_DIRECTORY . "/$filename");
1002
1003                         if (strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
1004                                 if ($stat_h["ino"] != $stat_f["ino"] ||
1005                                                 $stat_h["dev"] != $stat_f["dev"]) {
1006
1007                                         return false;
1008                                 }
1009                         }
1010
1011                         if (function_exists('posix_getpid')) {
1012                                 fwrite($fp, posix_getpid() . "\n");
1013                         }
1014                         return $fp;
1015                 } else {
1016                         return false;
1017                 }
1018         }
1019
1020         function make_stampfile($filename) {
1021                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1022
1023                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1024                         fwrite($fp, time() . "\n");
1025                         flock($fp, LOCK_UN);
1026                         fclose($fp);
1027                         return true;
1028                 } else {
1029                         return false;
1030                 }
1031         }
1032
1033         function sql_random_function() {
1034                 if (DB_TYPE == "mysql") {
1035                         return "RAND()";
1036                 } else {
1037                         return "RANDOM()";
1038                 }
1039         }
1040
1041         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
1042
1043                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1044
1045                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1046
1047                         // Todo: all this interval stuff needs some generic generator function
1048
1049                         $date_qpart = "false";
1050
1051                         switch ($mode) {
1052                         case "1day":
1053                                 if (DB_TYPE == "pgsql") {
1054                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1055                                 } else {
1056                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1057                                 }
1058                                 break;
1059                         case "1week":
1060                                 if (DB_TYPE == "pgsql") {
1061                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1062                                 } else {
1063                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1064                                 }
1065                                 break;
1066                         case "2week":
1067                                 if (DB_TYPE == "pgsql") {
1068                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1069                                 } else {
1070                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1071                                 }
1072                                 break;
1073                         default:
1074                                 $date_qpart = "true";
1075                         }
1076
1077                         if (is_numeric($feed)) {
1078                                 if ($cat_view) {
1079
1080                                         if ($feed >= 0) {
1081
1082                                                 if ($feed > 0) {
1083                                                         $children = getChildCategories($feed, $owner_uid);
1084                                                         array_push($children, $feed);
1085
1086                                                         $children = join(",", $children);
1087
1088                                                         $cat_qpart = "cat_id IN ($children)";
1089                                                 } else {
1090                                                         $cat_qpart = "cat_id IS NULL";
1091                                                 }
1092
1093                                                 db_query("UPDATE ttrss_user_entries
1094                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1095                                                                 (SELECT id FROM
1096                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1097                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1098                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1099
1100                                         } else if ($feed == -2) {
1101
1102                                                 db_query("UPDATE ttrss_user_entries
1103                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1104                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1105                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1106                                         }
1107
1108                                 } else if ($feed > 0) {
1109
1110                                         db_query("UPDATE ttrss_user_entries
1111                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1112                                                         (SELECT id FROM
1113                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1114                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1115
1116                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1117
1118                                         if ($feed == -1) {
1119                                                 db_query("UPDATE ttrss_user_entries
1120                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1121                                                                 (SELECT id FROM
1122                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1123                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1124                                         }
1125
1126                                         if ($feed == -2) {
1127                                                 db_query("UPDATE ttrss_user_entries
1128                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1129                                                                 (SELECT id FROM
1130                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1131                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1132                                         }
1133
1134                                         if ($feed == -3) {
1135
1136                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1137
1138                                                 if (DB_TYPE == "pgsql") {
1139                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1140                                                 } else {
1141                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1142                                                                 INTERVAL $intl HOUR) ";
1143                                                 }
1144
1145                                                 db_query("UPDATE ttrss_user_entries
1146                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1147                                                                 (SELECT id FROM
1148                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1149                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1150                                         }
1151
1152                                         if ($feed == -4) {
1153                                                 db_query("UPDATE ttrss_user_entries
1154                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1155                                                                 (SELECT id FROM
1156                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1157                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1158                                         }
1159
1160                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1161
1162                                         $label_id = feed_to_label_id($feed);
1163
1164                                         db_query("UPDATE ttrss_user_entries
1165                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1166                                                         (SELECT id FROM
1167                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1168                                                                         AND label_id = '$label_id' AND ref_id = article_id
1169                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1170
1171                                 }
1172
1173                                 ccache_update($feed, $owner_uid, $cat_view);
1174
1175                         } else { // tag
1176                                 db_query("UPDATE ttrss_user_entries
1177                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1178                                                 (SELECT id FROM
1179                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1180                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1181                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1182
1183                         }
1184         }
1185
1186         function getAllCounters() {
1187                 $data = getGlobalCounters();
1188
1189                 $data = array_merge($data, getVirtCounters());
1190                 $data = array_merge($data, getLabelCounters());
1191                 $data = array_merge($data, getFeedCounters());
1192                 $data = array_merge($data, getCategoryCounters());
1193
1194                 return $data;
1195         }
1196
1197         function getCategoryTitle($cat_id) {
1198
1199                 if ($cat_id == -1) {
1200                         return __("Special");
1201                 } else if ($cat_id == -2) {
1202                         return __("Labels");
1203                 } else {
1204
1205                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1206                                 id = '$cat_id'");
1207
1208                         if (db_num_rows($result) == 1) {
1209                                 return db_fetch_result($result, 0, "title");
1210                         } else {
1211                                 return __("Uncategorized");
1212                         }
1213                 }
1214         }
1215
1216
1217         function getCategoryCounters() {
1218                 $ret_arr = array();
1219
1220                 /* Labels category */
1221
1222                 $cv = array("id" => -2, "kind" => "cat",
1223                         "counter" => getCategoryUnread(-2));
1224
1225                 array_push($ret_arr, $cv);
1226
1227                 $result = db_query("SELECT id AS cat_id, value AS unread,
1228                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1229                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1230                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1231                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1232                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1233                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1234
1235                 while ($line = db_fetch_assoc($result)) {
1236                         $line["cat_id"] = (int) $line["cat_id"];
1237
1238                         if ($line["num_children"] > 0) {
1239                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1240                         } else {
1241                                 $child_counter = 0;
1242                         }
1243
1244                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1245                                 "counter" => $line["unread"] + $child_counter);
1246
1247                         array_push($ret_arr, $cv);
1248                 }
1249
1250                 /* Special case: NULL category doesn't actually exist in the DB */
1251
1252                 $cv = array("id" => 0, "kind" => "cat",
1253                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1254
1255                 array_push($ret_arr, $cv);
1256
1257                 return $ret_arr;
1258         }
1259
1260         // only accepts real cats (>= 0)
1261         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1262                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1263
1264                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1265                                 AND owner_uid = $owner_uid");
1266
1267                 $unread = 0;
1268
1269                 while ($line = db_fetch_assoc($result)) {
1270                         $unread += getCategoryUnread($line["id"], $owner_uid);
1271                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1272                 }
1273
1274                 return $unread;
1275         }
1276
1277         function getCategoryUnread($cat, $owner_uid = false) {
1278
1279                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1280
1281                 if ($cat >= 0) {
1282
1283                         if ($cat != 0) {
1284                                 $cat_query = "cat_id = '$cat'";
1285                         } else {
1286                                 $cat_query = "cat_id IS NULL";
1287                         }
1288
1289                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1290                                         AND owner_uid = " . $owner_uid);
1291
1292                         $cat_feeds = array();
1293                         while ($line = db_fetch_assoc($result)) {
1294                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1295                         }
1296
1297                         if (count($cat_feeds) == 0) return 0;
1298
1299                         $match_part = implode(" OR ", $cat_feeds);
1300
1301                         $result = db_query("SELECT COUNT(int_id) AS unread
1302                                 FROM ttrss_user_entries
1303                                 WHERE   unread = true AND ($match_part)
1304                                 AND owner_uid = " . $owner_uid);
1305
1306                         $unread = 0;
1307
1308                         # this needs to be rewritten
1309                         while ($line = db_fetch_assoc($result)) {
1310                                 $unread += $line["unread"];
1311                         }
1312
1313                         return $unread;
1314                 } else if ($cat == -1) {
1315                         return getFeedUnread(-1) + getFeedUnread(-2) + getFeedUnread(-3) + getFeedUnread(0);
1316                 } else if ($cat == -2) {
1317
1318                         $result = db_query("
1319                                 SELECT COUNT(unread) AS unread FROM
1320                                         ttrss_user_entries, ttrss_user_labels2
1321                                 WHERE article_id = ref_id AND unread = true
1322                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1323
1324                         $unread = db_fetch_result($result, 0, "unread");
1325
1326                         return $unread;
1327
1328                 }
1329         }
1330
1331         function getFeedUnread($feed, $is_cat = false) {
1332                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1333         }
1334
1335         function getLabelUnread($label_id, $owner_uid = false) {
1336                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1337
1338                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1339                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1340
1341                 if (db_num_rows($result) != 0) {
1342                         return db_fetch_result($result, 0, "unread");
1343                 } else {
1344                         return 0;
1345                 }
1346         }
1347
1348         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1349                 $owner_uid = false) {
1350
1351                 $n_feed = (int) $feed;
1352                 $need_entries = false;
1353
1354                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1355
1356                 if ($unread_only) {
1357                         $unread_qpart = "unread = true";
1358                 } else {
1359                         $unread_qpart = "true";
1360                 }
1361
1362                 if ($is_cat) {
1363                         return getCategoryUnread($n_feed, $owner_uid);
1364                 } else if ($n_feed == -6) {
1365                         return 0;
1366                 } else if ($feed != "0" && $n_feed == 0) {
1367
1368                         $feed = db_escape_string($feed);
1369
1370                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1371                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1372                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1373                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1374                         return db_fetch_result($result, 0, "count");
1375
1376                 } else if ($n_feed == -1) {
1377                         $match_part = "marked = true";
1378                 } else if ($n_feed == -2) {
1379                         $match_part = "published = true";
1380                 } else if ($n_feed == -3) {
1381                         $match_part = "unread = true AND score >= 0";
1382
1383                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1384
1385                         if (DB_TYPE == "pgsql") {
1386                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1387                         } else {
1388                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1389                         }
1390
1391                         $need_entries = true;
1392
1393                 } else if ($n_feed == -4) {
1394                         $match_part = "true";
1395                 } else if ($n_feed >= 0) {
1396
1397                         if ($n_feed != 0) {
1398                                 $match_part = "feed_id = '$n_feed'";
1399                         } else {
1400                                 $match_part = "feed_id IS NULL";
1401                         }
1402
1403                 } else if ($feed < LABEL_BASE_INDEX) {
1404
1405                         $label_id = feed_to_label_id($feed);
1406
1407                         return getLabelUnread($label_id, $owner_uid);
1408
1409                 }
1410
1411                 if ($match_part) {
1412
1413                         if ($need_entries) {
1414                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1415                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1416                         } else {
1417                                 $from_qpart = "ttrss_user_entries";
1418                         }
1419
1420                         $query = "SELECT count(int_id) AS unread
1421                                 FROM $from_qpart WHERE
1422                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1423
1424                         //echo "[$feed/$query]\n";
1425
1426                         $result = db_query($query);
1427
1428                 } else {
1429
1430                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1431                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1432                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1433                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1434                 }
1435
1436                 $unread = db_fetch_result($result, 0, "unread");
1437
1438                 return $unread;
1439         }
1440
1441         function getGlobalUnread($user_id = false) {
1442
1443                 if (!$user_id) {
1444                         $user_id = $_SESSION["uid"];
1445                 }
1446
1447                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1448                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1449
1450                 $c_id = db_fetch_result($result, 0, "c_id");
1451
1452                 return $c_id;
1453         }
1454
1455         function getGlobalCounters($global_unread = -1) {
1456                 $ret_arr = array();
1457
1458                 if ($global_unread == -1) {
1459                         $global_unread = getGlobalUnread();
1460                 }
1461
1462                 $cv = array("id" => "global-unread",
1463                         "counter" => (int) $global_unread);
1464
1465                 array_push($ret_arr, $cv);
1466
1467                 $result = db_query("SELECT COUNT(id) AS fn FROM
1468                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1469
1470                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1471
1472                 $cv = array("id" => "subscribed-feeds",
1473                         "counter" => (int) $subscribed_feeds);
1474
1475                 array_push($ret_arr, $cv);
1476
1477                 return $ret_arr;
1478         }
1479
1480         function getVirtCounters() {
1481
1482                 $ret_arr = array();
1483
1484                 for ($i = 0; $i >= -4; $i--) {
1485
1486                         $count = getFeedUnread($i);
1487
1488                         if ($i == 0 || $i == -1 || $i == -2)
1489                                 $auxctr = getFeedArticles($i, false);
1490                         else
1491                                 $auxctr = 0;
1492
1493                         $cv = array("id" => $i,
1494                                 "counter" => (int) $count,
1495                                 "auxcounter" => $auxctr);
1496
1497 //                      if (get_pref('EXTENDED_FEEDLIST'))
1498 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1499
1500                         array_push($ret_arr, $cv);
1501                 }
1502
1503                 $feeds = PluginHost::getInstance()->get_feeds(-1);
1504
1505                 if (is_array($feeds)) {
1506                         foreach ($feeds as $feed) {
1507                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1508                                         "counter" => $feed['sender']->get_unread($feed['id']));
1509
1510                                 if (method_exists($feed['sender'], 'get_total'))
1511                                         $cv["auxcounter"] = $feed['sender']->get_total($feed['id']);
1512
1513                                 array_push($ret_arr, $cv);
1514                         }
1515                 }
1516
1517                 return $ret_arr;
1518         }
1519
1520         function getLabelCounters($descriptions = false) {
1521
1522                 $ret_arr = array();
1523
1524                 $owner_uid = $_SESSION["uid"];
1525
1526                 $result = db_query("SELECT id,caption,COUNT(u1.unread) AS unread,COUNT(u2.unread) AS total
1527                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1528                                 (ttrss_labels2.id = label_id)
1529                                 LEFT JOIN ttrss_user_entries AS u1 ON (u1.ref_id = article_id AND u1.unread = true
1530                                         AND u1.owner_uid = $owner_uid)
1531                                 LEFT JOIN ttrss_user_entries AS u2 ON (u2.ref_id = article_id AND u2.unread = false
1532                                         AND u2.owner_uid = $owner_uid)
1533                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1534                                         ttrss_labels2.caption");
1535
1536                 while ($line = db_fetch_assoc($result)) {
1537
1538                         $id = label_to_feed_id($line["id"]);
1539
1540                         $cv = array("id" => $id,
1541                                 "counter" => (int) $line["unread"],
1542                                 "auxcounter" => (int) $line["total"]);
1543
1544                         if ($descriptions)
1545                                 $cv["description"] = $line["caption"];
1546
1547                         array_push($ret_arr, $cv);
1548                 }
1549
1550                 return $ret_arr;
1551         }
1552
1553         function getFeedCounters($active_feed = false) {
1554
1555                 $ret_arr = array();
1556
1557                 $query = "SELECT ttrss_feeds.id,
1558                                 ttrss_feeds.title,
1559                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1560                                 last_error, value AS count
1561                         FROM ttrss_feeds, ttrss_counters_cache
1562                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1563                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1564                                 AND ttrss_counters_cache.feed_id = id";
1565
1566                 $result = db_query($query);
1567                 $fctrs_modified = false;
1568
1569                 while ($line = db_fetch_assoc($result)) {
1570
1571                         $id = $line["id"];
1572                         $count = $line["count"];
1573                         $last_error = htmlspecialchars($line["last_error"]);
1574
1575                         $last_updated = make_local_datetime($line['last_updated'], false);
1576
1577                         $has_img = feed_has_icon($id);
1578
1579                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1580                                 $last_updated = '';
1581
1582                         $cv = array("id" => $id,
1583                                 "updated" => $last_updated,
1584                                 "counter" => (int) $count,
1585                                 "has_img" => (int) $has_img);
1586
1587                         if ($last_error)
1588                                 $cv["error"] = $last_error;
1589
1590 //                      if (get_pref('EXTENDED_FEEDLIST'))
1591 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1592
1593                         if ($active_feed && $id == $active_feed)
1594                                 $cv["title"] = truncate_string($line["title"], 30);
1595
1596                         array_push($ret_arr, $cv);
1597
1598                 }
1599
1600                 return $ret_arr;
1601         }
1602
1603         function get_pgsql_version() {
1604                 $result = db_query("SELECT version() AS version");
1605                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1606                 return $version[1];
1607         }
1608
1609         /**
1610          * @return array (code => Status code, message => error message if available)
1611          *
1612          *                 0 - OK, Feed already exists
1613          *                 1 - OK, Feed added
1614          *                 2 - Invalid URL
1615          *                 3 - URL content is HTML, no feeds available
1616          *                 4 - URL content is HTML which contains multiple feeds.
1617          *                     Here you should call extractfeedurls in rpc-backend
1618          *                     to get all possible feeds.
1619          *                 5 - Couldn't download the URL content.
1620          *                 6 - Content is an invalid XML.
1621          */
1622         function subscribe_to_feed($url, $cat_id = 0,
1623                         $auth_login = '', $auth_pass = '') {
1624
1625                 global $fetch_last_error;
1626
1627                 require_once "include/rssfuncs.php";
1628
1629                 $url = fix_url($url);
1630
1631                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1632
1633                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1634
1635                 if (!$contents) {
1636                         return array("code" => 5, "message" => $fetch_last_error);
1637                 }
1638
1639                 if (is_html($contents)) {
1640                         $feedUrls = get_feeds_from_html($url, $contents);
1641
1642                         if (count($feedUrls) == 0) {
1643                                 return array("code" => 3);
1644                         } else if (count($feedUrls) > 1) {
1645                                 return array("code" => 4, "feeds" => $feedUrls);
1646                         }
1647                         //use feed url as new URL
1648                         $url = key($feedUrls);
1649                 }
1650
1651                 /* libxml_use_internal_errors(true);
1652                 $doc = new DOMDocument();
1653                 $doc->loadXML($contents);
1654                 $error = libxml_get_last_error();
1655                 libxml_clear_errors();
1656
1657                 if ($error) {
1658                         $error_message = format_libxml_error($error);
1659
1660                         return array("code" => 6, "message" => $error_message);
1661                 } */
1662
1663                 if ($cat_id == "0" || !$cat_id) {
1664                         $cat_qpart = "NULL";
1665                 } else {
1666                         $cat_qpart = "'$cat_id'";
1667                 }
1668
1669                 $result = db_query(
1670                         "SELECT id FROM ttrss_feeds
1671                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1672
1673                 if (strlen(FEED_CRYPT_KEY) > 0) {
1674                         require_once "crypt.php";
1675                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1676                         $auth_pass_encrypted = 'true';
1677                 } else {
1678                         $auth_pass_encrypted = 'false';
1679                 }
1680
1681                 $auth_pass = db_escape_string($auth_pass);
1682
1683                 if (db_num_rows($result) == 0) {
1684                         $result = db_query(
1685                                 "INSERT INTO ttrss_feeds
1686                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1687                                 VALUES ('".$_SESSION["uid"]."', '$url',
1688                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1689
1690                         $result = db_query(
1691                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1692                                         AND owner_uid = " . $_SESSION["uid"]);
1693
1694                         $feed_id = db_fetch_result($result, 0, "id");
1695
1696                         if ($feed_id) {
1697                                 update_rss_feed($feed_id, true);
1698                         }
1699
1700                         return array("code" => 1);
1701                 } else {
1702                         return array("code" => 0);
1703                 }
1704         }
1705
1706         function print_feed_select($id, $default_id = "",
1707                 $attributes = "", $include_all_feeds = true,
1708                 $root_id = false, $nest_level = 0) {
1709
1710                 if (!$root_id) {
1711                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1712                         if ($include_all_feeds) {
1713                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1714                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1715                         }
1716                 }
1717
1718                 if (get_pref('ENABLE_FEED_CATS')) {
1719
1720                         if ($root_id)
1721                                 $parent_qpart = "parent_cat = '$root_id'";
1722                         else
1723                                 $parent_qpart = "parent_cat IS NULL";
1724
1725                         $result = db_query("SELECT id,title,
1726                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1727                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1728                                 FROM ttrss_feed_categories
1729                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1730
1731                         while ($line = db_fetch_assoc($result)) {
1732
1733                                 for ($i = 0; $i < $nest_level; $i++)
1734                                         $line["title"] = " - " . $line["title"];
1735
1736                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1737
1738                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1739                                         $line["id"], htmlspecialchars($line["title"]));
1740
1741                                 if ($line["num_children"] > 0)
1742                                         print_feed_select($id, $default_id, $attributes,
1743                                                 $include_all_feeds, $line["id"], $nest_level+1);
1744
1745                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1746                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1747
1748                                 while ($fline = db_fetch_assoc($feed_result)) {
1749                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1750
1751                                         $fline["title"] = " + " . $fline["title"];
1752
1753                                         for ($i = 0; $i < $nest_level; $i++)
1754                                                 $fline["title"] = " - " . $fline["title"];
1755
1756                                         printf("<option $is_selected value='%d'>%s</option>",
1757                                                 $fline["id"], htmlspecialchars($fline["title"]));
1758                                 }
1759                         }
1760
1761                         if (!$root_id) {
1762                                 $default_is_cat = ($default_id == "CAT:0");
1763                                 $is_selected = $default_is_cat ? "selected=\"1\"" : "";
1764
1765                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1766                                         __("Uncategorized"));
1767
1768                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1769                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1770
1771                                 while ($fline = db_fetch_assoc($feed_result)) {
1772                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1773
1774                                         $fline["title"] = " + " . $fline["title"];
1775
1776                                         for ($i = 0; $i < $nest_level; $i++)
1777                                                 $fline["title"] = " - " . $fline["title"];
1778
1779                                         printf("<option $is_selected value='%d'>%s</option>",
1780                                                 $fline["id"], htmlspecialchars($fline["title"]));
1781                                 }
1782                         }
1783
1784                 } else {
1785                         $result = db_query("SELECT id,title FROM ttrss_feeds
1786                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1787
1788                         while ($line = db_fetch_assoc($result)) {
1789
1790                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1791
1792                                 printf("<option $is_selected value='%d'>%s</option>",
1793                                         $line["id"], htmlspecialchars($line["title"]));
1794                         }
1795                 }
1796
1797                 if (!$root_id) {
1798                         print "</select>";
1799                 }
1800         }
1801
1802         function print_feed_cat_select($id, $default_id,
1803                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1804
1805                         if (!$root_id) {
1806                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1807                         }
1808
1809                         if ($root_id)
1810                                 $parent_qpart = "parent_cat = '$root_id'";
1811                         else
1812                                 $parent_qpart = "parent_cat IS NULL";
1813
1814                         $result = db_query("SELECT id,title,
1815                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1816                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1817                                 FROM ttrss_feed_categories
1818                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1819
1820                         while ($line = db_fetch_assoc($result)) {
1821                                 if ($line["id"] == $default_id) {
1822                                         $is_selected = "selected=\"1\"";
1823                                 } else {
1824                                         $is_selected = "";
1825                                 }
1826
1827                                 for ($i = 0; $i < $nest_level; $i++)
1828                                         $line["title"] = " - " . $line["title"];
1829
1830                                 if ($line["title"])
1831                                         printf("<option $is_selected value='%d'>%s</option>",
1832                                                 $line["id"], htmlspecialchars($line["title"]));
1833
1834                                 if ($line["num_children"] > 0)
1835                                         print_feed_cat_select($id, $default_id, $attributes,
1836                                                 $include_all_cats, $line["id"], $nest_level+1);
1837                         }
1838
1839                         if (!$root_id) {
1840                                 if ($include_all_cats) {
1841                                         if (db_num_rows($result) > 0) {
1842                                                 print "<option disabled=\"1\">--------</option>";
1843                                         }
1844
1845                                         if ($default_id == 0) {
1846                                                 $is_selected = "selected=\"1\"";
1847                                         } else {
1848                                                 $is_selected = "";
1849                                         }
1850
1851                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1852                                 }
1853                                 print "</select>";
1854                         }
1855                 }
1856
1857         function checkbox_to_sql_bool($val) {
1858                 return ($val == "on") ? "true" : "false";
1859         }
1860
1861         function getFeedCatTitle($id) {
1862                 if ($id == -1) {
1863                         return __("Special");
1864                 } else if ($id < LABEL_BASE_INDEX) {
1865                         return __("Labels");
1866                 } else if ($id > 0) {
1867                         $result = db_query("SELECT ttrss_feed_categories.title
1868                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1869                                         cat_id = ttrss_feed_categories.id");
1870                         if (db_num_rows($result) == 1) {
1871                                 return db_fetch_result($result, 0, "title");
1872                         } else {
1873                                 return __("Uncategorized");
1874                         }
1875                 } else {
1876                         return "getFeedCatTitle($id) failed";
1877                 }
1878
1879         }
1880
1881         function getFeedIcon($id) {
1882                 switch ($id) {
1883                 case 0:
1884                         return "images/archive.png";
1885                         break;
1886                 case -1:
1887                         return "images/star.png";
1888                         break;
1889                 case -2:
1890                         return "images/feed.png";
1891                         break;
1892                 case -3:
1893                         return "images/fresh.png";
1894                         break;
1895                 case -4:
1896                         return "images/folder.png";
1897                         break;
1898                 case -6:
1899                         return "images/time.png";
1900                         break;
1901                 default:
1902                         if ($id < LABEL_BASE_INDEX) {
1903                                 return "images/label.png";
1904                         } else {
1905                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1906                                         return ICONS_URL . "/$id.ico";
1907                         }
1908                         break;
1909                 }
1910
1911                 return false;
1912         }
1913
1914         function getFeedTitle($id, $cat = false) {
1915                 if ($cat) {
1916                         return getCategoryTitle($id);
1917                 } else if ($id == -1) {
1918                         return __("Starred articles");
1919                 } else if ($id == -2) {
1920                         return __("Published articles");
1921                 } else if ($id == -3) {
1922                         return __("Fresh articles");
1923                 } else if ($id == -4) {
1924                         return __("All articles");
1925                 } else if ($id === 0 || $id === "0") {
1926                         return __("Archived articles");
1927                 } else if ($id == -6) {
1928                         return __("Recently read");
1929                 } else if ($id < LABEL_BASE_INDEX) {
1930                         $label_id = feed_to_label_id($id);
1931                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1932                         if (db_num_rows($result) == 1) {
1933                                 return db_fetch_result($result, 0, "caption");
1934                         } else {
1935                                 return "Unknown label ($label_id)";
1936                         }
1937
1938                 } else if (is_numeric($id) && $id > 0) {
1939                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1940                         if (db_num_rows($result) == 1) {
1941                                 return db_fetch_result($result, 0, "title");
1942                         } else {
1943                                 return "Unknown feed ($id)";
1944                         }
1945                 } else {
1946                         return $id;
1947                 }
1948         }
1949
1950         function make_init_params() {
1951                 $params = array();
1952
1953                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1954                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1955                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1956                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1957
1958                                  $params[strtolower($param)] = (int) get_pref($param);
1959                  }
1960
1961                 $params["icons_url"] = ICONS_URL;
1962                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1963                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1964                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1965                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1966                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1967                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1968
1969                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1970                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1971
1972                 $max_feed_id = db_fetch_result($result, 0, "mid");
1973                 $num_feeds = db_fetch_result($result, 0, "nf");
1974
1975                 $params["max_feed_id"] = (int) $max_feed_id;
1976                 $params["num_feeds"] = (int) $num_feeds;
1977
1978                 $params["hotkeys"] = get_hotkeys_map();
1979
1980                 $params["csrf_token"] = $_SESSION["csrf_token"];
1981                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1982
1983                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1984
1985                 return $params;
1986         }
1987
1988         function get_hotkeys_info() {
1989                 $hotkeys = array(
1990                         __("Navigation") => array(
1991                                 "next_feed" => __("Open next feed"),
1992                                 "prev_feed" => __("Open previous feed"),
1993                                 "next_article" => __("Open next article"),
1994                                 "prev_article" => __("Open previous article"),
1995                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1996                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1997                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1998                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1999                                 "search_dialog" => __("Show search dialog")),
2000                         __("Article") => array(
2001                                 "toggle_mark" => __("Toggle starred"),
2002                                 "toggle_publ" => __("Toggle published"),
2003                                 "toggle_unread" => __("Toggle unread"),
2004                                 "edit_tags" => __("Edit tags"),
2005                                 "dismiss_selected" => __("Dismiss selected"),
2006                                 "dismiss_read" => __("Dismiss read"),
2007                                 "open_in_new_window" => __("Open in new window"),
2008                                 "catchup_below" => __("Mark below as read"),
2009                                 "catchup_above" => __("Mark above as read"),
2010                                 "article_scroll_down" => __("Scroll down"),
2011                                 "article_scroll_up" => __("Scroll up"),
2012                                 "select_article_cursor" => __("Select article under cursor"),
2013                                 "email_article" => __("Email article"),
2014                                 "close_article" => __("Close/collapse article"),
2015                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
2016                                 "toggle_widescreen" => __("Toggle widescreen mode"),
2017                                 "toggle_embed_original" => __("Toggle embed original")),
2018                         __("Article selection") => array(
2019                                 "select_all" => __("Select all articles"),
2020                                 "select_unread" => __("Select unread"),
2021                                 "select_marked" => __("Select starred"),
2022                                 "select_published" => __("Select published"),
2023                                 "select_invert" => __("Invert selection"),
2024                                 "select_none" => __("Deselect everything")),
2025                         __("Feed") => array(
2026                                 "feed_refresh" => __("Refresh current feed"),
2027                                 "feed_unhide_read" => __("Un/hide read feeds"),
2028                                 "feed_subscribe" => __("Subscribe to feed"),
2029                                 "feed_edit" => __("Edit feed"),
2030                                 "feed_catchup" => __("Mark as read"),
2031                                 "feed_reverse" => __("Reverse headlines"),
2032                                 "feed_debug_update" => __("Debug feed update"),
2033                                 "catchup_all" => __("Mark all feeds as read"),
2034                                 "cat_toggle_collapse" => __("Un/collapse current category"),
2035                                 "toggle_combined_mode" => __("Toggle combined mode"),
2036                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
2037                         __("Go to") => array(
2038                                 "goto_all" => __("All articles"),
2039                                 "goto_fresh" => __("Fresh"),
2040                                 "goto_marked" => __("Starred"),
2041                                 "goto_published" => __("Published"),
2042                                 "goto_tagcloud" => __("Tag cloud"),
2043                                 "goto_prefs" => __("Preferences")),
2044                         __("Other") => array(
2045                                 "create_label" => __("Create label"),
2046                                 "create_filter" => __("Create filter"),
2047                                 "collapse_sidebar" => __("Un/collapse sidebar"),
2048                                 "help_dialog" => __("Show help dialog"))
2049                         );
2050
2051                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
2052                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
2053                 }
2054
2055                 return $hotkeys;
2056         }
2057
2058         function get_hotkeys_map() {
2059                 $hotkeys = array(
2060 //                      "navigation" => array(
2061                                 "k" => "next_feed",
2062                                 "j" => "prev_feed",
2063                                 "n" => "next_article",
2064                                 "p" => "prev_article",
2065                                 "(38)|up" => "prev_article",
2066                                 "(40)|down" => "next_article",
2067 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2068 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2069                                 "(191)|/" => "search_dialog",
2070 //                      "article" => array(
2071                                 "s" => "toggle_mark",
2072                                 "*s" => "toggle_publ",
2073                                 "u" => "toggle_unread",
2074                                 "*t" => "edit_tags",
2075                                 "*d" => "dismiss_selected",
2076                                 "*x" => "dismiss_read",
2077                                 "o" => "open_in_new_window",
2078                                 "c p" => "catchup_below",
2079                                 "c n" => "catchup_above",
2080                                 "*n" => "article_scroll_down",
2081                                 "*p" => "article_scroll_up",
2082                                 "*(38)|Shift+up" => "article_scroll_up",
2083                                 "*(40)|Shift+down" => "article_scroll_down",
2084                                 "a *w" => "toggle_widescreen",
2085                                 "a e" => "toggle_embed_original",
2086                                 "e" => "email_article",
2087                                 "a q" => "close_article",
2088 //                      "article_selection" => array(
2089                                 "a a" => "select_all",
2090                                 "a u" => "select_unread",
2091                                 "a *u" => "select_marked",
2092                                 "a p" => "select_published",
2093                                 "a i" => "select_invert",
2094                                 "a n" => "select_none",
2095 //                      "feed" => array(
2096                                 "f r" => "feed_refresh",
2097                                 "f a" => "feed_unhide_read",
2098                                 "f s" => "feed_subscribe",
2099                                 "f e" => "feed_edit",
2100                                 "f q" => "feed_catchup",
2101                                 "f x" => "feed_reverse",
2102                                 "f *d" => "feed_debug_update",
2103                                 "f *c" => "toggle_combined_mode",
2104                                 "f c" => "toggle_cdm_expanded",
2105                                 "*q" => "catchup_all",
2106                                 "x" => "cat_toggle_collapse",
2107 //                      "goto" => array(
2108                                 "g a" => "goto_all",
2109                                 "g f" => "goto_fresh",
2110                                 "g s" => "goto_marked",
2111                                 "g p" => "goto_published",
2112                                 "g t" => "goto_tagcloud",
2113                                 "g *p" => "goto_prefs",
2114 //                      "other" => array(
2115                                 "(9)|Tab" => "select_article_cursor", // tab
2116                                 "c l" => "create_label",
2117                                 "c f" => "create_filter",
2118                                 "c s" => "collapse_sidebar",
2119                                 "^(191)|Ctrl+/" => "help_dialog",
2120                         );
2121
2122                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2123                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2124                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2125                 }
2126
2127                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
2128                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2129                 }
2130
2131                 $prefixes = array();
2132
2133                 foreach (array_keys($hotkeys) as $hotkey) {
2134                         $pair = explode(" ", $hotkey, 2);
2135
2136                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2137                                 array_push($prefixes, $pair[0]);
2138                         }
2139                 }
2140
2141                 return array($prefixes, $hotkeys);
2142         }
2143
2144         function make_runtime_info() {
2145                 $data = array();
2146
2147                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2148                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2149
2150                 $max_feed_id = db_fetch_result($result, 0, "mid");
2151                 $num_feeds = db_fetch_result($result, 0, "nf");
2152
2153                 $data["max_feed_id"] = (int) $max_feed_id;
2154                 $data["num_feeds"] = (int) $num_feeds;
2155
2156                 $data['last_article_id'] = getLastArticleId();
2157                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2158
2159                 $data['dep_ts'] = calculate_dep_timestamp();
2160                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2161
2162                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2163
2164                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2165
2166                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2167
2168                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2169
2170                                 if ($stamp) {
2171                                         $stamp_delta = time() - $stamp;
2172
2173                                         if ($stamp_delta > 1800) {
2174                                                 $stamp_check = 0;
2175                                         } else {
2176                                                 $stamp_check = 1;
2177                                                 $_SESSION["daemon_stamp_check"] = time();
2178                                         }
2179
2180                                         $data['daemon_stamp_ok'] = $stamp_check;
2181
2182                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2183
2184                                         $data['daemon_stamp'] = $stamp_fmt;
2185                                 }
2186                         }
2187                 }
2188
2189                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2190                                 $new_version_details = @check_for_update();
2191
2192                                 $data['new_version_available'] = (int) ($new_version_details != false);
2193
2194                                 $_SESSION["last_version_check"] = time();
2195                                 $_SESSION["version_data"] = $new_version_details;
2196                 }
2197
2198                 return $data;
2199         }
2200
2201         function search_to_sql($search) {
2202
2203                 $search_query_part = "";
2204
2205                 $keywords = explode(" ", $search);
2206                 $query_keywords = array();
2207                 $search_words = array();
2208
2209                 foreach ($keywords as $k) {
2210                         if (strpos($k, "-") === 0) {
2211                                 $k = substr($k, 1);
2212                                 $not = "NOT";
2213                         } else {
2214                                 $not = "";
2215                         }
2216
2217                         $commandpair = explode(":", mb_strtolower($k), 2);
2218
2219                         switch ($commandpair[0]) {
2220                         case "title":
2221                                 if ($commandpair[1]) {
2222                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2223                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2224                                 } else {
2225                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2226                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2227                                         array_push($search_words, $k);
2228                                 }
2229                                 break;
2230                         case "author":
2231                                 if ($commandpair[1]) {
2232                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2233                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2234                                 } else {
2235                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2236                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2237                                         array_push($search_words, $k);
2238                                 }
2239                                 break;
2240                         case "note":
2241                                 if ($commandpair[1]) {
2242                                         if ($commandpair[1] == "true")
2243                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2244                                         else if ($commandpair[1] == "false")
2245                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2246                                         else
2247                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2248                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2249                                 } else {
2250                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2251                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2252                                         if (!$not) array_push($search_words, $k);
2253                                 }
2254                                 break;
2255                         case "star":
2256
2257                                 if ($commandpair[1]) {
2258                                         if ($commandpair[1] == "true")
2259                                                 array_push($query_keywords, "($not (marked = true))");
2260                                         else
2261                                                 array_push($query_keywords, "($not (marked = false))");
2262                                 } else {
2263                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2264                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2265                                         if (!$not) array_push($search_words, $k);
2266                                 }
2267                                 break;
2268                         case "pub":
2269                                 if ($commandpair[1]) {
2270                                         if ($commandpair[1] == "true")
2271                                                 array_push($query_keywords, "($not (published = true))");
2272                                         else
2273                                                 array_push($query_keywords, "($not (published = false))");
2274
2275                                 } else {
2276                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2277                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2278                                         if (!$not) array_push($search_words, $k);
2279                                 }
2280                                 break;
2281                         default:
2282                                 if (strpos($k, "@") === 0) {
2283
2284                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2285                                         $orig_ts = strtotime(substr($k, 1));
2286                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2287
2288                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2289
2290                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2291                                 } else {
2292                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2293                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2294
2295                                         if (!$not) array_push($search_words, $k);
2296                                 }
2297                         }
2298                 }
2299
2300                 $search_query_part = implode("AND", $query_keywords);
2301
2302                 return array($search_query_part, $search_words);
2303         }
2304
2305         function getParentCategories($cat, $owner_uid) {
2306                 $rv = array();
2307
2308                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2309                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2310
2311                 while ($line = db_fetch_assoc($result)) {
2312                         array_push($rv, $line["parent_cat"]);
2313                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2314                 }
2315
2316                 return $rv;
2317         }
2318
2319         function getChildCategories($cat, $owner_uid) {
2320                 $rv = array();
2321
2322                 $result = db_query("SELECT id FROM ttrss_feed_categories
2323                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2324
2325                 while ($line = db_fetch_assoc($result)) {
2326                         array_push($rv, $line["id"]);
2327                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2328                 }
2329
2330                 return $rv;
2331         }
2332
2333         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false, $override_strategy = false, $override_vfeed = false) {
2334
2335                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2336
2337                 $ext_tables_part = "";
2338                 $search_words = array();
2339
2340                         if ($search) {
2341
2342                                 if (SPHINX_ENABLED) {
2343                                         $ids = join(",", @sphinx_search($search, 0, 500));
2344
2345                                         if ($ids)
2346                                                 $search_query_part = "ref_id IN ($ids) AND ";
2347                                         else
2348                                                 $search_query_part = "ref_id = -1 AND ";
2349
2350                                 } else {
2351                                         list($search_query_part, $search_words) = search_to_sql($search);
2352                                         $search_query_part .= " AND ";
2353                                 }
2354
2355                         } else {
2356                                 $search_query_part = "";
2357                         }
2358
2359                         if ($filter) {
2360
2361                                 if (DB_TYPE == "pgsql") {
2362                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2363                                 } else {
2364                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2365                                 }
2366
2367                                 $override_order = "updated DESC";
2368
2369                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2370
2371                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2372
2373
2374                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2375                                         ttrss_user_entries, ttrss_feeds
2376                                         WHERE $filter_query_part LIMIT 1", false);
2377
2378                                 if ($result) {
2379                                         $test = db_fetch_result($result, 0, "true_val");
2380
2381                                         if (!$test) {
2382                                                 $filter_query_part = "false AND";
2383                                         } else {
2384                                                 $filter_query_part .= " AND";
2385                                         }
2386                                 } else {
2387                                         $filter_query_part = "false AND";
2388                                 }
2389
2390                         } else {
2391                                 $filter_query_part = "";
2392                         }
2393
2394                         if ($since_id) {
2395                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2396                         } else {
2397                                 $since_id_part = "";
2398                         }
2399
2400                         $view_query_part = "";
2401
2402                         if ($view_mode == "adaptive") {
2403                                 if ($search) {
2404                                         $view_query_part = " ";
2405                                 } else if ($feed != -1) {
2406
2407                                         $unread = getFeedUnread($feed, $cat_view);
2408
2409                                         if ($cat_view && $feed > 0 && $include_children)
2410                                                 $unread += getCategoryChildrenUnread($feed);
2411
2412                                         if ($unread > 0)
2413                                 $view_query_part = " unread = true AND ";
2414
2415                                 }
2416                         }
2417
2418                         if ($view_mode == "marked") {
2419                                 $view_query_part = " marked = true AND ";
2420                         }
2421
2422                         if ($view_mode == "has_note") {
2423                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2424                         }
2425
2426                         if ($view_mode == "published") {
2427                                 $view_query_part = " published = true AND ";
2428                         }
2429
2430                         if ($view_mode == "unread" && $feed != -6) {
2431                                 $view_query_part = " unread = true AND ";
2432                         }
2433
2434                         if ($limit > 0) {
2435                                 $limit_query_part = "LIMIT " . $limit;
2436                         }
2437
2438                         $allow_archived = false;
2439
2440                         $vfeed_query_part = "";
2441
2442                         // override query strategy and enable feed display when searching globally
2443                         if ($search && $search_mode == "all_feeds") {
2444                                 $query_strategy_part = "true";
2445                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2446                         /* tags */
2447                         } else if (!is_numeric($feed)) {
2448                                 $query_strategy_part = "true";
2449                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2450                                         id = feed_id) as feed_title,";
2451                         } else if ($search && $search_mode == "this_cat") {
2452                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2453
2454                                 if ($feed > 0) {
2455                                         if ($include_children) {
2456                                                 $subcats = getChildCategories($feed, $owner_uid);
2457                                                 array_push($subcats, $feed);
2458                                                 $cats_qpart = join(",", $subcats);
2459                                         } else {
2460                                                 $cats_qpart = $feed;
2461                                         }
2462
2463                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2464
2465                                 } else {
2466                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2467                                 }
2468
2469                         } else if ($feed > 0) {
2470
2471                                 if ($cat_view) {
2472
2473                                         if ($feed > 0) {
2474                                                 if ($include_children) {
2475                                                         # sub-cats
2476                                                         $subcats = getChildCategories($feed, $owner_uid);
2477
2478                                                         array_push($subcats, $feed);
2479                                                         $query_strategy_part = "cat_id IN (".
2480                                                                         implode(",", $subcats).")";
2481
2482                                                 } else {
2483                                                         $query_strategy_part = "cat_id = '$feed'";
2484                                                 }
2485
2486                                         } else {
2487                                                 $query_strategy_part = "cat_id IS NULL";
2488                                         }
2489
2490                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2491
2492                                 } else {
2493                                         $query_strategy_part = "feed_id = '$feed'";
2494                                 }
2495                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2496                                 $query_strategy_part = "feed_id IS NULL";
2497                                 $allow_archived = true;
2498                         } else if ($feed == 0 && $cat_view) { // uncategorized
2499                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2500                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2501                         } else if ($feed == -1) { // starred virtual feed
2502                                 $query_strategy_part = "marked = true";
2503                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2504                                 $allow_archived = true;
2505
2506                                 if (!$override_order) {
2507                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2508                                 }
2509
2510                         } else if ($feed == -2) { // published virtual feed OR labels category
2511
2512                                 if (!$cat_view) {
2513                                         $query_strategy_part = "published = true";
2514                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2515                                         $allow_archived = true;
2516
2517                                         if (!$override_order) {
2518                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2519                                         }
2520
2521                                 } else {
2522                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2523
2524                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2525
2526                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2527                                                 ttrss_user_labels2.article_id = ref_id";
2528
2529                                 }
2530                         } else if ($feed == -6) { // recently read
2531                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2532                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2533                                 $allow_archived = true;
2534
2535                                 if (!$override_order) $override_order = "last_read DESC";
2536
2537 /*                      } else if ($feed == -7) { // shared
2538                                 $query_strategy_part = "uuid != ''";
2539                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2540                                 $allow_archived = true; */
2541                         } else if ($feed == -3) { // fresh virtual feed
2542                                 $query_strategy_part = "unread = true AND score >= 0";
2543
2544                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2545
2546                                 if (DB_TYPE == "pgsql") {
2547                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2548                                 } else {
2549                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2550                                 }
2551
2552                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2553                         } else if ($feed == -4) { // all articles virtual feed
2554                                 $allow_archived = true;
2555                                 $query_strategy_part = "true";
2556                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2557                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2558                                 $label_id = feed_to_label_id($feed);
2559
2560                                 $query_strategy_part = "label_id = '$label_id' AND
2561                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2562                                         ttrss_user_labels2.article_id = ref_id";
2563
2564                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2565                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2566                                 $allow_archived = true;
2567
2568                         } else {
2569                                 $query_strategy_part = "true";
2570                         }
2571
2572                         $order_by = "score DESC, date_entered DESC, updated DESC";
2573
2574                         if ($view_mode == "unread_first") {
2575                                 $order_by = "unread DESC, $order_by";
2576                         }
2577
2578                         if ($override_order) {
2579                                 $order_by = $override_order;
2580                         }
2581
2582                         if ($override_strategy) {
2583                                 $query_strategy_part = $override_strategy;
2584                         }
2585
2586                         if ($override_vfeed) {
2587                                 $vfeed_query_part = $override_vfeed;
2588                         }
2589
2590                         $feed_title = "";
2591
2592                         if ($search) {
2593                                 $feed_title = T_sprintf("Search results: %s", $search);
2594                         } else {
2595                                 if ($cat_view) {
2596                                         $feed_title = getCategoryTitle($feed);
2597                                 } else {
2598                                         if (is_numeric($feed) && $feed > 0) {
2599                                                 $result = db_query("SELECT title,site_url,last_error,last_updated
2600                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2601
2602                                                 $feed_title = db_fetch_result($result, 0, "title");
2603                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2604                                                 $last_error = db_fetch_result($result, 0, "last_error");
2605                                                 $last_updated = db_fetch_result($result, 0, "last_updated");
2606                                         } else {
2607                                                 $feed_title = getFeedTitle($feed);
2608                                         }
2609                                 }
2610                         }
2611
2612
2613                         $content_query_part = "content, content AS content_preview, ";
2614
2615
2616                         if (is_numeric($feed)) {
2617
2618                                 if ($feed >= 0) {
2619                                         $feed_kind = "Feeds";
2620                                 } else {
2621                                         $feed_kind = "Labels";
2622                                 }
2623
2624                                 if ($limit_query_part) {
2625                                         $offset_query_part = "OFFSET $offset";
2626                                 }
2627
2628                                 // proper override_order applied above
2629                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2630                                         if (!$override_order) {
2631                                                 $order_by = "ttrss_feeds.title, $order_by";
2632                                         } else {
2633                                                 $order_by = "ttrss_feeds.title, $override_order";
2634                                         }
2635                                 }
2636
2637                                 if (!$allow_archived) {
2638                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2639                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2640
2641                                 } else {
2642                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2643                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2644                                 }
2645
2646                                 if ($vfeed_query_part)
2647                                         $vfeed_query_part .= "favicon_avg_color,";
2648
2649                                 $query = "SELECT DISTINCT
2650                                                 date_entered,
2651                                                 guid,
2652                                                 ttrss_entries.id,ttrss_entries.title,
2653                                                 updated,
2654                                                 label_cache,
2655                                                 tag_cache,
2656                                                 always_display_enclosures,
2657                                                 site_url,
2658                                                 note,
2659                                                 num_comments,
2660                                                 comments,
2661                                                 int_id,
2662                                                 uuid,
2663                                                 lang,
2664                                                 hide_images,
2665                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2666                                                 last_marked, last_published,
2667                                                 $vfeed_query_part
2668                                                 $content_query_part
2669                                                 author,score
2670                                         FROM
2671                                                 $from_qpart
2672                                         WHERE
2673                                         $feed_check_qpart
2674                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2675                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2676                                         $search_query_part
2677                                         $filter_query_part
2678                                         $view_query_part
2679                                         $since_id_part
2680                                         $query_strategy_part ORDER BY $order_by
2681                                         $limit_query_part $offset_query_part";
2682
2683                                 if ($_REQUEST["debug"]) print $query;
2684
2685                                 $result = db_query($query);
2686
2687                         } else {
2688                                 // browsing by tag
2689
2690                                 $select_qpart = "SELECT DISTINCT " .
2691                                                                 "date_entered," .
2692                                                                 "guid," .
2693                                                                 "note," .
2694                                                                 "ttrss_entries.id as id," .
2695                                                                 "title," .
2696                                                                 "updated," .
2697                                                                 "unread," .
2698                                                                 "feed_id," .
2699                                                                 "orig_feed_id," .
2700                                                                 "marked," .
2701                                                                 "num_comments, " .
2702                                                                 "comments, " .
2703                                                                 "tag_cache," .
2704                                                                 "label_cache," .
2705                                                                 "link," .
2706                                                                 "lang," .
2707                                                                 "uuid," .
2708                                                                 "last_read," .
2709                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2710                                                                 "last_marked, last_published, " .
2711                                                                 $since_id_part .
2712                                                                 $vfeed_query_part .
2713                                                                 $content_query_part .
2714                                                                 "score ";
2715
2716                                 $feed_kind = "Tags";
2717                                 $all_tags = explode(",", $feed);
2718                                 if ($search_mode == 'any') {
2719                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2720                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2721                                         $where_qpart = " WHERE " .
2722                                                                    "ref_id = ttrss_entries.id AND " .
2723                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2724                                                                    "post_int_id = int_id AND $tag_sql AND " .
2725                                                                    $view_query_part .
2726                                                                    $search_query_part .
2727                                                                    $query_strategy_part . " ORDER BY $order_by " .
2728                                                                    $limit_query_part;
2729
2730                                 } else {
2731                                         $i = 1;
2732                                         $sub_selects = array();
2733                                         $sub_ands = array();
2734                                         foreach ($all_tags as $term) {
2735                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2736                                                 $i++;
2737                                         }
2738                                         if ($i > 2) {
2739                                                 $x = 1;
2740                                                 $y = 2;
2741                                                 do {
2742                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2743                                                         $x++;
2744                                                         $y++;
2745                                                 } while ($y < $i);
2746                                         }
2747                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2748                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2749                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2750                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2751                                 }
2752                                 //                              error_log("TAG SQL: " . $tag_sql);
2753                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2754
2755                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2756                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2757                         }
2758
2759                         return array($result, $feed_title, $feed_site_url, $last_error, $last_updated, $search_words);
2760
2761         }
2762
2763         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false, $highlight_words = false, $article_id = false) {
2764                 if (!$owner) $owner = $_SESSION["uid"];
2765
2766                 $res = trim($str); if (!$res) return '';
2767
2768                 $charset_hack = '<head>
2769                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2770                 </head>';
2771
2772                 $res = trim($res); if (!$res) return '';
2773
2774                 libxml_use_internal_errors(true);
2775
2776                 $doc = new DOMDocument();
2777                 $doc->loadHTML($charset_hack . $res);
2778                 $xpath = new DOMXPath($doc);
2779
2780                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2781
2782                 foreach ($entries as $entry) {
2783
2784                         if ($site_url) {
2785
2786                                 if ($entry->hasAttribute('href'))
2787                                         $entry->setAttribute('href',
2788                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2789
2790                                 if ($entry->hasAttribute('src')) {
2791                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2792
2793                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2794
2795                                         if (file_exists($cached_filename)) {
2796                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2797                                         }
2798
2799                                         $entry->setAttribute('src', $src);
2800                                 }
2801
2802                                 if ($entry->nodeName == 'img') {
2803                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2804                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2805
2806                                                 $p = $doc->createElement('p');
2807
2808                                                 $a = $doc->createElement('a');
2809                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2810
2811                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2812                                                 $a->setAttribute('target', '_blank');
2813
2814                                                 $p->appendChild($a);
2815
2816                                                 $entry->parentNode->replaceChild($p, $entry);
2817                                         }
2818                                 }
2819                         }
2820
2821                         if (strtolower($entry->nodeName) == "a") {
2822                                 $entry->setAttribute("target", "_blank");
2823                         }
2824                 }
2825
2826                 $entries = $xpath->query('//iframe');
2827                 foreach ($entries as $entry) {
2828                         $entry->setAttribute('sandbox', 'allow-scripts');
2829
2830                 }
2831
2832                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2833                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2834                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2835                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2836                         'dt', 'em', 'footer', 'figure', 'figcaption',
2837                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2838                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2839                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2840                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2841                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2842                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2843
2844                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2845
2846                 $disallowed_attributes = array('id', 'style', 'class');
2847
2848                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
2849                         $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes, $article_id);
2850                         if (is_array($retval)) {
2851                                 $doc = $retval[0];
2852                                 $allowed_elements = $retval[1];
2853                                 $disallowed_attributes = $retval[2];
2854                         } else {
2855                                 $doc = $retval;
2856                         }
2857                 }
2858
2859                 $doc->removeChild($doc->firstChild); //remove doctype
2860                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2861
2862                 if ($highlight_words) {
2863                         foreach ($highlight_words as $word) {
2864
2865                                 // http://stackoverflow.com/questions/4081372/highlight-keywords-in-a-paragraph
2866
2867                                 $elements = $xpath->query("//*/text()");
2868
2869                                 foreach ($elements as $child) {
2870
2871                                         $fragment = $doc->createDocumentFragment();
2872                                         $text = $child->textContent;
2873                                         $stubs = array();
2874
2875                                         while (($pos = mb_stripos($text, $word)) !== false) {
2876                                                 $fragment->appendChild(new DomText(mb_substr($text, 0, $pos)));
2877                                                 $word = mb_substr($text, $pos, mb_strlen($word));
2878                                                 $highlight = $doc->createElement('span');
2879                                                 $highlight->appendChild(new DomText($word));
2880                                                 $highlight->setAttribute('class', 'highlight');
2881                                                 $fragment->appendChild($highlight);
2882                                                 $text = mb_substr($text, $pos + mb_strlen($word));
2883                                         }
2884
2885                                         if (!empty($text)) $fragment->appendChild(new DomText($text));
2886
2887                                         $child->parentNode->replaceChild($fragment, $child);
2888                                 }
2889                         }
2890                 }
2891
2892                 $res = $doc->saveHTML();
2893
2894                 return $res;
2895         }
2896
2897         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2898                 $xpath = new DOMXPath($doc);
2899                 $entries = $xpath->query('//*');
2900
2901                 foreach ($entries as $entry) {
2902                         if (!in_array($entry->nodeName, $allowed_elements)) {
2903                                 $entry->parentNode->removeChild($entry);
2904                         }
2905
2906                         if ($entry->hasAttributes()) {
2907                                 $attrs_to_remove = array();
2908
2909                                 foreach ($entry->attributes as $attr) {
2910
2911                                         if (strpos($attr->nodeName, 'on') === 0) {
2912                                                 array_push($attrs_to_remove, $attr);
2913                                         }
2914
2915                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2916                                                 array_push($attrs_to_remove, $attr);
2917                                         }
2918                                 }
2919
2920                                 foreach ($attrs_to_remove as $attr) {
2921                                         $entry->removeAttributeNode($attr);
2922                                 }
2923                         }
2924                 }
2925
2926                 return $doc;
2927         }
2928
2929         function check_for_update() {
2930                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2931                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2932                                 "&iid=" . sha1(SELF_URL_PATH);
2933
2934                         $version_data = @fetch_file_contents($version_url);
2935
2936                         if ($version_data) {
2937                                 $version_data = json_decode($version_data, true);
2938                                 if ($version_data && $version_data['version']) {
2939                                         if (version_compare(VERSION_STATIC, $version_data['version']) == -1) {
2940                                                 return $version_data;
2941                                         }
2942                                 }
2943                         }
2944                 }
2945                 return false;
2946         }
2947
2948         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2949
2950                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2951                 if (count($ids) == 0) return;
2952
2953                 $tmp_ids = array();
2954
2955                 foreach ($ids as $id) {
2956                         array_push($tmp_ids, "ref_id = '$id'");
2957                 }
2958
2959                 $ids_qpart = join(" OR ", $tmp_ids);
2960
2961                 if ($cmode == 0) {
2962                         db_query("UPDATE ttrss_user_entries SET
2963                         unread = false,last_read = NOW()
2964                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2965                 } else if ($cmode == 1) {
2966                         db_query("UPDATE ttrss_user_entries SET
2967                         unread = true
2968                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2969                 } else {
2970                         db_query("UPDATE ttrss_user_entries SET
2971                         unread = NOT unread,last_read = NOW()
2972                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2973                 }
2974
2975                 /* update ccache */
2976
2977                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
2978                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2979
2980                 while ($line = db_fetch_assoc($result)) {
2981                         ccache_update($line["feed_id"], $owner_uid);
2982                 }
2983         }
2984
2985         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
2986
2987                 $a_id = db_escape_string($id);
2988
2989                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2990
2991                 $query = "SELECT DISTINCT tag_name,
2992                         owner_uid as owner FROM
2993                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2994                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2995
2996                 $tags = array();
2997
2998                 /* check cache first */
2999
3000                 if ($tag_cache === false) {
3001                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
3002                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3003
3004                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
3005                 }
3006
3007                 if ($tag_cache) {
3008                         $tags = explode(",", $tag_cache);
3009                 } else {
3010
3011                         /* do it the hard way */
3012
3013                         $tmp_result = db_query($query);
3014
3015                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3016                                 array_push($tags, $tmp_line["tag_name"]);
3017                         }
3018
3019                         /* update the cache */
3020
3021                         $tags_str = db_escape_string(join(",", $tags));
3022
3023                         db_query("UPDATE ttrss_user_entries
3024                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
3025                                 AND owner_uid = $owner_uid");
3026                 }
3027
3028                 return $tags;
3029         }
3030
3031         function trim_array($array) {
3032                 $tmp = $array;
3033                 array_walk($tmp, 'trim');
3034                 return $tmp;
3035         }
3036
3037         function tag_is_valid($tag) {
3038                 if ($tag == '') return false;
3039                 if (preg_match("/^[0-9]*$/", $tag)) return false;
3040                 if (mb_strlen($tag) > 250) return false;
3041
3042                 if (!$tag) return false;
3043
3044                 return true;
3045         }
3046
3047         function render_login_form() {
3048                 header('Cache-Control: public');
3049
3050                 require_once "login_form.php";
3051                 exit;
3052         }
3053
3054         function format_warning($msg, $id = "") {
3055                 global $link;
3056                 return "<div class=\"warning\" id=\"$id\">
3057                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3058         }
3059
3060         function format_notice($msg, $id = "") {
3061                 global $link;
3062                 return "<div class=\"notice\" id=\"$id\">
3063                         <span><img src=\"images/information.png\"></span><span>$msg</span></div>";
3064         }
3065
3066         function format_error($msg, $id = "") {
3067                 global $link;
3068                 return "<div class=\"error\" id=\"$id\">
3069                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3070         }
3071
3072         function print_notice($msg) {
3073                 return print format_notice($msg);
3074         }
3075
3076         function print_warning($msg) {
3077                 return print format_warning($msg);
3078         }
3079
3080         function print_error($msg) {
3081                 return print format_error($msg);
3082         }
3083
3084
3085         function T_sprintf() {
3086                 $args = func_get_args();
3087                 return vsprintf(__(array_shift($args)), $args);
3088         }
3089
3090         function format_inline_player($url, $ctype) {
3091
3092                 $entry = "";
3093
3094                 $url = htmlspecialchars($url);
3095
3096                 if (strpos($ctype, "audio/") === 0) {
3097
3098                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3099                                 $_SESSION["hasMp3"])) {
3100
3101                                 $entry .= "<audio preload=\"none\" controls>
3102                                         <source type=\"$ctype\" src=\"$url\"></source>
3103                                         </audio>";
3104
3105                         } else {
3106
3107                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3108                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3109                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3110                                         <param name=\"movie\"
3111                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3112                                         </object>";
3113                         }
3114
3115                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
3116                                 href=\"$url\">" . basename($url) . "</a>";
3117
3118                         return $entry;
3119
3120                 }
3121
3122                 return "";
3123
3124 /*              $filename = substr($url, strrpos($url, "/")+1);
3125
3126                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3127                         $filename . " (" . $ctype . ")" . "</a>"; */
3128
3129         }
3130
3131         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3132                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3133
3134                 $rv = array();
3135
3136                 $rv['id'] = $id;
3137
3138                 /* we can figure out feed_id from article id anyway, why do we
3139                  * pass feed_id here? let's ignore the argument :(*/
3140
3141                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3142                         WHERE ref_id = '$id'");
3143
3144                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3145
3146                 $rv['feed_id'] = $feed_id;
3147
3148                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3149
3150                 if ($mark_as_read) {
3151                         $result = db_query("UPDATE ttrss_user_entries
3152                                 SET unread = false,last_read = NOW()
3153                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3154
3155                         ccache_update($feed_id, $owner_uid);
3156                 }
3157
3158                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,lang,
3159                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3160                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3161                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3162                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3163                         num_comments,
3164                         tag_cache,
3165                         author,
3166                         orig_feed_id,
3167                         note
3168                         FROM ttrss_entries,ttrss_user_entries
3169                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3170
3171                 if ($result) {
3172
3173                         $line = db_fetch_assoc($result);
3174
3175                         $tag_cache = $line["tag_cache"];
3176
3177                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3178                         unset($line["tag_cache"]);
3179
3180                         $line["content"] = sanitize($line["content"],
3181                                 sql_bool_to_bool($line['hide_images']),
3182                                 $owner_uid, $line["site_url"], false, $line["id"]);
3183
3184                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
3185                                 $line = $p->hook_render_article($line);
3186                         }
3187
3188                         $num_comments = $line["num_comments"];
3189                         $entry_comments = "";
3190
3191                         if ($num_comments > 0) {
3192                                 if ($line["comments"]) {
3193                                         $comments_url = htmlspecialchars($line["comments"]);
3194                                 } else {
3195                                         $comments_url = htmlspecialchars($line["link"]);
3196                                 }
3197                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3198                         } else {
3199                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3200                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3201                                 }
3202                         }
3203
3204                         if ($zoom_mode) {
3205                                 header("Content-Type: text/html");
3206                                 $rv['content'] .= "<html><head>
3207                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3208                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3209                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"css/tt-rss.css\">
3210                                                 <script type=\"text/javascript\">
3211                                                 function openSelectedAttachment(elem) {
3212                                                         try {
3213                                                                 var url = elem[elem.selectedIndex].value;
3214
3215                                                                 if (url) {
3216                                                                         window.open(url);
3217                                                                         elem.selectedIndex = 0;
3218                                                                 }
3219
3220                                                         } catch (e) {
3221                                                                 exception_error(\"openSelectedAttachment\", e);
3222                                                         }
3223                                                 }
3224                                         </script>
3225                                         </head><body id=\"ttrssZoom\">";
3226                         }
3227
3228                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3229
3230                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3231
3232                         $entry_author = $line["author"];
3233
3234                         if ($entry_author) {
3235                                 $entry_author = __(" - ") . $entry_author;
3236                         }
3237
3238                         $parsed_updated = make_local_datetime($line["updated"], true,
3239                                 $owner_uid, true);
3240
3241                         if (!$zoom_mode)
3242                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3243
3244                         if ($line["link"]) {
3245                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3246                                         title=\"".htmlspecialchars($line['title'])."\"
3247                                         href=\"" .
3248                                         htmlspecialchars($line["link"]) . "\">" .
3249                                         $line["title"] . "</a>" .
3250                                         "<span class='author'>$entry_author</span></div>";
3251                         } else {
3252                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3253                         }
3254
3255                         if ($zoom_mode)
3256                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3257
3258                         $tags_str = format_tags_string($line["tags"], $id);
3259                         $tags_str_full = join(", ", $line["tags"]);
3260
3261                         if (!$tags_str_full) $tags_str_full = __("no tags");
3262
3263                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3264
3265                         $rv['content'] .= "<div class='postTags' style='float : right'>
3266                                 <img src='images/tag.png'
3267                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3268
3269                         if (!$zoom_mode) {
3270                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3271                                         <a title=\"".__('Edit tags for this article')."\"
3272                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3273
3274                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3275                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3276                                         position=\"below\">$tags_str_full</div>";
3277
3278                                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
3279                                         $rv['content'] .= $p->hook_article_button($line);
3280                                 }
3281
3282                         } else {
3283                                 $tags_str = strip_tags($tags_str);
3284                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3285                         }
3286                         $rv['content'] .= "</div>";
3287                         $rv['content'] .= "<div clear='both'>";
3288
3289                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3290                                 $rv['content'] .= $p->hook_article_left_button($line);
3291                         }
3292
3293                         $rv['content'] .= "$entry_comments</div>";
3294
3295                         if ($line["orig_feed_id"]) {
3296
3297                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3298                                         WHERE id = ".$line["orig_feed_id"]);
3299
3300                                 if (db_num_rows($tmp_result) != 0) {
3301
3302                                         $rv['content'] .= "<div clear='both'>";
3303                                         $rv['content'] .= __("Originally from:");
3304
3305                                         $rv['content'] .= "&nbsp;";
3306
3307                                         $tmp_line = db_fetch_assoc($tmp_result);
3308
3309                                         $rv['content'] .= "<a target='_blank'
3310                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3311                                                 $tmp_line['title'] . "</a>";
3312
3313                                         $rv['content'] .= "&nbsp;";
3314
3315                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3316                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3317
3318                                         $rv['content'] .= "</div>";
3319                                 }
3320                         }
3321
3322                         $rv['content'] .= "</div>";
3323
3324                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3325                                 if ($line['note']) {
3326                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3327                                 }
3328                         $rv['content'] .= "</div>";
3329
3330                         if (!$line['lang']) $line['lang'] = 'en';
3331
3332                         $rv['content'] .= "<div class=\"postContent\" lang=\"".$line['lang']."\">";
3333
3334                         $rv['content'] .= $line["content"];
3335                         $rv['content'] .= format_article_enclosures($id,
3336                                 sql_bool_to_bool($line["always_display_enclosures"]),
3337                                 $line["content"],
3338                                 sql_bool_to_bool($line["hide_images"]));
3339
3340                         $rv['content'] .= "</div>";
3341
3342                         $rv['content'] .= "</div>";
3343
3344                 }
3345
3346                 if ($zoom_mode) {
3347                         $rv['content'] .= "
3348                                 <div class='footer'>
3349                                 <button onclick=\"return window.close()\">".
3350                                         __("Close this window")."</button></div>";
3351                         $rv['content'] .= "</body></html>";
3352                 }
3353
3354                 return $rv;
3355
3356         }
3357
3358         function print_checkpoint($n, $s) {
3359                 $ts = microtime(true);
3360                 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
3361                 return $ts;
3362         }
3363
3364         function sanitize_tag($tag) {
3365                 $tag = trim($tag);
3366
3367                 $tag = mb_strtolower($tag, 'utf-8');
3368
3369                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3370
3371 //              $tag = str_replace('"', "", $tag);
3372 //              $tag = str_replace("+", " ", $tag);
3373                 $tag = str_replace("technorati tag: ", "", $tag);
3374
3375                 return $tag;
3376         }
3377
3378         function get_self_url_prefix() {
3379                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3380                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3381                 } else {
3382                         return SELF_URL_PATH;
3383                 }
3384         }
3385
3386         /**
3387          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3388          *
3389          * @return string The Mozilla Firefox feed adding URL.
3390          */
3391         function add_feed_url() {
3392                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3393
3394                 $url_path = get_self_url_prefix() .
3395                         "/public.php?op=subscribe&feed_url=%s";
3396                 return $url_path;
3397         } // function add_feed_url
3398
3399         function encrypt_password($pass, $salt = '', $mode2 = false) {
3400                 if ($salt && $mode2) {
3401                         return "MODE2:" . hash('sha256', $salt . $pass);
3402                 } else if ($salt) {
3403                         return "SHA1X:" . sha1("$salt:$pass");
3404                 } else {
3405                         return "SHA1:" . sha1($pass);
3406                 }
3407         } // function encrypt_password
3408
3409         function load_filters($feed_id, $owner_uid, $action_id = false) {
3410                 $filters = array();
3411
3412                 $cat_id = (int)getFeedCategory($feed_id);
3413
3414                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3415                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3416
3417                 $check_cats = join(",", array_merge(
3418                         getParentCategories($cat_id, $owner_uid),
3419                         array($cat_id)));
3420
3421                 while ($line = db_fetch_assoc($result)) {
3422                         $filter_id = $line["id"];
3423
3424                         $result2 = db_query("SELECT
3425                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3426                                 FROM ttrss_filters2_rules AS r,
3427                                 ttrss_filter_types AS t
3428                                 WHERE
3429                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3430                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3431                                         filter_type = t.id AND filter_id = '$filter_id'");
3432
3433                         $rules = array();
3434                         $actions = array();
3435
3436                         while ($rule_line = db_fetch_assoc($result2)) {
3437 #                               print_r($rule_line);
3438
3439                                 $rule = array();
3440                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3441                                 $rule["type"] = $rule_line["type_name"];
3442                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3443
3444                                 array_push($rules, $rule);
3445                         }
3446
3447                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3448                                 FROM ttrss_filters2_actions AS a,
3449                                 ttrss_filter_actions AS t
3450                                 WHERE
3451                                         action_id = t.id AND filter_id = '$filter_id'");
3452
3453                         while ($action_line = db_fetch_assoc($result2)) {
3454 #                               print_r($action_line);
3455
3456                                 $action = array();
3457                                 $action["type"] = $action_line["type_name"];
3458                                 $action["param"] = $action_line["action_param"];
3459
3460                                 array_push($actions, $action);
3461                         }
3462
3463
3464                         $filter = array();
3465                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3466                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3467                         $filter["rules"] = $rules;
3468                         $filter["actions"] = $actions;
3469
3470                         if (count($rules) > 0 && count($actions) > 0) {
3471                                 array_push($filters, $filter);
3472                         }
3473                 }
3474
3475                 return $filters;
3476         }
3477
3478         function get_score_pic($score) {
3479                 if ($score > 100) {
3480                         return "score_high.png";
3481                 } else if ($score > 0) {
3482                         return "score_half_high.png";
3483                 } else if ($score < -100) {
3484                         return "score_low.png";
3485                 } else if ($score < 0) {
3486                         return "score_half_low.png";
3487                 } else {
3488                         return "score_neutral.png";
3489                 }
3490         }
3491
3492         function feed_has_icon($id) {
3493                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3494         }
3495
3496         function init_plugins() {
3497                 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
3498
3499                 return true;
3500         }
3501
3502         function format_tags_string($tags, $id) {
3503                 if (!is_array($tags) || count($tags) == 0) {
3504                         return __("no tags");
3505                 } else {
3506                         $maxtags = min(5, count($tags));
3507
3508                         for ($i = 0; $i < $maxtags; $i++) {
3509                                 $tags_str .= "<a class=\"tag\" href=\"#\" onclick=\"viewfeed('".$tags[$i]."')\">" . $tags[$i] . "</a>, ";
3510                         }
3511
3512                         $tags_str = mb_substr($tags_str, 0, mb_strlen($tags_str)-2);
3513
3514                         if (count($tags) > $maxtags)
3515                                 $tags_str .= ", &hellip;";
3516
3517                         return $tags_str;
3518                 }
3519         }
3520
3521         function format_article_labels($labels, $id) {
3522
3523                 if (!is_array($labels)) return '';
3524
3525                 $labels_str = "";
3526
3527                 foreach ($labels as $l) {
3528                         $labels_str .= sprintf("<span class='hlLabelRef'
3529                                 style='color : %s; background-color : %s'>%s</span>",
3530                                         $l[2], $l[3], $l[1]);
3531                         }
3532
3533                 return $labels_str;
3534
3535         }
3536
3537         function format_article_note($id, $note, $allow_edit = true) {
3538
3539                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3540                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3541                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3542
3543                 return $str;
3544         }
3545
3546
3547         function get_feed_category($feed_cat, $parent_cat_id = false) {
3548                 if ($parent_cat_id) {
3549                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3550                         $parent_insert = "'$parent_cat_id'";
3551                 } else {
3552                         $parent_qpart = "parent_cat IS NULL";
3553                         $parent_insert = "NULL";
3554                 }
3555
3556                 $result = db_query(
3557                         "SELECT id FROM ttrss_feed_categories
3558                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3559
3560                 if (db_num_rows($result) == 0) {
3561                         return false;
3562                 } else {
3563                         return db_fetch_result($result, 0, "id");
3564                 }
3565         }
3566
3567         function add_feed_category($feed_cat, $parent_cat_id = false) {
3568
3569                 if (!$feed_cat) return false;
3570
3571                 db_query("BEGIN");
3572
3573                 if ($parent_cat_id) {
3574                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3575                         $parent_insert = "'$parent_cat_id'";
3576                 } else {
3577                         $parent_qpart = "parent_cat IS NULL";
3578                         $parent_insert = "NULL";
3579                 }
3580
3581                 $feed_cat = mb_substr($feed_cat, 0, 250);
3582
3583                 $result = db_query(
3584                         "SELECT id FROM ttrss_feed_categories
3585                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3586
3587                 if (db_num_rows($result) == 0) {
3588
3589                         $result = db_query(
3590                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3591                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3592
3593                         db_query("COMMIT");
3594
3595                         return true;
3596                 }
3597
3598                 return false;
3599         }
3600
3601         function getArticleFeed($id) {
3602                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3603                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3604
3605                 if (db_num_rows($result) != 0) {
3606                         return db_fetch_result($result, 0, "feed_id");
3607                 } else {
3608                         return 0;
3609                 }
3610         }
3611
3612         /**
3613          * Fixes incomplete URLs by prepending "http://".
3614          * Also replaces feed:// with http://, and
3615          * prepends a trailing slash if the url is a domain name only.
3616          *
3617          * @param string $url Possibly incomplete URL
3618          *
3619          * @return string Fixed URL.
3620          */
3621         function fix_url($url) {
3622                 if (strpos($url, '://') === false) {
3623                         $url = 'http://' . $url;
3624                 } else if (substr($url, 0, 5) == 'feed:') {
3625                         $url = 'http:' . substr($url, 5);
3626                 }
3627
3628                 //prepend slash if the URL has no slash in it
3629                 // "http://www.example" -> "http://www.example/"
3630                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3631                         $url .= '/';
3632                 }
3633
3634                 if ($url != "http:///")
3635                         return $url;
3636                 else
3637                         return '';
3638         }
3639
3640         function validate_feed_url($url) {
3641                 $parts = parse_url($url);
3642
3643                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3644
3645         }
3646
3647         function get_article_enclosures($id) {
3648
3649                 $query = "SELECT * FROM ttrss_enclosures
3650                         WHERE post_id = '$id' AND content_url != ''";
3651
3652                 $rv = array();
3653
3654                 $result = db_query($query);
3655
3656                 if (db_num_rows($result) > 0) {
3657                         while ($line = db_fetch_assoc($result)) {
3658                                 array_push($rv, $line);
3659                         }
3660                 }
3661
3662                 return $rv;
3663         }
3664
3665         function save_email_address($email) {
3666                 // FIXME: implement persistent storage of emails
3667
3668                 if (!$_SESSION['stored_emails'])
3669                         $_SESSION['stored_emails'] = array();
3670
3671                 if (!in_array($email, $_SESSION['stored_emails']))
3672                         array_push($_SESSION['stored_emails'], $email);
3673         }
3674
3675
3676         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3677
3678                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3679
3680                 $sql_is_cat = bool_to_sql_bool($is_cat);
3681
3682                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3683                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3684                         AND owner_uid = " . $owner_uid);
3685
3686                 if (db_num_rows($result) == 1) {
3687                         return db_fetch_result($result, 0, "access_key");
3688                 } else {
3689                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3690
3691                         $result = db_query("INSERT INTO ttrss_access_keys
3692                                 (access_key, feed_id, is_cat, owner_uid)
3693                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3694
3695                         return $key;
3696                 }
3697                 return false;
3698         }
3699
3700         function get_feeds_from_html($url, $content)
3701         {
3702                 $url     = fix_url($url);
3703                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3704
3705                 libxml_use_internal_errors(true);
3706
3707                 $doc = new DOMDocument();
3708                 $doc->loadHTML($content);
3709                 $xpath = new DOMXPath($doc);
3710                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3711                 $feedUrls = array();
3712                 foreach ($entries as $entry) {
3713                         if ($entry->hasAttribute('href')) {
3714                                 $title = $entry->getAttribute('title');
3715                                 if ($title == '') {
3716                                         $title = $entry->getAttribute('type');
3717                                 }
3718                                 $feedUrl = rewrite_relative_url(
3719                                         $baseUrl, $entry->getAttribute('href')
3720                                 );
3721                                 $feedUrls[$feedUrl] = $title;
3722                         }
3723                 }
3724                 return $feedUrls;
3725         }
3726
3727         function is_html($content) {
3728                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3729         }
3730
3731         function url_is_html($url, $login = false, $pass = false) {
3732                 return is_html(fetch_file_contents($url, false, $login, $pass));
3733         }
3734
3735         function print_label_select($name, $value, $attributes = "") {
3736
3737                 $result = db_query("SELECT caption FROM ttrss_labels2
3738                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3739
3740                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3741                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3742
3743                 while ($line = db_fetch_assoc($result)) {
3744
3745                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3746
3747                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3748                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3749
3750                 }
3751
3752 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3753
3754                 print "</select>";
3755
3756
3757         }
3758
3759         function format_article_enclosures($id, $always_display_enclosures,
3760                                         $article_content, $hide_images = false) {
3761
3762                 $result = get_article_enclosures($id);
3763                 $rv = '';
3764
3765                 if (count($result) > 0) {
3766
3767                         $entries_html = array();
3768                         $entries = array();
3769                         $entries_inline = array();
3770
3771                         foreach ($result as $line) {
3772
3773                                 $url = $line["content_url"];
3774                                 $ctype = $line["content_type"];
3775                                 $title = $line["title"];
3776
3777                                 if (!$ctype) $ctype = __("unknown type");
3778
3779                                 $filename = substr($url, strrpos($url, "/")+1);
3780
3781                                 $player = format_inline_player($url, $ctype);
3782
3783                                 if ($player) array_push($entries_inline, $player);
3784
3785 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3786 #                                       $filename . " (" . $ctype . ")" . "</a>";
3787
3788                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3789                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3790
3791                                 array_push($entries_html, $entry);
3792
3793                                 $entry = array();
3794
3795                                 $entry["type"] = $ctype;
3796                                 $entry["filename"] = $filename;
3797                                 $entry["url"] = $url;
3798                                 $entry["title"] = $title;
3799
3800                                 array_push($entries, $entry);
3801                         }
3802
3803                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3804                                 if ($always_display_enclosures ||
3805                                                         !preg_match("/<img/i", $article_content)) {
3806
3807                                         foreach ($entries as $entry) {
3808
3809                                                 if (preg_match("/image/", $entry["type"]) ||
3810                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3811
3812                                                                 if (!$hide_images) {
3813                                                                         $rv .= "<p><img
3814                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3815                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3816                                                                 } else {
3817                                                                         $rv .= "<p><a target=\"_blank\"
3818                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3819                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3820                                                                 }
3821
3822                                                                 if ($entry['title']) {
3823                                                                         $rv.= "<div class=\"enclosure_title\">${entry['title']}</div>";
3824                                                                 }
3825                                                 }
3826                                         }
3827                                 }
3828                         }
3829
3830                         if (count($entries_inline) > 0) {
3831                                 $rv .= "<hr clear='both'/>";
3832                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3833                                 $rv .= "<hr clear='both'/>";
3834                         }
3835
3836                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3837                                 "<option value=''>" . __('Attachments')."</option>";
3838
3839                         foreach ($entries as $entry) {
3840                                 if ($entry["title"])
3841                                         $title = "&mdash; " . truncate_string($entry["title"], 30);
3842                                 else
3843                                         $title = "";
3844
3845                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "$title</option>";
3846
3847                         };
3848
3849                         $rv .= "</select>";
3850                 }
3851
3852                 return $rv;
3853         }
3854
3855         function getLastArticleId() {
3856                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3857                         WHERE owner_uid = " . $_SESSION["uid"]);
3858
3859                 if (db_num_rows($result) == 1) {
3860                         return db_fetch_result($result, 0, "id");
3861                 } else {
3862                         return -1;
3863                 }
3864         }
3865
3866         function build_url($parts) {
3867                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3868         }
3869
3870         /**
3871          * Converts a (possibly) relative URL to a absolute one.
3872          *
3873          * @param string $url     Base URL (i.e. from where the document is)
3874          * @param string $rel_url Possibly relative URL in the document
3875          *
3876          * @return string Absolute URL
3877          */
3878         function rewrite_relative_url($url, $rel_url) {
3879                 if (strpos($rel_url, ":") !== false) {
3880                         return $rel_url;
3881                 } else if (strpos($rel_url, "://") !== false) {
3882                         return $rel_url;
3883                 } else if (strpos($rel_url, "//") === 0) {
3884                         # protocol-relative URL (rare but they exist)
3885                         return $rel_url;
3886                 } else if (strpos($rel_url, "/") === 0)
3887                 {
3888                         $parts = parse_url($url);
3889                         $parts['path'] = $rel_url;
3890
3891                         return build_url($parts);
3892
3893                 } else {
3894                         $parts = parse_url($url);
3895                         if (!isset($parts['path'])) {
3896                                 $parts['path'] = '/';
3897                         }
3898                         $dir = $parts['path'];
3899                         if (substr($dir, -1) !== '/') {
3900                                 $dir = dirname($parts['path']);
3901                                 $dir !== '/' && $dir .= '/';
3902                         }
3903                         $parts['path'] = $dir . $rel_url;
3904
3905                         return build_url($parts);
3906                 }
3907         }
3908
3909         function sphinx_search($query, $offset = 0, $limit = 30) {
3910                 require_once 'lib/sphinxapi.php';
3911
3912                 $sphinxClient = new SphinxClient();
3913
3914                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3915
3916                 $sphinxClient->SetServer($sphinxpair[0], (int)$sphinxpair[1]);
3917                 $sphinxClient->SetConnectTimeout(1);
3918
3919                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3920                         'feed_title' => 20));
3921
3922                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3923                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3924                 $sphinxClient->SetLimits($offset, $limit, 1000);
3925                 $sphinxClient->SetArrayResult(false);
3926                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3927
3928                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3929
3930                 $ids = array();
3931
3932                 if (is_array($result['matches'])) {
3933                         foreach (array_keys($result['matches']) as $int_id) {
3934                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3935                                 array_push($ids, $ref_id);
3936                         }
3937                 }
3938
3939                 return $ids;
3940         }
3941
3942         function cleanup_tags($days = 14, $limit = 1000) {
3943
3944                 if (DB_TYPE == "pgsql") {
3945                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3946                 } else if (DB_TYPE == "mysql") {
3947                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3948                 }
3949
3950                 $tags_deleted = 0;
3951
3952                 while ($limit > 0) {
3953                         $limit_part = 500;
3954
3955                         $query = "SELECT ttrss_tags.id AS id
3956                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3957                                 WHERE post_int_id = int_id AND $interval_query AND
3958                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3959
3960                         $result = db_query($query);
3961
3962                         $ids = array();
3963
3964                         while ($line = db_fetch_assoc($result)) {
3965                                 array_push($ids, $line['id']);
3966                         }
3967
3968                         if (count($ids) > 0) {
3969                                 $ids = join(",", $ids);
3970
3971                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
3972                                 $tags_deleted += db_affected_rows($tmp_result);
3973                         } else {
3974                                 break;
3975                         }
3976
3977                         $limit -= $limit_part;
3978                 }
3979
3980                 return $tags_deleted;
3981         }
3982
3983         function print_user_stylesheet() {
3984                 $value = get_pref('USER_STYLESHEET');
3985
3986                 if ($value) {
3987                         print "<style type=\"text/css\">";
3988                         print str_replace("<br/>", "\n", $value);
3989                         print "</style>";
3990                 }
3991
3992         }
3993
3994         function filter_to_sql($filter, $owner_uid) {
3995                 $query = array();
3996
3997                 if (DB_TYPE == "pgsql")
3998                         $reg_qpart = "~";
3999                 else
4000                         $reg_qpart = "REGEXP";
4001
4002                 foreach ($filter["rules"] AS $rule) {
4003                         $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
4004                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
4005                                 $rule['reg_exp']) !== FALSE;
4006
4007                         if ($regexp_valid) {
4008
4009                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
4010
4011                                         switch ($rule["type"]) {
4012                                         case "title":
4013                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4014                                                         $rule['reg_exp'] . "')";
4015                                                 break;
4016                                         case "content":
4017                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
4018                                                         $rule['reg_exp'] . "')";
4019                                                 break;
4020                                         case "both":
4021                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4022                                                         $rule['reg_exp'] . "') OR LOWER(" .
4023                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
4024                                                 break;
4025                                         case "tag":
4026                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
4027                                                         $rule['reg_exp'] . "')";
4028                                                 break;
4029                                         case "link":
4030                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
4031                                                         $rule['reg_exp'] . "')";
4032                                                 break;
4033                                         case "author":
4034                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
4035                                                         $rule['reg_exp'] . "')";
4036                                                 break;
4037                                 }
4038
4039                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
4040
4041                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
4042                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
4043                                 }
4044
4045                                 if (isset($rule["cat_id"])) {
4046
4047                                         if ($rule["cat_id"] > 0) {
4048                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
4049                                                 array_push($children, $rule["cat_id"]);
4050
4051                                                 $children = join(",", $children);
4052
4053                                                 $cat_qpart = "cat_id IN ($children)";
4054                                         } else {
4055                                                 $cat_qpart = "cat_id IS NULL";
4056                                         }
4057
4058                                         $qpart .= " AND $cat_qpart";
4059                                 }
4060
4061                                 $qpart .= " AND feed_id IS NOT NULL";
4062
4063                                 array_push($query, "($qpart)");
4064
4065                         }
4066                 }
4067
4068                 if (count($query) > 0) {
4069                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4070                 } else {
4071                         $fullquery = "(false)";
4072                 }
4073
4074                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4075
4076                 return $fullquery;
4077         }
4078
4079         if (!function_exists('gzdecode')) {
4080                 function gzdecode($string) { // no support for 2nd argument
4081                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4082                                 base64_encode($string));
4083                 }
4084         }
4085
4086         function get_random_bytes($length) {
4087                 if (function_exists('openssl_random_pseudo_bytes')) {
4088                         return openssl_random_pseudo_bytes($length);
4089                 } else {
4090                         $output = "";
4091
4092                         for ($i = 0; $i < $length; $i++)
4093                                 $output .= chr(mt_rand(0, 255));
4094
4095                         return $output;
4096                 }
4097         }
4098
4099         function read_stdin() {
4100                 $fp = fopen("php://stdin", "r");
4101
4102                 if ($fp) {
4103                         $line = trim(fgets($fp));
4104                         fclose($fp);
4105                         return $line;
4106                 }
4107
4108                 return null;
4109         }
4110
4111         function tmpdirname($path, $prefix) {
4112                 // Use PHP's tmpfile function to create a temporary
4113                 // directory name. Delete the file and keep the name.
4114                 $tempname = tempnam($path,$prefix);
4115                 if (!$tempname)
4116                         return false;
4117
4118                 if (!unlink($tempname))
4119                         return false;
4120
4121        return $tempname;
4122         }
4123
4124         function getFeedCategory($feed) {
4125                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4126                         WHERE id = '$feed'");
4127
4128                 if (db_num_rows($result) > 0) {
4129                         return db_fetch_result($result, 0, "cat_id");
4130                 } else {
4131                         return false;
4132                 }
4133
4134         }
4135
4136         function implements_interface($class, $interface) {
4137                 return in_array($interface, class_implements($class));
4138         }
4139
4140         function geturl($url, $depth = 0){
4141
4142                 if ($depth == 20) return $url;
4143
4144                 if (!function_exists('curl_init'))
4145                         return user_error('CURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini', E_USER_ERROR);
4146
4147                 $curl = curl_init();
4148                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4149                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4150                 $header[] = "Cache-Control: max-age=0";
4151                 $header[] = "Connection: keep-alive";
4152                 $header[] = "Keep-Alive: 300";
4153                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4154                 $header[] = "Accept-Language: en-us,en;q=0.5";
4155                 $header[] = "Pragma: ";
4156
4157                 curl_setopt($curl, CURLOPT_URL, $url);
4158                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4159                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4160                 curl_setopt($curl, CURLOPT_HEADER, true);
4161                 curl_setopt($curl, CURLOPT_REFERER, $url);
4162                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4163                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4164                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4165                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4166                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4167                 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
4168
4169                 if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
4170                         curl_setopt($curl, CURLOPT_SSLVERSION, 3);
4171                 }
4172
4173                 $html = curl_exec($curl);
4174
4175                 $status = curl_getinfo($curl);
4176
4177                 if($status['http_code']!=200){
4178                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4179                                 curl_close($curl);
4180                                 list($header) = explode("\r\n\r\n", $html, 2);
4181                                 $matches = array();
4182                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4183                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4184                                 $url_parsed = parse_url($url);
4185                                 return (isset($url_parsed))? geturl($url, $depth + 1):'';
4186                         }
4187
4188                         global $fetch_last_error;
4189
4190                         $fetch_last_error = curl_errno($curl) . " " . curl_error($curl);
4191                         curl_close($curl);
4192
4193                         $oline='';
4194                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4195                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4196 #                       $handle = @fopen('./curl.error.log', 'a');
4197 #                       fwrite($handle, $line);
4198                         return FALSE;
4199                 }
4200                 curl_close($curl);
4201                 return $url;
4202         }
4203
4204         function get_minified_js($files) {
4205                 require_once 'lib/jshrink/Minifier.php';
4206
4207                 $rv = '';
4208
4209                 foreach ($files as $js) {
4210                         if (!isset($_GET['debug'])) {
4211                                 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
4212
4213                                 if (file_exists($cached_file) &&
4214                                                 is_readable($cached_file) &&
4215                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4216
4217                                         $rv .= file_get_contents($cached_file);
4218
4219                                 } else {
4220                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4221                                         file_put_contents($cached_file, $minified);
4222                                         $rv .= $minified;
4223                                 }
4224                         } else {
4225                                 $rv .= file_get_contents("js/$js.js");
4226                         }
4227                 }
4228
4229                 return $rv;
4230         }
4231
4232         function stylesheet_tag($filename) {
4233                 $timestamp = filemtime($filename);
4234
4235                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4236         }
4237
4238         function javascript_tag($filename) {
4239                 $query = "";
4240
4241                 if (!(strpos($filename, "?") === FALSE)) {
4242                         $query = substr($filename, strpos($filename, "?")+1);
4243                         $filename = substr($filename, 0, strpos($filename, "?"));
4244                 }
4245
4246                 $timestamp = filemtime($filename);
4247
4248                 if ($query) $timestamp .= "&$query";
4249
4250                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4251         }
4252
4253         function calculate_dep_timestamp() {
4254                 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
4255
4256                 $max_ts = -1;
4257
4258                 foreach ($files as $file) {
4259                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4260                 }
4261
4262                 return $max_ts;
4263         }
4264
4265         function T_js_decl($s1, $s2) {
4266                 if ($s1 && $s2) {
4267                         $s1 = preg_replace("/\n/", "", $s1);
4268                         $s2 = preg_replace("/\n/", "", $s2);
4269
4270                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4271                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4272
4273                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4274                 }
4275         }
4276
4277         function init_js_translations() {
4278
4279         print 'var T_messages = new Object();
4280
4281                 function __(msg) {
4282                         if (T_messages[msg]) {
4283                                 return T_messages[msg];
4284                         } else {
4285                                 return msg;
4286                         }
4287                 }
4288
4289                 function ngettext(msg1, msg2, n) {
4290                         return __((parseInt(n) > 1) ? msg2 : msg1);
4291                 }';
4292
4293                 $l10n = _get_reader();
4294
4295                 for ($i = 0; $i < $l10n->total; $i++) {
4296                         $orig = $l10n->get_original_string($i);
4297                         if(strpos($orig, "\000") !== FALSE) { // Plural forms
4298                                 $key = explode(chr(0), $orig);
4299                                 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
4300                                 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
4301                         } else {
4302                                 $translation = __($orig);
4303                                 print T_js_decl($orig, $translation);
4304                         }
4305                 }
4306         }
4307
4308         function label_to_feed_id($label) {
4309                 return LABEL_BASE_INDEX - 1 - abs($label);
4310         }
4311
4312         function feed_to_label_id($feed) {
4313                 return LABEL_BASE_INDEX - 1 + abs($feed);
4314         }
4315
4316         function format_libxml_error($error) {
4317                 return T_sprintf("LibXML error %s at line %d (column %d): %s",
4318                                 $error->code, $error->line, $error->column,
4319                                 $error->message);
4320         }
4321
4322 ?>